Commit graph

265 commits

Author SHA1 Message Date
Kijin Sung
6c113c22ed Fix unnecessary assignment by reference, which causes E_NOTICE 2024-01-04 10:25:25 +09:00
Kijin Sung
9aaf785309 Fix partial search result in admin document list and member document list 2023-12-30 20:56:24 +09:00
Kijin Sung
c2311f88be Fix #2217 call getDocumentList (after) trigger even if there are no results 2023-11-28 00:06:21 +09:00
Kijin Sung
7160b1aa58 Fix array to string conversion when other boards are included 2023-11-08 23:30:00 +09:00
Kijin Sung
433103bf92 Also apply #2192 fix to document and comment modules; defend null 2023-10-03 14:32:15 +09:00
Kijin Sung
7cac909435 Fix unnecessary semicolon 2023-09-25 22:40:33 +09:00
Kijin Sung
8b9b00652c Fix #2057 add option to change or disable search division count 2023-09-24 21:50:53 +09:00
Kijin Sung
ec674dc25f Fix double encoding of special characters in document tags 2023-09-12 22:52:26 +09:00
Kijin Sung
34f05b08de Use Rhymix action, not standalone .xml.php file, to load document category info 2023-08-07 00:35:13 +09:00
Kijin Sung
bf8591a9d2 #2138 보완 2023-06-29 01:49:49 +09:00
dewekk
d0dc77704d 특정 환경에서 태그 및 댓글 검색 시 오류 수정
- DB sql_mode 설정된 특정 환경
- SQLSTATE[HY000]: General error: 3065 Expression #1 of ORDER BY clause is not in SELECT list, references column '#.documents.list_order' which is not in SELECT list; this is incompatible with DISTINCT
2023-06-28 11:58:47 +09:00
Kijin Sung
87f798f94f Support page = 0 and offset > 0 in getDocumentList() to avoid unnecessary count query 2023-06-19 02:15:35 +09:00
Kijin Sung
c5267b42fd Remove trailing whitespace 2023-01-30 21:37:41 +09:00
Kijin Sung
651238916b Fix deprecation warnings in PHP 8.2 2023-01-17 00:15:12 +09:00
Kijin Sung
b6d78becc9 Fix deprecation warnings in PHP 8.2 2023-01-16 22:21:57 +09:00
Kijin Sung
bc3502988e Fix incorrectly capitalized class names in document and comment modules 2022-12-27 23:09:25 +09:00
Kijin Sung
221fa3daf8 Fix #2024 missing status list check in getNoticeList() 2022-11-28 01:11:20 +09:00
Kijin Sung
c95df80624 Fix missing mid in document print link 2022-08-16 09:01:01 +09:00
BJRambo
98d7f8400b 03aef25eda 보완 2021-07-15 18:26:53 +09:00
BJRambo
03aef25eda Fix warning error in PHP8.0. Set to return output data in notice list. 2021-07-15 17:18:29 +09:00
Kijin Sung
7dd9330b1e Add DocumentController::updateDocumentExtraVars()
- 특정 확장변수의 값을 쉽게 업데이트할 수 있는 메소드 제공
- 확장변수 추가 또는 변경 메소드 호출시 var_idx 또는 eid 중 하나만 전달해도 되도록 개선
2021-06-21 21:16:07 +09:00
Kijin Sung
621e246530 Hide unnecessary status names from board config 2021-05-17 20:14:47 +09:00
Kijin Sung
7df902a282 Add mid to declare popup URL 2021-02-11 20:22:16 +09:00
Kijin Sung
2270cf2729 Fix #1593 always include ORDER BY column in the list of columns to select 2021-01-31 21:57:59 +09:00
Kijin Sung
2ac747bf70 Fix #1592 include extra_sort.value in column list 2021-01-31 17:32:36 +09:00
Kijin Sung
2d7a4069b0 Fix warning in PHP 8.0 2021-01-31 01:44:57 +09:00
Kijin Sung
88907fa9df Fix #1505 duration limit to combined boards
- 통합게시판 글을 모을 기간을 설정할 수 있도록 함
- 통합게시판 소속이 아니거나 기간을 벗어나는 글 발견시 실제 게시판 주소로 redirect
2021-01-08 20:03:33 +09:00
Kijin Sung
4dcdb9e4bd Fix various warnings in PHP 8.0 2021-01-08 00:27:00 +09:00
BJRambo
df08a976fc Change obj to args variable for notice query 2020-12-24 19:10:50 +09:00
BJRambo
dab51ba48e Add to trigger for notice list 2020-12-24 18:43:15 +09:00
Kijin Sung
9732290515 Fix warnings in PHP 8.0 2020-12-22 22:37:20 +09:00
Kijin Sung
b0f66a36c5 Convert all instances of _XE_PATH_, __XE_VERSION__, etc. to Rhymix constants
_XE_PATH_ -> RX_BASEDIR
__XE_VERSION__ -> RX_VERSION
2020-12-18 15:21:23 +09:00
Kijin Sung
2a5d99b2df Fix #1487 incorrect search parameter when member_srl is 0 2020-12-15 18:17:43 +09:00
Kijin Sung
49923844b2 Various fixes to remove warnings in PHP 8.0 2020-12-15 00:18:42 +09:00
Kijin Sung
b354d8af49 Revert 61f6456b and add a warning instead 2020-10-30 15:57:18 +09:00
Kijin Sung
61f6456b6c Remove support for $is_admin in getDocument(), getDocuments(), getComment()
단순히 문서나 댓글을 불러오는 동작에서는 $is_admin 변수를 무시하도록 합니다.
서드파티 자료에서 사용할 경우 해당 문서나 댓글에 관리자 권한이 부여되어 버려서
보안취약점이 발생할 수 있기 때문입니다.

실제로 많은 서드파티 자료들이 이 변수가 왜 필요한지, 어떤 기능을 하는지
이해하지 못하는 상태로 무작정 복붙하여 사용하고 있습니다.
이러한 서드파티 자료에서 이 패치로 인해 오작동이 발생할 경우에는
그 때 가서 적절한 조치를 취하도록 하겠습니다.

getDocumentListByMemberSrl(), getCommentListByMemberSrl(), getCommentList() 등
일부 메소드에서는 이미 $is_admin 변수를 무시하도록 되어 있습니다.
2020-10-28 00:30:39 +09:00
Kijin Sung
5c99a23e68 Remove unnecessary check using undeclared variable $is_admin 2020-10-28 00:25:35 +09:00
Kijin Sung
4102c4bda2 Use 'search' operation to improve search accuracy 2020-10-01 16:51:21 +09:00
Kijin Sung
177a6c6b7d Merge branch 'develop' into next 2020-09-29 00:23:30 +09:00
Kijin Sung
b68d571a19 Fix #1414 incorrect behavior when member_srl is negative 2020-09-28 01:21:41 +09:00
Kijin Sung
c90d529c74 Change method calls to static in many core modules 2020-05-24 20:43:52 +09:00
Kijin Sung
145ce98268 Convert most methods in DocumentModel to static 2020-05-23 14:13:35 +09:00
Kijin Sung
3430e21be4 Fix unnecessary query when there are no polls 2020-05-18 19:12:06 +09:00
BJRambo
2b6d6b9925 Fix #1290 함수명을 일괄성있게 고침 2020-05-15 16:06:01 +09:00
BJRambo
7b02e8c080 ->getVoted 를 로컬변수로 만들어 불피요한 동작하지 않도록 개선 2019-08-09 18:14:22 +09:00
BJRambo
ff9c21d04f 팝업 메뉴에 추천, 비추천, 신고 취소 기능 작동하도록 추가. 2019-08-08 17:57:20 +09:00
Kijin Sung
6a9a884680 Fix XEVE-18-006 2018-12-18 15:50:45 +09:00
Kijin Sung
7bdcaba8ce Fix XSS in documentModel->getExtraVarsHTML()
16e8158
2018-10-08 17:46:47 +09:00
Kijin Sung
10c8d11785 Add FeatureDisabled and SecurityViolation exception classes 2018-09-06 10:00:47 +09:00
Kijin Sung
ad00ac800b Update document, comment, file modules to throw exceptions 2018-09-05 23:55:50 +09:00