Kijin Sung
7c8e76b727
Fix list_order and update_order not bumped when updating a temporarily saved document (2.1.5 regression)
...
https://xetown.com/questions/1814863
2024-03-19 22:45:44 +09:00
Kijin Sung
bae8954e42
Remove unnecessary count query in getDocuments()
2024-03-12 23:19:31 +09:00
Kijin Sung
01c3f5cf08
Fill thumbnail defaults in getDocumentConfig()
2024-02-05 12:52:05 +09:00
Kijin Sung
9eea71631a
Merge branch 'security/rve-2024-1' into develop
2024-01-30 23:45:17 +09:00
Kijin Sung
56af0cb5c3
Use strict equality to check if title is empty
2024-01-30 20:44:30 +09:00
Kijin Sung
7cb9b8c786
RVE-2024-1 also apply escape() when updating document
2024-01-30 20:43:39 +09:00
Kijin Sung
bb1699f577
Merge pull request #2264 from kkigomi/input-number
...
관리페이지 설정 폼에서 숫자 입력 항목 필드의 type 을 number 로 변경
2024-01-20 13:29:55 +09:00
Kijin Sung
152fb4e753
RVE-2024-1 always escape DocumentItem->getTitleText()
2024-01-20 00:40:36 +09:00
Kijin Sung
a3650bb899
RVE-2024-1 missing escape of autogenerated document title
2024-01-20 00:39:19 +09:00
Kijin Sung
e44f5ef434
Fix inncorrect read count for anonymous documents
2024-01-16 21:31:37 +09:00
kkigomi
5486ec28e2
관리페이지 설정 폼에서 숫자 입력 항목 필드의 type 을 number 로 변경
...
음수 및 `0`으로 입력되지 않아야 할 항목에 최소 값을 `0` 또는 `1`로 설정
2024-01-10 00:12:21 +09:00
Kijin Sung
6c113c22ed
Fix unnecessary assignment by reference, which causes E_NOTICE
2024-01-04 10:25:25 +09:00
Kijin Sung
ca4e2d60e3
Fix #2221 add document.publishDocument (before/after) triggers that cover both insert and update
2024-01-01 17:34:49 +09:00
Kijin Sung
9aaf785309
Fix partial search result in admin document list and member document list
2023-12-30 20:56:24 +09:00
Kijin Sung
c7811969ba
Fix #2242 show documents of all status in dispDocumentAdminList
2023-12-30 20:49:20 +09:00
Kijin Sung
6486462b73
Fix #2245 don't change file state when moving document or comment to trash
2023-12-30 20:33:00 +09:00
Kijin Sung
3b5fd1cfbb
Fix #2222 missing English translation for document module config
2023-12-01 00:07:22 +09:00
Kijin Sung
c2311f88be
Fix #2217 call getDocumentList (after) trigger even if there are no results
2023-11-28 00:06:21 +09:00
Kijin Sung
8176bdb845
Fix undefined variables in several module config templates
2023-11-09 01:37:38 +09:00
Kijin Sung
7160b1aa58
Fix array to string conversion when other boards are included
2023-11-08 23:30:00 +09:00
Kijin Sung
2c0589ce4b
Fix #2208 unused variable in getDocumentTrashList()
2023-11-08 22:46:45 +09:00
Kijin Sung
d02ea160c1
Fix undefined variable in getThumbnail()
2023-11-05 13:30:55 +09:00
Kijin Sung
c58b13c459
Fix buttons being crushed when loading temp saved document with long content
2023-10-27 10:20:19 +09:00
Kijin Sung
6e4c428420
Fix title_bold and other flags not being unset when updated
2023-10-18 20:45:14 +09:00
Kijin Sung
926aa1bc7d
Remove unnecessary default values for update queries
...
업데이트 쿼리를 할 때 해당 컬럼에 넣을 값을 넘기지 않으면 기본값이 입력되어
의도치 않게 데이터가 변경될 가능성이 있습니다.
(예: ipaddress를 넘기지 않으면 현재 접속자의 IP 주소로 대체됩니다.)
이런 문제를 방지하기 위해 불필요한 기본값을 모두 제거합니다.
2023-10-04 21:13:56 +09:00
Kijin Sung
cf079833c7
Preserve all other information when an admin updates guest post
2023-10-04 21:06:21 +09:00
Kijin Sung
433103bf92
Also apply #2192 fix to document and comment modules; defend null
2023-10-03 14:32:15 +09:00
Kijin Sung
f3bc9a2f03
Clean up trigger registration code in document, comment, file, editor modules
2023-10-02 22:28:16 +09:00
Kijin Sung
6e913fcb3a
Add new trigger points in document.copyDocumentModule to replace old, nonstandard "add" name
2023-10-02 22:10:57 +09:00
Kijin Sung
8940dd92ef
Clean up legacy class references in comment and document controllers
2023-10-02 21:55:30 +09:00
Kijin Sung
7cac909435
Fix unnecessary semicolon
2023-09-25 22:40:33 +09:00
Kijin Sung
3c415e18d5
Fix #1204 #407 display more helpful error message when a post cannot be upvoted/downvoted/reported for whatever reason
2023-09-25 22:32:17 +09:00
Kijin Sung
8b9b00652c
Fix #2057 add option to change or disable search division count
2023-09-24 21:50:53 +09:00
Kijin Sung
33b2c79891
Fix 2056 add trigger before moving document/comment to trash
2023-09-22 02:07:53 +09:00
Kijin Sung
565cfad15f
Clean up trash handling logic
2023-09-22 02:05:14 +09:00
Kijin Sung
26f923d64b
Fix #2145 rename $is_admin to more descriptive variable name in some controller actions
2023-09-13 11:15:13 +09:00
Kijin Sung
71e4118bd5
Merge branch 'security/rve-2023-3-4' into develop
2023-09-13 11:02:59 +09:00
Kijin Sung
c8638d2548
Change cache-busting query string format from ?YYYYMMDDHHMMSS to ?t=UnixTime
...
- 날짜, 유닉스 타임스탬프, 16진수(CKEditor) 등 여러 가지 포맷을 혼용하고 있던
캐시 방지용 쿼리스트링의 형태를 "유닉스 타임스탬프"로 통일
- 표준 시간대 처리 등 은근히 많은 자원을 소모하는 date() 함수를 사용하지 않음
- t=를 붙여서 정상적인 쿼리스트링 구조가 나오도록 하여, 웹방화벽이나 CDN
등에서 문제를 일으킬 가능성을 줄임
- 덤으로, 길이도 2바이트씩 짧아짐
2023-09-12 23:15:26 +09:00
Kijin Sung
ec674dc25f
Fix double encoding of special characters in document tags
2023-09-12 22:52:26 +09:00
Kijin Sung
28c4a9573c
Also remove unnecessary parameters in procDocumentTempSave
2023-09-09 01:23:21 +09:00
Kijin Sung
f9e48fc85c
Tentative fix for RVE-2023-3 and RVE-2023-4
2023-09-08 23:43:12 +09:00
Kijin Sung
ebcd6ceadd
Fix return during transaction without rollback ( fix #2163 )
2023-08-08 23:41:28 +09:00
Kijin Sung
34f05b08de
Use Rhymix action, not standalone .xml.php file, to load document category info
2023-08-07 00:35:13 +09:00
Kijin Sung
0fce8eef93
Add $enforce_max_height parameter to getSignature() #2146
2023-07-16 15:13:27 +09:00
Kijin Sung
5a865fc4aa
Fix #2141 add trash_srl to trigger objects
2023-07-05 22:29:51 +09:00
Kijin Sung
3215631dfc
Move non-member voting, vote canceling, and report canceling options from Board module to Document & Comment modules
2023-07-05 22:27:17 +09:00
Kijin Sung
103f5ce884
Fix #2106 allow entering multiple lines (textarea) in extra var description
2023-07-04 23:29:23 +09:00
Kijin Sung
60ed013915
Add options to allow voting and reporting from the same IP as the author of a document or comment
2023-07-04 23:15:31 +09:00
Kijin Sung
bf8591a9d2
#2138 보완
2023-06-29 01:49:49 +09:00
dewekk
d0dc77704d
특정 환경에서 태그 및 댓글 검색 시 오류 수정
...
- DB sql_mode 설정된 특정 환경
- SQLSTATE[HY000]: General error: 3065 Expression #1 of ORDER BY clause is not in SELECT list, references column '#.documents.list_order' which is not in SELECT list; this is incompatible with DISTINCT
2023-06-28 11:58:47 +09:00