Commit graph

18191 commits

Author SHA1 Message Date
Kijin Sung
bc448af4fd Fix #1636 replace user lang in board list options 2021-02-23 21:13:52 +09:00
Kijin Sung
459fe2d959 Fix #1630 short URL for file download conflicts with other nginx directives
다운로드 짧은주소는 /files/download/123/456/filename.jpg 와 같은 형태를 띠므로
nginx에서 특정 확장자에 캐싱 헤더 추가 등의 설정을 걸어놓은 경우
해당 설정이 짧은주소보다 먼저 적용되어 짧은주소에서 404 오류가 나는 문제 해결.
2021-02-23 20:40:00 +09:00
Kijin Sung
d3e390e3fe Prepare for downgrade from future version where domain_srl may be duplicate 2021-02-23 17:00:21 +09:00
Kijin Sung
e423cba24d Use Origin header before Referer to check CSRF
OWASP에서는 Referer 헤더보다 Origin 헤더를 먼저 체크하는 것을 권장합니다.
Referer가 비어 있는 경우에도 Origin 헤더에는 유용한 정보가 들어 있을 수 있기 때문입니다.

https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
2021-02-23 16:51:46 +09:00
Kijin Sung
6a568e8e79 Fix #1635 uninitialized variables in procLayoutAdminCopyLayout() 2021-02-23 15:37:52 +09:00
Kijin Sung
d0916abf7f Fix unnecessary cast to array after executeQuery() 2021-02-23 15:33:56 +09:00
Kijin Sung
80afa6720c
Merge pull request #1624 from shydah/pr/manage-document-popup
Resolve #1595 - 게시물 관리 사용 시 게시판이 기본 선택되도록 개선
2021-02-22 22:32:58 +09:00
Kijin Sung
e8c5ee02d2 Fix error in PHP 8.0 if $INPUT_ERROR has more than one dimension 2021-02-22 22:32:36 +09:00
Kijin Sung
b2af6eeed7 #1624 보완 2021-02-22 22:25:19 +09:00
Kijin Sung
4fe083b3c7 Fix #1625 failure to preserve comment with children when parent is moved to trash 2021-02-22 22:00:41 +09:00
Kijin Sung
0188bb817b Fix #1629 error when more than one menu is named '__ADMINMENU_V17__' 2021-02-22 21:27:20 +09:00
Kijin Sung
9412cc4a22 Fix #1628 error in PHP 8.0 in editor component setup screen 2021-02-22 21:11:39 +09:00
Kijin Sung
82398be24a Fix #1633 mobile list_count and page_count not being recognized 2021-02-22 21:06:52 +09:00
Kijin Sung
73c35e2f31 Call Debug::isEnabledForCurrentUser() in Context::init() after session start 2021-02-22 21:03:51 +09:00
Kijin Sung
7e30c7b02e Fix #1626 incorrect relative URL in advanced mailer module 2021-02-19 01:07:44 +09:00
Kijin Sung
05cef078f2 Fix #1627 suspected errors in PHP 8.0 2021-02-19 01:05:28 +09:00
Chanyoung Oh
7d22aad8d1 Remove duplicate declared function
* Remove duplicate `insertSelectedModule` function declaration
2021-02-18 11:14:38 +09:00
BJRambo
bc4abef975 레이아웃 메뉴 설정 항목의 초기화를 반복문 밖에서 하도록 고침 2021-02-18 01:25:55 +09:00
BJRambo
a6e52f9f4f b0a72bb222 에서 잘못 선언한 변수들 고침 2021-02-18 00:37:40 +09:00
BJRambo
b0a72bb222 #1627 레이아웃 버전이 0.1 일경우 PHP8.0에서 발생하는 오류 고침 2021-02-17 23:59:18 +09:00
Chanyoung Oh
b483992c83 Fix bug with non-existent mid
* Use is_null instead of is_bool to check module
2021-02-16 14:33:10 +00:00
Chanyoung Oh
400bbeeb6a Update skins to use mid instead of module_srl
* Update XEDITION, XE Default skin to use mid instead of module_srl
when opening document management popup
2021-02-16 14:11:25 +00:00
Chanyoung Oh
6c51f3234e Set target module based on article list when managing documents 2021-02-15 14:59:41 +00:00
Chanyoung Oh
a75f0b1c3b Update skins to provide module_srl - Issue #1595
* Update default skins (XEDITION, default) to provide `module_srl` to
document management popup
2021-02-13 13:49:07 +00:00
Chanyoung Oh
4fac931f28 Initialize category list if module_srl is provied - Issue #1595 2021-02-13 13:40:22 +00:00
Kijin Sung
acda40eba9 Fix #1616 error in PHP 8.0 2021-02-12 16:30:46 +09:00
Kijin Sung
1a1af16a3a Fix #1615 remove unnessary $friend_count variable 2021-02-11 21:42:42 +09:00
Kijin Sung
00519cce5d Fix #1612 error in PHP 8.0 2021-02-11 20:25:05 +09:00
Kijin Sung
7df902a282 Add mid to declare popup URL 2021-02-11 20:22:16 +09:00
Kijin Sung
68829a3427 Fix #1614 return numerical array by default in getModuleSrlByMid() 2021-02-11 20:18:26 +09:00
Kijin Sung
906b20e17e Load updated lang code cache immediately after calling makeCacheDefinedLangCode() 2021-02-11 20:14:57 +09:00
Kijin Sung
fb374a36ca Fix double escape of lang code in index module title 2021-02-11 20:03:25 +09:00
Kijin Sung
8c2bfd8297 Fix #1611 query error in declared document/comment list page 2021-02-10 15:57:13 +09:00
Kijin Sung
6b956d2e5b Allow admin to report (declare) even if it's the same IP 2021-02-10 15:56:47 +09:00
Kijin Sung
e8e6546067 Fix #1608 leave copy of notice in board manager's message box 2021-02-10 00:49:52 +09:00
Kijin Sung
f4758b7570 Fix #1610 memory leak in initial debug status check 2021-02-10 00:27:04 +09:00
Kijin Sung
9c77f9593d Fix warning in PHP 8.0 2021-02-09 23:53:00 +09:00
Kijin Sung
9b714acb55 Show memory usage in debug panel 2021-02-09 23:52:35 +09:00
Kijin Sung
08f8e0ccd4 Increase codeception timeout to 180s 2021-02-09 22:11:09 +09:00
Kijin Sung
958c7a7ce0 Don't join document_extra_vars again if not sorting by extra_vars 2021-02-09 22:00:40 +09:00
Kijin Sung
6b7486e74f Add 'ifvar' attribute to most query elements
XML 쿼리에서 'ifvar' 속성을 사용하여, 특정 변수가 있을 때만 유효한 테이블이나
컬럼, 인덱스 힌트 등을 지정할 수 있도록 합니다. 어떤 변수를 넣는지에 따라
<condition> 뿐 아니라 <table>, <column>, <index_hint? 등의 적용 여부도
XML 쿼리 수정 없이 자유롭게 컨트롤할 수 있게 됩니다.
2021-02-09 21:58:07 +09:00
Kijin Sung
1289776c97 Remove debug data from previous request (causes memory overage in PHP 8.0) 2021-02-09 19:33:47 +09:00
Kijin Sung
ae163b95d4 Fix error in video thumbnail command (#1552 regression) 2021-02-09 19:29:15 +09:00
Kijin Sung
c6f728cec6 Fix warnings in PHP 8.0 related to editor components 2021-02-09 01:21:53 +09:00
Kijin Sung
c5ceafc841 Fix debug disabled if first error or warning occurs before session start 2021-02-09 01:21:33 +09:00
Kijin Sung
b2933b7ae2 Fix #1605 incorrect lang reference in spamfilter module 2021-02-08 21:42:32 +09:00
Kijin Sung
0986ddf87d Fix #1607 denied/limited reason not being saved as extra vars 2021-02-08 21:40:39 +09:00
Kijin Sung
588520ff4b Fix warnings in PHP 8.0 2021-02-08 21:27:06 +09:00
Kijin Sung
686699c2ee Fix warning in PHP 8.0 2021-02-08 21:16:49 +09:00
Kijin Sung
ebe806f7a5 Fix warnings in PHP 8.0 2021-02-07 15:29:28 +09:00