ratatoeskr-cms/ratatoeskr/backend.php, branch master Ratatöskr is a flexible Content Management System / Blogging Software for PHP 5.3. http://git.laria.me/ratatoeskr-cms/atom?h=master 2021-01-01T19:12:25Z Add htmlesc again 2021-01-01T19:12:25Z Laria Carolin Chabowski laria@laria.me 2021-01-01T19:12:21Z urn:sha1:c9a7d3efc61b585d6765bb8e247d6fa1ace9f4fd Some plugins use that function :(. Get rid of db.php and include config directly in entry points 2020-11-08T20:44:32Z Laria Carolin Chabowski laria@laria.me 2020-11-08T20:44:32Z urn:sha1:f142efd4f77c018b2a0a2530a4601920dc7fdcba Make SITE_BASE_PATH a method of Env 2020-11-08T17:04:12Z Laria Carolin Chabowski laria@laria.me 2020-11-08T17:04:12Z urn:sha1:b8903396199c3437cf980d93c94159a00899a10d This allows us to get rid of utils.php Remove intcmp() 2020-11-08T16:47:21Z Laria Carolin Chabowski laria@laria.me 2020-11-08T16:43:21Z urn:sha1:32b8f4ae4243bc915fe38e28dd991a28c09b4331 Move article status consts into Article class 2020-11-08T16:13:51Z Laria Carolin Chabowski laria@laria.me 2020-11-08T16:13:51Z urn:sha1:743c562ac9a8d8df7a176a989ebee36ad2acbfb7 Plugin: Fix creating plugin database records 2020-11-08T15:52:20Z Laria Carolin Chabowski laria@laria.me 2020-11-08T15:49:39Z urn:sha1:87eb96b81c196ad3fe652128084371b4b510207e Newer MySQL / MariaDB versions are a bit more strict when omitting values on insert which made the old Plugin::create() not work any more. Use password_hash() and friends to hash and verify passwords 2020-09-25T21:09:31Z Laria Carolin Chabowski laria@laria.me 2020-09-25T21:09:31Z urn:sha1:5e347e4efaa81c2108256dc927208cd55dc10baa Previously I rolled my own password hashing function. While it at least used some sort of salt, it's still a terrible idea. The newly created class PasswordHash wraps the password_hash() family of functions but can also check the old password hash format (to distinguish them, the new password hashes are prefixed with a '!'). In PasswordHash::needsRehash we then always report an hash of the old format as being in need of a rehash. That way, these old hashes will be replaced the next time the user successfully logs in. Fix some broken references to the \ste namespace 2020-09-25T19:29:45Z Laria Carolin Chabowski laria@laria.me 2020-09-25T19:24:53Z urn:sha1:ecec65566a4ec77edf2054984663d97df55b877a Should be \r7r\ste now Refactor textprocessors 2020-09-25T19:28:55Z Laria Carolin Chabowski laria@laria.me 2020-09-25T19:18:18Z urn:sha1:378881378aab5454c84cb1fecbbcc675f64dc27f They are now managed by TextprocessorRepository and are instances of Textprocessor. This replaces the global $textprocessors variable. Deprecate htmlesc for Esc::esc 2020-09-25T19:27:43Z Laria Carolin Chabowski laria@laria.me 2020-09-25T19:24:01Z urn:sha1:78c0350b3b7fc025ba565e19bfa195b68e95bb88 "Stole" this class from another project of mine (micropoly)