Commit graph

1525 commits

Author SHA1 Message Date
Kijin Sung
7c8e76b727 Fix list_order and update_order not bumped when updating a temporarily saved document (2.1.5 regression)
https://xetown.com/questions/1814863
2024-03-19 22:45:44 +09:00
Kijin Sung
bae8954e42 Remove unnecessary count query in getDocuments() 2024-03-12 23:19:31 +09:00
Kijin Sung
01c3f5cf08 Fill thumbnail defaults in getDocumentConfig() 2024-02-05 12:52:05 +09:00
Kijin Sung
9eea71631a Merge branch 'security/rve-2024-1' into develop 2024-01-30 23:45:17 +09:00
Kijin Sung
56af0cb5c3 Use strict equality to check if title is empty 2024-01-30 20:44:30 +09:00
Kijin Sung
7cb9b8c786 RVE-2024-1 also apply escape() when updating document 2024-01-30 20:43:39 +09:00
Kijin Sung
bb1699f577
Merge pull request #2264 from kkigomi/input-number
관리페이지 설정 폼에서 숫자 입력 항목 필드의 type 을 number 로 변경
2024-01-20 13:29:55 +09:00
Kijin Sung
152fb4e753 RVE-2024-1 always escape DocumentItem->getTitleText() 2024-01-20 00:40:36 +09:00
Kijin Sung
a3650bb899 RVE-2024-1 missing escape of autogenerated document title 2024-01-20 00:39:19 +09:00
Kijin Sung
e44f5ef434 Fix inncorrect read count for anonymous documents 2024-01-16 21:31:37 +09:00
kkigomi
5486ec28e2
관리페이지 설정 폼에서 숫자 입력 항목 필드의 type 을 number 로 변경
음수 및 `0`으로 입력되지 않아야 할 항목에 최소 값을 `0` 또는 `1`로 설정
2024-01-10 00:12:21 +09:00
Kijin Sung
6c113c22ed Fix unnecessary assignment by reference, which causes E_NOTICE 2024-01-04 10:25:25 +09:00
Kijin Sung
ca4e2d60e3 Fix #2221 add document.publishDocument (before/after) triggers that cover both insert and update 2024-01-01 17:34:49 +09:00
Kijin Sung
9aaf785309 Fix partial search result in admin document list and member document list 2023-12-30 20:56:24 +09:00
Kijin Sung
c7811969ba Fix #2242 show documents of all status in dispDocumentAdminList 2023-12-30 20:49:20 +09:00
Kijin Sung
6486462b73 Fix #2245 don't change file state when moving document or comment to trash 2023-12-30 20:33:00 +09:00
Kijin Sung
3b5fd1cfbb Fix #2222 missing English translation for document module config 2023-12-01 00:07:22 +09:00
Kijin Sung
c2311f88be Fix #2217 call getDocumentList (after) trigger even if there are no results 2023-11-28 00:06:21 +09:00
Kijin Sung
8176bdb845 Fix undefined variables in several module config templates 2023-11-09 01:37:38 +09:00
Kijin Sung
7160b1aa58 Fix array to string conversion when other boards are included 2023-11-08 23:30:00 +09:00
Kijin Sung
2c0589ce4b Fix #2208 unused variable in getDocumentTrashList() 2023-11-08 22:46:45 +09:00
Kijin Sung
d02ea160c1 Fix undefined variable in getThumbnail() 2023-11-05 13:30:55 +09:00
Kijin Sung
c58b13c459 Fix buttons being crushed when loading temp saved document with long content 2023-10-27 10:20:19 +09:00
Kijin Sung
6e4c428420 Fix title_bold and other flags not being unset when updated 2023-10-18 20:45:14 +09:00
Kijin Sung
926aa1bc7d Remove unnecessary default values for update queries
업데이트 쿼리를 할 때 해당 컬럼에 넣을 값을 넘기지 않으면 기본값이 입력되어
의도치 않게 데이터가 변경될 가능성이 있습니다.
(예: ipaddress를 넘기지 않으면 현재 접속자의 IP 주소로 대체됩니다.)
이런 문제를 방지하기 위해 불필요한 기본값을 모두 제거합니다.
2023-10-04 21:13:56 +09:00
Kijin Sung
cf079833c7 Preserve all other information when an admin updates guest post 2023-10-04 21:06:21 +09:00
Kijin Sung
433103bf92 Also apply #2192 fix to document and comment modules; defend null 2023-10-03 14:32:15 +09:00
Kijin Sung
f3bc9a2f03 Clean up trigger registration code in document, comment, file, editor modules 2023-10-02 22:28:16 +09:00
Kijin Sung
6e913fcb3a Add new trigger points in document.copyDocumentModule to replace old, nonstandard "add" name 2023-10-02 22:10:57 +09:00
Kijin Sung
8940dd92ef Clean up legacy class references in comment and document controllers 2023-10-02 21:55:30 +09:00
Kijin Sung
7cac909435 Fix unnecessary semicolon 2023-09-25 22:40:33 +09:00
Kijin Sung
3c415e18d5 Fix #1204 #407 display more helpful error message when a post cannot be upvoted/downvoted/reported for whatever reason 2023-09-25 22:32:17 +09:00
Kijin Sung
8b9b00652c Fix #2057 add option to change or disable search division count 2023-09-24 21:50:53 +09:00
Kijin Sung
33b2c79891 Fix 2056 add trigger before moving document/comment to trash 2023-09-22 02:07:53 +09:00
Kijin Sung
565cfad15f Clean up trash handling logic 2023-09-22 02:05:14 +09:00
Kijin Sung
26f923d64b Fix #2145 rename $is_admin to more descriptive variable name in some controller actions 2023-09-13 11:15:13 +09:00
Kijin Sung
71e4118bd5 Merge branch 'security/rve-2023-3-4' into develop 2023-09-13 11:02:59 +09:00
Kijin Sung
c8638d2548 Change cache-busting query string format from ?YYYYMMDDHHMMSS to ?t=UnixTime
- 날짜, 유닉스 타임스탬프, 16진수(CKEditor) 등 여러 가지 포맷을 혼용하고 있던
  캐시 방지용 쿼리스트링의 형태를 "유닉스 타임스탬프"로 통일
- 표준 시간대 처리 등 은근히 많은 자원을 소모하는 date() 함수를 사용하지 않음
- t=를 붙여서 정상적인 쿼리스트링 구조가 나오도록 하여, 웹방화벽이나 CDN
  등에서 문제를 일으킬 가능성을 줄임
- 덤으로, 길이도 2바이트씩 짧아짐
2023-09-12 23:15:26 +09:00
Kijin Sung
ec674dc25f Fix double encoding of special characters in document tags 2023-09-12 22:52:26 +09:00
Kijin Sung
28c4a9573c Also remove unnecessary parameters in procDocumentTempSave 2023-09-09 01:23:21 +09:00
Kijin Sung
f9e48fc85c Tentative fix for RVE-2023-3 and RVE-2023-4 2023-09-08 23:43:12 +09:00
Kijin Sung
ebcd6ceadd Fix return during transaction without rollback (fix #2163) 2023-08-08 23:41:28 +09:00
Kijin Sung
34f05b08de Use Rhymix action, not standalone .xml.php file, to load document category info 2023-08-07 00:35:13 +09:00
Kijin Sung
0fce8eef93 Add $enforce_max_height parameter to getSignature() #2146 2023-07-16 15:13:27 +09:00
Kijin Sung
5a865fc4aa Fix #2141 add trash_srl to trigger objects 2023-07-05 22:29:51 +09:00
Kijin Sung
3215631dfc Move non-member voting, vote canceling, and report canceling options from Board module to Document & Comment modules 2023-07-05 22:27:17 +09:00
Kijin Sung
103f5ce884 Fix #2106 allow entering multiple lines (textarea) in extra var description 2023-07-04 23:29:23 +09:00
Kijin Sung
60ed013915 Add options to allow voting and reporting from the same IP as the author of a document or comment 2023-07-04 23:15:31 +09:00
Kijin Sung
bf8591a9d2 #2138 보완 2023-06-29 01:49:49 +09:00
dewekk
d0dc77704d 특정 환경에서 태그 및 댓글 검색 시 오류 수정
- DB sql_mode 설정된 특정 환경
- SQLSTATE[HY000]: General error: 3065 Expression #1 of ORDER BY clause is not in SELECT list, references column '#.documents.list_order' which is not in SELECT list; this is incompatible with DISTINCT
2023-06-28 11:58:47 +09:00