summaryrefslogtreecommitdiff
path: root/actions
AgeCommit message (Collapse)Author
2010-02-01Improve name validation checks on local File referencesBrion Vibber
2010-02-01fix local file include vulnerability in doc.phpEvan Prodromou
Conflicts: actions/doc.php
2010-01-31Add a robots.txt URL to the site rootEvan Prodromou
Adds a robots.txt file to the site root. Defaults defined by 'robotstxt' section of config. New events StartRobotsTxt and EndRobotsTxt to let plugins add information. Probably not useful if path is not /, but won't hurt anything, either.
2010-01-30add lat, lon, location and remove closing tag from geocode.phpEvan Prodromou
2010-01-30Use passed-in lat long in geocode.phpEvan Prodromou
Don't rewrite the lat-long for a location in geocode.php.
2010-01-28Move sessions settings to its own panelZach Copley
2010-01-28Removed avatar from repeat of username (matches noticelist)Sarven Capadisli
2010-01-28Numbered format specifiersZach Copley
2010-01-28These API methods should return true for ->isReadOnly($args)!Zach Copley
2010-01-27Optionally set a separate Javascript server and pathEvan Prodromou
We have about 10-12 JavaScript pages per Web page. They usually are based on the same server as the Web pages, but since they're static files, it makes sense to offload them to a lite server that handles static files well. This commit lets you set a separate Javascript server and path for the default Javascript code in StatusNet. Squashed commit of the following: commit 139d1622fdafe5ad00c820224416d9021efc3234 Author: Evan Prodromou <evan@status.net> Date: Wed Jan 27 11:30:24 2010 -0500 modules that call htmloutputter::script() don't prescribe js/ path commit c6ca3174af73efed55eaed5ff1e2a3bdc77d2d87 Author: Evan Prodromou <evan@status.net> Date: Wed Jan 27 11:28:07 2010 -0500 configurable server and path for javascript files
2010-01-27s/LOG_WARN/LOG_WARNING/Zach Copley
2010-01-27- Check for read-only vs. read-write access to protected API resources (OAuth)Zach Copley
- Some cleanup
2010-01-27Fix casing for HMAC-SHA1.Siebrand Mazeland
2010-01-27Fix inconsistent title case in page titleSiebrand Mazeland
2010-01-26New access admin panel for site registration settingsZach Copley
2010-01-26- Remove redudant/unused 'server' setting from site admin panelZach Copley
- Move 'fancy urls' checkbox from site admin panel to paths admin panel
2010-01-25Merge branch 'master' into testingEvan Prodromou
Conflicts: lib/queuemanager.php
2010-01-25Offload inbox updates to a queue handler to speed up posting onlineEvan Prodromou
Moved much of the writing that happens when posting a notice to a new queuehandler, distribqueuehandler. This updates tags, groups, replies and inboxes at queue time (or at Web time, if queues are disabled). To make this work well, I had to break up the monolithic Notice::blowCaches() and make cache blowing happen closer to where data is updated. Squashed commit of the following: commit 5257626c62750ac4ac1db0ce2b71410c5711cfa3 Author: Evan Prodromou <evan@status.net> Date: Mon Jan 25 14:56:41 2010 -0500 slightly better handling of blowing tag memory cache commit 8a22a3cdf6ec28685da129a0313e7b2a0837c9ef Author: Evan Prodromou <evan@status.net> Date: Mon Jan 25 01:42:56 2010 -0500 change 'distribute' to 'distrib' so not too long for dbqueue commit 7a063315b0f7fad27cb6fbd2bdd74e253af83e4f Author: Evan Prodromou <evan@status.net> Date: Mon Jan 25 01:39:15 2010 -0500 change handle_notice() to handle() in distributqueuehandler commit 1a39ccd28b9994137d7bfd21bb4f230546938e77 Author: Evan Prodromou <evan@status.net> Date: Mon Jan 25 16:05:25 2010 -0500 error with queuemanager commit e6b3bb93f305cfd2de71a6340b8aa6fb890049b7 Author: Evan Prodromou <evan@status.net> Date: Mon Jan 25 01:11:34 2010 -0500 Blow memcache at different point rather than one big function for Notice class commit 94d557cdc016187d1d0647ae1794cd94d6fb8ac8 Author: Evan Prodromou <evan@status.net> Date: Mon Jan 25 00:48:44 2010 -0500 Blow memcache at different point rather than one big function for Notice class commit 1c781dd08c88a35dafc5c01230b4872fd6b95182 Author: Evan Prodromou <evan@status.net> Date: Wed Jan 20 08:54:18 2010 -0500 move broadcasting and distributing to new queuehandler commit da3e46d26b84e4f028f34a13fd2ee373e4c1b954 Author: Evan Prodromou <evan@status.net> Date: Wed Jan 20 08:53:12 2010 -0500 Move distribution of notices to new distribute queue handler
2010-01-24fix interpolation of positional arguments to sprintf in tag actionEvan Prodromou
2010-01-24fix interpolation of positional arguments to sprintf in show groupEvan Prodromou
2010-01-24fix interpolation of positional arguments to sprintf in show favoritesEvan Prodromou
2010-01-24fix interpolation of positional arguments to sprintf in usergroupsEvan Prodromou
2010-01-24fix interpolation of positional arguments to sprintf in inboxEvan Prodromou
2010-01-24fix interpolation of positional arguments to sprintf in outboxEvan Prodromou
2010-01-24fix interpolation for positional arguments in repliesEvan Prodromou
2010-01-24fix interpolation for positional arguments in showstreamEvan Prodromou
2010-01-25- Had to remove checking read vs. read-write in OAuth authenticated methodsZach Copley
- Will now pick up source attr from OAuth app
2010-01-24Revoke access token UIZach Copley
2010-01-24Changed legend text from Login to Account because it is not reallySarven Capadisli
logging iny
2010-01-24Updated apioauthauthorize markup and stylesSarven Capadisli
2010-01-24Ensure only the application's owner can edit itZach Copley
2010-01-24Fix user countZach Copley
2010-01-24Make sure applications are really looked up by consumer keyZach Copley
2010-01-24Rework application registration workflow to be more privateZach Copley
2010-01-24Fix icon upload on new appsZach Copley
2010-01-24OAuth 1.0 working nowZach Copley
2010-01-24Can now edit/change application iconZach Copley
2010-01-24Added anchors to application source and homepageSarven Capadisli
2010-01-24Updated markup for application details page. Similar to user/groupSarven Capadisli
profile page.
2010-01-24Updated markup for application detailsSarven Capadisli
2010-01-24Updated markup for application registration and view linksSarven Capadisli
2010-01-24Better detial in connected OAuth applications listZach Copley
2010-01-24Issue a warning when someone tries to exchange an unauthorized orZach Copley
otherwise bad req token for an access token.
2010-01-24Exchanging authorized request tokens for access tokens workingZach Copley
2010-01-24Associate request tokens with OAuth apps and app usersZach Copley
2010-01-24Workflow for request tokens and authorizing request tokensZach Copley
2010-01-24Action for issuing a request tokenZach Copley
2010-01-24Stubs for API OAuth token exchange stuffZach Copley
2010-01-24Add icons/icon upload to Oauth appsZach Copley
2010-01-24Added session token checking.Zach Copley