Public/pics

2 Fork 3

T

yorick 1eb0df6aaa Fix (security): don't accept empty reset keys for users with no password reset pending (#57 )

Currently, it's possible to reset passwords for users that do not have any password reset by providing an empty key, which would match '' or NULL.

Reviewed-on: #57
Reviewed-by: Aaron van Geffen <aaron@aaronweb.net>
Co-authored-by: Yorick van Pelt <yorick@yorickvanpelt.nl>

2026-10-24 18:05:44 +02:00

controllers

Tag: invert behaviour of getCount and getOffset methods

2026-02-14 12:56:50 +01:00

migrations

ResetPassword: add time-out to password resets; prevent repeated mails

2024-11-05 17:19:59 +01:00

models

Fix (security): don't accept empty reset keys for users with no password reset pending (#57 )

2026-10-24 18:05:44 +02:00

public

AlbumButtonBox: un-float album_button_box

2024-06-28 20:25:00 +02:00

templates

FeaturedThumbnailManager: add pager widget; show only 20 thumbs per page

2025-09-24 12:44:05 +02:00

.gitattributes

Initial commit.

2017-11-09 17:00:22 +01:00

.gitignore

Initial commit.

2017-11-09 17:00:22 +01:00

app.php

2020-03-11 22:38:17 +01:00

composer.json

Bump bootstrap version to 5.3 (now stable)

2023-06-02 17:35:34 +02:00

config.php.dist

Fixes the template config for new websites

2018-06-30 17:02:03 +00:00

LICENSE.md

Add BSD 3-clause license.

2020-12-30 13:55:30 +01:00

README.md

Add a readme file to the repo.

2020-12-30 13:55:16 +01:00

server

Process login_url properly.

2017-11-09 17:00:35 +01:00

TODO.md

Implement basic tag management.

2017-11-09 17:00:36 +01:00

README.md

HashRU Pics

This is the development repository for the HashRU photo website. The CMS and its modules originate in Kabuki CMS, but have been extended and are maintained separately in this repository.

Requirements

The Kabuki codebase requires the following PHP extensions to be enabled for full operation:

exif
imagick (PECL)
mysqli

Setup

Copy config.php.dist to config.php and set-up the constants contained in the file.

Running

For development purposes, simply run the server script provided in the root of this repository. This will start a PHP development server on hashru.local:8080.

For a production environment, please set up a proper PHP-FPM environment instead.

Contributing

Pull requests are welcome over at the HashRU Gitea.

License

The HashRU Pics repository is licensed with a BSD 3-clause license, as is Kabuki CMS.