Andy Miller
beef4420ca
Fixes for SCSS compiler
2023-05-08 18:21:03 -06:00
Andy Miller
8fd500d381
missing Admin::$routes definition
2023-05-08 17:37:29 -06:00
Andy Miller
f32b6ff439
copyright dates
2023-01-02 11:17:40 -07:00
Andy Miller
97ab52df81
no longer reference SwiftException (deprecated)
2022-10-05 08:07:09 -06:00
Matias Griese
925dbf7cbf
Fixed disabling/enabling plugin from the list breaking the plugin configuration
2022-02-07 11:55:14 +02:00
Rotzbua
304bb9b557
Links to https, Discord ( #2212 )
...
* Change links to https
* github.com
* getgrav.org
* Change Slack to Discord
2022-02-04 09:56:22 -08:00
Matias Griese
396e32b76e
Made path handling unicode-safe, use new Utils::basename() and Utils::pathinfo() everywhere
2022-01-26 14:11:10 +02:00
Matias Griese
e84e785978
Fixed passing null to $twoFa->verifyCode() and $twoFa->verifyYubikeyOTP()
...
`
2022-01-12 10:55:41 +02:00
Andy Miller
0f05d065b0
Support for YubiKey OTP 2 factor authenticator
2022-01-11 12:00:10 -07:00
Andy Miller
0ca2d22f86
updated some copyright years
2022-01-03 09:33:16 -07:00
Matias Griese
58806748b9
Minor improvement
2021-12-08 17:38:50 +02:00
Matias Griese
6463135bf0
Fixed unescaped messages in JSON responses
2021-11-03 12:42:27 +02:00
Matias Griese
177ff7c929
Clear cache when installing plugins
2021-10-26 20:42:35 +03:00
Andy Miller
87ac8fb0cd
Use HTTP\Response and require Grav 1.7.24
2021-09-30 21:50:15 -06:00
Matias Griese
bef26581cd
New attempt to fix images in plugins/themes (fix)
2021-09-29 20:58:42 +03:00
Matias Griese
da3e501ff3
New attempt to fix images in plugins/themes
2021-09-29 20:55:24 +03:00
Matias Griese
29157a3011
Fixed images from plugins/themes disappearing when saving twice
2021-09-28 13:41:38 +03:00
Matias Griese
1091e7ab26
Fixed configuration save location to point to existing config folder [ #2176 ]
2021-09-14 17:59:12 +03:00
Matias Griese
853abfbbd3
Fixed X-Frame-Options to be DENY in all admin pages to prevent a clickjacking attack
2021-09-01 13:17:21 +03:00
Matias Griese
2546cd35e0
Make sure that login data is an array in taskLogin()
2021-08-18 13:41:04 +03:00
Matias Griese
f42e996138
Update taskGetChildTypes() to use Flex Pages (works without the plugin) [ #2087 ]
2021-06-10 11:10:06 +03:00
Matias Griese
1136a1007e
Fixed configuration not fully updating on save [ #2149 ]
2021-05-26 10:48:50 +03:00
Matias Griese
a01170576a
Updated SCSS compiler to v1.5
2021-05-18 18:32:32 +03:00
Andy Miller
1ceebec29f
improve plugin enabled logic
2021-05-05 12:53:07 -06:00
Andy Miller
3aae171297
improve activation logic
2021-05-05 12:14:04 -06:00
Matias Griese
9d21a98f61
Theme update - custom files overwritten #2135
2021-04-29 14:58:48 +03:00
Matias Griese
1b26b4ca7d
Fixed permission check for configuration save [ #2130 ]
2021-04-23 11:21:41 +03:00
Djamil Legato
438c9716cc
Better Pages default permissions
2021-04-22 11:57:40 -07:00
Matias Griese
c097eee87f
Fixed error reporting for AJAX tasks if user has no permissions
2021-04-15 10:11:04 +03:00
Matias Griese
7ed36e462e
Fixed error reporting for AJAX tasks if user has no permissions
2021-04-14 21:43:40 +03:00
Matias Griese
cde46a2eb0
Regression: Fixed broken plugin/theme installer in admin
2021-04-14 13:54:01 +03:00
Matias Griese
9383007b93
Better document admin tasks
2021-04-14 13:40:02 +03:00
Matias Griese
1acb94e857
Fixed error message when user clicks logout link after his session has been expired
2021-04-13 10:16:17 +03:00
Matias Griese
da8a7b574c
Improve ACL checks for the tasks
2021-04-12 22:06:43 +03:00
Matias Griese
9108a4a85f
Fixed broken 2FA login when site is not configured to use Flex Users [ #2109 ]
2021-04-08 10:56:18 +03:00
Matias Griese
9fca08ab43
Regression: Fixed broken 2FA form [ #2109 ]
2021-04-07 14:14:04 +03:00
Matias Griese
58e2c6cc55
Change nonce expiration message
2021-03-31 11:48:15 +03:00
Matias Griese
f36b244198
Include query param task into task checks
2021-03-26 18:15:42 +02:00
Matias Griese
aa4f80eec1
Greatly improve login related actions for Admin
...
* Better isolate admin to prevent session related vulnerabilities
* Removed support for custom login redirects for improved security
* Shorten forgot password link lifetime from 7 days to 1 hour
* Fixed login related pages being accessible from admin when user has logged in
* Fixed admin user creation and password reset allowing unsafe passwords
* Fixed missing validation when registering the first admin user
* Fixed reset password email not to have session specific token in it
2021-03-26 14:39:37 +02:00
Matias Griese
b3d66b3d3a
Rename internal save methods
2021-03-19 18:06:24 +02:00
Matias Griese
b7271bc424
Regression: Fixed enabling/disabling plugin or theme corrupting configuration
2021-02-19 22:04:04 +02:00
Matias Griese
7832d6992e
Fixed ACL for users with mixed case usernames [ #2073 ]
2021-02-18 16:22:55 +02:00
Matias Griese
64e41b034e
Fixed fatal error in admin if POST request has data in it [ #2074 ]
2021-02-18 15:33:38 +02:00
Matias Griese
a8983a003d
Fixed ACL for Configuration tabs [ #771 ]
2021-02-10 15:26:02 +02:00
Matias Griese
417d82769b
Fixed onAdminAfterAddMedia event always pointing to the home page [ #1905 ]
2021-02-10 13:08:34 +02:00
Matias Griese
725ed07ad9
Fixed onAdminAfterDelMedia event always pointing to home page [ #1905 ]
2021-02-10 12:57:43 +02:00
Matias Griese
6328489170
Provide media object and filename in onAdminAfterDelMedia event [ #1905 ]
2021-02-10 12:40:25 +02:00
Matias Griese
2223b2eb73
Fixed deleting list field options completely, didn't save changes [ #2056 ]
2021-02-08 21:30:37 +02:00
Matias Griese
ad5d3a3829
Improve flash file error detection
2021-02-08 17:25:32 +02:00
Matias Griese
905a2a299f
Fixed case-sensitive accept in filepicker field
2021-02-04 17:08:05 +02:00
