This website requires JavaScript.
cc6d36e7ce
Merge pull request #66 from cypherbits/php-version-check
Daniel Winzen and GitHub
2020-06-11 10:39:14 +02:00
217bd9b08a
Merge pull request #67 from whalehub/patch-1
Daniel Winzen and GitHub
2020-06-11 10:36:37 +02:00
972f1a62c1
Fix indentation in chat.php
Aaron and GitHub
2020-05-17 14:14:44 +02:00
9ab4622b67
If encryption is enabled, check the PHP version is at least 7.2
cypherbits
2020-05-11 18:24:25 +02:00
62f335d220
Merge branch 'master' of https://github.com/DanWin/le-chat-php
cypherbits
2020-05-11 18:18:03 +02:00
43a6adfa1c
Fix undefined index notice
Daniel Winzen
2020-05-07 21:47:49 +02:00
e137eb81ac
Updated readme
Daniel Winzen
2020-05-07 21:06:16 +02:00
035cfa6aa4
Harden all cookies
Daniel Winzen
2020-05-07 20:50:20 +02:00
e9a1d61027
Allow data URI for img and media in CSP
Daniel Winzen
2020-05-07 20:38:17 +02:00
a4d2484e24
Merge pull request #63 from cypherbits/fix-security-header
Daniel Winzen and GitHub
2020-05-07 20:29:27 +02:00
ac46e658bd
Merge pull request #64 from cypherbits/faster-encryption-load
Daniel Winzen and GitHub
2020-05-07 20:28:35 +02:00
9c5e879d7d
Merge pull request #62 from cypherbits/fix-session-xss
Daniel Winzen and GitHub
2020-05-07 20:28:10 +02:00
b7ff54f8d1
Merge branch 'fix-security-header'
cypherbits
2020-05-03 17:42:29 +02:00
5aeca202ca
fix
cypherbits
2020-05-03 17:41:56 +02:00
6189120795
Merge branches 'faster-encryption-load', 'fix-security-header' and 'fix-session-xss'
cypherbits
2020-05-03 17:31:10 +02:00
c2cd0258f1
If admin defined keys with the right length, do not compute the keys.
cypherbits
2020-05-03 15:18:41 +02:00
0f97ddd573
Fix Content-Security-Policy header.
cypherbits
2020-05-03 15:08:30 +02:00
81b8b78df0
Fix XSS in session variables.
cypherbits
2020-05-03 11:13:52 +02:00
0f3a04b4de
Merge pull request #61 from cypherbits/safe-cookies
Daniel Winzen and GitHub
2020-05-03 10:33:00 +02:00
581aede13f
Session cookies security hardening.
cypherbits
2020-05-02 21:53:19 +02:00
e149c9f97d
Fix reflected XSS vulnerability
Daniel Winzen
2020-05-02 19:42:34 +02:00
1887d42a78
Merge pull request #58 from cypherbits/new-encryption
Daniel Winzen and GitHub
2020-05-02 18:32:50 +02:00
95fd504249
Merge pull request #60 from cypherbits/header_security
Daniel Winzen and GitHub
2020-05-02 18:28:44 +02:00
c728d6d447
Merge pull request #59 from cypherbits/link_privacy
Daniel Winzen and GitHub
2020-05-02 18:27:57 +02:00
95c1faf1d9
Correctly calculate frameset hight for non-upload enabled users
Daniel Winzen
2020-05-02 18:23:35 +02:00
c5e55e8bc0
add more security headers
cypherbits
2020-05-02 18:11:35 +02:00
1cdf6cbf55
add chat link privacy with noreferrer and noopener
cypherbits
2020-05-02 17:25:09 +02:00
7adf9732ef
fix...
cypherbits
2020-05-02 13:53:17 +02:00
f0659466c1
openssl to libsodium
cypherbits
2020-05-02 13:30:29 +02:00
0963acafcf
New generation AES256-GCM encryption by libsodium. PHP >= 7.3 needed.
cypherbits
2020-05-02 12:16:36 +02:00
d58fdeee8b
Added example CSS that moves the chatters list to the right
Daniel Winzen
2020-04-12 12:45:07 +02:00
e0d6fe5d91
Merge pull request #57 from infoabcd/master
Daniel Winzen and GitHub
2020-04-11 11:21:38 +02:00
f605137313
Add files via upload
DouZi and GitHub
2020-04-11 08:09:12 +08:00
03f9a86515
Allow making file upload member-only and added required tag to captcha input
Daniel Winzen
2020-02-29 14:26:48 +01:00
cfd54b09be
Add filtermodkick setting to db if missing
Daniel Winzen
2019-02-24 13:17:01 +01:00
16b81337b1
Merge pull request #52 from virtualghetto/filtermodkick-fix
Daniel Winzen and GitHub
2019-02-24 13:08:47 +01:00
2cd5d18511
Merge pull request #50 from virtualghetto/next-gen-hotlink
Daniel Winzen and GitHub
2019-02-24 13:02:41 +01:00
0ae827450a
Merge pull request #51 from virtualghetto/restore-enc-notes
Daniel Winzen and GitHub
2019-02-24 12:59:47 +01:00
5589999b0f
fix filtermodkick setting
larry_the_cow
2019-02-16 18:42:56 +00:00
4d0b828879
Restore encrypted notes
larry_the_cow
2019-02-03 15:45:18 +00:00
268328f82c
Next-Gen Onion Hotlink
larry_the_cow
2018-11-07 15:50:51 +00:00
a63901fc76
Fix php notice + update copyright year
Daniel Winzen
2018-04-22 15:02:09 +02:00
36a8727d2f
Added Czech translation
Daniel Winzen
2018-04-15 12:30:36 +02:00
5cfe783649
Better check whether messaging is really allowed when validating new messages
Daniel Winzen
2017-10-04 17:38:31 +02:00
d832cf64ec
Added Ukrainian and updated Russian translation
Daniel Winzen
2017-09-11 19:45:02 +02:00
7002e3fbad
Added Italian translation
Daniel Winzen
2017-09-10 17:17:01 +02:00
e83bdda10f
Check captcha before password, delete via cron and fix backtologin with global password enabled
Daniel Winzen
2017-09-01 19:21:03 +02:00
b250285a71
Added Bulgarian translation
Daniel Winzen
2017-07-17 18:51:24 +02:00
0080aee4c3
Updates Spanish translation
Daniel Winzen
2017-05-24 17:26:02 +02:00
a59e248851
Prepare Spanish language files for translation
Daniel Winzen
2017-05-17 19:00:35 +02:00
507407cfc1
Make captcha a little harder + minor SQL optimization
Daniel Winzen
2017-04-20 17:32:27 +02:00
450d97c40f
Updated Russian translation + minor improvements
Daniel Winzen
2017-03-04 20:19:30 +01:00
9a99d34798
Fix update from older versions
Daniel Winzen
2017-01-23 17:43:54 +01:00
2ae523feee
Fix restoring members in backup and restore
Daniel Winzen
2017-01-17 18:16:11 +01:00
d4a35bc60e
Restructure initalization code to fix setting up new chats
Daniel Winzen
2017-01-01 14:09:33 +01:00
8142c9c799
Fix ignore list in profile when using prefix + minor optimization
Daniel Winzen
2016-12-30 10:25:54 +01:00
361137db9f
Prevent non-admins from loging in incognito via setup
Daniel Winzen
2016-12-30 08:36:13 +01:00
5c32a8859f
Force space after /me to prevent posting "as someone else"
Daniel Winzen
2016-12-30 07:19:18 +01:00
208c354284
Sort ignore list alphabetically
Daniel Winzen
2016-12-30 07:05:59 +01:00
c5b080154c
Let offline members be ignored
Daniel Winzen
2016-12-30 07:00:43 +01:00
0e6acb8806
List offline members in ignore too, if they posted a message
Daniel Winzen
2016-12-30 06:46:35 +01:00
675568bd30
Performance optimization in cron
Daniel Winzen
2016-12-30 06:08:50 +01:00
f7950e8ee1
Replace configurable static size for notes and post textarea with css
Daniel Winzen
2016-12-27 19:18:18 +01:00
b1713dadc1
Don't display manual refresh message if animation is unsupported
Daniel Winzen
2016-12-26 09:34:07 +01:00
8dd81ed766
Allow disabling applying of kick filters on moderators
Daniel Winzen
2016-12-25 10:37:04 +01:00
0e82276697
Add personal notes
Daniel Winzen
2016-12-24 18:19:46 +01:00
6c885d7c02
Use scheduled tasks instead of executing them on every action
Daniel Winzen
2016-12-23 20:33:57 +01:00
048a373ef7
bugfix
Daniel Winzen
2016-12-22 18:27:26 +01:00
19df2e030a
Let everyone ignore anyone + bugfixes
Daniel Winzen
2016-12-17 13:06:33 +01:00
cb78be1f17
Fix posting, when using regex characters in a url
Daniel Winzen
2016-12-08 20:47:28 +01:00
87e3864daf
Increase manual refresh timeout, annoying when server busy
Daniel Winzen
2016-11-28 16:27:01 +01:00
370c322dc6
Fix table creation with new timezones
Daniel Winzen
2016-11-27 20:14:52 +01:00
db026ede18
Add message asking for manual refresh, when it stopped working
Daniel Winzen
2016-11-27 19:34:04 +01:00
d405333419
Use PHPs internal timezone management
Daniel Winzen
2016-11-27 16:17:23 +01:00
c4e9d76b05
Turn isSet to isset
Daniel Winzen
2016-11-27 09:57:24 +01:00
98f7634a12
Let login, if an old expired session is submitted via the form.
Daniel Winzen
2016-11-27 09:51:12 +01:00
0ecd188559
Separate changing nickname and password
Daniel Winzen
2016-11-27 08:10:05 +01:00
8ca4f9178b
get rid of global $F
Daniel Winzen
2016-11-26 20:00:12 +01:00
8197ee6679
Add option to make your own font small
Daniel Winzen
2016-11-26 16:01:29 +01:00
351aabc84b
Incorporate Simplified Chinese translation
Daniel Winzen
2016-11-26 09:08:22 +01:00
da99281a5d
Merge pull request #4 from jingjinghack/translate
Daniel Winzen and GitHub
2016-11-26 08:53:50 +01:00
c8cb6cbd79
Get rid of global $H, use functions instead
Daniel Winzen
2016-11-26 08:17:09 +01:00
972a40af51
translate to zh_CN
jingjinghack
2016-11-25 13:13:44 +08:00
92d52d65a0
translate zh_CN
jingjinghack
2016-11-24 21:25:36 +08:00
3640da7f8e
Use more secure password_hash() for password hashing.
Daniel Winzen
2016-11-20 07:03:05 +01:00
771f555305
Minor sql optimization
Daniel Winzen
2016-11-19 09:33:43 +01:00
bcc80c468d
Add stronger randomness on session key generation
Daniel Winzen
2016-11-19 06:50:57 +01:00
88a91658bb
turn array() into shorter []
Daniel Winzen
2016-11-16 20:34:47 +01:00
8ce48c837c
Wrap label tags around input, to optimize html output size
Daniel Winzen
2016-11-16 19:57:31 +01:00
25393dd377
Fix uninitialized database access
Daniel Winzen
2016-11-13 08:24:28 +01:00
33c4095c58
Fix initialization on first setup
Daniel Winzen
2016-11-13 08:18:29 +01:00
002b618443
Use simpler UNION in SQL for optimization
Daniel Winzen
2016-11-06 10:03:43 +01:00
5abfb9c9d6
Optimize PM deletion, just keep them around instead of aggressively deleting
Daniel Winzen
2016-10-30 19:40:10 +01:00
6023afa1e7
Improved inbox deletion handeling
Daniel Winzen
2016-10-29 21:39:53 +02:00
bbbfe93dce
A few bugfixes and improvements
Daniel Winzen
2016-10-27 22:03:22 +02:00
005bc932ed
Add u Modifier to preg_* to imporve multi-byte UTF-8 character handling
Daniel Winzen
2016-10-05 20:16:26 +02:00
9a2e5868e8
Fix multi-byte after @mention
Daniel Winzen
2016-10-05 18:30:44 +02:00
0e969a1894
Allow making CSS more unique, by adding more ids/classes and allowing to over-write hardcoded CSS
Daniel Winzen
2016-10-03 10:40:00 +02:00
75263aea4b
Add integrated file upload support
Daniel Winzen
2016-09-24 08:51:20 +02:00
18d5954138
Make @mention work at the end of a line in multi-line mode.
Daniel Winzen
2016-09-20 18:48:54 +02:00
v1.22.1