summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
10 daysFix protector_content_verify_access ignoring user roles when called via serviceHEADmasterLester Caine1-0/+6
When invoked through invokeServices('content_verify_access'), $pHash is null, so in_array always fails and protected content blocks everyone. Derive roles from $gBitUser when $pHash is not supplied, matching protector_content_load. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-07Remove duplicate ipackage attributes from biticon callsLester Caine1-1/+1
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-06protector: guard empty roles with ?: [-1] to prevent Firebird IN() errorLester Caine1-2/+2
For anonymous users getRoles() returns an empty array, producing IN() with no values — invalid Firebird SQL (-104 Token unknown). Apply the standard guard so anonymous requests get IN(-1) instead, matching the anonymous role_id. Affects both protector_content_list() and protector_content_load(). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-04Convert {booticon} to {biticon} — freedesktop/tango icon names throughoutLester Caine1-1/+1
Replace all {booticon iname="icon-*"} and {booticon iname="fa-*"} calls with {biticon ipackage="icons" iname="<freedesktop-name>"} using the tango iconset. Mapping covers ~70 distinct old names to tango equivalents (edit-delete, document-properties, go-next, lock, internet-mail, etc.). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-21Fix storeProtection can't reset to System Default; tidy getProtectionListLester Caine1-5/+4
- storeProtection: check isset(role_id) and valid content_id rather than verifyId(role_id) — role_id=-1 (System Default) now correctly DELETEs any existing role restriction instead of being skipped entirely - getProtectionList: remove garbled dead initialiser, use verifyId() guard Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14php-cs-fixer tidies to php8.5 standardsLester Caine4-23/+24
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-10php8.5 tidiesLester Caine1-5/+5
2026-05-09default to no user setLester Caine1-1/+1
2026-04-19Use nginx download and protection of content in attachmentsV5-php84lsces1-1/+1
2026-04-16Style tidies for PHP8.4lsces1-8/+8
2026-04-16Style tidies, but also extend the protection system to use X-Accel-Redirect ↵lsces1-21/+29
on nginx (tested) or X-Sendfile on apache (untested). Originally to secure private content, but complicated by the need to hide thumbnails as well, which are now sorted by auth_request on nginx, but need looking at on apache.
2026-04-16Missing service entry to actually check access permissionslsces1-0/+1
2026-04-02mime pdf plugin now uploads text layer to populate the liberty object data ↵lsces1-0/+12
field to allow search of pdf documents
2026-03-27Figured what has been causing a problem with using && and || in smarty ↵lsces1-4/+4
templates and related to mistake in processing {2} elements that should use curly brackets and not revert to square ones.
2025-09-12PHP8.4 style fixes to make role selection worklsces2-4/+4
2025-09-10Start protector in bit_setup_inc, ensure blank user is seen as 0 and short ↵lsces2-28/+30
arry format tidy
2025-08-24Initial population in githublsces9-1/+823
2025-08-24Initial commitLester Caine1-0/+1