Thomas Lynch
ef4de0fb07
editAccount no longer allows account editors to apply roles to users with root permission
2 years ago
Thomas Lynch
cebf2fe4a9
Convert uploadbanners to new schema checker along with other asset handlers, and fix max flag assets check
2 years ago
Thomas Lynch
a4927c86a1
Convert addflags and addassets to schema formhandler, was still on old form handling code
2 years ago
Thomas Lynch
612e7d0f3a
Add language set middleware to a bunch of routes, and make some minor middleware ordering changes to supprot
...
Add example translations in server.js, a controller for form submission, and in a middleware (file middleware in this case)
2 years ago
Thomas Lynch
e4dd53427e
Add language setting to global settings and board settings
2 years ago
Thomas Lynch
5a7368a0a4
Add a new property to permissions metadata and reflect on frontend inability for users without that "parent" permission to edit roles/accounts to have some permissions e.g. root, edit roles, edit accs
...
Put the metadata into permissions.js (also TODO: key the metadata by bits instead? i.e [Permisions.whatever]: {})
2 years ago
Thomas Lynch
d639460bb3
Bugfix editing from actions form redirecting always to OP instead of post
2 years ago
88b5542908
fix post reporting for not logged-in users
...
That check is only relevant when we try to move a post.
2 years ago
Thomas Lynch
a1ccd6f267
Try to integrate post moving a bit better into the existing combined actions flow
...
Bugfix some move issues
2 years ago
Thomas Lynch
b391c0cb66
Make post editing a GET endpoint with perm check like editstaff/editcustompages, much more sensible
2 years ago
Thomas Lynch
1191ec4dc8
Mostly functional cross board post moving
2 years ago
Thomas Lynch
0d6323669f
Start on cross board thread moves #250
2 years ago
Thomas Lynch
29bb4856ab
2fa improvements
...
- Don't allow code re-use, successfully used codes will be invalid on repeated use for the window time
- Don't attach the full twofactor secret to user object in session for security. Only store a boolean if it's enabled for rendering, checks, etc. The full account should be fetched first before doTwoFactor()
- Better names for some keys of twofactor redis stuff
2 years ago
Thomas Lynch
e6346f9f53
Add twofactor input validation in changepassword controller
2 years ago
Thomas Lynch
4d86406483
Initial commit of 2FA for accounts, TOTP-based
2 years ago
Thomas Lynch
6db781e8b8
Limit ban note length to global limits log_message length
2 years ago
Thomas Lynch
b69337e2f1
Show ban notes in mod view tables and allow editing them
2 years ago
Thomas Lynch
0fc87e752d
make captcha font apply to text AND grid
...
set a new default font which is common on linux, in debian repos, and has the chess characters
remove 24MB font file that came from i dont even remember where
2 years ago
Thomas Lynch
cf92d77a2f
Allow tegaki only, show as attachment with replay. perhaps an option in future to disable this (why not just use spoiler?)
...
Revert condition for potentially confusing backend message, no longer needed because of above
Set color palette when opening replays to match what is set by default when drawing, to prevent weird looking color palette
Tegaki CSS fix
2 years ago
Thomas Lynch
8e5c8b5ab0
Tegaki replaying overhaul
2 years ago
Thomas Lynch
47ab8d22c0
Configurable hot threads max age, update migration, changelog, etc
2 years ago
Thomas Lynch
962481845d
Bugfix double sending headers on return from create model, e.g. if board already exists
2 years ago
Thomas Lynch
c969814f54
First version of grid v2
2 years ago
Thomas Lynch
8f74885ba2
Add noise and paint slider options to grid captcha
2 years ago
Thomas Lynch
05413d72c6
Ref #418 add the abandoned boards handling
...
Fix small bug with incorrect schema for the setting
Set both schedules to immediate: false
2 years ago
Thomas Lynch
3ab0a271c4
Inactive accounts handling schedule, globalsettings for it and migration.
...
Plus the same for abandoned boards handling, just still TODO the schedule.
ref #418
2 years ago
Thomas Lynch
6ec6b32ed5
Change "wave" and "paint" text effect captcha options from toggle to slider
...
Add "noise" text captcha effect slider
Add font lib to get list of system fonts
Add "font" text captcha option
ref #469
2 years ago
Thomas Lynch
c8ebf9a579
Improvement to grid v1 to allow customising, allowing for something like this.
...
-true characters
-false characters
-question text
Make optional (and add additional options for) some filters/effects
-paint
-line
-wave
2 years ago
Thomas Lynch
c4b0e7bb28
Catch obscure error that doesnt really break anything (more motivation to replace dogshit file mupload middleware
2 years ago
Thomas Lynch
652fb0b3c0
close #458
2 years ago
Thomas Lynch
aaae81ff5b
Move alphaNumericRegex to schema checker from todo
2 years ago
Thomas Lynch
e7233d09e7
eslint controlers/, mostly removing all the unused schema check functions
2 years ago
Thomas Lynch
452071ebb0
debugLogs logs board and global setting changes
2 years ago
Thomas Lynch
931fd4546f
bugfix errors -> error, displaying error message as single characters
2 years ago
Thomas Lynch
80a4247a66
adjustable hot threads limit and threshold
2 years ago
Thomas Lynch
62678c2b19
Bans can now be "upgraded" retroactively to expand single IP bans to qrange/hrange bans.
...
The ban table now has a column or whether a ban is of an IP or Bypass ID. (Or pruned IP, if you were dumb enough to ban one of those)
2 years ago
Thomas Lynch
bb582c2de8
"helpers" -> "lib
...
god help anybody who gets serious merge conflicts from this
close #434
2 years ago
Thomas Lynch
300dc481a6
minor bugfix to numberbodyvariable schema checker
2 years ago
Thomas Lynch
74f8e1d0f0
add board toggle
...
add globla setting of board defaults and frontend script defaults
add default tegaki size in settings
make tegaki follow theme
add migration
fixup some junk and change icons as best i can in tegaki.css, avoiding fontawesome
2 years ago
Thomas Lynch
7b784283f8
tldr dnsbl and bypass sucks cock
2 years ago
Thomas Lynch
6798cb843e
bugfixes and improvements to captcha options
...
improve gulp task for proper captchafield grid size
make globalsettings run tasks check for any captchaOptions change, not just type
bugfix grid image size wrong body name
2 years ago
Thomas Lynch
b886434c3d
implement deleting sessions
2 years ago
Thomas Lynch
92c504e59c
rename ip.single -> ip.cloak
2 years ago
Thomas Lynch
00da66f95e
dont destructure roles, access it normally so load() callback will update them properly
...
and rename agian, why do i suck at naming stuff lol
2 years ago
Thomas Lynch
993924a5f2
Start making roles editable ref #377
...
permtemplates are now roles.
They are in the db and can be edited.
Still have to do a few things like the migration, gulpfile and some small details.
2 years ago
Thomas Lynch
78f56b4be0
various bugfixes ref #377
2 years ago
Thomas Lynch
0fe3983d5f
apply template to user accounts ref #377
2 years ago
Thomas Lynch
448660707a
ref #377
...
bugfixes related to board owning, adding/removing staff, transferring, deleting accounts with positions, etc.
better handling existing staff being transferred ownership
owner can't be deleted by other staff
2 years ago
Thomas Lynch
d1f9c78258
ref #377 , the fun begins
...
still a few things to do, see TODO (heh)
mostly working how i imagined, with a few quirks.
pretty happy with it.
2 years ago
Thomas Lynch
fe27d0de13
close #420
...
adjust ban duration edit minimum, so dates (or invalid input) returned as 0 are not allowed
change error message for ban_duration
3 years ago
some random guy