82 commits

Author	SHA1	Message	Date
Max Pozdeev	28439ec79c	generate csrf token before login (fix for 454ed89)	2022-02-09 22:38:13 +03:00
Max Pozdeev	263e65ae53	rename mysqli api class	2022-02-08 21:06:50 +03:00
Max Pozdeev	17921defa9	update ajax response caching	2022-02-07 23:41:01 +03:00
Max Pozdeev	c937596d43	remove trailing ?> in the end of php files	2022-02-07 19:16:07 +03:00
Max Pozdeev	05b49d30d8	do not use version.txt and @VERSION	2022-02-07 19:08:41 +03:00
Max Pozdeev	7a5fab82ca	rename 2 functions	2022-02-07 09:57:03 +03:00
Max Pozdeev	acfb316e9a	convert indention to spaces in php files	2022-02-06 23:37:02 +03:00
Max Pozdeev	c209486c5a	* Authenticated session becomes invalid if password or salt are changed	2022-02-06 14:52:39 +03:00
Max Pozdeev	fe6164bf7d	fix session handling broken in 1b3d232	2022-02-06 14:24:02 +03:00
Max Pozdeev	c4cab440ac	edit final link to homepage while setup	2022-02-06 14:15:21 +03:00
Max Pozdeev	553a66651c	+ Password is stored as hash	2022-02-06 14:08:15 +03:00
Max Pozdeev	efedefdae5	use new config file for database connection, setup is updated to support it	2022-01-31 21:49:26 +03:00
Max Pozdeev	341eeac12a	maintain license headers	2022-01-14 22:45:30 +03:00
Max Pozdeev	33810e79f7	* can use #NUMBER to make a link to the task by id in markdown note; opens this link as a search (experimental)	2022-01-14 22:13:04 +03:00
Max Pozdeev	1b3d232dbe	* add samesite=lax flag for session cookie ... (cherry picked from commit ea2ace9066)	2022-01-12 02:16:19 +03:00
Max Pozdeev	37f83a9ce7	* rename die2() to logAndDie() ... (cherry picked from commit 61bdead019)	2022-01-12 01:44:22 +03:00
Max Pozdeev	d67571fcb3	- use token header from $_SERVER; fixed errors with auth token headers occured on some software configurations ... (cherry picked from commit 5b3dd0d0fc)	2022-01-12 01:31:18 +03:00
Max Pozdeev	f23ca43eea	* use simple token in settings ... (cherry picked from commit 866c34e2e0)	2022-01-12 01:31:18 +03:00
Max Pozdeev	9f78149fe1	* use simple token header for ajax request for safety	2022-01-12 01:30:33 +03:00
Max Pozdeev	4e79da6caf	* increase session cookie lifetime	2022-01-12 00:49:16 +03:00
Max Pozdeev	5248a9bc33	* fix incorrect title in browser history in some cases	2022-01-12 00:37:55 +03:00
Max Pozdeev	73ab4ac10f	* use database table for session handling	2021-07-29 16:52:44 +03:00
Max Pozdeev	39c9d1608d	* use utf8mb4 charset in mysql database	2021-07-28 18:50:23 +03:00
Max Pozdeev	34f837d8d2	* general settings are stored in database	2021-07-28 18:05:14 +03:00
Max Pozdeev	0a5fdbbffa	move DBConnection class to separate file	2021-07-26 22:04:12 +03:00
Max Pozdeev	145b58f7cf	require PHP 7.0+	2021-07-26 21:57:30 +03:00
Max Pozdeev	e1c5540c13	continue refactor db classes	2021-07-26 19:13:57 +03:00
Max Pozdeev	651f9687f9	implement DBConnection::setPrefix()	2021-07-26 17:34:48 +03:00
Max Pozdeev	938a72e7ed	move Config class to separate file	2021-07-25 19:20:24 +03:00
Max Pozdeev	648364aa23	* add support of PDO mysql extension (try it by default while setup)	2021-07-25 00:10:27 +03:00
Max Pozdeev	3c769c6d31	rename mysql class to class.db.mysqli.php	2021-07-24 23:17:19 +03:00
Max Pozdeev	dafd4d81a6	require php 5.6	2021-07-24 18:27:23 +03:00
Max Pozdeev	62e1dc0c96	* changes in error logging: show only in debug mode	2021-07-24 18:16:16 +03:00
Max Pozdeev	ae22d091bf	move mtt.js options to php js_options()	2021-04-21 15:03:26 +03:00
Max Pozdeev	ae8cc12e2f	Merge branch 'master' into v1.6.x	2021-04-19 20:55:01 +03:00
Max Pozdeev	924a2147ff	* do not use stop_gpc() for compatibility with PHP 8	2021-04-19 20:12:24 +03:00
Max Pozdeev	20bd4cd822	* start to make responsive (600px breakpoint); remove singletab commands; remove urls to mobile and desktop themes	2020-10-19 23:48:19 +03:00
Max Pozdeev	b39782a246	- fix urls for rss and export in ie8 theme	2020-10-05 18:16:20 +03:00
Max Pozdeev	a61679200d	- remove unnecessary error_log()	2020-09-30 22:37:35 +03:00
Max Pozdeev	d778971aa7	* do not use server port while MTT Url detection	2020-09-30 21:24:28 +03:00
Max Pozdeev	a94f3034d1	- Bugfix: builder can not set version	2020-09-27 18:38:33 +03:00
Max Pozdeev	15fb7f86b0	dont die if language file not found	2020-09-24 19:21:13 +03:00
Max Pozdeev	17b271b88e	* can override language with 'lang' cookie or query param	2020-09-20 16:46:07 +03:00
Max Pozdeev	580640e412	move themes to /content/themes/ folder	2020-09-18 23:10:39 +03:00
Max Pozdeev	83ac15e582	Move langs to /content/lang/ folder	2020-09-18 23:02:45 +03:00
Max Pozdeev	734c407917	little more security for config values	2020-09-12 17:02:15 +03:00
Max Pozdeev	dbfa448576	* add basic auto-detection of mobile devices (disabled yet)	2020-09-12 16:17:43 +03:00
Max Pozdeev	4929663437	remove unnecessary need_auth()	2020-09-08 14:50:06 +03:00
Max Pozdeev	bd698949a5	replace global var $needAuth with function need_auth()	2020-09-08 14:37:29 +03:00
Max Pozdeev	7c72aa8b5d	rename pda.css to mobile.css; updated mobile_url	2020-09-04 15:26:51 +03:00