Tim Düsterhus [Tue, 20 Jul 2021 12:38:26 +0000 (14:38 +0200)]
Merge pull request #4406 from WoltLab/quoted-printable-header
Stop using mb_encode_mimeheader()
Tim Düsterhus [Tue, 20 Jul 2021 11:25:37 +0000 (13:25 +0200)]
Merge branch '5.4'
Tim Düsterhus [Tue, 20 Jul 2021 10:52:24 +0000 (12:52 +0200)]
Add update_com.woltlab.wcf_5.4.2_deleteInvalidSessions.php
Tim Düsterhus [Tue, 20 Jul 2021 10:43:38 +0000 (12:43 +0200)]
Default IP address to `::` if `$_SERVER['REMOTE_ADDR']` is unavailable
The session list within the AccountSecurityPage relies on all sessions storing
valid IP addresses. When using `cli.php` no `REMOTE_ADDR` will be available and
an empty string was being stored. As the empty string is not a valid IP address
the `\wcf\util\IpAddress` class errored out.
Fix this issue by always returning a syntactically valid IP address from
`UserUtil::getIpAddress()`. `::` is being used which is commonly used to
indicate unknown IP addresses and must never appear within valid IP packets.
joshuaruesweg [Tue, 20 Jul 2021 10:12:15 +0000 (12:12 +0200)]
Disable unfurled links in AMP pages
joshuaruesweg [Tue, 20 Jul 2021 09:36:13 +0000 (11:36 +0200)]
Prevent inverting permissions, if the object is visible for everyone
If the permission is inverted and the object is allowed for everyone, the object cannot seen by anyone. Furthermore the admin can only uncheck the inverted permissions button, if the object is not allowed for everyone anymore.
joshuaruesweg [Tue, 20 Jul 2021 08:50:29 +0000 (10:50 +0200)]
Fix faulty invertPermission label logic
Tim Düsterhus [Tue, 20 Jul 2021 07:10:20 +0000 (09:10 +0200)]
Add missing `@since` to ISafeFormatAvatar
Alexander Ebert [Mon, 19 Jul 2021 15:35:42 +0000 (17:35 +0200)]
Missing implicit function scope
Alexander Ebert [Mon, 19 Jul 2021 15:32:25 +0000 (17:32 +0200)]
Cast empty values for the file size to int
PHP 8 is much more sensitive to type mismatches, before PHP 8 the value `''` was implicitly converted to `0`.
Marcel Werk [Mon, 19 Jul 2021 14:24:38 +0000 (16:24 +0200)]
WebP was not recognised as image format when uploading images
Tim Düsterhus [Mon, 19 Jul 2021 10:03:23 +0000 (12:03 +0200)]
Remove IPv6 localhost "fix" from UserUtil::getIpAddress()
This "fix" dates from a time where users did not know what IPv6 was and thus were confused. It is no longer required.
Tim Düsterhus [Mon, 19 Jul 2021 09:42:53 +0000 (11:42 +0200)]
Merge branch '5.4'
Matthias Schmidt [Mon, 5 Jul 2021 09:15:20 +0000 (11:15 +0200)]
Make renaming columns with PHP DB API idempotent (#4367)
An error message should only be shown if the neither a column with the old name, nor with the name name exists so that after the rename, a second rename is a no-op.
Close #4362
See #3765
(cherry picked from commit
1a029332791f3e3cdca054d8f139857b5ef78791)
Tim Düsterhus [Fri, 16 Jul 2021 13:32:44 +0000 (15:32 +0200)]
Merge branch '5.4'
Tim Düsterhus [Fri, 16 Jul 2021 12:08:16 +0000 (14:08 +0200)]
Set `$isAtom` to `false` when encoding the email's subject
Tim Düsterhus [Fri, 16 Jul 2021 12:07:11 +0000 (14:07 +0200)]
Stop using `mb_encode_mimeheader`
Replace the implementation in EmailGrammar::encodeQuotedPrintableHeader() with
a hand-rolled encoder.
Resolves #4395
Joshua Rüsweg [Fri, 16 Jul 2021 08:43:12 +0000 (10:43 +0200)]
Merge pull request #4405 from WoltLab/migrateMultifactor-deleted-user
Skip authenticators of deleted users in update_com.woltlab.wcf_5.4_migrate_multifactor.php
Tim Düsterhus [Thu, 15 Jul 2021 14:50:59 +0000 (16:50 +0200)]
Skip authenticators of deleted users in update_com.woltlab.wcf_5.4_migrate_multifactor.php
Alexander Ebert [Thu, 15 Jul 2021 12:07:03 +0000 (14:07 +0200)]
Merge branch '5.3' into 5.4
Alexander Ebert [Thu, 15 Jul 2021 12:04:15 +0000 (14:04 +0200)]
Release 5.3.12
Alexander Ebert [Thu, 15 Jul 2021 11:58:44 +0000 (13:58 +0200)]
Release 5.4.1
Tim Düsterhus [Thu, 15 Jul 2021 11:57:09 +0000 (13:57 +0200)]
Merge branch '5.4'
Dropped `update_com.woltlab.wcf_5.4_fixSqlLog.php`, because it is required for
5.3 to 5.4 only.
Tim Düsterhus [Thu, 15 Jul 2021 11:56:01 +0000 (13:56 +0200)]
Merge branch '5.3' into 5.4
Alexander Ebert [Thu, 15 Jul 2021 11:05:26 +0000 (13:05 +0200)]
Merge pull request #4404 from WoltLab/imagick-webp-optional
Permit the upgrade if only GD with WebP support is present
Alexander Ebert [Thu, 15 Jul 2021 11:00:55 +0000 (13:00 +0200)]
Rebuild the pre-update file archive
Alexander Ebert [Thu, 15 Jul 2021 11:00:14 +0000 (13:00 +0200)]
Merge branch '5.4' into imagick-webp-optional
Alexander Ebert [Thu, 15 Jul 2021 10:57:46 +0000 (12:57 +0200)]
Merge pull request #4403 from WoltLab/5.4-sqlLog
Add missing SQL log entry for `wcf1_acp_session_virtual` during upgrade to 5.4
Alexander Ebert [Thu, 15 Jul 2021 10:52:39 +0000 (12:52 +0200)]
Updated the pre-update file archive
Alexander Ebert [Thu, 15 Jul 2021 10:50:51 +0000 (12:50 +0200)]
Allow bypass of a broken imagick extension, improved error messages
Alexander Ebert [Thu, 15 Jul 2021 10:45:36 +0000 (12:45 +0200)]
Improved the explanation for missing system requirements
Tim Düsterhus [Thu, 15 Jul 2021 09:57:39 +0000 (11:57 +0200)]
Add missing SQL log entry for `wcf1_acp_session_virtual` during upgrade to 5.4
This entry is required to be able to delete this table later in the process.
Alexander Ebert [Thu, 15 Jul 2021 09:22:06 +0000 (11:22 +0200)]
Check for WebP support in the selected adapter
Tim Düsterhus [Thu, 15 Jul 2021 07:19:22 +0000 (09:19 +0200)]
Fix typo in de.xml
Alexander Ebert [Wed, 14 Jul 2021 15:38:49 +0000 (17:38 +0200)]
Release 5.4.0
Tim Düsterhus [Wed, 14 Jul 2021 15:10:48 +0000 (17:10 +0200)]
Merge pull request #4402 from WoltLab/deprecate-search-message
Deprecate `WCF.Search.Message.KeywordList`
Tim Düsterhus [Wed, 14 Jul 2021 15:05:59 +0000 (17:05 +0200)]
Deprecate `WCF.Search.Message.KeywordList`
This ideally would have happened a long time ago, as the base class already is
deprecated.
Tim Düsterhus [Wed, 14 Jul 2021 13:34:49 +0000 (15:34 +0200)]
Merge branch '5.4'
Tim Düsterhus [Wed, 14 Jul 2021 13:34:06 +0000 (15:34 +0200)]
Merge branch '5.3' into 5.4
Alexander Ebert [Wed, 14 Jul 2021 13:14:25 +0000 (15:14 +0200)]
Release 5.3.11
Alexander Ebert [Wed, 14 Jul 2021 12:27:04 +0000 (14:27 +0200)]
Removed reference to earlier evaluation versions
Alexander Ebert [Wed, 14 Jul 2021 12:08:06 +0000 (14:08 +0200)]
Enable the upgrade notice for 5.4 by default
Tim Düsterhus [Wed, 14 Jul 2021 10:02:03 +0000 (12:02 +0200)]
Merge pull request #4401 from WoltLab/wcfsetup-data-uri
Use `data:` URIs to load assets in WCFSetup
Tim Düsterhus [Wed, 14 Jul 2021 09:14:03 +0000 (11:14 +0200)]
Use `data:` URIs to load assets in WCFSetup
With this change the HTML responses generated by WCFSetup are completely
self-contained and do not rely on external requests.
This avoids the proxying of the assets using PHP from the temporary folder at
the expense of slightly bloating the HTML with the embedded CSS.
The total size of the HTML is 530kB before gzip and 200kB after gzip.
Resolves #4394
Tim Düsterhus [Wed, 14 Jul 2021 07:24:55 +0000 (09:24 +0200)]
Merge branch '5.4'
Alexander Ebert [Tue, 13 Jul 2021 15:32:34 +0000 (17:32 +0200)]
Removed a legacy condition used in the old session system
This is an old condition that dates back to the early days of the keep alive system. The condition does not work with the new session system anymore, because `lastActivityTime` is always mapped to `TIME_NOW`.
Marcel Werk [Tue, 13 Jul 2021 15:15:06 +0000 (17:15 +0200)]
Merge pull request #4383 from WoltLab/article_embedded
Fix recursively loading embedded objects in articles
Tim Düsterhus [Tue, 13 Jul 2021 14:48:05 +0000 (16:48 +0200)]
Merge pull request #4398 from WoltLab/smtp-options
Clean Up STARTTLS options
Tim Düsterhus [Tue, 13 Jul 2021 14:44:01 +0000 (16:44 +0200)]
Merge branch 'master' into smtp-options
Alexander Ebert [Tue, 13 Jul 2021 14:43:03 +0000 (16:43 +0200)]
Merge pull request #4346 from mutec/currencydecimals
support custom number of decimals in currency modifier
Alexander Ebert [Tue, 13 Jul 2021 14:31:03 +0000 (16:31 +0200)]
Saving WebP images in GD requires a True Color palette
https://stackoverflow.com/questions/
39292617/fatal-error-paletter-image-not-supported-by-webp/
47469726#
47469726
Tim Düsterhus [Tue, 13 Jul 2021 13:27:34 +0000 (15:27 +0200)]
Merge pull request #4399 from WoltLab/mailform-captcha-option
Remove PROFILE_MAIL_USE_CAPTCHA
Tim Düsterhus [Tue, 13 Jul 2021 12:41:12 +0000 (14:41 +0200)]
Actually check for TLS support in update_com.woltlab.wcf_5.5_starttls.php
Tim Düsterhus [Tue, 13 Jul 2021 09:39:50 +0000 (11:39 +0200)]
Remove PROFILE_MAIL_USE_CAPTCHA
see
67e204a044077c2ad96685386aabaf6803a61d21
see #3032
see #3151
joshuaruesweg [Tue, 13 Jul 2021 08:39:45 +0000 (10:39 +0200)]
Merge branch '5.4'
joshuaruesweg [Tue, 13 Jul 2021 08:39:27 +0000 (10:39 +0200)]
Merge branch '5.3'
joshuaruesweg [Tue, 13 Jul 2021 08:31:43 +0000 (10:31 +0200)]
Use `emailConfirmed` status to exclude unconfirmed emails
With 5.3 we introduced the new `emailConfirmed` status to separate the status of the email and the activation status of the user. Therefore, we want to send emails to users, which emails are enabled. The user activation status is not relevant anymore for sending emails.
Tim Düsterhus [Tue, 13 Jul 2021 07:32:08 +0000 (09:32 +0200)]
Merge pull request #4397 from WoltLab/favicon-is-processed
Improve Favicon handling in StyleAction
Marcel Werk [Mon, 12 Jul 2021 18:07:22 +0000 (20:07 +0200)]
Devtools did not work correctly under Windows
Alexander Ebert [Mon, 12 Jul 2021 14:52:32 +0000 (16:52 +0200)]
Incorrect keystroke
Alexander Ebert [Mon, 12 Jul 2021 14:50:47 +0000 (16:50 +0200)]
Missing `px` units for the image dimensions
Alexander Ebert [Mon, 12 Jul 2021 14:40:03 +0000 (16:40 +0200)]
Merge branch '5.4' of https://github.com/WoltLab/WCF into 5.4
Alexander Ebert [Mon, 12 Jul 2021 14:39:56 +0000 (16:39 +0200)]
Missing cover photo in the list of articles in a footer box
Replaces #4378
Tim Düsterhus [Mon, 12 Jul 2021 14:06:16 +0000 (16:06 +0200)]
Remove support for MAIL_SMTP_STARTTLS = 'may'
Resolves #4246
Tim Düsterhus [Mon, 12 Jul 2021 14:28:34 +0000 (16:28 +0200)]
Merge branch '5.4'
Tim Düsterhus [Mon, 12 Jul 2021 14:27:34 +0000 (16:27 +0200)]
Upgrade the default STARTTLS level to `encrypt`
see #4246
Tim Düsterhus [Mon, 12 Jul 2021 13:55:57 +0000 (15:55 +0200)]
Update the default SMTP port to 587
25 is not meant for submission.
Alexander Ebert [Mon, 12 Jul 2021 13:40:28 +0000 (15:40 +0200)]
Explicitly mark styles for 5.2+ as compatible with 5.4
Tim Düsterhus [Mon, 12 Jul 2021 12:55:31 +0000 (14:55 +0200)]
Regenerate Favicon images only when the template changes
Tim Düsterhus [Mon, 12 Jul 2021 12:53:05 +0000 (14:53 +0200)]
Delete manifest.json and browserconfig.xml when deleting a favicon
Tim Düsterhus [Mon, 12 Jul 2021 09:13:39 +0000 (11:13 +0200)]
Merge pull request #4384 from WoltLab/cronjob_xsd
Remove obsolete elements from `cronjob.xsd`
joshuaruesweg [Sun, 11 Jul 2021 16:03:42 +0000 (18:03 +0200)]
Merge branch '5.4'
Joshua Rüsweg [Sun, 11 Jul 2021 16:02:54 +0000 (18:02 +0200)]
Merge pull request #4392 from WoltLab/rename-totp-field
Rename TOTP code form field to `onetimecode`
mutec [Sat, 26 Jun 2021 17:17:46 +0000 (19:17 +0200)]
support custom number of decimals in currency modifier
joshuaruesweg [Sun, 11 Jul 2021 09:28:07 +0000 (11:28 +0200)]
Rename TOTP code form field to `onetimecode`
The name `code` for the form field is too generic and should be specified. `onetimecode` is a more fitting identifier for the input name. In addition, 1password fills the totp code automatically, if the field is named `onetimecode` (See https://1password.community/discussion/comment/604200/#Comment_604200).
joshuaruesweg [Sun, 11 Jul 2021 08:53:10 +0000 (10:53 +0200)]
Merge branch '5.4'
joshuaruesweg [Sun, 11 Jul 2021 08:50:15 +0000 (10:50 +0200)]
Convert tabs to spaces
joshuaruesweg [Sun, 11 Jul 2021 08:48:21 +0000 (10:48 +0200)]
Merge branch '5.3'
joshuaruesweg [Sun, 11 Jul 2021 08:34:16 +0000 (10:34 +0200)]
Merge branch '5.2'
joshuaruesweg [Sun, 11 Jul 2021 08:31:21 +0000 (10:31 +0200)]
Merge branch '3.1'
Sascha Greuel [Sun, 11 Jul 2021 08:24:24 +0000 (10:24 +0200)]
Don't leak an account's activation status (#4365)
* Don't leak an account's activation status
* Update wcfsetup/install/files/lib/form/RegisterNewActivationCodeForm.class.php
Co-authored-by: Tim Düsterhus <timwolla@googlemail.com>
Co-authored-by: Tim Düsterhus <timwolla@googlemail.com>
joshuaruesweg [Sat, 10 Jul 2021 09:47:04 +0000 (11:47 +0200)]
Merge branch '5.4'
joshuaruesweg [Sat, 10 Jul 2021 09:44:09 +0000 (11:44 +0200)]
Merge branch '5.3'
joshuaruesweg [Sat, 10 Jul 2021 09:39:33 +0000 (11:39 +0200)]
Set new activation code on rerequesting them
Tim Düsterhus [Fri, 9 Jul 2021 11:32:15 +0000 (13:32 +0200)]
Merge pull request #4389 from WoltLab/email-serialize-size
Reduce the size of the Mailbox objects
Tim Düsterhus [Fri, 9 Jul 2021 10:26:44 +0000 (12:26 +0200)]
Reduce the size of the Mailbox objects
This introduces a small BC break for classes inheriting from Mailbox or
UserMailbox that directly access the `language` or `user` properties instead of
the getter methods. But this is easily fixed.
Resolves #4387
Alexander Ebert [Thu, 8 Jul 2021 13:38:43 +0000 (15:38 +0200)]
Release 5.4.0 RC 2
Tim Düsterhus [Thu, 8 Jul 2021 11:33:34 +0000 (13:33 +0200)]
Merge pull request #4385 from WoltLab/package-update-compat
Do not store package compatibility from update servers within the database
Tim Düsterhus [Thu, 8 Jul 2021 10:31:49 +0000 (12:31 +0200)]
Do not store package compatibility from update servers within the database
These do not appear to be used anywhere and the official package servers do not
expose them either, making them effectively empty even in current versions.
see #4371
Tim Düsterhus [Thu, 8 Jul 2021 08:51:13 +0000 (10:51 +0200)]
Merge branch '5.4'
Matthias Schmidt [Thu, 8 Jul 2021 08:06:41 +0000 (10:06 +0200)]
Remove obsolete elements from `cronjob.xsd`
These elements are no longer (if ever) used.
Matthias Schmidt [Thu, 8 Jul 2021 07:36:37 +0000 (09:36 +0200)]
Fix recursively loading embedded objects in articles
Close #4382
See
3af7b77d40ed93c95cebb22004ab745bf69683e2
Tim Düsterhus [Thu, 8 Jul 2021 07:25:39 +0000 (09:25 +0200)]
Add update_com.woltlab.wcf_5.4_styleCoverPhoto.php to package.xml
Tim Düsterhus [Thu, 8 Jul 2021 07:25:20 +0000 (09:25 +0200)]
Do not use the cache in update_com.woltlab.wcf_5.4_styleCoverPhoto.php
Matthias Schmidt [Thu, 8 Jul 2021 06:50:43 +0000 (08:50 +0200)]
Fix variable name in `ViewableArticleContentList::readObjects()`
Alexander Ebert [Wed, 7 Jul 2021 16:16:32 +0000 (18:16 +0200)]
Do not block matching abbreviation if the package is the same
The previous code would block the installation of an update of the same package.
Fix for #4357
Alexander Ebert [Wed, 7 Jul 2021 15:58:23 +0000 (17:58 +0200)]
Release 5.4.0 RC 2
WoltLab [Wed, 7 Jul 2021 15:41:36 +0000 (15:41 +0000)]
Updating minified JavaScript files
Alexander Ebert [Wed, 7 Jul 2021 15:14:55 +0000 (17:14 +0200)]
Improved the visuals of the list of MFA options
The content is now vertically centered and the somewhat tiny smartphone icon is enlarged to better match the other icons.
Alexander Ebert [Wed, 7 Jul 2021 15:08:28 +0000 (17:08 +0200)]
Use `<small>` instead of `<p class="small">`