copilot-swe-agent[bot]
4b32a2fc37
Allow login-as for admin members, protect only super admin (member_srl=4)
...
Changed the restriction so admins can login as other admin accounts,
but member_srl 4 (super admin) is protected from impersonation.
Co-authored-by: Lastorder-DC <18280396+Lastorder-DC@users.noreply.github.com>
2026-03-02 04:11:36 +00:00
copilot-swe-agent[bot]
d6486a0415
Add admin login-as feature to member admin list
...
Add procMemberAdminLoginAs action that allows super admins to
login as a specific non-admin member from the member admin list page.
Includes CSRF protection, admin-only access check, and prevention of
logging in as another admin user.
Co-authored-by: Lastorder-DC <18280396+Lastorder-DC@users.noreply.github.com>
2026-03-02 04:10:30 +00:00
copilot-swe-agent[bot]
0a5bbef276
Initial plan
2026-03-02 04:06:01 +00:00
Lastorder
fdb1f8269b
Merge branch 'rhymix:master' into master
2026-03-02 13:04:15 +09:00
Kijin Sung
cdb520d2b1
Preserve module_srl after managing document #2683
2026-03-01 23:32:39 +09:00
Kijin Sung
2392b923b0
Fix reference to potentially undefined config variable
2026-02-27 20:51:30 +09:00
Kijin Sung
6386ddfe27
Fix warnings when user is logged out #2680
2026-02-27 20:51:07 +09:00
Kijin Sung
798b0cd1d6
Fix warnings when user is logged out #2680
2026-02-27 20:46:49 +09:00
Kijin Sung
73e153be60
Fix warnings when logged_info is false #2680
2026-02-27 20:46:32 +09:00
Lastorder-DC
89bab34d8b
Merge branch 'master' of github.com:Lastorder-DC/rhymix
2026-02-27 18:04:51 +09:00
Lastorder
25f6d02677
Merge branch 'rhymix:master' into master
2026-02-27 18:04:35 +09:00
Kijin Sung
840a9adac8
Version 2.1.31
2026-02-26 13:18:24 +09:00
Kijin Sung
2ede904d56
Ensure that the default version of jQuery and jQuery Migrate are always loaded during install
2026-02-26 13:15:12 +09:00
Kijin Sung
465248a7a4
Update jQuery Migrate to 3.6.0
2026-02-26 13:10:47 +09:00
Kijin Sung
d0d1505367
Enable secure session and cookies by default if installed or upgraded in an HTTPS site
2026-02-26 01:25:36 +09:00
Kijin Sung
7ce40653d7
Use jQuery 3.x by default
2026-02-26 01:23:10 +09:00
Kijin Sung
f0f73c6ac8
Update jQuery to 3.7.1 and recommend updating
2026-02-26 01:21:19 +09:00
Kijin Sung
74b9533281
Merge branch 'security/rve-2026-2'
2026-02-25 20:39:06 +09:00
Kijin Sung
bcda659add
Merge branch 'security/rve-2026-1'
2026-02-25 20:39:04 +09:00
Kijin Sung
ed68509c98
Add comment to DocumentItem::getBrowserTitle()
2026-02-24 17:08:28 +09:00
Kijin Sung
4c91040c35
Rename misleading label for list_order sort
2026-02-24 17:05:59 +09:00
Kijin Sung
cb947abb76
Remove unreasonable list_count default
2026-02-23 13:55:37 +09:00
Kijin Sung
47e54bc564
Fix typo in XML filter file #2679
2026-02-23 13:55:17 +09:00
Lastorder
fffa08d61f
Merge branch 'rhymix:master' into master
2026-02-22 22:45:33 +09:00
Kijin Sung
37b23341be
Fix template path error in mobile document page #2679
2026-02-22 20:18:05 +09:00
Kijin Sung
a53e293a5a
Support searching admin memo in member list #2676
2026-02-21 21:51:41 +09:00
Kijin Sung
d47dd2d824
Remove reference to old themes in layout module
2026-02-21 21:45:48 +09:00
Kijin Sung
18401d2688
Remove reference to old theme file #2677
2026-02-21 21:41:35 +09:00
Kijin Sung
e4c60b56d4
Add unit tests for Security::sanitize() supporting SVG
2026-02-20 21:57:35 +09:00
Kijin Sung
91744ec87c
Always download SVG as attachment
2026-02-20 21:57:07 +09:00
Kijin Sung
bf2df84d0f
Use enshrined\svgSanitize to clean SVG file content
2026-02-20 21:55:29 +09:00
Kijin Sung
a18b45f0f8
Strip namespace prefixes before checking dangerous tags in SVG
2026-02-20 21:40:37 +09:00
Kijin Sung
187bffe9d2
Fix unit test for Validator
2026-02-16 21:59:14 +09:00
Kijin Sung
f131a616eb
Fix RVE-2026-1 arbitrary file association by extra var
2026-02-16 21:56:44 +09:00
Lastorder-DC
752b51c78f
spammer update
2026-02-15 22:28:44 +09:00
Lastorder
aba6016986
Merge branch 'rhymix:master' into master
2026-02-12 14:03:54 +09:00
Kijin Sung
c5d453a2df
#2675 보완 및 최적화
2026-02-11 21:02:50 +09:00
Kijin Sung
5834a3c18a
Fix fatal error in some environments when relative URL is passed to encodeIdna() or decodeIdna() #2675
2026-02-11 20:54:00 +09:00
Kijin Sung
1199095e7f
Version 2.1.30
2026-02-10 12:23:00 +09:00
Kijin Sung
ad1617b17c
Show clickable list of layout instances in "installed layout" page
2026-02-09 21:40:56 +09:00
Kijin Sung
59f95fe099
Remove outdated filter files in admin module
2026-02-08 11:08:37 +09:00
Kijin Sung
ee5418d9d5
Clean up message module config JS
2026-02-08 11:02:50 +09:00
Kijin Sung
b9a512c007
Fix add IP to spamfilter menu not working
2026-02-08 10:56:28 +09:00
Kijin Sung
4339d01a75
Update Daum/Kakao postcode API URL #2672
2026-02-07 21:10:34 +09:00
Kijin Sung
0e013367a0
Fix misspelled variables and incorrect config references
2026-02-06 21:48:23 +09:00
Kijin Sung
867014d0f4
Don't filter by extra var lang when sorting by numeric value
2026-02-06 18:13:40 +09:00
Kijin Sung
2f8c4ca77d
Enable customizing the number of comments/replies required to prevent editing or deleting a post
2026-02-06 18:06:16 +09:00
Lastorder
bbd62dbea3
Merge branch 'rhymix:master' into master
2026-02-06 09:51:56 +09:00
Kijin Sung
5a8c669c42
Fix duplicated layout info when layout.html (or layout.blade.php) does not exist #2132 #2670
2026-02-05 23:16:38 +09:00
Kijin Sung
26c59c251c
Fix incorrect conversion of JS template variable containing path #2657
2026-02-05 23:05:19 +09:00