Toby Zerner
8c4e095f23
Allow first post to be hidden/restored
...
Anti-spam extensions may automatically hide the first post in a
discussion, and thus we had to implement smarter permissions so
discussions with zero posts wouldn't be visible to users other than the
author/mods. This change allows those hidden posts to be restored again.
2015-09-07 16:03:45 +09:30
Toby Zerner
84012ca2fd
Preliminary implementation of master API keys
...
Part of #205
2015-09-07 08:37:33 +09:30
Toby Zerner
6ee9412f35
Prevent invalid LESS from crashing application
...
Failure is silent for now... The default LESS will compile without the
invalid customisations. Not sure if we should log an error somewhere
and display it on the admin page?
closes #400
2015-09-04 22:33:26 +09:30
Toby Zerner
478ca90c31
Fallback to English if system-wide default_locale doesn't exist
2015-09-04 22:19:28 +09:30
Toby Zerner
1f8f79d272
Don't require database password confirmation
2015-09-04 21:45:52 +09:30
Franz Liedke
db8b9ed0c0
Installer: Fix password confirmation
2015-09-04 12:11:13 +02:00
Franz Liedke
a3d59977b3
Clean up code
2015-09-04 12:05:12 +02:00
Franz Liedke
211d2d25cd
Merge pull request #413 from WinterSilence/patch-2
...
Update RouteCollection::getPath
2015-09-04 12:03:51 +02:00
Franz Liedke
42f1abacaf
Ask for password confirmation in web installer, too
...
Closes #405 .
2015-09-04 12:00:03 +02:00
Franz Liedke
b26c67dd3c
Require password confirmation in console installer
...
Refs #405 .
2015-09-04 11:57:11 +02:00
Toby Zerner
fc7fc41383
Prevent error when hiding/restoring a post with a deleted user
2015-09-04 13:51:13 +09:30
Toby Zerner
ece23de750
API: Add User::hasPermissionLike() and User::getPermissions()
2015-09-04 12:23:50 +09:30
Toby Zerner
4705600d47
Fix typehint
2015-09-04 12:23:27 +09:30
Toby Zerner
8423de754c
Fix bad query in isVisibleTo
2015-09-04 12:23:17 +09:30
Toby Zerner
b597e6f8f6
Don't load a custom relation if the relation is already loaded
2015-09-04 12:22:49 +09:30
Toby Zerner
276334ec52
Improve some post/discussion permission logic
...
- Allow users to see their own posts, even if they have been hidden by
someone else
- Don't require hiding a post to be necessarily attributed to a user
- Hide discussions with zero posts, unless the user can edit posts, or
they are the discussion author
2015-09-04 12:22:27 +09:30
Toby Zerner
f0186d7674
API: Add typehints
2015-09-04 12:18:09 +09:30
Daniel Klabbers
0413daab74
call to $this-> assertValidPassword from static context
2015-09-04 00:00:24 +02:00
Franz Liedke
21dd516eaa
Fix code style issues
2015-09-03 08:48:26 +02:00
Franz Liedke
3c9d851889
Check prerequisites in console installer, too
2015-09-03 08:42:16 +02:00
Franz Liedke
942db77416
Extract installation prerequisites into composable classes and use those in the web-based installer
2015-09-03 08:23:34 +02:00
Anton
04db806995
Update RouteCollection.php
2015-09-02 19:22:40 +03:00
Anton
f3bc7d1c23
Update RouteCollection::getPath
...
This version work faster - old code create closure at every calling getPath
2015-09-02 10:58:44 +03:00
Johann Rodríguez
e35bb9e400
Fix enable extension in EntensionManager
2015-09-01 12:09:11 +01:00
Franz Liedke
753a846e7a
Check MySQL version when installing on console
...
Related to #364 .
2015-09-01 08:02:07 +02:00
Franz Liedke
d3e57d77b4
Fix typehint
2015-09-01 07:49:06 +02:00
Toby Zerner
6e0bffe395
API: Add more locale registration APIs
2015-09-01 10:08:37 +09:30
Toby Zerner
eec4e97d65
Tidy up default extension metadata
2015-09-01 10:08:37 +09:30
Toby Zerner
6aafe54ee7
Fix potential error when discussion doesn't exist
...
Not sure how this could be the case, but can't hurt to add the checks.
addresses #343
2015-09-01 10:08:36 +09:30
Franz Liedke
4c34d0867d
Add field for table prefix in web installer
...
Related to #269 .
2015-08-31 09:10:27 +02:00
Toby Zerner
f2a3a0cb10
Require the PHP fileinfo extension
...
It's required for the intervention/image package
2015-08-31 15:29:20 +09:30
Toby Zerner
5b7527144c
Permit trailing slashes in discussion/user URLs
...
closes #334
2015-08-31 14:43:42 +09:30
Toby Zerner
6c169499b5
Only migrate enabled extensions when upgrading
...
Also remove the Extension::install() and Extension::uninstall()
methods, because they add nothing that can't be done with migrations.
2015-08-31 14:35:52 +09:30
Toby Zerner
5e22458014
Installer: Prevent crash when views directory is not writable
...
Use plain PHP templates instead of Blade templates so there is nothing
that needs to be written.
closes #376
2015-08-31 14:25:16 +09:30
Toby Zerner
c72bdc8238
Fix Laravel 5.1 compat
...
closes #307
2015-08-31 14:07:11 +09:30
Toby Zerner
bcc16a3329
Add target="_blank" and rel="nofollow" to all formatted links
...
closes #247
2015-08-31 13:36:54 +09:30
Toby Zerner
f5517fbd88
Validate password length
...
We can't do this using the ValidatesBeforeSave trait because the
password has been hashed by then. Instead, we must validate the
original password as it comes in.
2015-08-31 12:38:15 +09:30
Toby Zerner
6a0e3fcf2d
Validate post length to prevent truncation
...
closes #235
2015-08-31 12:36:19 +09:30
Toby Zerner
9f28b4e8dc
Require extensions directory to be writable
2015-08-31 11:22:57 +09:30
Franz Liedke
1d1cc9e443
Fix asset URL generation
...
This is important when Flarum is deployed in a subfolder.
Closes #291 .
2015-08-29 22:38:31 +02:00
Franz Liedke
f5d2d2ff79
Installer: Check for openssl extension
...
Closes #296 .
2015-08-29 22:07:50 +02:00
Lorenz Bausch
a4fe6f3ce3
limit max title length to 80 characters
2015-08-29 11:26:18 +02:00
Lorenz Bausch
ae06b45bc1
remove executable flag from file
2015-08-29 11:23:05 +02:00
Toby Zerner
12d5e48b95
Add helpful hint on how to upgrade PHP
2015-08-29 14:44:55 +09:30
Toby Zerner
bb3c57f9a4
Fix default database name
2015-08-28 14:53:01 +09:30
Toby Zerner
d5074c5286
Use gd as the image driver
...
Presumably gd is more common than imagick, and we already check for it
during installation.
2015-08-28 05:41:25 +09:30
Toby Zerner
41019597d0
Require the PHP DOM extension
2015-08-28 05:30:27 +09:30
Toby Zerner
b689c9de3b
Allow non-admins to reset their password
...
The EditUser command requires the actor to have the "edit" permission,
which is only granted to admins. We don't want to allow users to change
their own password via the API, though. So instead of dispatching the
command, we'll just update the user's password directly in the action.
2015-08-28 03:38:55 +09:30
Toby Zerner
baed659668
Fix reset password error
2015-08-28 02:16:28 +09:30
Toby Zerner
268b041da2
Fix incorrect chmod instruction
2015-08-27 21:51:36 +09:30
