danwin1210/le-chat-php
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
350 Commits 1 Branch 58 Tags
70df4d9cf597967f5c54d61c5ade00f1d1729499
Commit Graph
94 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Winzen 70df4d9cf5 Fixed typo 2021-06-19 12:43:17 +02:00
Daniel Winzen 373973fb25 Disallow otp-credentials Permission 2021-06-19 12:41:30 +02:00
Daniel Winzen 20ebe8a995 Fix for SQLite not supporting UNION on tables that use ORDER BY 2021-05-23 12:30:51 +02:00
Daniel Winzen ec0d167647 Fix SQLite table initialization 2021-05-22 22:46:43 +02:00
Daniel Winzen 5760565991 Switch errmode to exception 2021-05-22 22:32:26 +02:00
Daniel Winzen 136b52d920 Catch error in get_setting function, if database is not yet initialized 2021-05-22 21:23:51 +02:00
Daniel Winzen 726aea996d Fix access array offset on value of type bool warning 2021-05-22 21:21:03 +02:00
Daniel Winzen 3a99548228 Fix access array offset on value of type bool warning 2021-05-22 21:18:03 +02:00
Daniel WinzenandGitHub 809ecb1b48 Merge pull request #103 from whalehub/patch-1 
chat.php: Forbid tracking users via FLoC
 2021-05-19 07:18:59 +02:00
Daniel Winzen c0a5ac137b Add new security headers 2021-05-14 21:07:22 +02:00
Daniel Winzen 36b8446602 Generate fixed postid for new messages to make spamming harder 2021-05-13 15:06:03 +02:00
Daniel Winzen f7fc91e2fb New Permissions-Policy syntax - fixes #102 2021-05-04 20:20:48 +02:00
Daniel Winzen 58638ba56e Make sure members can not read private messages of previous guests with the same name 2021-05-02 16:31:18 +02:00
Daniel Winzen c7169daeaf Enable SQLite support for foreign keys - fixes #93 2021-05-02 15:56:43 +02:00
Daniel WinzenandGitHub 0f30729dc2 Merge pull request #98 from basefont/master 
Add zh_Hant messages. Warn if login failures happen during session. Link PHP documentation in Chinese and French.
 2021-04-17 12:24:33 +02:00
Daniel Winzen e590f5bbb7 Fix undefined notices 2021-04-09 19:04:37 +02:00
Daniel Winzen fd249c6aee Fix login fail tracking 2021-04-09 18:54:17 +02:00
Daniel WinzenandGitHub 91f08337e6 Merge pull request #97 from basefont/master 
Count failed login attempts and warn about them. Delete public notes of deleted accounts.
 2021-04-09 18:40:09 +02:00
Daniel WinzenandGitHub a610e9d9f3 Merge branch 'master' into master 2021-04-09 18:38:51 +02:00
Daniel WinzenandGitHub b79070d41c Merge pull request #96 from Finnboy94/master 
Add Finnish translation
 2021-04-09 18:35:11 +02:00
Daniel Winzen c3af18b510 Add spacing after ℹ️ 2021-03-05 19:38:39 +01:00
Daniel Winzen 16ffb6fdbe Fixed SQL query 2021-03-05 19:34:44 +01:00
Daniel Winzen f9b150f3ac Identify system messages with a span title. 
Add option to prepend text to system messages.
Add option to always allow members to kick.
Add option to show names of those who kick people, or clean all messages.
 2021-03-05 19:25:19 +01:00
Daniel Winzen c9b8a343be Add missing new setting to db 2021-02-22 09:18:03 +01:00
Daniel Winzen f92d22372c Differenciate guests and applicants 2021-02-22 09:14:39 +01:00
Daniel Winzen 0b0e3ede72 Update Portuguese translation 2021-02-22 09:12:33 +01:00
Daniel Winzen 42b4f1110c Fixed syntax error 2021-02-14 21:47:42 +01:00
Daniel Winzen b9a64e7371 Fix Whitespace 2021-02-14 17:59:03 +01:00
Daniel Winzen fdc5081407 Update Portuguese translation 2021-02-14 14:51:51 +01:00
Daniel Winzen f0f812badc Add public notes 2021-02-12 18:58:09 +01:00
Daniel Winzen e51fba28c7 change appearance of print_chatters 2021-01-24 13:03:45 +01:00
Daniel Winzen 86a8a81e22 Update css example for latest code changes 2020-12-27 17:35:27 +01:00
Daniel Winzen c7b824c56b Fixed memberlist html structure 2020-12-27 17:16:36 +01:00
Daniel Winzen 45035ebf36 Use mime_content_type to determin uploaded files mime type when available 2020-12-27 16:43:37 +01:00
Daniel Winzen ae642df38d Bugfix for previous patch 2020-12-27 16:12:51 +01:00
Daniel Winzen fcad1fb41a send to all, members, staff, admins from list of chatters 2020-12-27 16:07:38 +01:00
Daniel Winzen 93ae61376c Add portuguese translation 2020-11-21 18:22:22 +01:00
Daniel Winzen 087a18c4dd Bugfix 2020-11-15 21:05:57 +01:00
Daniel Winzen 87694a0ba7 Remove mixed type as it is only compatible with PHP8 2020-11-12 09:41:47 +01:00
Daniel Winzen b148b7c526 Fixed PHP7 compatibility 2020-11-11 19:56:07 +01:00
Daniel Winzen 6e39ec7222 Use correct ISO 639-1 Language Codes 2020-11-09 18:15:38 +01:00
Daniel Winzen 3abd5377b5 auto-kick spammers not setting a postid 2020-11-08 21:23:29 +01:00
Daniel Winzen b45e18261f Improved background-forground color contrast for links 2020-11-06 22:30:19 +01:00
Daniel Winzen c9a1f3af4f Print meta description 2020-10-25 15:09:01 +01:00
Daniel Winzen de1893c0f4 Added meta description setting for SEO 2020-10-25 15:00:19 +01:00
Daniel Winzen b611606f9e Add autocomplete hints for password managers 2020-10-25 14:38:38 +01:00
Daniel Winzen f0e9a1a4dd Catch exceptions 2020-10-25 13:55:08 +01:00
Daniel Winzen 4c5c3e9ff0 Add browser themeing 2020-10-24 22:03:05 +02:00
Daniel Winzen cbd07f2f57 Unquote font-family names where applicalable 2020-10-24 21:43:23 +02:00
Daniel Winzen 8712e76814 Simplified link matching regex 2020-10-24 21:25:42 +02:00
Daniel Winzen e3d355ea84 Prevent really long (spam) messages from taking too much space 2020-10-24 21:13:36 +02:00
Daniel Winzen a83d234a0c Add viewport meta tag for mobile friendly chat 2020-10-24 21:07:40 +02:00
Daniel Winzen 6bb073323d Move from frames to iframes 2020-10-24 19:27:33 +02:00
Daniel Winzen f5a051cfbb Move away from using $_REQUEST when not necessary 2020-10-24 17:43:52 +02:00
Daniel Winzen 396fc98eef Make use of strict type checking on function return values and parameters 2020-10-17 16:29:22 +02:00
Daniel WinzenandGitHub a0c988d574 Merge pull request #87 from DanWin/forgotten-password 
Add password reset for super admin
 2020-10-17 14:28:10 +02:00
Daniel Winzen 328938f473 Add password reset for super admin 2020-10-17 14:26:51 +02:00
Daniel Winzen c0f2faead4 Setup needs to be accessible without POST 2020-10-17 13:22:09 +02:00
Daniel Winzen 20a97070f8 Update readme 2020-10-17 12:59:01 +02:00
Daniel Winzen e90b9cc9c4 Release new version 1.24.1 2020-10-17 12:53:00 +02:00
Daniel Winzen ede3d7938d Add language meta info and minor restructuring of code 2020-10-17 11:58:39 +02:00
Daniel Winzen 8df28af021 Use $T for translation instead of verwriting $I directly 2020-10-15 22:28:01 +02:00
Daniel Winzen c3e316d412 Various minor optimizations 2020-10-15 20:46:04 +02:00
Daniel WinzenandGitHub 919876480d Merge pull request #81 from cypherbits/remove-request-use 
For dangerous and only-POST routes check if it is POST request.
 2020-10-15 17:13:48 +02:00
Daniel WinzenandGitHub 4e6cc8d1ab Merge pull request #86 from DanWin/DanWin-funding 
Create FUNDING.yml
 2020-10-15 17:12:32 +02:00
Daniel WinzenandGitHub 3dd5de099e Create FUNDING.yml 2020-10-15 17:12:17 +02:00
Daniel Winzen c71e17103f Fix chrome flashing white on frame reload 2020-10-15 09:43:06 +02:00
Daniel Winzen 8d84e45c3c Add promise not to use any features 2020-10-15 09:42:29 +02:00
Daniel Winzen d37fc14483 Updated copyright 2020-10-15 08:26:47 +02:00
Daniel Winzen 815d9f203e Improved CSP rules 2020-10-14 13:38:30 +02:00
Daniel Winzen cca830d9db Fixed syntax error 2020-09-20 21:50:37 +02:00
Daniel WinzenandGitHub de04614155 Merge pull request #77 from cypherbits/work1 
Little fixes
 2020-09-15 20:59:20 +02:00
Daniel Winzen 025709508b Fix guest room bypass #73 2020-09-15 19:37:45 +02:00
Daniel WinzenandGitHub 34fce5f7ab Merge pull request #75 from cypherbits/master 
Fix link filters, image embeds, and redirects.
 2020-09-15 18:57:01 +02:00
Daniel Winzen 463d66e11e Include Turikish translation 2020-08-01 20:48:57 +02:00
Daniel WinzenandGitHub ed4908b7c7 Merge pull request #70 from creuzwagen/patch-1 
Create lang_tr.php
 2020-08-01 20:47:41 +02:00
Daniel WinzenandGitHub cc6d36e7ce Merge pull request #66 from cypherbits/php-version-check 
If encryption is enabled, check the PHP version is at least 7.2
 2020-06-11 10:39:14 +02:00
Daniel WinzenandGitHub 217bd9b08a Merge pull request #67 from whalehub/patch-1 
Fix indentation in chat.php
 2020-06-11 10:36:37 +02:00
Daniel Winzen 43a6adfa1c Fix undefined index notice 2020-05-07 21:47:49 +02:00
Daniel Winzen e137eb81ac Updated readme 2020-05-07 21:06:16 +02:00
Daniel Winzen 035cfa6aa4 Harden all cookies 2020-05-07 20:50:20 +02:00
Daniel Winzen e9a1d61027 Allow data URI for img and media in CSP 2020-05-07 20:38:17 +02:00
Daniel WinzenandGitHub a4d2484e24 Merge pull request #63 from cypherbits/fix-security-header 
Fix Content-Security-Policy header.
 2020-05-07 20:29:27 +02:00
Daniel WinzenandGitHub ac46e658bd Merge pull request #64 from cypherbits/faster-encryption-load 
If admin defined keys with the right length, do not compute the keys.
 2020-05-07 20:28:35 +02:00
Daniel WinzenandGitHub 9c5e879d7d Merge pull request #62 from cypherbits/fix-session-xss 
Fix XSS in session variables.
 2020-05-07 20:28:10 +02:00
Daniel WinzenandGitHub 0f3a04b4de Merge pull request #61 from cypherbits/safe-cookies 
Session cookies security hardening.
 2020-05-03 10:33:00 +02:00
Daniel Winzen e149c9f97d Fix reflected XSS vulnerability 2020-05-02 19:42:34 +02:00
Daniel WinzenandGitHub 1887d42a78 Merge pull request #58 from cypherbits/new-encryption 
New generation AES256-GCM encryption by libsodium. PHP >= 7.2 needed
 2020-05-02 18:32:50 +02:00
Daniel WinzenandGitHub 95fd504249 Merge pull request #60 from cypherbits/header_security 
Add more security headers
 2020-05-02 18:28:44 +02:00
Daniel WinzenandGitHub c728d6d447 Merge pull request #59 from cypherbits/link_privacy 
Add chat link privacy with noreferrer and noopener
 2020-05-02 18:27:57 +02:00
Daniel Winzen 95c1faf1d9 Correctly calculate frameset hight for non-upload enabled users 2020-05-02 18:23:35 +02:00
Daniel Winzen d58fdeee8b Added example CSS that moves the chatters list to the right 2020-04-12 12:45:39 +02:00
Daniel WinzenandGitHub e0d6fe5d91 Merge pull request #57 from infoabcd/master 
Full Chinese translation
 2020-04-11 11:21:38 +02:00
Daniel Winzen 03f9a86515 Allow making file upload member-only and added required tag to captcha input 2020-02-29 14:26:48 +01:00