summaryrefslogtreecommitdiff
path: root/classes/rpc.php
AgeCommit message (Collapse)Author
2020-09-29exclude E_USER_NOTICE from recent events iconAndrew Dolgov
2020-09-23move timestamp-related stuff to a separate classAndrew Dolgov
2020-09-22fix updater never scheduling feeds for update if they never been updated ↵Andrew Dolgov
before while having default update interval set
2020-09-22use self:: in some places to invoke static methods from the same classAndrew Dolgov
2020-09-22remove a lot of stuff from global context (functions.php), add a few helper ↵Andrew Dolgov
classes instead
2020-09-19update URL pointing to version.jsonAndrew Dolgov
2020-09-17don't try to update manually disabled feeds even if they haven't been ↵Andrew Dolgov
updated before or are marked for a manual update
2020-09-15- enable CSRF support earlierAndrew Dolgov
- remove rpc/sanityCheck from CSRF-excluded calls
2020-09-14- fix multiple vulnerabilities in af_proxy_httpAndrew Dolgov
- fix vulnerability in rewrite_relative_url() which prevented some URLs from being properly absolutized - fetch_file_contents: validate all URLs before requesting them - validate URLs: explicitly whitelist http and https scheme, forbid everything else - DiskCache/cached_url: only serve whitelisted content types (images, video) - simplify filename/URL handling code, remove and consolidate some less-used functions
2019-12-20get_version: fix commit/timestamp lost on subsequent invocations because of ↵Andrew Dolgov
misbehaving caching
2019-12-05versioning changesAndrew Dolgov
- remove VERSION_STATIC - https://community.tt-rss.org/t/versioning-changes-for-trunk/2974 - report git commit/timestamp properly by invoking git instead of trying to parse .git/HEAD etc - remove git-related global constants used when checking for updates
2019-08-16af_readability: add missing fileAndrew Dolgov
2019-08-01change version.json endpoint URLAndrew Dolgov
2019-03-21update: add option to send digestsAndrew Dolgov
2019-03-06remove feedbrowser (other feeds)Andrew Dolgov
2019-03-06archived feeds: expire old entries (schema bump)Andrew Dolgov
2019-01-03rpc, catchupfeed: return counters immediately so that frontend can figure ↵Andrew Dolgov
out next unread feed correctly
2018-12-16rpc/checkforupdates: restrict to administrative access levelAndrew Dolgov
2018-12-16rework git update checking to be initiated by frontend, outside of runtime ↵Andrew Dolgov
info output
2018-12-15rpc/getAllCounters: return seqAndrew Dolgov
2018-12-12requestCounters: remove cooldownAndrew Dolgov
2018-12-06force cast profile id to integer when assigning to session variableAndrew Dolgov
2018-01-14rpc: addfeed: gets login and pass only if need_auth is checked.Colin Vidal
Because of browser form auto-completion, the hidden field login and password can be automatically filled when adding a feed. It would enable feed authentication even if the user doesn't click on need_auth button.
2017-12-04setpref: remove nl2br()Andrew Dolgov
2017-12-03force strip_tags() on all user input unless explicitly allowedAndrew Dolgov
2017-12-03completeLabels: use prepare() not query()Andrew Dolgov
2017-12-02remove long forgotten stuff related to feed debugging actionbarAndrew Dolgov
2017-12-02pref-prefs: PDOAndrew Dolgov
2017-12-01rpc: switch to PDOAndrew Dolgov
2017-05-16remove pubsubhubbub: deadAndrew Dolgov
2017-05-05wrap rssfuncs into rssutils classAndrew Dolgov
2017-05-05move counter stuff to a separate classAndrew Dolgov
2017-05-04move a bunch of functions into Feeds/Article namespacesAndrew Dolgov
+ static function catchupArticlesById($ids, $cmode, $owner_uid = false) { + static function getLastArticleId() { + static function queryFeedHeadlines($params) { + static function getParentCategories($cat, $owner_uid) { + static function getChildCategories($cat, $owner_uid) { move the rest of functions2.php back to functions.php as it is of more manageable size, remove the former
2017-05-04move to Article:Andrew Dolgov
+ static function purge_orphans($do_output = false) { move to Feeds + static function getGlobalUnread($user_id = false) { + static function getCategoryTitle($cat_id) { + static function getLabelUnread($label_id, $owner_uid = false) {
2017-05-04move the following to Feeds:Andrew Dolgov
+ static function catchup_feed($feed, $cat_view, $owner_uid = false, $mode = 'all', $search = false) { + static function getFeedArticles($feed, $is_cat = false, $unread_only = false, + static function subscribe_to_feed($url, $cat_id = 0, + static function getFeedIcon($id) { + static function getFeedTitle($id, $cat = false) { + static function getCategoryUnread($cat, $owner_uid = false) { + static function getCategoryChildrenUnread($cat, $owner_uid = false) {
2017-04-26remove some redundant php closing tagsAndrew Dolgov
2017-04-26fix various issues reported by static analysisAndrew Dolgov
update gitlab-ci config
2017-03-31filter by search results while marking feed as readAndrew Dolgov
2017-03-05improve JS error logging with additional stuffAndrew Dolgov
2017-01-23reference pubsubhubbub classes using their namespaceAndrew Dolgov
2016-07-05fix sql error when subscribing to a feed using feed archiveAndrew Dolgov
2016-03-30set smallish timeout on update check, exclude update checking on initial loadAndrew Dolgov
2016-01-26fix multiple issues with archived feedsAndrew Dolgov
2016-01-04do not automatically call cleanup_tags() in housekeeping tasksAndrew Dolgov
2015-09-26rpc, setpref: properly save settings to active profileAndrew Dolgov
2015-05-21Make _DISABLE_FEED_BROWSER also disable the updateFeedBrowser RPCAnders Kaseorg
The undocumented _DISABLE_FEED_BROWSER option added in commit c39befacb29f3f709e2d248ab6d6235524d6e929 turns off the UI for looking at which feeds other users are subscribed to, but it did not prevent you from manually constructing an RPC call to get the same data. This was a privacy risk for those who consider _DISABLE_FEED_BROWSER important. Signed-off-by: Anders Kaseorg <[email protected]>
2014-02-19remove some unused code reported by phpmdAndrew Dolgov
2013-08-25fix globalUpdateFeeds failing when no active session existsAndrew Dolgov
2013-07-24make globalUpdateFeeds handler use simple update mechanism to prevent script ↵Andrew Dolgov
timeouts
2013-07-11share: move unsharing all articles into the pluginAndrew Dolgov
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-04 16:30:05 +0000