Commit graph

18573 commits

Author SHA1 Message Date
Kijin Sung
63fa80db82 No need to fail hard if unable to write cache file at the end 2022-03-15 22:48:06 +09:00
Kijin Sung
def6166c8e Clean up duplicate path definitions 2022-03-15 22:39:55 +09:00
Kijin Sung
e8eece5730 Enable PHP execution of external document if template parsing is enabled 2022-03-15 22:31:49 +09:00
Kijin Sung
09abdfa88a Implement safe order of parsing template code and including as PHP 2022-03-15 22:29:07 +09:00
Kijin Sung
d13241ed7c Parse external document as PHP and/or Rhymix template if configured 2022-03-15 21:30:36 +09:00
Kijin Sung
9edd52c328 Add option to control whether to execute external page as PHP and/or Rhymix template 2022-03-15 21:14:55 +09:00
Kijin Sung
af2c0bae95 Fix relative path used in unit tests 2022-03-15 02:52:21 +09:00
Kijin Sung
f0179584b5 Fix Github actions error due to nanasess/setup-php patch 2022-03-15 02:04:15 +09:00
Kijin Sung
0272c5d27a Prevent '_getContent method is not exists' error when page info is improperly cached 2022-03-15 02:00:14 +09:00
Kijin Sung
d4a1be1ef0 Merge duplicate code paths in PageView and PageMobile classes
보안 체크가 한 곳에서 이루어지도록 중복되는 메소드 제거
2022-03-15 01:46:47 +09:00
Kijin Sung
9170d9444c Throw SecurityViolation if anyone tries to exploit RVE-2022-2 with GET/POST vars 2022-03-15 01:36:13 +09:00
Kijin Sung
1ab9a2899b Adjust cache paths to prevent loading old cache 2022-03-15 01:28:59 +09:00
Kijin Sung
0c1ee32073 Disable template compilation in external page content 2022-03-14 02:29:18 +09:00
Kijin Sung
a28a8e29e1 More cleanup 2022-03-14 02:17:16 +09:00
Kijin Sung
063d38487e Clean up some dirty code in page.view.php 2022-03-14 02:11:57 +09:00
Kijin Sung
f373e38d6d Fix #1893 duplicate function call when loop="" template syntax is used 2022-03-14 01:53:27 +09:00
Kijin Sung
7b46deb973 Fix #1886 clean up incorrect use of getMemberInfo* methods 2022-03-14 01:40:43 +09:00
Kijin Sung
53a8eaa81c Fix #1884 incorrect caching of debugging enabled flag 2022-03-14 01:25:17 +09:00
Kijin Sung
05ac2ec558 Fix #1889 remove unnecessary form field with typo in name 2022-03-11 01:50:09 +09:00
Kijin Sung
7a20ab3692 Fix #1989 remove old limit of 60 chars for temporary password hash 2022-03-11 01:48:19 +09:00
Kijin Sung
9c07104eb2 Reduce file download key expiration to 5 minutes #1890 2022-03-11 01:45:13 +09:00
Kijin Sung
237134f64d Fix #1897 incorrect error message when query variable exceeds maxlength 2022-03-11 01:43:26 +09:00
Kijin Sung
9c04818cc2
Merge pull request #1899 from dewekk/fix-typo
Fix typo
2022-03-10 22:35:09 +09:00
dewekk
072fd82dd0
Fix typo
그룹 리스트가  캐시되지 않는 문제 수정
2022-03-10 17:02:19 +09:00
Kijin Sung
f67568d34c Fix #1895 uninitialized variable in poll.controller.php 2022-03-07 12:00:04 +09:00
Kijin Sung
f35dfcf2bb Fix inappropriate loading of disabled image_link editor component (78d1b6966a 보완) 2022-02-25 14:50:57 +09:00
conory
34c46a08c6 Correct the URL regex 2022-02-21 21:11:42 +09:00
Kijin Sung
0c31234e09 Fix isset(), unset() and empty() not working in template syntax 2022-02-16 13:15:31 +09:00
Kijin Sung
60b7912718
Merge pull request #1879 from dewekk/fix/warning
Fix Warning in getExtraVars()
2022-02-15 11:09:09 +09:00
dewekk
fd3c75a2a2
getExtraVars()의 return을 항상 array()로 일관되게 수정
DocumentModel::getExtraVars에서 항상 array()로 반환하고 있음
2022-02-11 13:23:18 +09:00
Kijin Sung
b6e21eb61f Version 2.0.18 2022-02-09 10:12:10 +09:00
Kijin Sung
a840e26b71 Merge branch 'pr/extra-content' into develop 2022-02-09 02:52:26 +09:00
Kijin Sung
f3ac70d3b2 Fix #1874 standalone attribute for device actions 2022-02-08 22:08:23 +09:00
Kijin Sung
fc14a04173 Clean up getMemberMenu() method 2022-02-07 21:43:35 +09:00
Kijin Sung
9e67b5b010 Determine administrator status more accurately #1851 2022-02-07 21:43:14 +09:00
Kijin Sung
4eced6daf0 Merge branch 'develop' into pr/1851 2022-02-07 21:31:45 +09:00
Kijin Sung
024c69390d #1851 보완 2022-02-07 21:31:42 +09:00
Kijin Sung
0970a7d7ad Also separate target actions when auto-inserting CAPTCHA into forms #1815 2022-02-07 21:25:45 +09:00
Kijin Sung
2dc3e5e19b Also add CAPTCHA action conditions to default board skin #1815 2022-02-07 21:07:19 +09:00
Kijin Sung
9aea72b1c3 Separate CAPTCHA actions #1815 2022-02-07 21:04:09 +09:00
Kijin Sung
37aa3dea3b Add target actions to CAPTCHA object #1815 2022-02-07 20:52:54 +09:00
Kijin Sung
dba78c46fe Make CAPTCHA work on act=dispBoardContent 2022-02-07 20:49:10 +09:00
Kijin Sung
ba33e59897 Clean up code concerning multilang document support 2022-02-07 02:22:59 +09:00
Kijin Sung
a30647d988 Fix #1853 move non-BMP character encoding before multilang juggling 2022-02-07 02:15:50 +09:00
Kijin Sung
df1438ea04 Move XSS filtering before multilang juggling 2022-02-07 02:13:59 +09:00
Kijin Sung
5a95f0c3f3 Fix #1853 encode non-BMP characters in multilang document title and content 2022-02-07 02:10:21 +09:00
Kijin Sung
23f7568e74 Separate device-related actions to own class; add procMemberUnregisterDevice 2022-02-06 22:29:14 +09:00
Kijin Sung
0b05404f23 Use DB result helper class instead of plain BaseObject 2022-02-06 21:48:53 +09:00
Kijin Sung
c04fa73156 Fix #1873 support mobile header/footer text in default mobile board skins 2022-02-06 21:40:18 +09:00
Kijin Sung
7a838f7588 Fix #1843 add extra data to push messages 2022-02-04 22:51:04 +09:00