stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-08-02 05:01:04 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity
2,637 Commits 4 Branches 0 Tags
c2880f2f77eabccd8eb01acfd3e1f31364f37c0a
Commit Graph
39 Commits
Author SHA1 Message Date
Chad Kieffer 390bc7c1f6 Switch quick delete from JS confirm to jQuery UI dialog, closes ticket #355. 2009-06-14 10:42:14 -06:00
Bharat Mediratta 3e71a44a96 Add a closing </b> to the warning. 2009-06-12 23:04:34 -07:00
Bharat Mediratta 26314d0ef8 Create gallery::date_time(), gallery::date() and gallery::time() 
functions that format a unix timestamp into a date+time/date/time
string.

Partial fix for ticket #347.
 2009-06-12 22:44:51 -07:00
unostarandBharat Mediratta e9e61d51bc Add string to localizer 
Signed-off-by: Bharat Mediratta <bharat@menalto.com>
 2009-06-12 15:38:41 +08:00
Bharat Mediratta 0b23433d94 Rename theme_details to theme_options. These changes got left out of 
68fd196d66 leaving us in a temporarily
broken state.
 2009-06-11 12:50:50 -07:00
Bharat Mediratta 4118ca4f1d Provide a way for non-admins to authenticate and use the upgrader, 
without using our regular code paths.
 2009-06-10 21:05:24 -07:00
Bharat Mediratta 5a6fc93496 Improve our warning message to also mention that you need to have mod_rewrite installed. 2009-06-10 20:22:10 -07:00
Bharat Mediratta f20bf46868 Consider the CLI sapi the equivalent of an admin 2009-06-10 01:21:57 -07:00
Bharat Mediratta f41a232730 Merge branch 'master' of git@github.com:gallery/gallery3 2009-06-09 21:28:08 -07:00
Bharat Mediratta 2fd322deea ACtually implement the upgrader, and add a confirmation box when the 
upgrade is complete.
 2009-06-09 21:26:37 -07:00
jhilden dab0799b65 Merge branch 'master' of git@github.com:gallery/gallery3 2009-06-10 00:10:18 -04:00
jhilden f1c91ab977 fixed that you couldn't copy and paste text from the admin dashboard 
* made only the block headers draggable, so that the rest of the block could be normal
* this should fix bug #292
 2009-06-09 23:54:02 -04:00
Bharat Mediratta f55686c7ef Merge branch 'master' of git@github.com:gallery/gallery3 2009-06-09 20:33:31 -07:00
Bharat Mediratta a20246b738 Say hello to the new upgrader UI. 2009-06-09 20:33:06 -07:00
Andy Staudacher 7e4fcb97cb Fix HTML bug in l10n message 2009-06-09 20:10:34 -07:00
Bharat Mediratta e5d273e929 Merge branch 'master' of git@github.com:gallery/gallery3 2009-06-09 19:00:22 -07:00
Bharat Mediratta 79d526f1fa Put in a placeholder link to click on if there's no value for a setting. 2009-06-09 18:58:40 -07:00
unostarandBharat Mediratta e6768a4e97 Add string to localizer 
Signed-off-by: Bharat Mediratta <bharat@menalto.com>
 2009-06-09 14:11:32 +08:00
Bharat Mediratta 1ecdb5ef0c Merge branch 'master' of git@github.com:gallery/gallery3 2009-06-08 21:32:03 -07:00
Bharat Mediratta f0ca27ab92 Fix the admin/themes url. 2009-06-08 21:31:50 -07:00
Andy Staudacher b9ee6f7d18 Merge branch 'master' of git@github.com:gallery/gallery3 2009-06-06 15:24:49 -07:00
Andy Staudacher 0e415dae9b Preliminary BiDi support (needs *a lot* of tweaking) 2009-06-06 15:24:14 -07:00
Bharat Mediratta 4302406c96 Fix formatting in l10n client source box so that it wraps. Otherwise 
long strings show up only on one line.
 2009-06-06 12:19:26 -07:00
Bharat Mediratta ab1fc6ad53 Make theme page headers match the menu dropdowns. 
Internationalize the admin dashboard common title.
 2009-06-05 19:47:11 -07:00
Bharat Mediratta ac70a1b77a Fix internationalization to use one long string and placeholders. 
Removed the <br/> though since we're trying to avoid structural HTML
in internationalized strings.
 2009-06-04 18:49:45 -07:00
jhilden 81d20c79b6 fixed another bug with the filesize unit and added a better error message 
Merge branch 'master' of git@github.com:gallery/gallery3

Conflicts:
	modules/gallery/views/simple_uploader.html.php
 2009-06-04 21:32:45 -04:00
jhilden 8933a19f1f fixed stuff 2009-06-04 21:05:33 -04:00
Bharat Mediratta 5158a6f433 Add MY_num containing num::convert_to_bytes() which supports PHP's 
size shorthand, and convert the simple_uploader code to use it.
 2009-06-04 17:53:40 -07:00
jhilden 9306c178a8 set filesize limit of swfupload to the same value as upload_max_filesize 
* now users get an error when they try to upload too big files
* this should fix bug #337
* maybe it also needs to check for max_post_size
 2009-06-04 18:29:31 -04:00
Tim Almdal 0f987880e6 Fix for ticket #320 2009-06-02 12:08:47 -07:00
Andy Staudacher 1cfed1fac1 Extend L10n client to provide UI for plural translation. 
Ticket 148.
 2009-06-02 00:43:04 -07:00
Bharat Mediratta 43abcd9386 Security pass over all controller code. Mostly adding CSRF checking 
and verifying user permissions, but there are several above-the-bar
changes:

1) Server add is now only available to admins.  This is a hard
   requirement because we have to limit server access (eg:
   server_add::children) to a user subset and the current permission
   model doesn't include that.  Easiest fix is to restrict to admins.
   Got rid of the server_add permission.

2) We now know check permissions at every level, which means in
   controllers AND in helpers.  This "belt and suspenders" approach will
   give us defense in depth in case we overlook it in one area.

3) We now do CSRF checking in every controller method that changes the
   code, in addition to the Forge auto-check.  Again, defense in depth
   and it makes scanning the code for security much simpler.

4) Moved Simple_Uploader_Controller::convert_filename_to_title to
   item:convert_filename_to_title

5) Fixed a bug in sending notification emails.

6) Fixed the Organize code to verify that you only have access to your
   own tasks.  In general, added permission checks to organize which had
   pretty much no validation code.

I did my best to verify every feature that I touched.
 2009-06-01 22:40:22 -07:00
Bharat Mediratta 33df7de391 Accidentally broke the AllowOverride info url in the migration from 
core -> modules/gallery.  Fixed, and incidentally make the link appear
in a new tab/window.
 2009-05-31 22:25:53 -07:00
Bharat Mediratta 708f27f483 Run p::clean() on any variables that contain data entered by users. 2009-05-31 00:11:48 -07:00
tim almdal f0104ee43b remove scaffolding code 2009-05-29 21:53:49 -07:00
Bharat Mediratta 34da188e81 Revert test code inserted in 88a3d43ba9 
which showed stack traces to non-admins.
 2009-05-29 17:40:23 -07:00
Bharat Mediratta 1988d77039 Remove unnecessary (and broken) <form/> 2009-05-28 00:06:09 -07:00
Bharat Mediratta 88a3d43ba9 Update all references to the core application to now point to the 
gallery module.  This type of mass update is prone to some small bugs.
 2009-05-27 16:17:29 -07:00
Bharat Mediratta 28b41056e3 Restructure things so that the application is now just another module. 
Kohana makes this type of transition fairly straightforward in that
all controllers/helpers/etc are still located in the cascading
filesystem without any extra effort, except that I've temporarily
added a hack to force modules/gallery into the module path.

Rename what's left of "core" to be "application" so that it conforms
more closely to the Kohana standard (basically, just
application/config/config.php which is the minimal thing that you need
in the application directory)

There's still considerable work left to be done here.
 2009-05-27 15:07:27 -07:00