summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)Author
2010-10-14correctly use sslserver if it is setEvan Prodromou
2010-10-14use HTTPS for scripts and stylesheets if the current page is HTTPSEvan Prodromou
2010-10-14show HTTPS urls for JavaScript if HTTPS used for pageEvan Prodromou
2010-10-14consolidate some theme path code between ssl and non-sslEvan Prodromou
2010-10-14use HTTPS for favicon.ico if page is HTTPSEvan Prodromou
2010-10-14try to show HTTPS-encrypted theme files for HTTPS-encrypted pagesEvan Prodromou
2010-10-14try and show an SSL image for the creative commons imageEvan Prodromou
2010-10-14add static method StatusNet::isHTTPS()Evan Prodromou
2010-10-13Merge remote branch 'gitorious/0.9.x' into 0.9.xEvan Prodromou
2010-10-13Clean up remote avatar temporary files if we fail before saving them into ↵Brion Vibber
avatars directory (OMB core, OStatus, WikiHowProfile, YammerImport)
2010-10-12Merge branch 'oauth-1.0a' into 0.9.xZach Copley
2010-10-12Spelling - OAuth not OathZach Copley
2010-10-12Add a basic group deletion for moderator users.Brion Vibber
2010-10-12Followup to IIS installer tweaks in [9bb48c36]:Brion Vibber
* skip 0-byte config files when initializing, go ahead and redirect to installer if no non-0-byte files * tweak warning on installer.php to let you know if you have a 0-byte config.php that's not writable, as opposed to generally already having a config.php with data in it
2010-10-12Merge remote branch 'gitorious/0.9.x' into 0.9.xEvan Prodromou
2010-10-07Update ApiOauthAccessTokenAction to OAuth 1.0aZach Copley
2010-10-07Workaround for regression in input validation due to more PCRE oddities. ↵Brion Vibber
Recommend redoing common_validate_utf8() using something more reliable, perhaps. :P
2010-10-07Use 7 digits for oob OAuth pin instead of 6Zach Copley
2010-10-07Events for showing the notice formEvan Prodromou
2010-10-06- Update ApiOauthAuthorizeAction to 1.0aZach Copley
- Fix enumerable bugs - New page for displaying 1.0a verifier (still needs work)
2010-10-06- New base InfoAction for dialog box like msgsZach Copley
- Fix titles on error pages
2010-10-06Update ApiOauthRequestTokenAction to support OAuth 1.0aZach Copley
2010-10-06Override new_request_token() to store OAuth 1.0a verified callback URLZach Copley
2010-10-06Stab that 'p' parameter!Zach Copley
2010-10-06Add plain text error format to clientError()Zach Copley
2010-10-06Fix bad referenceZach Copley
2010-10-06Strip out the special 'p' paramter added by index.php fromZach Copley
$_SERVER['QUERY_STRING'] before doing OAuth requests. Required by the latest version of the OAuth lib.
2010-10-06Basic validation of UTF-8 input via GET/POST vars: invalid UTF-8 sequences ↵Brion Vibber
will cause the string to drop. Not necessarily super-thorough; should be improved in future to drop individual bad sequences, do normalization of combining forms, etc. General input validation (for ints, types of strings, etc) still would be good to have!
2010-10-04Urgh... fix for fix for horrific $ escaping problems (some awful mix of ↵Brion Vibber
single and double-quoted strings in the terror that is mail.php)
2010-10-04Fix unescaped dollar signs in double-quoted strings due to localization ↵Brion Vibber
updates (%1$s etc)
2010-09-30Add a $config['plugins']['locale_path'] which can be set to override the ↵Brion Vibber
individual plugins' locale subdirectories. This will apply to *ALL* plugins in *ALL* languages, so should probably only be used when doing site customization... You'd probably do: $config['site']['locale_path'] = '/srv/awesome/data/locale'; $config['plugins']['locale_path'] = '/srv/awesome/data/locale'; with a structure like: srv/ awesome/ data/ locale/ en/ LC_MESSAGES/ statusnet.po OpenID.po AnonymousFave.po etc, all alongside each other. You could separate plugins from the core if you like. Where locale files have not already been generated, you can build one for a plugin like so: php scripts/update_po_templates.php --plugin=MyPlugin and pull out the template file: plugins/MyPlugin/locale/MyPlugin.pot Edit that (make sure you at least set the CHARSET, probably to UTF-8) and save your customized .po files into the structure as above, and use msgfmt to generate .mo files for final output.
2010-09-30ForceGroup plugin: optionally force new users to join a particular group or ↵Brion Vibber
set of groups on registration; and/or to force posts by members of particular groups to be posted into those groups even if not explicitly mentioned. The posting feature requires a couple quick hook additions in core.
2010-09-30Merge branch 'anon-fave-plugin'Zach Copley
2010-09-30Merge branch 'master' of gitorious.org:statusnet/mainline into feedfixBrion Vibber
2010-09-30Always specify UTF-8 targt charset for html_entity_decode(); default is ↵Brion Vibber
8-bit ISO-8859-1 which causes things to break when we later pass them through things that expect to work with UTF-8. For instance, running through preg_replace() with the /u option results in NULL, leading to problems with OStatus and SubMirror generating their plaintext versions and doing length-cropping.
2010-09-29Add Start/EndFavorNoticeForm and Start/EndDisFavorNoticeForm hooksZach Copley
2010-09-29Add Start/EndShowNoticeInfo eventsZach Copley
2010-09-29New eventsi: Start/EndShowNoticeOptions and Start/EndShowFaveFormZach Copley
2010-09-29add hooks to the feedlist widget to give fine-grained control over feed linksEvan Prodromou
2010-09-29* i18n/L10n and translator documentation updates.Siebrand Mazeland
* whitespace and indentation updates
2010-09-28Localisation updates from http://translatewiki.netSiebrand Mazeland
* add support for Hungarian (hu)
2010-09-22Fix for ticket 2756 - Calls to OAuth endpoints are redirected to theZach Copley
login page when a site is in private mode
2010-09-22Merge branch '0.9.x' into activityexportEvan Prodromou
Conflicts: plugins/OStatus/OStatusPlugin.php
2010-09-21Merge branch 'master' into 0.9.xBrion Vibber
2010-09-21Merge branch 'twitter-avatar'Brion Vibber
2010-09-21Workaround for #2485: in profile output on feeds, fall back to the Twitter ↵Brion Vibber
73x73 avatar instead of going straight to the 96x96 default image on twitter-import profiles.
2010-09-21change the location and title of the feeds sectionEvan Prodromou
2010-09-20Don't spew a notice warning to output while processing logging for PEAR DB ↵Brion Vibber
errors
2010-09-20Clean up notice spew from accessing member variables of null when opening ↵Brion Vibber
the add/edit oauth application form
2010-09-20Ticket #2750: fixes to HTTP caching behavior across login/logout boundariesBrion Vibber
* now ignoring if-modified-since if we failed an etag if-none-match comparison, per spec * now including a hash of user id/nickname in most etags, so we'll update the view properly after login/logout For API methods, checking the API-auth'ed user. (Many change results to include things like 'you're subscribed to this user' or 'this is one of your favorites', so user info is again needed) There'll still be some last-modified stamps that aren't including user info properly, probably.