Bharat Mediratta
87fde3f360
Create a UI under Admin > Settings > Comments where you can limit
...
comments only to registered users. It's simplistic, but is better
than adding a permission since generally this setting will be used
Gallery-wide.
Fixes ticket #1002
2010-06-05 23:35:32 -07:00
Bharat Mediratta
ab204d2720
Rename the admin_comments view to admin_manage_comments to match the controller.
2010-05-16 23:01:57 -07:00
Bharat Mediratta
2157285d9b
Rename admin/comments to admin/manage_comments to make room for
...
admin/comments to be a settings page.
2010-05-16 22:53:19 -07:00
Chad Kieffer and Tim Almdal
690ea4a014
Rename g-pager to g-paginator after the recent pagination update.
2009-11-19 11:55:43 -08:00
Bharat Mediratta
e0f4e6500d
Use text::alternate() instead of hand-rolled even/odd code.
2009-11-15 19:34:44 -08:00
Bharat Mediratta
4f8728029d
Call render() on the $menu, since we no longer use its __string()
...
function to do implicit conversion.
2009-11-08 22:35:14 -08:00
Tim Almdal
7ea13b3869
Normalize capitalization ticket #596
2009-10-28 12:15:52 -07:00
Chad Kieffer
5f56cbf997
Wrap all admin views in g-block and g-block content. This provides the means to visually separate the view's title and description from everything else. Primary admin view title should always be h1, and only one h1 per view. Removed some unused admin CSS id's.
2009-10-18 20:22:10 -06:00
Chad Kieffer
ad0497a8d2
Drop our g-clearfix in favor of using jQuery UI's ui-helper-clearfix.
2009-10-17 12:58:31 -06:00
Chad Kieffer
121fcab5c8
Replaced most clear fix hacks with generic class.
2009-10-07 00:46:02 -06:00
Chad Kieffer
d581bbbd1e
Renamed more CSS selectors from gName to g-name.
2009-10-04 15:53:00 -06:00
Chad Kieffer
3e6ba7acc3
Renamed most, if not all css selectors from gName to g-name. Moved a few shared images from wind to lib. Deleted unused images in the admin_wind. This will likely break a few ajax features.
2009-10-04 00:27:22 -06:00
Chad Kieffer
9145331fd4
Renamed and moved gOdd/gEven CSS classes.
2009-10-03 12:33:53 -06:00
Chad Kieffer
72672bda39
Replaced gButtonLink with g-button.
2009-09-30 08:04:49 -06:00
Chad Kieffer
daa3a2b43c
First round of CSS refactor updates. Added calls to gallery.common.css from wind and admin_wind. Replaced basic text align and block float classes. Removed section #2 from both themes screen styles.
2009-09-30 00:32:52 -06:00
Andy Staudacher
53711225ac
XSS / style fixes for newly detected issues (after fixing XSS scanner)
2009-09-01 01:28:52 -07:00
Andy Staudacher
2bc73e2e36
Fix XSS vectors in HTML attributes (mostly t() calls)
2009-08-31 21:51:57 -07:00
Andy Staudacher
fc294c2777
XSS fixes in admin_comments.html.php
2009-08-30 21:26:23 -07:00
Andy Staudacher
b9bd1681a3
Update all code to use helper method html::clean(), html::purify(), ... instead of SafeString directly.
2009-08-29 22:54:20 -07:00
Andy Staudacher
a5dfc81a8f
Merge commit 'upstream/master'
...
Conflicts:
modules/akismet/views/admin_akismet.html.php
modules/comment/helpers/comment_rss.php
modules/gallery/helpers/gallery_rss.php
modules/gallery/libraries/I18n.php
modules/gallery/views/permissions_browse.html.php
modules/gallery/views/simple_uploader.html.php
modules/info/views/info_block.html.php
modules/organize/controllers/organize.php
modules/organize/views/organize.html.php
modules/organize/views/organize_album.html.php
themes/default/views/album.html.php
themes/default/views/movie.html.php
themes/default/views/photo.html.php
2009-08-29 14:17:48 -07:00
Chad Kieffer
5db0b68a70
Update status message styles. Lighten backgrounds, don't show background on Admin Maintenance rows, and added gModuleStatus class.
2009-08-29 14:01:04 -06:00
Andy Staudacher
c01ac42c46
Refactor all calls of p::clean() to SafeString::of() and p::purify() to SafeString::purify().
...
Removing any p::clean() calls for arguments to t() and t2() since their args are wrapped in a SafeString anyway.
2009-08-29 12:48:40 -07:00
Bharat Mediratta
41b8f943a6
Convert instances of theme_url() to just url() to match the API change
...
made in dbeadc1407
2009-07-23 10:20:49 -07:00
Tim Almdal
d6648c0aff
Fix for ticket #477 . Use nl2br method when rendering comment::text and
...
item::description. In addition add p::clean or p::purify to places that
xss cleaning had missed (i.e. rss feeds)
2009-07-04 08:17:12 -07:00
Tim Almdal
54ffea2419
Split the clean method into two clean and purify. clean is a light weight
...
approach using html::specialchars and purify uses HTMLPurifier to intelligently
cleanse the output fields. Use purifier for text and title fields where it is
likely that a user would enter html to format their data.
2009-07-03 21:44:10 -07:00
Bharat Mediratta
6e8a8c53e6
Rename $theme->url() to $theme->theme_url() for consistency wiht
...
$theme->theme_script().
2009-06-28 19:49:48 -07:00
Bharat Mediratta
4384b67be1
Comment out [reply] and [edit] links because they're not implemented
...
yet. This closes ticket #416 , and I'll open a new ticket to implement
these functions.
2009-06-24 21:30:48 -07:00
Bharat Mediratta
26314d0ef8
Create gallery::date_time(), gallery::date() and gallery::time()
...
functions that format a unix timestamp into a date+time/date/time
string.
Partial fix for ticket #347 .
2009-06-12 22:44:51 -07:00
Bharat Mediratta
708f27f483
Run p::clean() on any variables that contain data entered by users.
2009-05-31 00:11:48 -07:00
Bharat Mediratta
de812e1e82
Refactor to support pagination and simplify the code.
...
- Simplify the public controller methods
- Fix a bug where missing thumbnails would cause a divide by zero error
- actually pay attention to the page # for pagination and limit the query accordingly.
2009-05-11 20:15:24 +00:00
Bharat Mediratta
921f3a2eee
Put csrf token into Admin_View and Theme_View by default, then use it
...
directly wherever possible instead of access::csrf_token().
2009-03-27 03:43:21 +00:00
Chad Kieffer
5dcf2794c5
Fixes to comment admin buttons.
2009-02-20 07:10:20 +00:00
Chad Kieffer
d04dbadfa1
Apply buttons to comment moderation and action buttons, beginnings of a photo stream carousel block in admin dashboard.
2009-02-15 22:36:51 +00:00
Chad Kieffer
55cd2afde5
Admin theme style cleanup. Merged separate selected, available, unavailable into a single set of reusable classes. Applied alternating row bg colors. Removed inline CSS from admin views. Moved user admin css into admin_default theme style sheet.
2009-01-24 20:06:13 +00:00
Andy Staudacher
e4a9b19bf9
Changing t() placeholder syntax from {{replace_me}} to %replace_me.
2009-01-15 10:02:41 +00:00
Andy Staudacher
e53916dd06
Simplifying the way t() is called. Refactoring localization function t($message, $options=array()) into 2 separate functions:
...
- the new t($message, $options=array()) is for simple strings, optionally with placeholder interpolation.
- t2($singular, $plural, $count, $options=array()) is for plurals.
2009-01-15 09:30:15 +00:00
Bharat Mediratta
66fe884cb5
Use the author's avatar, not the logged in user's one.
2009-01-11 22:47:54 +00:00
Bharat Mediratta
01666c5579
Fix all file structure issues (tabs, bad preambles, etc).
...
Note: installer/install.php is now on the "direct access" list.
2009-01-11 02:27:00 +00:00
Chad Kieffer
aed5a4c788
2009-01-10 22:39:24 +00:00
Chad Kieffer
82848bd3a9
HTML format cleanup
2009-01-10 19:13:00 +00:00
Bharat Mediratta
44bfc1c6a4
Auto-delete 7-day old spam/deleted comments.
2009-01-10 11:25:33 +00:00
Bharat Mediratta
74766e5b82
Create a 'recently deleted' queue
2009-01-10 11:11:24 +00:00
Bharat Mediratta
9d584a528b
Update the queue counts in the menu list whenever we
...
approve/unapprove/spam a comment.
2009-01-10 07:55:16 +00:00
Bharat Mediratta
9b90b4b0cd
Use the theme's avatar as the default if Gravatar doesn't have one.
2009-01-10 06:18:35 +00:00
Bharat Mediratta
a5c4e3d465
Integrate Gravatar. Boy, that was easy.
2009-01-10 05:56:11 +00:00
Bharat Mediratta
a7feeb576f
Big set of changes to comments, with related changes to akismet and
...
user modules.
* Don't delete vars when we delete a module. This makes
reinstalling a module a lot easier.
* Add user::lookup() as the preferred way to load a user, so that
other modules don't delve into the user module (that'd be a
problem when we swap out user modules)
* Notify site admins if Akismet is not fully configured
* Bundle all server variables into the comment so that if/when we
re-check the comment, we are not using the server info from the
site admin's request.
* Update Akismet to grab request context data from the comment
* Pre-seed comment fields if we have a logged in user. Update
comment::create() API to clarify it for this.
* Delete comment::update(), that's a controller function.
* Add url to User_Model
* Add author_name() author_email() and author_url() to
Comment_Model. It'll return the appropriate values depending
on whether the comment was left by a logged in user or a guest.
* Use resetForm() instead of clearForm() when we reload the
comment form after ajax submit, this way we preserve the
pre-seeded values.
* In the user profile page, ignore blank passwords.
2009-01-10 00:34:23 +00:00
Chad Kieffer
3c31549011
Added gCommentsAdminMenu to clearfix.
2009-01-09 08:08:22 +00:00
Chad Kieffer
f97d7da720
Reformated comment admin table layout. Added bulk action checkboxes and menu, reply link, and edit link, all of which need to be wired up.
2009-01-09 07:33:22 +00:00
Andy Staudacher
a631fe29f3
i18n refactoring: Rename all _() (reserved by gettext) calls to t().
...
- And refactor printf to our string interpolation / pluralization syntax
- Also, a slight change to the translations_incomings table, using binary(16) instead of char(32) as message key.
2009-01-08 17:13:06 +00:00
Bharat Mediratta
e9d61d5f9d
"delete" is a reserved word in Chrome, apparently.
2009-01-08 03:05:53 +00:00
Bharat Mediratta
Chad KiefferandTim Almdal
Andy Staudacher
Chad Kieffer