onli
4c4545428d
Fix internal cache, init proper functions API
2019-02-16 13:07:53 +01:00
onli
e0f230dd15
Remove serendipity_purgeEntry
...
Removed pregenerated entries, but that functionality is long gone
2019-02-12 23:18:52 +01:00
Garvin Hicking
005a86da1c
Another cast for safety
2018-07-19 09:25:18 +02:00
Garvin Hicking
19513cdf14
Security fixes
2018-07-18 11:23:02 +02:00
mariohommel
dcb693ba54
Generating token for comment moderation in a global function now.
2018-03-30 11:04:21 +02:00
Mario Hommel
0d8cdd59fa
Fix variable name in hook backend_sendcomment
2018-03-24 18:31:14 +01:00
Thomas Heidrich
7a0a9e2156
some PHP functions expect strings and crash otherwise
2017-02-07 21:13:51 +01:00
onli
7e70f91686
Add form token to comment delete link
2017-01-17 11:42:37 +01:00
Ian
d93674485d
cleaups
2016-03-19 17:18:11 +01:00
xoxys
d4f09b7821
check session variable to detect a reply from author
2016-02-09 10:49:50 +01:00
xoxys
7116e167fe
Update functions_comments.inc.php
2016-02-08 11:56:04 +01:00
xoxys
b043b45a1e
Update functions_comments.inc.php
2016-02-08 11:22:43 +01:00
xoxys
fb1de8ac51
check if comment author equals article author
2016-02-08 11:16:32 +01:00
xoxys
55a9bc66b2
Disable email notifications for replies send from backend
2016-02-08 09:51:40 +01:00
Ian
69f8eae646
some cleanups found on the way
2016-02-04 15:26:38 +01:00
Garvin Hicking
c16e034f7c
XSS fix
2016-01-04 10:53:52 +01:00
Garvin Hicking
00be5d7b4c
Security fixes from Tim Coen (file upload, comment token escaping, 2k11 js comment name escaping)
2015-07-24 13:27:21 +02:00
Garvin Hicking
e7d822be11
Things I noticed for s9y.github.io
2015-03-19 16:17:30 +01:00
Ian
05f14a9f5a
fix non-admin user select and delete comments.
...
Thanks to berberic (forum)
2015-01-12 12:12:03 +01:00
Ian
aca77bd482
cleanup cosmetics
2014-12-10 14:34:54 +01:00
Ian
8da4c647a8
cleanup tabs and whites
2014-11-24 14:17:38 +01:00
onli
92afc37753
Introduce serendipity_specialchars-wrapper for encoding bug ( #236 )
...
PHP 5.4 sets UTF-8 as the default for htmlspecialchars, htmlentities and html_entity_decode. The first two will echo an empty string when given a string with umlauts. This commits introduces serendipity_specialchar-wrapper that are meant to be a temporary solution for the s9y-core until PHP 5.6 fixed the bug, so the native charset option of s9y continues to work.
2014-11-23 23:41:08 +01:00
Matthias Gutjahr
c9e9d93f92
Added fix for comment_author_self (cp. http://board.s9y.org/viewtopic.php?f=10&t=19115 )
2013-07-26 12:43:09 +02:00
onli
a654b13a9a
Complete include_once usage, romove constants
2013-06-22 12:32:54 +02:00
Ian
706ffbe594
fixed PHP5 only variables should be assigned by reference
2012-10-09 20:49:05 +02:00
Ian
d8bcff11a7
up-port 8d828e1 - check goodtoken while approving comments
2012-04-11 18:09:56 +02:00
Grischa Brockhaus
f2c6b669ad
Deny duplicate pingbacks and send message about new pingbacks found in
...
blog.
2012-01-17 12:55:09 +01:00
Grischa Brockhaus
d3893904ed
serendipity_fetchComments produced wrong SQL code, if $where and $limit
...
was set but $order don't
2012-01-04 00:12:12 +01:00
Garvin Hicking
de6f589f96
The $goodtoken thing is important, as when this is used, the user is not logged in, and so the comment approval via token
...
would not work (at least this is how I read it, I didn't implement the token approval)
2011-12-31 15:10:00 +01:00
Grischa Brockhaus
5c062c4f0b
serendipity_deleteComment: Check for adminEntriesMaintainOthers
...
Please check this patch if it is okay, Garvin. Else redo it.
Now only users owning the depending article or having
adminEntriesMaintainOthers are allowed to delete a comment.
2011-12-31 13:47:32 +01:00
Grischa Brockhaus
0fd5541e51
serendipity_approveComment:
...
Only allow the user to approve a comment, if
he owns the article or has adminEntriesMaintainOthers (or forced is
true). Please check this fix, if it is okay and redo if not.
2011-12-31 13:28:16 +01:00
Grischa Brockhaus
b547d8d27e
minifix (someone added a + in front of a comment)
2011-12-31 13:21:08 +01:00
Garvin Hicking
2749dc54ad
Smarty3
2011-11-24 12:16:02 +01:00
Garvin Hicking
139db16e5a
better abstract
2011-05-16 07:45:57 +00:00
Garvin Hicking
e1789fa02f
.
2011-04-11 12:40:15 +00:00
Garvin Hicking
defb3ff1fd
* show subscription status of comments in frontend and backend
2011-04-11 12:35:40 +00:00
Garvin Hicking
e46563693c
missing commit
2010-12-21 19:41:19 +00:00
Garvin Hicking
302d67b224
patch by konus, include referer
2010-05-17 07:43:35 +00:00
Garvin Hicking
6bb6a39d25
new event hook
2009-12-20 17:51:22 +00:00
Grischa Brockhaus
388e5c3d21
pingbacks were not counted as entry trackbacks (also added to entries)
2009-07-04 01:37:47 +00:00
Grischa Brockhaus
0c44ed6429
Fix urls with invalid cased protocol part while displaying entry comments.
2009-06-12 11:57:14 +00:00
Garvin Hicking
9675b30fa3
API improvement, prpoerly store entry reference in printentries, and
...
save cid for api hook
2009-06-11 15:38:22 +00:00
Garvin Hicking
e8eea2ca5d
.
2009-04-16 16:47:51 +00:00
Garvin Hicking
a05c944b3b
Fix not properly counting trackbacks [1.4-beta1]
...
added more debug
2008-11-14 10:06:54 +00:00
Garvin Hicking
bed9db637b
rework comment counter
2008-10-21 09:30:23 +00:00
Garvin Hicking
03a6868e9f
Better output for comment approval and subsciription approval pages, rather than a location redirect.
2008-10-19 10:48:12 +00:00
Garvin Hicking
5a1b22f114
fix link
2008-10-18 17:47:22 +00:00
Garvin Hicking
6dd9516dd5
use url rewriting
2008-10-18 17:36:09 +00:00
Garvin Hicking
6179858b17
Support Opt-In for comment subscription mails
2008-10-18 11:17:40 +00:00
Garvin Hicking
2214abf835
mail-based comment authorisation for spamblock plugin
2008-10-13 11:02:12 +00:00
