Commit Graph

139 Commits

Author SHA1 Message Date
Kerim d6e4c9171b from mac 2022-12-14 20:55:13 +05:00
merdan 9489f49958 home page start 2021-03-11 15:16:57 +05:00
Ayumi df4c2cf86e
Default session.same_site to Lax (#5293) 2020-10-12 12:10:17 -06:00
Luke Towers 8a785e4393 Tightened up the default permissions granted to the "Publisher" system role out of the box 2020-09-11 02:10:59 -06:00
Ben Thomson 619be11d23
Make "october:env" command privileged.
This allows developers to use the command even if plugins are failing to boot due to missing configuration options (such as the DB configuration being incorrect). Previously, plugins which use the database in boot would prevent the command from running if the database details were incorrect.

This change removes a barrier from configuring your site correctly.
2020-09-09 17:47:18 +08:00
Luke Towers dd5fd34ae7 Merge branch '1.0' into develop 2020-09-04 01:27:53 -06:00
Luke Towers 7cb148c167 minor cleanup and docblocks 2020-09-04 01:23:03 -06:00
Samuel Georges 4c650bb775 Security fixes for v1.0.469
Introduces sandbox policy to block extendable methods allowing arbitrary code execution
2020-09-04 13:02:01 +10:00
Ben Thomson 4141646105
Implement improved "set build" replacement (#5087)
This change implements an improved "set build" utility through the "october:version" Artisan command that, instead of checking the October CMS server for the latest build, checks the module files against a source manifest kept on GitHub.

This check allows us to accurately determine the build based on the module files in the October CMS installation, and can even detect versions if the module files are modified (except in the cases of extreme modification).

An additional utility has been implemented, "october:manifest", which will build the manifest JSON file in order to provide the maintainers with a way of generating this manifest file as required.

Replaces #4615.
2020-09-02 14:48:08 +08:00
Luke Towers e78d5fe2bf Merge branch 'develop' into wip/laravel-6
# Conflicts:
#	modules/system/classes/UpdateManager.php
#	modules/system/classes/VersionManager.php
2020-04-29 16:58:58 -06:00
Kallef Alexandre b4c65e9feb
Added plugin:rollback command (#4389) 2020-04-11 09:46:22 -06:00
Ben Thomson 5e4916148f Revert Laravel Dusk changes (#4919)
The Browser tests will be made into a RainLab plugin. (https://github.com/rainlab/dusk-plugin)
2020-02-07 16:59:39 +08:00
Ben Thomson 65c3a88179
[Laravel 6] Add support for Laravel Dusk tests (#4919) 2020-02-03 12:21:04 +08:00
Luke Towers f700e236d1
Merge branch 'develop' into wip/laravel-6 2020-01-27 12:06:45 -06:00
Luke Towers 2b5d811180 Allow plugins to be loaded on routes starting with /combine but not /combine/.
Fixes #4886.
2020-01-21 12:26:20 -06:00
Ben Thomson c7b85fcd6e
Default to using Bootstrap 3 pagination.
L5.6 introduced Bootstrap 4 validation. While it is likely our pagination is all custom and is using the Storm UI, just to be safe, we'll make sure pagination is using Bootstrap 3 classes in all circumstances to retain current functionality.

This should have no effect on simple pagination, which is overriden with our custom template on the next line.
2020-01-21 08:44:10 +08:00
Samuel Georges e19f8b287d Db::getConfig has no second arg
Currently returns null via Arr::get(arr, key, default=null)
2019-12-29 11:46:01 +11:00
Samuel Georges 160ae441ff Shorten default string length
- Introduce varcharmax config item, this default eventually should be increased to 255, when MySQL 5.6 support is dropped
- Config item can be kept to retain legacy support
- Only apply to mysql driver, previously was impacting other drivers
- Source true config values, previously was sourcing hard coded "mysql" connection values
2019-12-29 11:43:27 +11:00
Ben Thomson a66310bd56
Allow changing of Backend user passwords through CLI. (#4836)
Adds an Artisan command "october:passwd" to change the password of a Backend User through CLI. This command may only be run through CLI - it will not work if called through a web handler.

Refs: #3521, #4835. Docs: 1f3bfc719e
2019-12-23 08:19:15 +08:00
Christophe Vuagniaux f0db465f46 Avoid array_intersect error if argv is not defined (#4751)
Credit to @ChVuagniaux. Can be triggered when attempting to run Laravel HTTP tests on OctoberCMS (https://laravel.com/docs/6.x/http-tests)
2019-11-10 10:52:36 -06:00
Luke Towers 02d894f52b Fix use of Storage::url() for local disks that haven't been configured correctly. Fixes #4581 2019-09-02 12:33:36 -06:00
Ben Thomson a59d3b83eb Code quality clean up (#4449)
Credit to @bennothommo
2019-07-18 08:50:37 -06:00
Samuel Georges e7ec0be0c1
Merge pull request #3908 from octobercms/wip/halcyon-db-datasource
Database layer for the CMS objects
2019-06-01 14:28:34 +10:00
Jim Cottrell e2c89fb3a2 If using database, don't call plugin task scheduling until initial system migration runs. (#3712)
Fixes #3208. Replaces #3706. Credit to @jimcottrell
2019-04-19 14:54:48 -06:00
Luke Towers 630d543959 Merge branch 'develop' into wip/halcyon-db-datasource 2019-04-11 12:30:29 -06:00
Luke Towers c86bec7f08 Replace deprecated Twig class references, refs: #4209. 2019-03-27 13:15:17 -06:00
LucasZdv 44cc080769 Added plugin:list, plugin:disable, & plugin:enable artisan commands (#4127)
Credit to @LucasZdv. Documented by https://github.com/octobercms/docs/pull/356
2019-02-22 12:50:01 -06:00
dzava a539a36b30 Override the Paginators defaultSimpleView (#3652)
Credit to @dzava. Fixes #3355.
2019-01-21 23:49:25 -06:00
Luke Towers bba42c36e9 Added outline of theme:sync command 2018-11-05 14:35:41 -06:00
Levente Huszko edcc4af68a Properly utilize the plainOnly flag in mail.beforeAddContent (#3479)
Credit to @hlev
2018-09-24 16:54:16 -06:00
Nathan van der Werf 0f0d108da0
Remove unused imports 2018-08-24 19:51:59 +02:00
Nathan van der Werf 66fa03f17e
Revert "Remove unused imports"
This reverts commit 742a5f415b.
2018-08-24 19:40:40 +02:00
Nathan van der Werf 742a5f415b Remove unused imports 2018-08-15 18:27:36 +02:00
Jim Cottrell bfee483805 Adds support for minifying framework assets (#3240)
Fixes #2753. Credit to @jimcottrell
2018-07-05 17:57:17 -04:00
interworks-morr d52274bbb6 Don't show mail branding menu item unless system.manage_mail_templates is assigned to current user (#3624)
Fixes #3623. Credit to @interworks-morr
2018-07-02 19:14:51 -04:00
Luke Towers bd9f88587f
Fix issues with MySQL utf8mb4 support
Fixes: https://github.com/octobercms/october/issues/1927. Related: https://github.com/laravel/framework/issues/17508. Issue occurs when database configuration related to full support for the utf8mb4 charset is incorrect; MySQL > 5.7 & MariaDB > 10.2 doesn't have this issue because they default to the correct configuration values; this fix solves the issue for older versions of MySQL and MariaDB without requiring database server configuration changes.

The root cause of the issue with the utf8mb4 encoding is that both InnoDB and MyISAM have too low of an index key prefix limit (767 bytes and 1000 bytes respectively) to properly store 255 4-byte characters; which would take 1024 bytes. See the docs on InnoDB limitations: https://dev.mysql.com/doc/refman/5.7/en/innodb-restrictions.html

In MySQL >= 5.7 & MariaDB >= 10.2 this limit has been bumped to 3076 bytes by the changing of the default value of the `innodb_large_prefix` configuration property (introduced in MySQL 5.5) to true; which is what bumps up the limit. In order to manually set that property to true on earlier versions, `innodb_file_format` must be set to `BARRACUDA` and `row_format` must be `DYNAMIC` or `COMPRESSED`. See http://mechanics.flite.com/blog/2014/07/29/using-innodb-large-prefix-to-avoid-error-1071/ for more information. 

This change fixes the issue by changing the default string length to 191 (total of 764 bytes, within the older size limit) when the MySQL database config is detected to be using the utf8mb4 charset.
2018-02-17 17:00:32 -06:00
Luke Towers aee81081df Hide Settings menu when no sub pages to display (#3172)
Remove the Settings main menu item if there are no submenus to display. Fixes https://github.com/octobercms/october/issues/2175
2017-10-18 11:22:33 -06:00
Samuel Georges 11abddf0b6 Errors not written to database events log
Fixes #2998
2017-07-31 17:21:48 +10:00
Samuel Georges 5a417d72d3 Sending raw markdown emails
If raw == (string) content, then it is a markdown email (html/text are ignored -- markdown sets them)
If raw == (bool) true, then it is true raw (html/text must be supplied)
2017-07-30 00:25:11 +10:00
Samuel Georges 3f0e6d8b29 Register `appName` as global view variable
Minor mail template improvements
2017-07-23 17:20:53 +10:00
Samuel Georges 28c30daa4f Use safe md parsing for mail
Ensure backward compatibility by disabling indented code blocks for mail templates
Tweak mail brand colors to match October
2017-07-22 19:01:20 +10:00
Samuel Georges 4e5ac44999 Create remaining mail partials
Improve mail partial lookup method
2017-07-22 18:03:58 +10:00
Samuel Georges 31ffadbc4c Introduce mail branding settings 2017-07-22 17:20:48 +10:00
Samuel Georges 181be5979a More meaningful mail views 2017-07-22 17:19:47 +10:00
Samuel Georges 4663531de2 Introduce mail partials + twig
Improve layout seeding
2017-07-19 21:14:08 +10:00
Samuel Georges 5a4e2b6b11 Email templates now use Markdown
Move mail template management to MailManager
2017-07-14 16:20:53 +10:00
Samuel Georges f3de51e992 Add backend and notifications settings category
URL -> url
Move mail settings below mail templates
2017-06-05 17:36:44 +10:00
Samuel Georges 165d50d971 Changed the logic to use the container binding event
Validator is now deferred so this won't be available early
2017-05-12 07:19:45 +10:00
Quezler cc17b679f1 Code dusting (#2826)
Code cleaning according to PSR-2 w/ exemptions (mostly dust).
2017-04-24 21:38:19 +10:00
Samuel Georges 462c9cd4e8 Introduce theme logging + log settings
CmsObject changes can now be tracked (disabled by default)
Request logging is now disabled by default (security vector)
2017-02-08 05:44:04 +11:00