Commit graph

1062 commits

Author SHA1 Message Date
Niklas Bittner
c684f3535a feat: migrate to bcrypt for passwords 2024-03-28 12:14:45 +01:00
Niklas Bittner
2751bb2028 fix: arbitrary lfi on wish image 2024-03-28 12:14:38 +01:00
Niklas Bittner
212c4754ee fix: user registration disabled 2024-03-28 12:14:30 +01:00
Niklas Bittner
5104f0205b fix: database test input sanitization 2024-03-28 12:14:21 +01:00
Niklas Bittner
ed45d182d1 fix: api authentication bypasses 2024-03-28 12:13:59 +01:00
Niklas Bittner
d60c2ff432 fix: stored xss with wish url 2024-03-28 11:36:12 +01:00
grandeljay
9d3e0cc16d fix: #192 session id truncated 2024-01-27 13:51:38 +01:00
grandeljay
523a5b18f9 refactor: apply new code style 2024-01-27 13:50:58 +01:00
grandeljay
103e2f5a28 fix: adding wish to arbitrary list 2024-01-16 17:36:46 +01:00
grandeljay
d913cc16b8 refactor: return associative array 2024-01-16 17:36:17 +01:00
grandeljay
7735b267b5 refactor: apply new style 2024-01-16 17:35:38 +01:00
grandeljay
3b43f08955 fix: missing authentication when deleting wish 2024-01-16 17:10:05 +01:00
grandeljay
6b1d4cb725 refactor: remove obsolete code 2024-01-16 16:56:07 +01:00
grandeljay
7f285ba3f4 refactor: apply new style 2024-01-16 16:38:38 +01:00
grandeljay
aa67224659 chore: merge style/189-fix-keep-me-logged-in-check into develop 2023-12-21 12:40:40 +01:00
grandeljay
76f64cb713 fix: wish url being incomplete 2023-12-20 11:57:15 +01:00
grandeljay
1aebb20262 fix: session not restoring 2023-12-20 11:47:19 +01:00
grandeljay
7fe5b99e46 style: fix slider checked state
Closes #189
2023-12-20 02:38:20 +01:00
grandeljay
c1f0477a0a chore: remove what you should also know section
Since the user is now informed about affiliate links on the wish add screen, it no longer needs to be displayed on the home page.
2023-12-20 02:29:12 +01:00
grandeljay
7171b94132 feat: add indicator for affiliate links 2023-12-20 02:27:13 +01:00
grandeljay
f0f4bdb2f9 chore: fix filename 2023-12-19 15:47:29 +01:00
grandeljay
d99762305b docs(changelog): add keep a changelog note 2023-12-19 15:26:39 +01:00
grandeljay
21de306cb7 refactor: use markdown files for changelog 2023-12-19 15:07:02 +01:00
grandeljay
07650dc806 docs(changelog): add session management rewrite 2023-12-19 14:15:39 +01:00
grandeljay
b36621d767 feat: improve session loading 2023-12-19 12:49:12 +01:00
grandeljay
5295cbc7e1 fix: affiliate linking 2023-12-18 23:27:37 +01:00
grandeljay
0a667b312d fix: include cookies for fetch request 2023-12-18 16:08:36 +01:00
grandeljay
229d04eb07 fix: loading existing session 2023-12-18 11:59:11 +01:00
grandeljay
fcd6378fef fix: wrong filename 2023-12-17 13:08:43 +01:00
grandeljay
c6896f91c0 fix: #108 channel redirection 2023-12-17 13:08:29 +01:00
grandeljay
d50d4b0aab fix: session not persisting 2023-12-17 12:43:59 +01:00
grandeljay
1ae6f74b44 docs(changelog): add keep me logged in checkbox 2023-11-24 18:52:33 +01:00
grandeljay
02b976a5d0 chore: update repository url 2023-11-24 18:44:24 +01:00
grandeljay
0b87dc3cac fix: not being able to stay logged in 2023-11-24 18:23:13 +01:00
grandeljay
01ad3b6a58 refactor: improve log in procedure 2023-11-24 16:07:07 +01:00
grandeljay
5c1c7dce42 chore: remove persistent cookie 2023-11-24 16:06:51 +01:00
grandeljay
aae51fa752 docs(changelog): add #184 as fixed 2023-11-24 15:40:00 +01:00
grandeljay
27d66368ee fix: logging into non-existent user 2023-11-24 15:37:33 +01:00
grandeljay
8e28024f97 docs(changelog): add #179 as fixed 2023-11-18 12:55:44 +01:00
grandeljay
2966a5c109 fix: #179 shared wishlist not accessible 2023-11-12 12:11:48 +01:00
grandeljay
87de601872 fix: access to private property 2023-11-12 11:18:50 +01:00
grandeljay
d31df30187 docs(changelog): add #177 as fixed 2023-11-09 15:33:33 +01:00
grandeljay
97c7c7142c fix: #177 accessing wishlist without permission 2023-11-09 15:32:31 +01:00
grandeljay
62bb6d961b docs(changelog): add #175 as fixed 2023-11-08 14:54:12 +01:00
grandeljay
81acb9fa27 refactor: fix aligning 2023-11-08 14:50:25 +01:00
grandeljay
8d80c22bdc fix: password reset not working 2023-11-08 14:43:38 +01:00
grandeljay
cdbc0811ba docs(changelog): add #107 as fixed 2023-10-27 18:16:25 +02:00
grandeljay
37fbf05862 fix(wish): #107 price not setting 2023-10-18 01:14:42 +02:00
grandeljay
4450c6df9d chore: update amazon associates id 2023-10-05 14:01:35 +02:00
grandeljay
eed6a415a7 refactor: remove caret from rewrite rules 2023-09-27 10:19:00 +02:00