11344 commits

Author	SHA1	Message	Date
Kijin Sung	c29a603d7c	Change outdated escaping code in page module	2023-11-08 22:42:23 +09:00
Kijin Sung	073924efcf	Fix #1346 allow setting filesize limit for member signature	2023-11-06 08:41:35 +09:00
Kijin Sung	426027509c	Use raw bytes, not MB, when setting allowed filesize in session	2023-11-06 08:39:15 +09:00
Kijin Sung	7a659737cc	Fix #1299, Fix #1346 implement proper file size limit for messages	2023-11-06 08:26:01 +09:00
Kijin Sung	a647fff6b8	Allow setting file size and extension limits in setUploadInfo()	2023-11-06 08:24:04 +09:00
Kijin Sung	4bdadcdf2c	Fix potentially undefined properties in EditorModel::getEditor()	2023-11-06 07:57:04 +09:00
Kijin Sung	f4474070e1	Merge branch 'security/rve-2023-6' into develop	2023-11-06 07:47:14 +09:00
Kijin Sung	d02ea160c1	Fix undefined variable in getThumbnail()	2023-11-05 13:30:55 +09:00
Kijin Sung	27a932d594	Display more detailed error message when upload info mismatch is found	2023-11-03 16:48:46 +09:00
Kijin Sung	990343d906	Set editor_mid automatically based on module_srl	2023-11-03 16:42:56 +09:00
Kijin Sung	2baa4b5369	Fix warning when the author's member info cannot be found	2023-11-02 21:36:27 +09:00
Kijin Sung	e1cfb09652	Set proper module_srl and mid when uploading in member and communication modules	2023-11-02 21:22:43 +09:00
Kijin Sung	f6a02fd006	Fix typo in procFileDelete	2023-11-02 21:18:59 +09:00
Kijin Sung	eda9af546c	Automatically set module_srl in upload info, and check it strictly	2023-11-02 20:49:05 +09:00
Kijin Sung	bffa50dd15	Fix RVE-2023-6 (validate module_srl when uploading/deleting)	2023-11-02 13:19:41 +09:00
Kijin Sung	99de7db35a	Fix RVE-2023-6 (getFileList)	2023-11-01 22:36:05 +09:00
Kijin Sung	4a9a89b299	Fix RVE-2023-6 (procFileDelete, procFileSetCoverImage)	2023-11-01 22:32:47 +09:00
Kijin Sung	613518aa28	Fix RVE-2023-6 (procFileUpload, procFileIframeUpload)	2023-11-01 22:23:06 +09:00
Kijin Sung	3233619eac	Fix template v2 not working in external pages ... https://xetown.com/questions/1792598	2023-10-31 21:42:27 +09:00
Kijin Sung	986fc23043	Redirect to inbox after sending message	2023-10-27 19:32:17 +09:00
Kijin Sung	dbcbb57413	Fix broken admin footer when counter addon is disabled	2023-10-27 10:43:08 +09:00
Kijin Sung	c58b13c459	Fix buttons being crushed when loading temp saved document with long content	2023-10-27 10:20:19 +09:00
Kijin Sung	286dc76e78	Support event handler (trigger) to customize the content of the admin dashboard	2023-10-27 00:22:12 +09:00
Kijin Sung	72ab8ea8fc	Disable CKEditor 4.22 version check AJAX request	2023-10-26 23:10:05 +09:00
Kijin Sung	80e50d41f5	Change default Cookie path to "/" for compatibility with JS function setCookie()	2023-10-24 23:17:01 +09:00
Kijin Sung	8d2b7101f4	Use Cookie class to control session and member-related cookies, too	2023-10-24 23:09:50 +09:00
Kijin Sung	a3cde9c109	Add config.php options to set defaults for Cookie class #2184	2023-10-24 23:09:17 +09:00
Kijin Sung	53ec02b6bb	Restore sending message by email (revert #1109) ... - 스팸 방지를 위해 관리자만 발송할 수 있도록 변경 - 보낸이의 메일 주소를 노출하지 않도록 변경	2023-10-24 21:33:39 +09:00
Kijin Sung	e9e46e3391	Remove HTTP/2 server push for Cloudflare ... 클플에서 해당 기능 지원 중단하여 더이상 작동하지 않음 https://developer.chrome.com/blog/removing-push/	2023-10-24 20:32:35 +09:00
Kijin Sung	4c49bc8d77	Fix undefined variable in layout cache file	2023-10-23 22:19:06 +09:00
Kijin Sung	c1ee5abaa1	Return early if hashed password is not provided	2023-10-23 22:10:07 +09:00
Kijin Sung	13ad81da5d	Fix fatal error if dispBoardDeleteComment is called without comment_srl	2023-10-23 22:09:46 +09:00
Kijin Sung	f3cebbec1d	Merge branch 'develop' into template-v2	2023-10-20 21:18:58 +09:00
dewekk	31949e8a93	닉네임 변경 금지시 회원 등록 불가 문제 수정	2023-10-19 13:04:18 +09:00
Kijin Sung	977a61fb6e	Merge branch 'develop' into template-v2	2023-10-18 20:45:28 +09:00
Kijin Sung	6e4c428420	Fix title_bold and other flags not being unset when updated	2023-10-18 20:45:14 +09:00
Kijin Sung	a640306123	Move unit test for TemplateParser v1	2023-10-15 00:50:26 +09:00
Kijin Sung	5c5391ab12	Merge branch 'develop' into template-v2	2023-10-14 23:55:42 +09:00
Kijin Sung	58c910dfa0	Add very old XE DB classes to cleanup list	2023-10-14 17:49:41 +09:00
Kijin Sung	a2767b0dd8	Merge branch 'develop' into template-v2	2023-10-10 15:13:47 +09:00
Kijin Sung	861135bd6c	Fix undefined variables in article page	2023-10-10 15:12:17 +09:00
Kijin Sung	45f016d53b	Update references to TemplateHandler in common code paths	2023-10-10 15:05:46 +09:00
Kijin Sung	74be21ff5a	Fix missing clearfix in scrap list	2023-10-08 15:02:55 +09:00
Kijin Sung	e17b5fac7e	Fix incorrect layout list display	2023-10-07 22:43:28 +09:00
Kijin Sung	938142856d	Fix #2196 add exclude_module_srl parameter to getNewestCommentList query	2023-10-07 22:21:30 +09:00
Kijin Sung	741f725bcf	Fix warnings in PHP.x across several modules involved in site menu & design editing feature	2023-10-05 15:51:02 +09:00
Kijin Sung	82b8785c14	Fix warnings in PHP 8.x if skin XML file doesn't contain much information	2023-10-05 15:31:15 +09:00
Kijin Sung	0be8f6a441	Fix warnings in PHP 8.x	2023-10-05 15:30:37 +09:00
Kijin Sung	04546d8b0f	Fix warnings in RSS config screen in PHP 8.x	2023-10-05 15:25:07 +09:00
Kijin Sung	bf7b0d6aef	Fix invisible RSS feed image delete button ... 버튼 작동에는 지장이 없으나, 브라우저에 따라 투명하게 보일 때가 있었음	2023-10-05 15:20:41 +09:00