summaryrefslogtreecommitdiffstats
path: root/app
Commit message (Collapse)AuthorAgeFilesLines
* Safely generate random HMAC keys for CSRF tokensnashe2018-01-021-1/+7
|
* Add paragonie/random_compat to implement a polyfill for random_bytesnashe2018-01-021-0/+5
|
* Implement and expose a CSRF mitigationnashe2017-12-232-1/+50
|
* Give a session to the usersnashe2017-12-231-0/+2
|
* Add hash_equals polyfill and related testsnashe2017-12-181-1/+51
|
* Improve project structurenashe2017-10-215-141/+156
|
* Cleanup install.phpnashe2017-10-171-6/+6
|
* Add GuzzleHarness and use itnashe2017-10-171-1/+21
|
* Add view_path and admin_path helpersnashe2017-10-171-0/+22
|
* Move helper functions to a separate filenashe2017-07-162-14/+33
| | | | This will be useful to use it in the tests.
* Update CONTRIBUTING.mdnashe2017-07-161-0/+0
|
* Add an option to disable feed certificate checknashe2017-07-132-1/+9
|
* Fix Cache.php encodingnashe2017-07-131-1/+1
|
* Fix PHP warningnashe2017-07-121-1/+8
| | | | | | "usort() expects parameter 2 to be a valid callback, non-static method PlanetFeed::compare() should not be called statically in moonmoon/custom/views/default/sidebar.tpl.php on line 3"
* Make OpmlManager save and backup staticnashe2017-07-121-2/+2
|
* Fix PHP noticenashe2017-07-121-7/+6
| | | | | "Only variables should be passed by reference in /Users/thomas/Workspace/moonmoon/app/classes/Planet.php on line 145"
* Make PlanetConfig more testablenashe2017-07-071-18/+99
|
* Make PlanetError more testablenashe2017-07-071-7/+16
|
* Disallow any access to extract.php is not in debug modenashe2017-07-071-5/+5
| | | | | "released versions of moonmoon should immediately return for security" was written but never applied
* Correctly escape attributes of OPML's entriesnashe2017-05-301-2/+2
| | | | This should prevent any case of corruption of the XML document.
* OpmlManager's load() is being called statically, make it staticnashe2017-05-281-1/+1
|
* Fix minor errors found with debug mode onnashe2017-05-281-3/+8
|
* Do not process postload.php requests if app not installednashe2017-05-281-3/+2
|
* Move the debug directive to configuration filenashe2017-05-282-22/+28
|
* Don't fetch feeds via postload.php if they are not in the OPML filenashe2017-04-291-0/+10
| | | | Fixes #84.
* Clean codenashe2015-08-115-7/+7
| | | | Replace dirname(__FILE__) by __DIR__.
* Fix class autoloadingnashe2015-08-114-355/+3
| | | | | | | Made some mistakes with my last PR: I tested that everything were working, but on the wrong branch. This commit fixes all the autoloading error that were left.
* Port the testmore unit tests to Codeceptionnashe2015-08-051-0/+0
|
* Require spyc 0.5.1nashe2015-08-051-1046/+0
|
* Require simplepie 1.3nashe2015-08-052-17598/+0
|
* Initialize composer projectnashe2015-08-051-0/+2
|
* Make authentication timing-safenashe2015-08-041-0/+40
| | | | | | | Improve the authentication to make it timing-safe against bruteforce attacks. See code comments for more details on the implementation.
* Merge with upstream/masterNukeador2014-03-221-0/+244
|\
| * Add spanish translation, contributed by Javier GuerraMaurice Svay2014-02-191-0/+244
| |
| * Remove timeoutMaurice Svay2013-11-171-1/+0
| |
* | Control width blacklisting feed are down, cron.php manage the status of this ↵Fernando García2014-03-045-9/+39
|/ | | | feeds
* Merge pull request #50 from rdalverny/filter_by_tagMaurice Svay2012-08-073-0/+401
|\ | | | | Option to show only posts that have a specific tag or category.
| * Option to show only posts that have a specific tag or category.Romain d'Alverny2012-06-233-0/+401
| | | | | | | | | | - add configuration description in README.markdown - add unit test with testmore.php for this very feature
* | upgrade moonmoon to simplepie 1.3, compiled version in a single file, remove ↵pascalc2012-07-095-15356/+17596
|/ | | | old simplepie files
* display moonmoon version in title bar of the administration panel, make the ↵Pascal Chevrel2012-05-031-1/+2
| | | | version number a variable
* Update l10n support:Pascal Chevrel2012-04-304-112/+440
| | | | | | | | - improved regex logic in the extraction parser (fixes a couple of bugs in edge cases) - *.tpl.php files were not parsed because of the double dot, now fixed - strings requiring translation are now indicated in the source file to make them stand out - support for the {ok} tag, adding this tag allows the localizer to indicate that a string remains in English (or that it is spelt the same in his language) - add an english reference file, in case we want to send it to volunteers
* extraction script for localization, extracts all localizable strings in the ↵Pascal Chevrel2012-04-251-0/+196
| | | | repo and updates the .lang files
* add support for localization notes in strings. This is a feature allowing ↵Pascal Chevrel2012-04-252-2/+2
| | | | developpers to add a short comment to a string explaining to localizers the context in which the string is used. This is a feature needed for the string extraction tools
* Rename $person to $feedMaurice Svay2012-04-101-13/+13
|
* forgot to migrate the login page to incoude the l10n class (didn't notice ↵Pascal Chevrel2012-03-131-0/+6
| | | | because of the cookie)
* l10n support for moonmoonPascal Chevrel2012-03-124-2/+233
|
* Convert back Planet.class.php to php5 syntax + UNix enlinesPascal Chevrel2012-03-111-155/+155
|
* Convert back Planet.class.php tp php5 syntaxPascal Chevrel2012-03-111-144/+155
|
* Merge branch 'cleanup' of https://github.com/pascalchevrel/moonmoon into ↵Maurice Svay2012-03-103-280/+269
|\ | | | | | | | | | | | | | | pascalchevrel-cleanup Conflicts: admin/default.css app/classes/Planet.class.php
| * convert all files saved in Windows(CRLF) to Unix (LF)Pascal Chevrel2012-03-093-269/+269
| |