Commit Graph

59 Commits

Author SHA1 Message Date
Andrew Dolgov b6e1a5c91a fix several warnings reported by phpstan 2021-02-06 17:19:07 +03:00
Andrew Dolgov 403dca154c initial WIP for php8; bump php version requirement to 7.0 2021-02-05 23:41:32 +03:00
Andrew Dolgov a4525d31b2 replace FALSE with false so that static analyzer shuts up about it 2020-09-17 19:02:27 +03:00
fox daaba66f85 Merge branch 'escape-install-part-two' of JustAMacUser/tt-rss into master 2020-04-22 03:55:06 +00:00
JustAMacUser 9c3cf60592 More fixes when installer generates config file.
* Use single quotes in config.php when when defining database values so PHP doesn't interpret `$` as a variable (mostly for the password constant).
* Use `addcslashes` instead of `addslashes` and only escape backslash and single quotes.
* Do not convert DB_PORT to integer if leaving it blank (the default).
2020-04-21 21:10:32 -04:00
JustAMacUser 0fb5267d07 During install, HTML encode POST data for forms. 2020-04-21 20:52:19 -04:00
JustAMacUser 56e16a8d85 Escape user-defined values during installation. 2020-04-18 21:33:56 -04:00
Andrew Dolgov 4ab3854aed don't generate default.css, replace with themes/light.css as a default root CSS file 2020-02-22 16:22:44 +03:00
JustAMacUser 3cae6fe6ad Fixed "Using when not in object context" error when installer query fails. 2019-11-05 19:35:48 -05:00
Andrew Dolgov 16a9bdc387 make_password: generate longer passwords by default, use better random function if available 2019-03-05 20:16:50 +03:00
Andrew Dolgov 54c1b5c611 fill in some missing doctypes; use short doctype where it wasn't 2019-02-23 13:49:40 +03:00
Andrew Dolgov 41e88f64b2 installer: use dojo button for config save 2019-02-20 08:34:23 +03:00
Andrew Dolgov 5ce55faa3b installer: reduce margins; misc fixes 2019-02-19 21:23:03 +03:00
Andrew Dolgov 7716f82c2a installer: dojoify 2019-02-19 21:17:38 +03:00
Andrew Dolgov 005b90cede installer CSS tweaks 2019-02-19 20:11:54 +03:00
Andrew Dolgov c11f32ac38 center and rework some utility screens 2019-02-19 14:59:29 +03:00
Andrew Dolgov c4869cd573 if PHP_VERSION check fails, show current version 2018-08-13 20:13:08 +03:00
wn_ db4b6b9757 Check for PHP 5.6 minimum everywhere. 2018-08-13 08:41:47 -05:00
Tobias Kappé 52dbd55c7b Fix undefined index warning in installation. 2018-08-12 15:26:54 +01:00
Andrew Dolgov f8db5bb4db installer: use PDO, improve wording for some notices
PDO wrapper: allow working with blank DB_HOST
2017-12-10 09:20:52 +03:00
Andrew Dolgov 09bc54c690 further stylesheet simplification related fixes 2017-12-03 13:25:34 +03:00
Andrew Dolgov 9dd336a2c3 generate base css files using lessc 2017-11-29 18:55:12 +03:00
Natan Frei e234ac8dcb $_SERVER['HTTPS'] can be exists and 'off' for non-https connectios 2017-07-17 00:44:48 +03:00
Andrew Dolgov 9f7bd151c6 hopefully unify handling of server HTTPS variables where needed, use scheme based on SELF_URL_PATH otherwise 2017-07-10 16:20:40 +03:00
Andrew Dolgov f6bcb5c606 Merge branch 'subscribe-idn-feed' into 'master'
Subscribe to feed with Internationalized Domain Name

Currently you cannot subscribe to feeds on hosts with internationalized domain names (IDNA) within tt-rss. You need to manually convert them to punycode to subscribe to them.

This patch adds code to detect IDNA and convert them to punycode in fix_url() if possible on the system. This requires PHP IDN functions (e.g. on Debian Jessie this needs php5-intl to be installed), so a notice is added to the installer sanity check.

See merge request !37
2017-01-16 11:36:00 +03:00
Andrew Dolgov 17a8e61d2a deprecate encrypted feed passwords because mcrypt is getting removed from php 7.1
1. transparent decryption for existing installs stays for the time being
2. new passwords are not going to be encrypted even if FEED_CRYPT_KEY is defined
3. added update.php --decrypt-feeds to bulk decrypt existing encrypted passwords
4. updated install to not auto-generate crypt key
5. added warning to config.php-dist
2017-01-07 14:25:46 +03:00
Bernhard Thaler 62958fe9dc convert to punycode for feed on idn hostname 2017-01-02 22:50:26 +01:00
Andrew Dolgov e54eb40a8c remove support for legacy mysql driver 2016-08-21 14:03:35 +03:00
Andrew Dolgov bfd902bbcc sanity_check: enforce minimum php version (5.4) 2015-12-04 19:03:57 +03:00
Andrew Dolgov aa03bac424 allow NO_CURL to disable several CURL-related checks in plugins
af_readability: skip http content-type checking when open_basedir is enabled
2015-11-20 13:34:52 +03:00
Andrew Dolgov 4c46702672 drop support for (obsolete, removed from recent php versions) php safe_mode setting
remove ugly hacks for curl + open_basedir combination breaking support for http redirects
2015-11-19 20:05:17 +03:00
Andrew Dolgov 9044e2e062 installer: use dijit styles 2015-08-12 23:07:31 +03:00
Andrew Dolgov 6759dde1dd minor css updates 2015-08-12 11:45:06 +03:00
Christophe Mehay 5d67842961 Removing required attribute from database password field 2014-10-04 23:10:36 +02:00
Andrew Dolgov 5a801bd6f0 load stylesheets/scripts using helper functions in a few more places 2014-01-28 15:32:19 +04:00
Andrew Dolgov 81c8a93eaf define define_default() in installer 2013-12-18 13:25:22 +04:00
Andrew Dolgov 2f20dd58d2 integrate silk icons by Mark James 2013-07-10 13:09:12 +04:00
WGH 3a3aec221a fixes "undefined index" notice 2013-06-20 00:54:02 +04:00
Andrew Dolgov be9d5df19b hide warning when checking for tt-rss tables if tables are not present 2013-06-04 18:25:37 +04:00
Krzysztof Sikorski 50d5645b9f bugfix: DB_PORT was not used in one of db_connect calls 2013-05-30 02:53:16 +03:00
Andrew Dolgov 4e46e90ef7 installer: use mysqli_error when using mysqli (closes #696) 2013-05-29 00:32:23 +04:00
Andrew Dolgov 5bbc4bb4b0 move stylesheets to css/, reference default tt-rss stylesheets from
default.css to make custom themes easier
2013-05-19 21:22:01 +04:00
Rasmus Lerdorf 6f7798b643 Fixing bugs found by static analysis 2013-05-07 00:35:10 -07:00
Andrew Dolgov 92c9a20cf5 update installer mysqli_connect to only use port if defined 2013-04-19 10:02:27 +04:00
Andrew Dolgov 3c200461f8 more notice css tweaks 2013-04-18 22:27:05 +04:00
Andrew Dolgov bbffc43e4f actually check for DB_PORT in installer, add better hints and use mysqli if available 2013-04-18 16:06:03 +04:00
Andrew Dolgov ae35bb87eb support mysqli when available 2013-04-17 18:56:13 +04:00
Andrew Dolgov 044cff2d74 implement basic feed authentication parameter encryption in the database (FEED_CRYPT_KEY) 2013-04-13 18:24:41 +04:00
Andrew Dolgov 3306daecf4 implement upload-related support for open_basedir 2013-04-11 19:12:00 +04:00
Andrew Dolgov 196464eef2 installer: remove check for pubsubhubbub which is never defined 2013-04-07 00:56:48 +04:00