Commit Graph

593 Commits

Author SHA1 Message Date
Rotzbua
4d5eb659c0 IP pseudonymization for rate limiter (#1589)
requirement of gdpr
2019-01-14 17:55:56 -07:00
Matias Griese
9cc004f188 Fixed deleting file when using file field type [#1558] 2019-01-08 11:28:41 +02:00
Andy Miller
3feadb7bd9 Unset state from user if no super or user admin 2018-12-18 20:18:28 -07:00
Andy Miller
9ff6a88b9a Add onAdminSave() even to taskSaveAs() #1544 2018-12-13 16:20:35 -07:00
Andy Miller
f0c0af4e8a Clean user post to ensure dynamically added form fields are not saved 2018-12-13 15:46:26 -07:00
Andy Miller
d08d3dc818 Fixes #1537 2018-11-12 11:33:54 -07:00
Matias Griese
3d765e8ece Fixed Grav core update potentially spinning forever because of an error which happens after a successful upgrade 2018-11-07 19:11:36 +02:00
Andy Miller
ec4504e017 fix for #2236 + add new |nested filter 2018-10-26 12:56:07 -06:00
Andy Miller
d885da14fc Fix DirectInstall not working #1535 2018-10-24 15:49:16 -06:00
Andy Miller
5307038c98 Fix XSS checking when empty content #1533 2018-10-23 08:35:13 -06:00
Andy Miller
8f654dcacc Revert "Hotfix for admincontroller.php (#1533)" (#1536)
This reverts commit d6a36af4d5.
2018-10-23 07:19:23 -06:00
Alexis Bouhet
d6a36af4d5 Hotfix for admincontroller.php (#1533)
Now checking if 'content' is in $data. Some blueprints can have 'content' optional so not defined, which cause a crash when editing.
Checking with operator `??` and default value empty string `''`.
2018-10-23 07:17:43 -06:00
Andy Miller
a62aacd7c6 Fix for entites in path #1524 2018-10-08 12:05:19 -06:00
Andy Miller
0c7cd282ef Fix for port in backups downloads 2018-10-08 12:05:09 -06:00
Andy Miller
46106c1cae more validation for remove media 2018-10-04 16:30:07 -06:00
Matias Griese
42c8b63520 Improved file uploads 2018-10-04 15:42:59 +03:00
Timothy Cyrus
85bb59e2b6 Change usage of basename where possible (#1480)
Change usage of basename where possible (#1480)
2018-10-04 13:43:36 +03:00
Andy Miller
e00b215c1c Revert "Use new backup command"
This reverts commit 6f5187c50a.
2018-10-01 15:19:31 -06:00
Andy Miller
f497551873 XSS notifications via field which is always shown 2018-10-01 14:05:16 -06:00
Andy Miller
bfc72d2d3e refactor class name 2018-09-30 17:44:50 -06:00
Andy Miller
e0dc7de827 valid frontmatter first 2018-09-30 15:26:19 -06:00
Andy Miller
3b5d3ca99a format tidy 2018-09-30 15:25:39 -06:00
Andy Miller
ea0a5613cc XSS detection on header+content of page 2018-09-30 15:24:29 -06:00
Andy Miller
c95b814c4b Set defaults 2018-09-29 21:40:21 -06:00
Andy Miller
33c4c3a1db lang stuff 2018-09-29 21:36:53 -06:00
Andy Miller
c50a587a6a XSS filter 2018-09-29 21:18:45 -06:00
Andy Miller
6f5187c50a Use new backup command 2018-09-28 12:27:40 -06:00
Matias Griese
ec93b823ca Use Url:post() to get the $_POST variable (allows common security checks/filtering for the POST data) 2018-09-17 09:54:27 +03:00
Andy Miller
7c135b110e Fix redirect after failed login 2018-09-04 11:03:32 -06:00
Andy Miller
0962f77abd Switched to new Grav Yaml class 2018-08-22 12:45:39 -06:00
Andy Miller
9078815c87 Fix for grav#2100 - deleting @2x media files 2018-07-18 05:25:20 -06:00
Andy Miller
e87217a242 Add some missing authorizeTask() checks #1483 2018-07-11 15:30:11 -06:00
Andy Miller
dc9b6daaa3 Fix for modular markdown preview admin#1066 2018-06-20 23:37:58 +01:00
Matias Griese
b77d0e6053 Fixed broken folder attribute on filepicker [#1465] 2018-06-14 16:47:06 +03:00
Djamil Legato
858badaf35 Force a null order when empty in the post request 2018-06-01 10:03:40 -07:00
Matias Griese
96772946e3 Pass media order when calling task:listmedia 2018-05-31 20:00:43 +03:00
Matias Griese
c9e9fd4a0c Fixed Undefined property: stdClass::$image in 1.8.2 [#1454] 2018-05-31 18:41:18 +03:00
Djamil Legato
b9e00b7720 Fixed issue with filepicker field where images wouldn't properly merge with the current value if in a page header 2018-05-23 10:24:22 -07:00
Matias Griese
2352ba6c7c Fixed media delete for streams 2018-05-23 13:01:58 +03:00
Matias Griese
d07d07e30f Fix admin login redirects for multisite setups 2018-05-23 09:27:26 +03:00
Matias Griese
89c8929bf8 Merge remote-tracking branch 'origin/develop' into develop 2018-05-22 10:58:42 +03:00
Matias Griese
08075979c1 Fixed file uploads to media streams 2018-05-22 10:58:35 +03:00
Andy Miller
87febd7c84 Don't allow saving of a user with no local account file 2018-05-16 16:33:20 -06:00
Matias Griese
ee8e4886ad Added custom object support for filepicker field 2018-05-16 21:50:09 +03:00
Andy Miller
55a56ff344 Addressed GPDR rules for popularity #1436 2018-05-15 11:47:46 -06:00
Matias Griese
41565f83d9 Admin login now uses login plugin events (with option admin: true) 2018-05-10 20:04:14 +03:00
Matias Griese
e59bf00638 Use default 2FA secret length 2018-05-10 12:13:04 +03:00
Matias Griese
6d3e16dc07 Fix session secret for 2FA 2018-05-10 11:51:27 +03:00
Matias Griese
b7da3e98ac Code cleanup 2018-05-10 11:09:13 +03:00
Matias Griese
59effd57af Moved 2FA authentication to login plugin 2018-05-10 10:34:56 +03:00