1f79d614c4
fix OTP QR code not displayed because of CSRF token passed as a query
...
parameter
use type-strict comparison when validating CSRF token on the backend
2020-09-17 08:43:39 +03:00
4a074111b5
user preferences: forbid < and > characters when changing passwords (were silently stripped on save because of clean())
2020-09-14 20:53:00 +03:00
1f2a721905
allow overriding built-in templates via templates.local
2020-03-13 14:40:35 +03:00
4ab3854aed
don't generate default.css, replace with themes/light.css as a default root CSS file
2020-02-22 16:22:44 +03:00
5b6d9cee29
prefs layout fixes:
...
1. prevent layout breakage when using an authenticator which doesn't allow changing passwords
2. show explanatory messages when OTP or password changing is not available
3. allow app (API) passwords when using any auth module
2020-02-18 11:51:04 +03:00
df464e3d0d
update app password notice
2019-12-17 14:58:31 +03:00
76dd74e0d9
add a hidden tweakable which forbids changing passwords
2019-12-06 17:45:22 +03:00
ac95ab4a65
user css dialog: allow saving and applying CSS without closing the dialog
2019-12-06 14:02:30 +03:00
63ce7ea705
add a plugin page warning for plugins using HOOK_FEED_FETCHED, etc
2019-11-14 07:01:45 +03:00
f75fb6bd75
Merge branch 'master' of git.fakecake.org:tt-rss
2019-11-01 15:40:15 +03:00
266a805bfe
line endings + remove : from headings
2019-11-01 15:40:08 +03:00
05dffcff6f
OTP stuff: update notice wording a bit
2019-11-01 15:27:24 +03:00
812a6c9f16
auth_internal: fix indents
2019-11-01 15:25:40 +03:00
249130e58d
implement app password checking / management UI
2019-11-01 15:03:57 +03:00
88cd9e586e
add placeholder UI plumbing for app passwords
2019-11-01 12:23:11 +03:00
904ecc31e2
allow using OTP without GD
2019-11-01 10:32:58 +03:00
2820f41a4b
add notification for OTP being disabled
2019-10-09 09:10:43 +03:00
ef514bc4bd
add notifications for mail and password changes
...
update and shorten some other message templates
2019-10-09 09:04:51 +03:00
6825aaff55
update SSL certificate wiki link
2019-08-02 08:03:20 +03:00
e38fcd6dea
Fix button focus issues
...
This change introduces derived classes for ComboButton, DropDownButton
and Select that make sure that buttons do not remain focused after their
menus are closed. This allows using hotkeys after closing them.
2019-04-14 12:01:52 +02:00
4a2a90c980
Fix focus issues with hotkeys
...
Since making use of keypress in addition to keydown, hotkeys did not
work in certain scenarios, including clicking on the feed tree expanders
or empty spaces of the toolbar.
This issue is caused by dijit.Tree and dijit.Toolbar implementing the
_KeyNavMixin, which explicitly stops propagation of keypress events.
This change contains two main fixes plus a smaller hotfix:
1. It overrides _onContainerKeydown and _onContainerKeypress for
fox.FeedTree (which inherits from dijit.Tree).
2. It adds fox.Toolbar, which overrides _onContainerKeydown,
_onContainerKeypress and focus. This fixes hotkeys being swallowed
and the first focusable child receiving focus when clicking on an
empty space of the toolbar.
3. It adds the same handling of keydown and keypress to the prefs hotkey
handler as is done in the main hotkey handler.
2019-04-13 22:34:57 +02:00
c936cc3a1f
use DEFAULT_SEARCH_LANGUAGE to generate tsvector index if per-feed language is not specified, also use it as default value on search form for convenience
2019-04-10 13:03:26 +03:00
19f162dbe3
css: insensitive -> text-muted
2019-03-08 10:11:57 +03:00
a130da2d1a
add layout hack to unify heights of plugin fieldsets
2019-02-26 15:03:33 +03:00
8819272db1
prefs-set -> prefs
2019-02-25 19:22:20 +03:00
cbd119c7a3
pref-prefs: fix markup
2019-02-25 19:11:17 +03:00
52d77dee62
plugin list: update layout
2019-02-25 17:15:05 +03:00
335147e572
dialogs: use semantic markup instead of dlgsec stuff
...
continue unifying quoting style for html strings
2019-02-22 10:48:56 +03:00
7dbf63693b
prefs small update
2019-02-22 06:58:06 +03:00
c2fa0c4416
try to organize preferences better, shorten some descriptions
2019-02-21 22:08:23 +03:00
4e253add8c
UI: add some more info links to relevant wiki pages; minor layout updates
2019-02-21 16:21:16 +03:00
4db13b8a17
simplify preference layout, remove some unnecessary css classes
2019-02-21 12:35:40 +03:00
3880a17e57
pref-prefs: rework personal info tab, remove ugly table markup
2019-02-20 17:21:32 +03:00
734af3357d
fix user plugins not saving properly in non-default profiles
2018-12-26 22:04:35 +03:00
b6a021461d
add night_base so that output files would generate properly, etc
2018-12-11 21:06:02 +03:00
be49b77b14
Revert "use codeflask for user css editor"
...
This reverts commit daa43e0572
2018-12-11 20:48:17 +03:00
66d3dcbc7d
update user css info line
2018-12-11 14:31:07 +03:00
daa43e0572
use codeflask for user css editor
2018-12-11 14:25:41 +03:00
703351c79e
remove theme supports-version etc checking
2018-12-09 11:37:26 +03:00
a68b150601
remove separate classes for various panels, unify under .panel
...
remove a few other unnecessary css classes/ids
2018-12-07 14:03:33 +03:00
4fdcc923f0
prefs: reload on user theme change
2018-12-07 10:35:46 +03:00
15d05e8a26
night.css: do not import default less theme statically
...
remove themes/default.php (not needed)
compact.css: fixes
2018-12-06 14:49:33 +03:00
4aa11fe78d
set some alt-info buttons; fix missing default submit for create filter dialog
2018-12-06 13:04:39 +03:00
814e49f8f7
add icons to accordion panels in preferences
...
fix typo in pref-prefs closing panel tag
2018-12-06 08:56:28 +03:00
19e24b4fe2
force cast profile id to integer when assigning to session variable
2018-12-06 07:08:54 +03:00
f3e6e12d46
various minor updates re: icons
2018-12-05 16:48:29 +03:00
b16c57d29c
replace plugin.png with scalable icon
2018-12-05 16:37:09 +03:00
6befff30d7
updates for flat theme (mostly disable old dijit overrides)
2018-12-04 19:03:42 +03:00
f81df37c36
wrap plugin list into border container, like prefs (2)
2018-12-04 15:33:20 +03:00
0880100f6a
wrap plugin list into border container, like prefs
2018-12-04 15:31:21 +03:00
31e79317b3
normalize various font sizes and families between prefs & main UI
...
change some dialogs layout a bit to maybe become more readable
2018-12-04 15:22:22 +03:00
197e80add6
fix several issues related to profile being set to a non-numeric value
2018-12-04 10:47:01 +03:00
4d4034091a
prefs: Prefs global -> Helpers
2018-12-03 12:46:00 +03:00
526389b2d3
update notify_* calls to use Notify
2018-12-02 20:56:30 +03:00
58e54282d3
prefs: move more global functions into matching classes
2018-12-02 15:30:07 +03:00
f26d404890
prefs: move other tree-related functions to respective trees
2018-12-02 12:03:28 +03:00
e23b6e397d
prefs: store active tab for reload, remove most old table row functions
2018-12-02 11:25:32 +03:00
874560db54
remove obsolete row selection functions
...
move getUrlParam() to Utils
2018-12-02 10:33:58 +03:00
9563e3bcd6
remove expandable CDM headlines
2018-11-30 13:51:54 +03:00
ef129fed2a
some more xhrPost refactoring (batchEditSave WIP)
2018-11-30 10:48:50 +03:00
d4fef36237
rewrite per-feed/global strip images to strip media
2018-09-07 10:24:46 +03:00
310c18e6bb
move OTPHP to vendor/; additionally move Base32 class to OTPHP namespace
2018-06-20 18:27:34 +03:00
551f3c2c85
fixed "reset to defaults" in preferences
2018-03-15 16:26:50 +00:00
1a7277570b
fix two-factor authenticaton
2017-12-22 12:29:25 +01:00
d0cce0c7a4
isdefaultpassword: use method_exists() to check for check_password
2017-12-15 12:15:15 +03:00
5f19596651
Fix typo from previous pull request
2017-12-14 18:43:42 +01:00
44c6a04b61
Check if the auth module supports check_password() method before using it
2017-12-14 18:02:37 +01:00
9390ddeae2
fix single user mode login failing because of isdefaultpassword()
2017-12-14 19:27:55 +03:00
1bf468ba1a
pref-prefs: set button classes
2017-12-11 18:50:00 +03:00
e6532439d6
force strip_tags() on all user input unless explicitly allowed
2017-12-03 23:35:38 +03:00
7c6f7bb0aa
fix some minor issues found by code analyzer
2017-12-03 23:08:04 +03:00
7c0eb1b621
add defaultPasswordWarning nag dialog
2017-12-03 20:46:27 +03:00
187abfe732
main classes: remove sql_bool_to_bool() kludge
2017-12-03 09:35:59 +03:00
e4291ba12f
otpenable: use pdo prepare()
2017-12-03 09:10:14 +03:00
7039370368
pref-prefs: PDO
2017-12-02 12:01:56 +03:00
667d32fd26
remove obsolete forum plugin links
...
mention how to enable system plugins in the UI
2017-07-04 16:28:45 +03:00
e130b283a7
db prefs: ignore cache when preference requested for specified UID (in case cached value of a different profile is stored)
...
prefs: show (and set) enabled plugins for default profile only
2017-06-24 14:29:07 +03:00
ea79a0e033
remove some redundant php closing tags
2017-04-26 20:24:18 +03:00
1bfe1d7b31
simplify error handling
...
* less convoluted exception dialogs
* use window.onerror for the majority of exception catching/reporting
* remove most of now useless try/catch blocks
* report stacktrace instead of manually specified error locations
2017-03-04 14:34:44 +03:00
ba2853caac
Prevent target='_blank' vulnerability on dynamic link
2017-02-12 11:01:36 +01:00
328118d12e
use print_hidden() for hidden dojo form fields
2017-02-10 14:36:21 +03:00
22387de225
preferences: set themes dropdown to default if selected theme is missing
2017-01-26 22:37:22 +03:00
e432b8fbe2
implement cache-busting for default theme.css
...
night theme: small fixes
2017-01-25 12:17:41 +03:00
312742db6e
updates: auto-disable CURL if open_basedir is enabled, notify possible issues w/ plugins
2016-01-13 18:12:31 +03:00
5bdcb8fd78
remove option ALLOW_DUPLICATE_POSTS as confusing/useless
2016-01-07 22:01:35 +03:00
583f163f40
don't init plugins when loading everything to make a list, duh
2015-10-08 17:02:32 +03:00
b87744534a
add plugin-based filter actions (see example plugin in attic)
...
bump schema
2015-08-11 23:28:42 +03:00
fb8a032a6b
minor textarea fixes
2015-08-11 18:44:07 +03:00
e79e274fc8
add styles for several other dijit elements
2015-08-11 16:41:05 +03:00
5956f312b7
add a bit more visible separate infobox for password change results
2015-07-06 12:10:15 +03:00
415a3b50c9
fix some minor typos and stuff
2015-06-07 18:41:18 +03:00
b9634eb8b8
support loading themes from themes.local
2015-06-05 18:08:19 +03:00
e6c826fa2f
remove AUTO_ASSIGN_LABELS (confusing, idiots keep enable it and complain of the results)
2015-02-21 13:08:50 +03:00
f6cbe9a5a0
require version information in all additional themes
2014-12-09 15:16:53 +03:00
78744d48d7
add FEEDS_SORT_BY_UNREAD to blacklist (removed)
2014-06-10 08:54:18 +04:00
4a80c57c50
remove some unused code reported by phpmd
2014-02-19 15:42:52 +04:00
ab85ad89b3
otp: use application name in provisioning uri
2014-01-19 00:29:42 +04:00
06a39024dd
plugin list: fix system plugins image position
2013-07-10 13:11:40 +04:00
2f20dd58d2
integrate silk icons by Mark James
2013-07-10 13:09:12 +04:00
5bbc4bb4b0
move stylesheets to css/, reference default tt-rss stylesheets from
...
default.css to make custom themes easier
2013-05-19 21:22:01 +04:00
8429af52be
adjust previous patch phrasing a bit
2013-05-19 11:27:17 +04:00
5bac322258
document the date format string
...
I assumed the format string was related to strftime except all of the
fields looked really weird. After digging in the code, this string is
actually used with php's date(). Add a note for this so other people
can jump quickly to the relevant documentation (which is useful for
non-php peeps who have no idea what this is).
2013-05-19 03:19:55 -04:00
11334fdf6c
make appearance of some preference panes more similar
2013-05-12 12:36:25 +04:00
6f7798b643
Fixing bugs found by static analysis
2013-05-07 00:35:10 -07:00
8d090a910b
use css nth-child instead of old even/odd class hacks for normal mode
2013-05-04 12:01:53 +04:00
bd02d29e1b
prefs: update some descriptions to be more consistent
2013-04-29 15:58:15 +04:00
7b149552cb
remove language selector from the login form, store language in the database per-user
2013-04-29 15:54:23 +04:00
e57a1507ae
do not use session cookie lifetime for additional cookies
2013-04-29 13:03:28 +04:00
a845a3d5e5
otp: display notice if GD is missing
2013-04-29 09:20:30 +04:00
48ed517e8d
pref_prefs: remove second argument from the constructor
2013-04-19 08:40:19 +04:00
1ffe3391f9
make pluginhost a singleton
2013-04-18 12:27:34 +04:00
52d88392da
move db-prefs to OO
2013-04-18 12:00:01 +04:00
d9c85e0f11
classes: use OO DB interface
2013-04-17 20:12:14 +04:00
a42c55f02b
fix blank character after opening bracket in function calls
2013-04-17 18:34:18 +04:00
72ff013729
fix pluginhost created without dbh
2013-04-17 18:30:22 +04:00
6322ac79a0
remove $link
2013-04-17 16:48:41 +04:00
2cbdc95bb0
add a separate tab for the logger
2013-04-17 08:42:39 +04:00
9deca86d96
require entering current one time code to enable otp
2013-04-16 21:07:26 +04:00
4e53956add
implement error log viewer
2013-04-16 20:16:15 +04:00
723bcdb213
update description of DEFAULT_UPDATE_INTERVAL (2)
2013-04-09 22:28:06 +04:00
3ddbefabef
update description of DEFAULT_UPDATE_INTERVAL
2013-04-09 22:18:59 +04:00
bf87833884
fix prefs reset not working properly
2013-04-05 07:52:50 +04:00
29c8fa080e
add language dropdown to prefs
2013-04-04 18:15:37 +04:00
122e9d788e
add a dropdown button action to save and exit prefs ( closes #660 )
2013-04-04 14:53:36 +04:00
8ef9645da0
pref-prefs: add help for USER_CSS_THEME
2013-04-02 21:41:30 +04:00
9db8e60784
update pref descriptions
2013-04-02 16:46:08 +04:00
5f462963a0
remove blank string gettext invocations
2013-04-02 16:38:12 +04:00
dfad9d7a36
pref-prefs: don't use schema-defined help/desc/section names
2013-04-02 16:20:43 +04:00
f17cac6b26
retire DEFAULT_ARTICLE_LIMIT, infinite scrolling is fast enough to make it superfluous
2013-04-02 15:32:47 +04:00
9d76e75451
move editPrefProfiles to pref-prefs
2013-04-01 12:34:49 +04:00
00e347410e
move customizeCSS to pref-prefs
2013-04-01 12:30:34 +04:00
5d40efc9b0
add ability to select CSS files in themes/
2013-03-28 21:04:29 +04:00
8aa01d7989
disable SORT_HEADLINES_BY_FEED_DATE; replace with a toolbar newest first order
2013-03-28 20:51:06 +04:00
b9a06a0e39
retire frankly ridiculous sorting by score/title/date/default
...
keep defaul and oldest first instead of REVERSE_HEADLINES
2013-03-28 20:44:43 +04:00
6deafe90db
modify notify/warn/error boxes css
2013-03-27 22:03:55 +04:00
bb5e1a328d
enable 4th field in plugin->about() to serve as a more info link
2013-03-27 18:16:30 +04:00
65f85248ce
pref-prefs: mention tt-rss forums as a plugin source
2013-03-27 16:24:43 +04:00
33b3db3372
for consistency, show hotkey-toggleable options relating to headlines list in preferences
2013-03-27 12:42:01 +04:00
744a1b0080
disable show additional preferences checkbox as repeatedly confusing
2013-03-27 12:29:51 +04:00
9a73994c5e
Allow translation of notices in prefs.
2013-03-24 21:24:24 +04:00
3972bf5981
db_escape_string: specify link parameter for consistency; sessions: do not force-close db connection in _close()
2013-03-22 09:14:55 +04:00
451ff72289
rework pref-prefs to use checkboxes
2013-03-19 23:14:23 +04:00
f4c02a157a
fix warning when saving plugins with 0 plugins enabled ( closes #542 )
2013-02-28 09:13:00 +04:00
81c54e3d8d
only allow clearing data of active plugins
2013-02-23 21:27:50 +04:00
96f0a3e79d
remove themes/
2013-01-23 15:36:32 +04:00
5d9abb1e11
add plugin storage table to schema; add ability to clear plugin data
2012-12-27 19:20:36 +04:00
0f28f81f89
move authentication modules to plugins/
2012-12-27 15:14:44 +04:00
699daf5856
add several HOOK_PREFS_TAB_SECTION hook points
2012-12-27 01:13:18 +04:00
65d1e2501b
plugins web list style tweaks
2012-12-25 12:31:07 +04:00
23be0bd3fb
hide example plugins from the admin page
2012-12-25 10:08:49 +04:00
Andrew Dolgov
Michael Kuhn
tsia
Francesco Turco
Andrew Dolgov
simonp
Benjamin Collet
Jérémy DECOOL
Andrew Dolgov
Andrew Dolgov
Mike Frysinger
Rasmus Lerdorf
Tomas Chvatal