copilot-swe-agent[bot]
4b32a2fc37
Allow login-as for admin members, protect only super admin (member_srl=4)
...
Changed the restriction so admins can login as other admin accounts,
but member_srl 4 (super admin) is protected from impersonation.
Co-authored-by: Lastorder-DC <18280396+Lastorder-DC@users.noreply.github.com>
2026-03-02 04:11:36 +00:00
copilot-swe-agent[bot]
d6486a0415
Add admin login-as feature to member admin list
...
Add procMemberAdminLoginAs action that allows super admins to
login as a specific non-admin member from the member admin list page.
Includes CSRF protection, admin-only access check, and prevention of
logging in as another admin user.
Co-authored-by: Lastorder-DC <18280396+Lastorder-DC@users.noreply.github.com>
2026-03-02 04:10:30 +00:00
Lastorder
fdb1f8269b
Merge branch 'rhymix:master' into master
2026-03-02 13:04:15 +09:00
Kijin Sung
cdb520d2b1
Preserve module_srl after managing document #2683
2026-03-01 23:32:39 +09:00
Kijin Sung
2392b923b0
Fix reference to potentially undefined config variable
2026-02-27 20:51:30 +09:00
Kijin Sung
6386ddfe27
Fix warnings when user is logged out #2680
2026-02-27 20:51:07 +09:00
Kijin Sung
798b0cd1d6
Fix warnings when user is logged out #2680
2026-02-27 20:46:49 +09:00
Kijin Sung
73e153be60
Fix warnings when logged_info is false #2680
2026-02-27 20:46:32 +09:00
Lastorder-DC
89bab34d8b
Merge branch 'master' of github.com:Lastorder-DC/rhymix
2026-02-27 18:04:51 +09:00
Lastorder
25f6d02677
Merge branch 'rhymix:master' into master
2026-02-27 18:04:35 +09:00
Kijin Sung
2ede904d56
Ensure that the default version of jQuery and jQuery Migrate are always loaded during install
2026-02-26 13:15:12 +09:00
Kijin Sung
d0d1505367
Enable secure session and cookies by default if installed or upgraded in an HTTPS site
2026-02-26 01:25:36 +09:00
Kijin Sung
f0f73c6ac8
Update jQuery to 3.7.1 and recommend updating
2026-02-26 01:21:19 +09:00
Kijin Sung
74b9533281
Merge branch 'security/rve-2026-2'
2026-02-25 20:39:06 +09:00
Kijin Sung
bcda659add
Merge branch 'security/rve-2026-1'
2026-02-25 20:39:04 +09:00
Kijin Sung
ed68509c98
Add comment to DocumentItem::getBrowserTitle()
2026-02-24 17:08:28 +09:00
Kijin Sung
4c91040c35
Rename misleading label for list_order sort
2026-02-24 17:05:59 +09:00
Kijin Sung
cb947abb76
Remove unreasonable list_count default
2026-02-23 13:55:37 +09:00
Kijin Sung
47e54bc564
Fix typo in XML filter file #2679
2026-02-23 13:55:17 +09:00
Lastorder
fffa08d61f
Merge branch 'rhymix:master' into master
2026-02-22 22:45:33 +09:00
Kijin Sung
37b23341be
Fix template path error in mobile document page #2679
2026-02-22 20:18:05 +09:00
Kijin Sung
a53e293a5a
Support searching admin memo in member list #2676
2026-02-21 21:51:41 +09:00
Kijin Sung
d47dd2d824
Remove reference to old themes in layout module
2026-02-21 21:45:48 +09:00
Kijin Sung
18401d2688
Remove reference to old theme file #2677
2026-02-21 21:41:35 +09:00
Kijin Sung
91744ec87c
Always download SVG as attachment
2026-02-20 21:57:07 +09:00
Kijin Sung
bf2df84d0f
Use enshrined\svgSanitize to clean SVG file content
2026-02-20 21:55:29 +09:00
Kijin Sung
f131a616eb
Fix RVE-2026-1 arbitrary file association by extra var
2026-02-16 21:56:44 +09:00
Lastorder-DC
752b51c78f
spammer update
2026-02-15 22:28:44 +09:00
Lastorder
aba6016986
Merge branch 'rhymix:master' into master
2026-02-12 14:03:54 +09:00
Kijin Sung
ad1617b17c
Show clickable list of layout instances in "installed layout" page
2026-02-09 21:40:56 +09:00
Kijin Sung
59f95fe099
Remove outdated filter files in admin module
2026-02-08 11:08:37 +09:00
Kijin Sung
ee5418d9d5
Clean up message module config JS
2026-02-08 11:02:50 +09:00
Kijin Sung
b9a512c007
Fix add IP to spamfilter menu not working
2026-02-08 10:56:28 +09:00
Kijin Sung
4339d01a75
Update Daum/Kakao postcode API URL #2672
2026-02-07 21:10:34 +09:00
Kijin Sung
0e013367a0
Fix misspelled variables and incorrect config references
2026-02-06 21:48:23 +09:00
Kijin Sung
867014d0f4
Don't filter by extra var lang when sorting by numeric value
2026-02-06 18:13:40 +09:00
Kijin Sung
2f8c4ca77d
Enable customizing the number of comments/replies required to prevent editing or deleting a post
2026-02-06 18:06:16 +09:00
Lastorder
bbd62dbea3
Merge branch 'rhymix:master' into master
2026-02-06 09:51:56 +09:00
Kijin Sung
5a8c669c42
Fix duplicated layout info when layout.html (or layout.blade.php) does not exist #2132 #2670
2026-02-05 23:16:38 +09:00
Kijin Sung
8920cb7491
Fix incorrect path conversion on Windows #2667
2026-02-05 22:39:33 +09:00
Kijin Sung
d824bc9da3
Clean up method of loading default sender info #2661
2026-02-05 22:36:31 +09:00
Kijin Sung
d9a6c577fd
Restore available fields in password reset email #2663
2026-02-05 22:26:24 +09:00
Kijin Sung
9d1738e21d
Add trigger before auto-login #2665 #2666
2026-02-05 22:14:06 +09:00
Lastorder-DC
0518b04fff
remove debug
2026-02-05 18:26:12 +09:00
Lastorder-DC
f343dff713
fanbinit 0205
2026-02-05 18:24:58 +09:00
Lastorder
ba8bbda74b
Merge branch 'rhymix:master' into master
2026-01-30 14:57:37 +09:00
Kijin Sung
6d85d0de6d
Add title in delete/trash confirmation dialog #2653
2026-01-28 21:36:28 +09:00
Kijin Sung
078c07d9f5
Add confirmation dialog before deleting or trashing document in admin dashboard #2653
2026-01-28 21:33:27 +09:00
Kijin Sung
f69dc966c5
Fix inconsistent placing of text and icon
2026-01-28 21:25:29 +09:00
Kijin Sung
15f9f6a7bd
Show proper 404 page when trying to access a document that is not public #2659
2026-01-28 21:17:26 +09:00