Commit graph

658 commits

Author SHA1 Message Date
Kijin Sung
ec36839303 Add options in module.xml to disable session and Cache-Control headers for individual actions 2023-08-30 01:45:37 +09:00
Kijin Sung
3722c49750 Send cache control headers if session.cache_limiter is turned off in php.ini 2023-08-30 00:46:23 +09:00
Kijin Sung
295ac7e61e Remove redundant Cache-Control directives 2023-08-30 00:28:29 +09:00
Kijin Sung
06e736178b Support sending all _rx_* POST fields as HTTP headers instead
하위호환성, 부가기능 등을 위한 _rx_* POST 필드가 점점 많아짐에 따라
모두 헤더로 대체할 수 있도록 지원하고, 앞으로 점점 헤더로 바꿀 예정

CSRF 토큰은 예전부터 X-CSRF-Token 헤더를 지원했음
2023-08-27 23:32:31 +09:00
Kijin Sung
78ba527c78 Fix warnings in PHP 8.x 2023-07-20 21:38:16 +09:00
Kijin Sung
fa198a2984 Add option to fix double-escaping of user lang code 2023-06-26 22:25:08 +09:00
Kijin Sung
9fbcda3e79 Fix deprecation warning in PHP 8.x 2023-06-26 14:46:19 +09:00
Kijin Sung
ff647d6701 Fix #2123 support nested arrays when getUrl() is used with array syntax 2023-06-20 21:12:56 +09:00
Kijin Sung
e02c5a04d3 Fix Context::getRequestUri() returning null when used in CLI context 2023-06-16 15:35:18 +09:00
Kijin Sung
180ed429cf Fix deprecation error in PHP 8.x when path or domain is null in setcookie() 2023-06-16 15:34:48 +09:00
Kijin Sung
4c9488e94d Minor adjustments to convertEncoding() to remove errors
https://xetown.com/questions/1759076
2023-04-30 23:12:21 +09:00
Kijin Sung
9815102b38 Mark Context::convertEncodingStr() and related methods as deprecated
https://xetown.com/questions/1759076
2023-04-30 22:58:45 +09:00
Kijin Sung
dfa1e93c79 Remove unnecessary header and footer from class files
- 아래에 이미 author 언급이 있으므로 중복되는 저작권 표기는 제거
- 클래스 하단에 불필요한 end of file 표시 제거 (파일 하나에 클래스 하나씩이므로
  파일이 중간에 끊겼다면 클래스가 닫히지 않아 쉽게 알 수 있음)
2023-01-30 23:52:23 +09:00
Kijin Sung
c881e73c1d Remove trailing whitespace in legacy class files 2023-01-17 21:07:55 +09:00
Kijin Sung
c07efe7905 Fix deprecation notices in PHP 8.2 #2064 2023-01-16 21:24:59 +09:00
Kijin Sung
9e9adcdb43 Remove support for targetie attribute on assets 2022-12-28 00:35:57 +09:00
Kijin Sung
60fd7d7cf2 Move cacert.pem loader to autoload.php 2022-12-26 02:36:44 +09:00
Kijin Sung
a07307d343 Change autoloader to support case-sensitive class files + fix lang path for namespaced modules 2022-12-26 02:30:59 +09:00
Kijin Sung
426a971c6c Remove $relax_key_checks because we are no longer using Flash uploader 2022-12-26 01:08:04 +09:00
Kijin Sung
07c809a9ef Use compoer/ca-bundle instead of using our own cacert.pem 2022-12-26 00:57:50 +09:00
Kijin Sung
dca06a778d Support {$lang_type} and {$device_type} variables in plugin.load 2022-10-30 17:08:01 +09:00
Kijin Sung
fd421c86fc Add more error codes in critical code paths in Context and ModuleHandler 2022-10-13 00:34:23 +09:00
Kijin Sung
af92484221 Revert "Fix PHP 8.x error when getUrl() is called with weird parameters"
This reverts commit 3adcbb3528.
2022-09-13 19:49:52 +09:00
Kijin Sung
3adcbb3528 Fix PHP 8.x error when getUrl() is called with weird parameters 2022-09-05 16:28:33 +09:00
Kijin Sung
e33a071f3e Add authoritative list of default plugins #1967 2022-08-06 13:30:48 +09:00
Kijin Sung
1e27bae404 Fix not recognizing CSRF token submitted as part of JSON body 2022-07-25 14:05:01 +09:00
Kijin Sung
59a1215c87 Fix #1934 add 'default' option to domain timezone 2022-07-03 01:03:00 +09:00
Kijin Sung
0f3f3a6bfa Prevent deprecation warning about dynamic properties in PHP 8.2 2022-06-27 16:18:10 +09:00
Kijin Sung
5e2d517296 Fix incorrect parsing of JSON request body containing multiple levels of objects 2022-03-28 15:33:21 +09:00
Kijin Sung
70cfe24cdd Use $this->user instead of $logged_info more consistently #1866 2022-02-04 01:19:30 +09:00
Kijin Sung
263dc79090 Use https in AJAX URL if site is accessed over https
https를 사용하지 않는 것으로 설정되어 있더라도 실제로 https로 접속했다면
https를 사용하는 것으로 간주하고, AJAX URL을 https로 생성하도록 합니다.

기대되는 효과:

1. 설정이 잘못되어서 로그인이 되지 않거나 AJAX 요청에 실패할 가능성 제거
2. https 접속이 가능한 사이트라면 최대한 https를 사용하도록 유도
2021-09-13 01:10:36 +09:00
Kijin Sung
9b085df3b4 Fix incorrect rewrite level after module=admin (#1643 regression)
https://xetown.com/questions/1600064
2021-08-09 10:34:13 +09:00
Kijin Sung
865e83a46a Fix #1722 incorrect language selection when domain setting conflicts with system setting 2021-06-19 21:55:14 +09:00
Kijin Sung
bd075ee409 Add getBodyClassList() and removeBodyClass() methods to Context
https://xetown.com/questions/1569477
2021-05-14 22:40:38 +09:00
conory
80e0498425 관리자에게만 디버그 정보 표시 설정시 아예 표시되지 않는 문제 수정
isEnabledForCurrentUser() 에서 Context::get('logged_info') 사용되기에 self::set('logged_info', ..) 이후에서 실행되어야함
2021-04-09 01:38:33 +09:00
Kijin Sung
2ffc19cca3 Fix #1643 don't use full short URL for admin pages 2021-03-17 23:32:17 +09:00
Kijin Sung
ae60728efc Don't start session in CLI 2021-03-07 18:22:01 +09:00
Kijin Sung
fea902c946 Remove unnecessary pass-by-reference 2021-03-07 18:20:00 +09:00
Kijin Sung
c6833ba880 Remove query string from meta image path before checking 2021-03-05 14:29:40 +09:00
Kijin Sung
367e7440be Don't overwrite OpenGraph tags already set by user 2021-03-05 13:56:35 +09:00
Kijin Sung
73c35e2f31 Call Debug::isEnabledForCurrentUser() in Context::init() after session start 2021-02-22 21:03:51 +09:00
Kijin Sung
906b20e17e Load updated lang code cache immediately after calling makeCacheDefinedLangCode() 2021-02-11 20:14:57 +09:00
Kijin Sung
e1f1de8e49 Fix warning in PHP 8.0 if user-agent header is missing 2021-01-28 23:14:48 +09:00
Kijin Sung
c151191b73 Fix warning in PHP 8.0 2021-01-28 22:59:14 +09:00
Kijin Sung
cc318479b4 Fix warning in Context class if lang_type cookie is not set 2021-01-28 22:52:28 +09:00
Kijin Sung
60465fb2db Fix various warnings in PHP 8.0 2021-01-28 22:32:56 +09:00
Kijin Sung
1ec6e1ec7a Change blacklist to 2-dimensional array
관리 편의를 위해 블랙리스트를 자료 종류별로 구분합니다.
단, 기존과 같이 Context::isBlacklistedPlugin()을 호출하면
자료 종류 구분 없이 블랙리스트 여부를 알려줍니다.
2021-01-24 11:39:42 +09:00
Kijin Sung
1bbd6cdb5f Force use of latest cacert.pem from Mozilla 2021-01-20 00:56:23 +09:00
Kijin Sung
d5160c28ce Pass RX_REQUEST_URL directly to the Router 2021-01-19 23:28:13 +09:00
Min-Soo Kim
899fe00dda
관리자가 모든 모듈의 다크모드 설정을 제어하도록 합니다. (#1558)
* 관리자가 다크모드 작동 여부를 선택할 수 있도록 수정
2021-01-10 22:21:13 +09:00