Commit graph

73 commits

Author SHA1 Message Date
Eric
1235bab527 Escape all login and username characters in database
Display correctly usernames

(I hope not to have made mistakes)

git-svn-id: http://piwigo.org/svn/trunk@4304 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-11-18 20:07:20 +00:00
nikrou
513b3e0bd6 New feature : configuration option for thumbnail directory
git-svn-id: http://piwigo.org/svn/trunk@3720 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-08-02 13:04:17 +00:00
plegall
641caaa2f5 merge r3661 from branch 2.0 to trunk
feature 1071: improve log system on API calls. The log can be activated by a
configuration setting. The log file can be changed also with a configuration
setting.

improvement: pwg.images.add API methods gets a cleaner way to log received
parameters.

git-svn-id: http://piwigo.org/svn/trunk@3662 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-21 21:41:31 +00:00
plegall
b253200c95 merge r3659 from branch 2.0 to trunk
bug 1070: fix a pLoader bug on Piwigo side. Catch the bad communication:
don't try to find tags if tag_ids parameter is empty (but not null).

git-svn-id: http://piwigo.org/svn/trunk@3660 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-21 21:19:53 +00:00
plegall
cc285fa731 merge r3513 from branch 2.0 to trunk
bug 1043 fixed: avoid warning when merging chunks. This warning was preventing
the PwgError to work correctly and the error code was not transmitted.

git-svn-id: http://piwigo.org/svn/trunk@3514 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-03 23:03:30 +00:00
rvelices
4fa8d36ed5 - remove warn on unset variable
- insert_user_comment expects now the comment content to be sql safe (works now exactly as update_user_comment)

git-svn-id: http://piwigo.org/svn/trunk@3488 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-07-01 20:56:41 +00:00
plegall
9b16d67c22 merge r3453 from branch 2.0 to trunk
feature 1033 added: new API method pwg.categories.setInfo makes possible to
change the name and comment of a given category.


git-svn-id: http://piwigo.org/svn/trunk@3454 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-06-24 23:01:35 +00:00
plegall
3c27690c87 merge r3239 from branch 2.0 to trunk
bug 949 fixed: to avoid memory limit on server side, base64 encode chunks one
by one on client side and base64 decode chunks one by one on server side.


git-svn-id: http://piwigo.org/svn/trunk@3240 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-04-14 22:54:39 +00:00
plegall
f94ff8b8e1 merge r3192 from branch 2.0 to trunk
bug 941 fixed: to be able to upload heavy photo, chunk the files, send parts
one by one, and then pwg.images.add merge chunks together. Now big uploads
works and you can even have a fine progress bar on client side.


git-svn-id: http://piwigo.org/svn/trunk@3193 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-03-12 23:14:50 +00:00
rvelices
6c92ade174 Last (I hope) paranoic optims ...
- move get_uysername and get_groupname from public to admin/functions.inc.php
- optim in index.php
- tags.tpl does not need smarty modifier included
- move func get_comment_post_key from functions_comment to functions (avoid extra inclusion every time on picture page)

git-svn-id: http://piwigo.org/svn/trunk@3145 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-02-14 02:24:10 +00:00
plegall
83275fd036 merge r3064 from branch 2.0 to trunk
bug 912 fixed: we need an extra original_sum to pwg.images.add API method to
check photo existence. Using the file_sum was a bad idea.


git-svn-id: http://piwigo.org/svn/trunk@3065 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-01-08 23:33:35 +00:00
plegall
1b711ad236 Administration: happy new year 2009, all PHP headers updated.
git-svn-id: http://piwigo.org/svn/trunk@3049 68402e56-0260-453c-a942-63ccdbb3a9ee
2009-01-04 23:28:36 +00:00
plegall
0479bcde10 merge r2921 from branch 2.0 to trunk
bug 907 fixed: avoid PHP warning when pwg.images.add adds a photo in a
category that either contains no "ranked" image or when category is empty.


git-svn-id: http://piwigo.org/svn/trunk@2922 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-12-03 23:29:08 +00:00
plegall
991ddc9809 merge r2918 from branch 2.0 to trunk
bug 905 fixed: avoid PHP notice when rank is implicit in the categories
parameter of the pwg.images.add web API method.


git-svn-id: http://piwigo.org/svn/trunk@2920 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-12-03 22:56:24 +00:00
plegall
4fc7acc18b merge r2722 from branch 2.0 to trunk
feature 892 added: pwg.images.setInfo added so that once we have discovered
the photo was already in the database (thanks to pwg.images.exist), we can
only set the photo metadata.


git-svn-id: http://piwigo.org/svn/trunk@2919 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-12-03 22:55:17 +00:00
plegall
0ffd66ca94 merge r2916 from branch 2.0 to trunk
bug 904 fixed: an index.htm is created in directories created by
pwg.images.add web API method, only directories that contains pictures.


git-svn-id: http://piwigo.org/svn/trunk@2917 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-12-02 23:28:32 +00:00
plegall
463c101a28 merge -c2785 from branch 2.0 to trunk
bug 897 fixed: controls added in pwg.images.add to have clear error messages
if permission is denied or any error occur during file write.


git-svn-id: http://piwigo.org/svn/trunk@2786 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-20 21:06:21 +00:00
rvelices
90be9fbb84 - merge rev 2765,2769 from branch 2.0
* 2765 mysql potential injection paranoia + code compaction in common.inc.php
* 2769 added an image sort order by privacy level (admins only)
* 2769 fix an IE6 display issue with quick search on index page

git-svn-id: http://piwigo.org/svn/trunk@2770 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-18 00:45:45 +00:00
rvelices
ebc3c2e2f7 merge 2755 and 2756 from branch 2.0 to trunk
- 2755 fix vulnerability http://www.milw0rm.com/exploits/6755
- 2756 security paranoia: protect session/remember me cookies from XSS attacks (works only if php>=5.2 and with IE/FF maybe others)


git-svn-id: http://piwigo.org/svn/trunk@2757 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-16 00:38:26 +00:00
plegall
3eecf04629 feature 889 added: pwg.images.exist check the existence of a photo in the
database based on its md5sum. (avoid failing on pwg.images.add).


git-svn-id: http://piwigo.org/svn/trunk@2683 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-07 22:01:14 +00:00
plegall
a7f507dc68 bug 888 fixed: pwg.images.add updates the associated categories so that a
category doesn't remain without representant while containing photos.


git-svn-id: http://piwigo.org/svn/trunk@2672 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-05 22:30:35 +00:00
plegall
b53cddbf6a feature 885 added: pwg.images.add web API method now supports additional
high resolution format.


git-svn-id: http://piwigo.org/svn/trunk@2670 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-05 21:22:57 +00:00
plegall
54cf9362f5 bug 880 fixed: pwg.categories.add invalidate the user cache so that the new
category is added to the user category tree.


git-svn-id: http://piwigo.org/svn/trunk@2644 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-03 20:38:12 +00:00
plegall
600e2d87ec feature 874 added: new Web API method pwg.tags.add.
git-svn-id: http://piwigo.org/svn/trunk@2634 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-10-01 21:08:51 +00:00
plegall
d04fd1d44e feature 868 added: pwg.images.add checks if the same file has not alread
been uploaded.


git-svn-id: http://piwigo.org/svn/trunk@2592 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-25 23:01:35 +00:00
rvelices
c15f6faced - some checks for admins that are advisers (no write access)
- send the charset in http header for web services
- tag name becomes an xml attribute instead of content for tags.getList and related tags in images.getInfo (more logical and coherent with tags.getAdminList)

git-svn-id: http://piwigo.org/svn/trunk@2585 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-25 00:30:42 +00:00
plegall
5adad7565c new: WebService method pwg.tags.getAdminList was added. The difference with
pwg.tags.getList is that this new method doesn't take permissions into
account, and so is available only for administrator connected users.


git-svn-id: http://piwigo.org/svn/trunk@2584 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-24 21:30:33 +00:00
plegall
6df515a54f new: WebService method pwg.categories.add so that pLoader can create a
virtual category.


git-svn-id: http://piwigo.org/svn/trunk@2583 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-24 20:25:39 +00:00
rvelices
dda9f5db66 - removed #debug css rule (why would we need that in default-layout?)
- order by rank is not available in calendar/chronology mode
- small non-functional change in functions_search.inc.php (handy for plugin)
- unused variables/smaller code/unused params in func call

git-svn-id: http://piwigo.org/svn/trunk@2572 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-23 01:04:41 +00:00
plegall
aa41a468e5 improvement: WebService method pwg.images.add can set fill #images table
columns. rank is directly related to a category and several categories can
be linked at once. Basic technical metadata {filesize, width, height} are
automaticaly filled.


git-svn-id: http://piwigo.org/svn/trunk@2569 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-22 21:47:03 +00:00
plegall
0283203cce new: webservice method pwg.categories.getAdminList was added so that pLoader
can see the list of categories as you can see in the administration
interface : not filtered by individual permissions.


git-svn-id: http://piwigo.org/svn/trunk@2563 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-21 20:42:17 +00:00
plegall
d55107e3e3 improvement: instead of sending the images_max_rank of each category in
pwg.categories.getList so that you can correctly set the rank in
pwg.images.add, the rank is calculated automatically in pwg.images.add so
that the image is added at the end of the category.


git-svn-id: http://piwigo.org/svn/trunk@2553 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-19 22:59:41 +00:00
plegall
c502ebd43a improvement: webservice methode pwg.categories.getList returns the
images_max_rank for each category, based on #image_category.rank content. So
that a remote client can correctly add photos with webservice method
pwg.images.add.


git-svn-id: http://piwigo.org/svn/trunk@2548 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-17 21:42:50 +00:00
plegall
272113c417 feature added: ability to set rank from webservice upload.
git-svn-id: http://piwigo.org/svn/trunk@2520 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-11 22:19:04 +00:00
rvelices
fdffe42bdc remove ws access table/partners functionality
git-svn-id: http://piwigo.org/svn/trunk@2516 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-11 01:20:25 +00:00
plegall
fceb26e231 bug fixed: it seems that the upload file.jpg had -rw------- permissions
which is not enough if the http server user is different from the file owner
(which is the case when suphp is running). The permissions are set to
-rw-r--r--.


git-svn-id: http://piwigo.org/svn/trunk@2511 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-08 21:14:33 +00:00
plegall
116f1bc4fb improvement: ws method pwg.images.add checks the dumped files against the
expected md5 sum.

bug fixed: ws method pwg.images.add invalidate the user cache so that
category date_last and category nb_images (and related data)


git-svn-id: http://piwigo.org/svn/trunk@2501 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-04 22:45:27 +00:00
rvelices
4002f708e1 - remove hello_world plugin (not working anymore)
- web service method images.add works only for admins now
- fix template-common js web service calls did not have the parameters url encoded
- improve admin user_list - submitting the form with no user selected triggers a javascript alert (had fun with jquery selectors)


git-svn-id: http://piwigo.org/svn/trunk@2496 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-09-04 00:57:55 +00:00
plegall
45960b4631 feature 839, first step : early proof of concept, no error handling. A
remote client can add a photo in a category thanks to the web API. A new
"upload" directory is created (write access required on the base
directory). Uploaded photo have path such as
upload/<year>/<month>/<day>/<datetime>-random.jpg. The thumbnail must come
with the "web sized" photo. The photo has no storage_category_id.

Bugs still need to be fixed and a discussion must occur before next steps.


git-svn-id: http://piwigo.org/svn/trunk@2463 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-30 21:53:00 +00:00
rvelices
cde423fc86 - normalize behaviour of query search versus std search (now both return items already sorted and permission checked); also more optimized sql queries (in some cases)
git-svn-id: http://piwigo.org/svn/trunk@2451 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-23 00:56:22 +00:00
rvelices
9c96b905ff - image rating on picture page done through ajax (tested safari/ie 6&7/ff)
git-svn-id: http://piwigo.org/svn/trunk@2435 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-15 01:29:23 +00:00
rvelices
e2ee204c12 - add to caddie on picture page done through ajax
git-svn-id: http://piwigo.org/svn/trunk@2429 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-12 00:30:27 +00:00
rvelices
644f8ee621 - first use of web services as Ajax: change the privacy level directly from the picture page
git-svn-id: http://piwigo.org/svn/trunk@2413 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-02 01:11:26 +00:00
rvelices
d91d0ac444 - remember me cookie security improvement (the time when the cookie was generated is saved and checked in range [now-remember_me_length; now]
- tags improvements
 * pass to templates all fields in table #tags (handy for plugins such as type tags)
 * fix issue with tag letter when first letter is accentuated (utf-8)
 * tags are sorted on url_name instead of name (accentuated first letter chars are the same as without accent)
 * better use of columns in by letter display mode

git-svn-id: http://piwigo.org/svn/trunk@2409 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-07-01 02:09:21 +00:00
rvelices
553727dffa - merge r2355 from 1.7 to trunk: fix display of menubar related tags in IE7
- optimized sql query in permalinks
- remove some unused global variable declarations
- fix bug in admin/themeconf.inc.php

git-svn-id: http://piwigo.org/svn/trunk@2356 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-05-23 10:15:48 +00:00
plegall
524011bfa6 Bug fixed: as rvelices notified me by email, my header replacement script was
bugged (r2297 was repeating new and old header).

By the way, I've also removed the replacement keywords. We were using them
because it was a common usage with CVS but it is advised not to use them with
Subversion. Personnaly, it is a problem when I search differences between 2
Piwigo installations outside Subversion.


git-svn-id: http://piwigo.org/svn/trunk@2299 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-05 14:14:07 +00:00
plegall
3f235497f3 Modification: new header on PHP files, PhpWebGallery renamed Piwigo.
git-svn-id: http://piwigo.org/svn/trunk@2297 68402e56-0260-453c-a942-63ccdbb3a9ee
2008-04-04 22:57:23 +00:00
rvelices
4afa14cc8d - fix plugin menu link broken with xamp (realpath behaves differently)
- complete quick search rewriting
 - now we can quote phrases as in google "New York" is not the same as New York
 - user comments not searched anymore (faster)
 - the big full text query does not use joins anymore (faster)
 - related tags not shown on the index page, but now you can see the matching tags and matching categories

git-svn-id: http://piwigo.org/svn/trunk@2135 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-10-12 03:27:34 +00:00
rvelices
98b07a4a7f - some code refactoring before upgrade to utf (only cosmetic at this point...)
git-svn-id: http://piwigo.org/svn/trunk@2126 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-10-08 23:46:09 +00:00
rvelices
fb9abe8fea - bug 755: admin permalinks page - fix category field sort
- web service functions: 1 fix and 3 optimizations

git-svn-id: http://piwigo.org/svn/trunk@2119 68402e56-0260-453c-a942-63ccdbb3a9ee
2007-10-03 23:36:21 +00:00