.inc.php please ...

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge remote-tracking branch 'upstream/master' into social-master

scripts/nukefile.php for blasting crap from the server

Deletes notices and the locally stored file based on File id, as
you may want to just get rid of shit sometimes.

.inc files are mostly readable from the internet, e.g. http://example.org/some/file.inc and should be avoided.

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'master' of https://git.gnu.io/gnu/gnu-social into social-master

Signed-off-by: Roland Haeder <roland@mxchange.org>

urlhash will _be_ NULL on update, so NOT NULL won't work

remove _all_ file URLs not just the duplicates

upgrade fix for file URLs longer than 191 chars

more debugging info on failed schema.php runSqlSet

Merge remote-tracking branch 'upstream/master' into social-master

Signed-off-by: Roland Haeder <roland@mxchange.org>
Conflicts:
lib/inlineattachmentlist.php
plugins/InfiniteScroll/InfiniteScrollPlugin.php
plugins/MobileProfile/MobileProfilePlugin.php
plugins/StrictTransportSecurity/StrictTransportSecurityPlugin.php

Throw exception if Local_group has no corresponding User_group

Throw exception when a Conversation is not found

Redirect to group URL for /nickname pattern

Re-added code from upstream (opps).

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'master' into social-master

Signed-off-by: Roland Haeder <roland@mxchange.org>
Conflicts:
actions/replies.php
classes/Notice.php
lib/noticeform.php
plugins/WebFinger/WebFingerPlugin.php

Merge branch 'master' of git.gnu.io:Quix0r/gnu-social

Signed-off-by: Roland Haeder <roland@mxchange.org>
Conflicts:
actions/apifriendshipsdestroy.php
actions/apifriendshipsexists.php
actions/apifriendshipsshow.php
actions/replies.php
actions/showstream.php
classes/Notice.php
lib/docfile.php
lib/noticeform.php
plugins/APC/APCPlugin.php
plugins/Adsense/AdsensePlugin.php
plugins/Aim/AimPlugin.php
plugins/Aim/lib/aimmanager.php
plugins/Blog/BlogPlugin.php
plugins/Directory/actions/groupdirectory.php
plugins/Directory/actions/userdirectory.php
plugins/Irc/IrcPlugin.php
plugins/Irc/extlib/phergie/Tests/Phergie/Plugin/HandlerTest.php
plugins/Irc/lib/ircmanager.php
plugins/OStatus/classes/Ostatus_profile.php
plugins/Share/actions/apitimelineretweetedtome.php
plugins/Spotify/SpotifyPlugin.php
plugins/TinyMCE/TinyMCEPlugin.php
plugins/VideoThumbnails/VideoThumbnailsPlugin.php
plugins/WebFinger/WebFingerPlugin.php
plugins/XCache/XCachePlugin.php
plugins/YammerImport/actions/yammeradminpanel.php
plugins/YammerImport/actions/yammerauth.php
plugins/YammerImport/lib/yammerimporter.php

Correct content now ... :-(

Signed-off-by: Roland Haeder <roland@mxchange.org>

*** Privacy Leak fixed: ***
- isCurrentProfileInScope() is now more asked if the current profile is allowed
  to see the given notice. It was possible (with upstream master) to see private
  messages in RSS and (possible) JSON feeds

Signed-off-by: Roland Haeder <roland@mxchange.org>

More automated htaccess.sample

magnet URL linkify support

Added missing isPrivateScope().

Signed-off-by: Roland Haeder <roland@mxchange.org>

My fault ...

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge remote-tracking branch 'upstream/master' into social-master

schemacheck hint in newly installed config.php

Allow adding preload token to HSTS header

Use by adding this to config.php:

addPlugin('StrictTransportSecurity', array('preloadToken'=>true));

StrictTransportSecurity syntax fix

Merge branch 'quitagram' into nightly

Fixes that make quitagram work better amongst other things.

Make it easier to hide attachments list header

Fix some ProfileAction stuff, add function profileActionPreparation

Split up files with multiple classes to multiple files for autoload, sorry
for baking this into this commit.

getFullname function on Profile class

No need to fix it for User since we shouldn't use that mostly.

MobileProfile plugin cleanup

Easier to modify DTD for HTMLOutputter

minor coding fixes

deleteuser script changed to deleteprofile

Delete remote profiles by providing their ID if known, or you can
provide their profile URI with --uri=https://...

Useful for cleaning up old, long gone and no longer desired profiles
and their notices.

Better typing in lib/framework.php

We already throw exceptions for PEAR errors

Get better PEAR:DB error logging (debuginfo included)

ksort on commands array to avoid converting to numerical array

Misses this file to merge. I like the comments.

Signed-off-by: Roland Haeder <roland@mxchange.org>

Clearer warning message on non-existing file

file_redirection duplicates are removed too in maintenance script

remove duplicate file URLs script

File_to_post indexing and cleaning preparations

Translation contained bad HTML

latest php-gettext from https://code.launchpad.net/~danilo/php-gettext/

If /var/run was unwritable stopdaemons did not find pid file

Merge remote-tracking branch 'upstream/master' into social-master

Signed-off-by: Roland Haeder <roland@mxchange.org>
Conflicts:
actions/apifriendshipsdestroy.php
actions/apifriendshipsexists.php
actions/apifriendshipsshow.php
actions/replies.php
actions/showstream.php
classes/File.php
classes/Notice.php
lib/docfile.php
lib/framework.php
lib/noticeform.php
plugins/APC/APCPlugin.php
plugins/Adsense/AdsensePlugin.php
plugins/Aim/AimPlugin.php
plugins/Aim/lib/aimmanager.php
plugins/Blog/BlogPlugin.php
plugins/Blog/classes/Blog_entry.php
plugins/Directory/actions/groupdirectory.php
plugins/Directory/actions/userdirectory.php
plugins/Irc/IrcPlugin.php
plugins/Irc/extlib/phergie/Tests/Phergie/Plugin/HandlerTest.php
plugins/Irc/lib/ircmanager.php
plugins/OStatus/OStatusPlugin.php
plugins/OStatus/classes/Ostatus_profile.php
plugins/Share/actions/apitimelineretweetedtome.php
plugins/Spotify/SpotifyPlugin.php
plugins/TinyMCE/TinyMCEPlugin.php
plugins/VideoThumbnails/VideoThumbnailsPlugin.php
plugins/WebFinger/WebFingerPlugin.php
plugins/XCache/XCachePlugin.php
plugins/YammerImport/actions/yammeradminpanel.php
plugins/YammerImport/actions/yammerauth.php
plugins/YammerImport/lib/yammerimporter.php

filename is never used for indexing so let's make it text

varchar is pretty limited so let's avoid it if we can

removed unused config setting

We're logging this already elsewhere

ImPlugin classes generally require background daemons in CLI

If someone designs an ImPlugin which _doesn't_ require the queues to be
handled in background daemons then they can set the requires_cli property
to false in their class.

OpportunisticQM shouldn't try to handle what it can't find

Fix "unique notice form ID" code for reply forms

Don't use <object> for application/ogg

...this was actually because it would autoplay in Iceweasel/Firefox
despite all parameters for autoplay/autostart being set to false or 0.

enclosures in Atom were not included

Revert "Inverse logic error in OembedPlugin"

This reverts commit 9ab996d9e6bee90e2f96a2a17e453a6deebd4a96.

Merge branch 'nightly'

Conflicts:
INSTALL

File_thumbnail->getUrl now gives Attachment_thumbnail action URL

That in turn redirects to the statically stored file.

Allow oEmbed data from all sites by default

Inverse logic error in OembedPlugin

bad URL is a clientError

oEmbed Action logic simplified (early return)

oEmbed helper never finished because of "break 2;"

No more needed (for this fix) but maybe later. So I always only comment them out.

Signed-off-by: Roland Haeder <roland@mxchange.org>

typo fixed ...

Signed-off-by: Roland Haeder <roland@mxchange.org>

Opps, PEAR sucks. Need to call find() before fetch() ... :-(

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'fixes/private_scope_on_tags' into social-master

Needed to add notice_id to selected fields ... :-(

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'fixes/private_scope_on_tags' into social-master

fetch() must work to get this check passed.

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'fixes/private_scope_on_tags' into social-master

??? Not Notice_tag?

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'fixes/private_scope_on_tags' into social-master

??? Not callable?

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'fixes/private_scope_on_tags' into social-master

Introduced isCurrentProfileInScope() which shall check if current profile is
allowed (in scope of) to see the tag.

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'fixes/private_scope_on_tags' into social-master

Grrr, not fixed. So adding debug lines.

Signed-off-by: Roland Haeder <roland@mxchange.org>

Merge branch 'fixes/private_scope_on_tags' into social-master

Possible hack for tags from private dents in public profile or wrong scope (both privacy leak).

Signed-off-by: Roland Haeder <roland@mxchange.org>

Profile::current() suits better here.

Signed-off-by: Roland Haeder <roland@mxchange.org>

Save some memory + added type-hint.

Signed-off-by: Roland Haeder <roland@mxchange.org>

Added debug lines, the first attempt didn't work and I have *no* development system now. :-(

Signed-off-by: Roland Haeder <roland@mxchange.org>

Check scope, else a privacy leaks happens this way:

1) Bob and Alice follow each other and write private notices
   (this->scope=2) to each other.
2) Bob uses tags in his private notice to alice (which she can
   read from him).
3) Alice adds that notice (with tags) to her favorites
   ("faving") it.
4) The tags from Bob's private notice becomes visible in Alice's
   profile.

This has the simple background that the scope is not being
re-checked. This has to be done here at this point because given
above scenario is a privacy leak as the tags may be *really*
private (nobody else shall see them) such as initmate words or
very political words.

Signed-off-by: Roland Haeder <roland@mxchange.org>

Filter out img, video and audio tags in notice HTML

Because we don't want to auto-fetch items from a remote server. Such
items should be delivered as attachment metadata and portrayed in the
way the local instance chooses.

Choices for portrayal are either simply nullifying this and embedding
the data, linking the file remotely requiring a manual click or maybe
use remote oEmbed data etc. to download files locally so no remote
requests have to be made.

Marcus Moeller fixed some layout bugs I introduced

imitate ->boolean with $def=false

php5-intl is required

No need to do pkeyGet if not repeated (thanks hannes)

Kind of reverts commit d9ed2a0

repeated did not always find the Notice (deleted?)

Add repeated_id to SimpleStatusArray for Qvitter's benefit

Moving some more repeat stuff into the Share plugin

Notice properties set in bad order on activityobject saving

Share never actually set the repeat_of value

Event fixes for activityhandlerplugin

repeat actions to Share plugin

Merge branch 'nightly' into repeat_as_shareplugin

ImageFile->resize now totally replaced with resizeTo

Repeats shown in threaded noticelist now handled by plugin

Finalize move of 'repeat' Command