mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-01-17 04:38:27 +01:00
Code Issues Releases Wiki Activity
13,581 Commits 2 Branches 22 Tags
Commit Graph

13581 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Nick Liu
f6d6d1b185
Deprecate e_parse::toJS() 
`e_parse::toJS()`, documented with the description

> Convert text blocks which are to be embedded within JS

, does not protect strings from injections, which appears to be its
primary use.  Additionally, it performs multiple unrelated string
modifications:

* Replace Windows line breaks with a literal `\\n` (which would later be
  parsed as `\n` in JavaScript/JSON)
* Does not modify Unix line breaks (`\n`), which is inconsistent with
  the Windows line break behavior
* Removes HTML tags
* Replaces HTML entities as `htmlentities()` does

This method cannot be fixed because its usages are inconsistent.  Most
notably, some usages surround the method's output in single quotes while
others surround it with double quotes.  Strings cannot be JSON-encoded
without confounding quotation mark styles.

All core usages of `e_parse::toJS()` have been replaced with
alternatives, which are also documented in the method's DocBlock.

Fixes: #4546
 2021-08-31 00:11:14 +02:00
Moc
2c44c7602c
Fixes #3980 - Remove duplicate random number on contact form 
- Already called in secure_img::renderInput();
- Should also fix https://github.com/e107inc/visualcaptcha/issues/5
 2021-08-30 20:40:09 +02:00
Cameron
7973e10dea Debug code removal. Rel prev/next added. 2021-08-13 11:53:21 -07:00
Cameron
f173b59672 Closes #4539 2021-08-13 10:58:42 -07:00
Cameron
b994dd916d Bootstrap upgraded to v5.1.0 2021-08-13 10:03:24 -07:00
Cameron
0c30006b5f Prevent looping of non-existent array. 2021-08-12 11:53:40 -07:00
Cameron
32618817d1 Character counting display added to meta description on admin News and Page inputs. 2021-08-12 11:51:55 -07:00
Cameron
64e705ced0 {SITELINKS_ALT} fix and test. 2021-08-07 12:26:23 -07:00
Nick Liu
ecf6ab7acc
show_emessage("ALERT", …): JSON type enforcement for alert() usages 2021-08-07 18:50:14 +02:00
Cameron
fe8ae40f30 Robot directive removed from default route. 2021-07-26 16:15:55 -07:00
Cameron
95fab15c02 Gsitemap: Display link visibility status while importing. 2021-07-22 13:51:35 -07:00
Cameron
fce00b4276 Gsitemap: Fix for importing navigation links that use a SEF URL configuration. 2021-07-22 12:15:04 -07:00
Nick Liu
7a04260b5f
#4299: Wrap even more potentially undefined constants 
In:
* Admin-UI
* Forums
 2021-07-21 20:23:06 +02:00
Cameron
389a76efe2 Fix for active nav detection while SEF URL in use. 2021-07-15 17:51:08 -07:00
Cameron
ebe9c8cf13 Precaution to avoid fatal error with some admin-ui configurations. Fontello preload code removed. (some cases may use FA instead) 2021-07-15 17:38:39 -07:00
Cameron
04576b9f79 Commented library preload code. 2021-07-14 12:20:57 -07:00
Cameron
099dffdfdd Allow theme to manually control navigation 'active' status with new method: e107::nav('active', [url match]); 2021-07-14 12:18:42 -07:00
Nick Liu
ccf0f037aa
#4299: Wrap more potentially undefined constants 
In:
* Forums
* /e107_admin/menus.php
 2021-07-13 13:10:59 +02:00
Cameron
bc1340af12 Forced WebP caching fix. 2021-07-12 12:27:29 -07:00
Cameron
c941e5b98d Issue #4024 - Pagination url option added to News preferences. Select between 'record' (legacy format eg. page=20, page=40 etc) or 'page' numbers (page=1, page=2 etc). Experimental - requires more testing. 2021-07-06 17:53:55 -07:00
Cameron
36ff7a88be Loading icon was missing from search form button. 2021-06-30 16:42:05 -07:00
Cameron
861d123f2b Fix for PHP8 fatal error on search with checkbox categories. 2021-06-30 16:25:31 -07:00
Nick Liu
a9c2ae3823
Fix #4405: PHP 8 compatibility: redirection::checkMembersOnly() 
To accommodate the change in behavior of strpos()

Fixes: https://github.com/e107inc/e107/issues/4405
 2021-06-27 18:02:39 +02:00
Cameron
3430342d0d PHPMailer upgrade to v6.2.0 2021-06-25 11:47:39 -07:00
Cameron
fd06147900
Merge pull request #4523 from e107inc/dependabot/composer/phpmailer/phpmailer-6.5.0 
Bump phpmailer/phpmailer from 6.4.0 to 6.5.0
 2021-06-25 11:25:30 -07:00
Cameron
7beae22f44 Removed search shortcode parameter limitations. 2021-06-24 16:49:22 -07:00
Cameron
00d584f584 Experimental CSS filtering. 2021-06-24 12:29:47 -07:00
dependabot[bot]
ee74e5ad8f
Bump phpmailer/phpmailer from 6.4.0 to 6.5.0 
Bumps [phpmailer/phpmailer](https://github.com/PHPMailer/PHPMailer) from 6.4.0 to 6.5.0.
- [Release notes](https://github.com/PHPMailer/PHPMailer/releases)
- [Changelog](https://github.com/PHPMailer/PHPMailer/blob/master/changelog.md)
- [Commits](https://github.com/PHPMailer/PHPMailer/compare/v6.4.0...v6.5.0)

---
updated-dependencies:
- dependency-name: phpmailer/phpmailer
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2021-06-22 15:40:00 +00:00
Cameron
d8f9a96dea Issue #4520 Possible fix for session duration. (testing needed) 2021-06-18 09:44:26 -07:00
Cameron
c4f76c3687 Issue #4270 - perform all webp conversion checks within e_thumbnail class. WebP conversion now works with SEF media URLS. 2021-06-18 09:31:45 -07:00
Cameron
7302803a75 Issue #4270 Added .webp browser-support detection. Media-Manager "Convert to webp during render" can now be safely enabled and will temporarily fallback to the regular image if the browser does not support webp images. 2021-06-18 08:43:53 -07:00
Cameron
a89b58a8a2 Allow users to login when maintenance mode is active and is permitted. 2021-06-15 15:37:45 -07:00
Cameron
d2411404c4 Issue #4299 PHP8 Fix 2021-06-14 17:05:57 -07:00
Cameron
5652fd2bd9
Merge pull request #4515 from Deltik/fix/4512 
#4512: faqs_shortcodes::sc_faq_count(): Return blank string instead of 0
 2021-06-14 16:55:10 -07:00
Cameron
0deb235ee7 Unit test fixes. 2021-06-14 16:51:43 -07:00
Cameron
a1e7d29661 Optional {NEWS_PAGINATION} shortcode added. 2021-06-14 14:42:17 -07:00
Cameron
4e75903292 Fix for empty image. 2021-06-13 12:59:01 -07:00
Cameron
f2966468ea Added missing breadcrumb item (page-title) when viewing a page for consistency with other breadcrumbs like News etc. 2021-06-12 16:53:59 -07:00
Cameron
aa6e449aee New shortcode added on News view page: {NEWS_AUTHOR_REALNAME} 
Tagcloud menu can now be sorted via shortcode parms. eg. {MENU: path=tagcloud&order=tag,asc&limit=20}
Animate.css library loading example added to bootstrap5/theme.xml
 2021-06-12 16:18:51 -07:00
Nick Liu
7cef4264c6
#4512: faqs_shortcodes::sc_faq_count(): Return blank string instead of 0 
Previously incorrect null coalesce returns 0 instead of a blank string

Fixes: #4512
 2021-06-07 21:52:36 -05:00
Cameron
f561c5920b Bootstrap updated to v5.0.1 2021-06-07 17:07:02 -07:00
Cameron
2f9d81d7fc Prevent column pref conflict. 2021-06-07 11:43:47 -07:00
Cameron
157a35a5e7 Custom-fields raw mode was missing for types textarea and bbarea. 2021-06-07 08:43:41 -07:00
Cameron
a6e287d680 {---BREADCRUMB---} processing is now supported. (see bootstrap5/theme_shortcodes.php for an example) 2021-06-04 12:27:25 -07:00
Cameron
1ae7e3a2ed Bootstrap5 fix for video ratio. 2021-06-03 13:45:07 -07:00
Cameron
07f4e53932 Fix fatal error in PHP8 that occurred when building a plugin without database tables. Developer mode alert now uses the {ALERTS} shortcode for greater control of placement. 2021-06-03 09:56:00 -07:00
Cameron
83c52c8bd8 Use e107::route() to safely get e_ROUTE value. 2021-06-01 16:36:09 -07:00
Cameron
3a71366954 Added {THEME} shortcode (path) to core shortcodes. 2021-06-01 16:07:38 -07:00
Cameron
8023a2b9f6 Extra header information added to debug info. 2021-06-01 15:14:33 -07:00
Nick Liu
2a94814e8a
Fix PHP warning: Array to string conversion in db_debug_class.php:770 
```
Array to string conversion, Line 770 of /home/deltik/public_html/e107_handlers/db_debug_class.php
```
 2021-05-18 16:49:32 -05:00