Commit Graph

736 Commits

Author SHA1 Message Date
Frédéric Guillot f084cfa7bd Tweak Sqlite connection settings to reduce database locked errors
Related resources:
- https://litestream.io/tips/
- https://unixsheikh.com/articles/sqlite-the-only-database-you-will-ever-need-in-most-cases.html
2023-07-07 21:30:06 -07:00
Frédéric Guillot b501ef44bc Add missing permission check when creating/updating internal links 2023-06-02 20:32:42 -07:00
Frédéric Guillot c20be8f5fa Add missing project permission check for Move/Duplicate task to another project 2023-06-02 20:30:43 -07:00
Frédéric Guillot 437b141fa2 Fix Parameter based Indirect Object Referencing leading to private file exposure 2023-06-02 20:29:24 -07:00
Frédéric Guillot aade89c9ba Add Themes: Dark, light and automatic mode 2023-05-14 21:14:35 -07:00
Frédéric Guillot 022b106d2d Prevents users to convert subtaks to tasks when custom role does not allow it
Fixes #5069
2023-04-04 19:50:40 -07:00
Alfred Bühler 0216a3136b
Use the appropriate config for the start column in user iCal export 2023-03-07 20:28:42 -08:00
Frédéric Guillot b138a99ce3 Better handling of max file upload size according to PHP settings
- Allow unlimited size
- Better parsing of PHP size

Fixes #4896
2023-03-02 20:51:47 -08:00
Tomas Dittmann f945e45ad4
Add dropdown menu on the board to reorder tasks by ID 2023-02-26 16:13:56 -08:00
Pascal Rigaux 3bbf26b169 Fix broken user mentions in popup comment form
This commit partially reverts commit

> commit 61e63ef9e0
> Author: Tomas Dittmann <chaosmeist3r@gmail.com>
> Date:   Sat Feb 5 05:59:33 2022 +0100
>
>   Remove `project_id` from task URLs

where those things should have been kept

(cf FormHelper::textEditor for the need for $values['project_id'])
2023-01-06 06:03:54 -08:00
mundry ac94004ea9 feat: add functionality to import tasks from a project 2022-11-15 20:41:16 -08:00
irdc 4b76bc5b32
Use a HMAC to sign and validate CSRF tokens, instead of generating random ones and storing them in the session data
* Use a HMAC to sign and validate CSRF tokens, instead of generating random
ones and storing them in the session data. Reduces number of writes to
sessions table and fixes kanboard issue #4942.
* Added missing CSRF check for starting/stopping subtask timers.

Co-authored-by: Willemijn Coene <willemijn@irdc.nl>
2022-09-17 17:23:41 -07:00
Jack Williams c53bee4a08
Translate subtask status on demand
Fixes #4476
2022-07-11 20:45:06 -07:00
Tomas Dittmann c4f9c34f75
Reordering of subtask is not saved 2022-03-17 17:25:46 -07:00
Frédéric Guillot f5bb55bdb8
PHP 8 Compatibility 2022-02-05 11:49:03 -08:00
Tomas Dittmann 61e63ef9e0
Remove `project_id` from task URLs 2022-02-04 20:59:33 -08:00
Tomas Dittmann a40da29a0e don't look for project_id for files
it is only used for late accessibility checking (it was already checked in middleware).

With this, you can create stable file links (as long as the file exists)

I need this change for my [inline image plugin](https://github.com/Chaosmeister/PITM)
2021-12-03 17:28:48 -08:00
Tomas Dittmann cc0745542a switch to helper->text
use the available and overridable markdownparser for previews
2021-10-22 14:27:09 -07:00
Frédéric Guillot cc6f1db846 Avoid user enumeration by using avatar image url 2021-06-05 17:07:43 -07:00
Frédéric Guillot 3c85d35485 Avoid user enumeration using password reset functionality 2021-06-05 15:14:11 -07:00
Frédéric Guillot 71123b0f37 Add missing CSRF checks 2021-06-05 14:59:12 -07:00
Manfred Hoffmann ae39544e10
Catch error when trying to upload empty or invalid avatar 2021-04-19 22:42:58 -07:00
Frédéric Guillot 31ce583743 Write RememberMe cookie only after 2FA has been validated 2021-04-04 17:57:47 -07:00
Patrick Kuijvenhoven a267aa368b
Add new analytic component "Estimated vs actual time per column" 2021-02-21 20:22:45 -08:00
Lakhwinder Singh 2494ff2e3c remove un-used namespaces 2020-10-21 18:44:11 -07:00
Henrik 64a5e7ef56
Added standard notification footer to comment_mail template 2020-06-21 10:36:43 -07:00
Franky Van Liedekerke 0ede384cda
Use Ajax request for Markdown preview
This remove dependency on a Javascript library.
2020-05-01 20:05:53 -07:00
Timo 027f875ac6
Save task list order in user session 2020-04-22 20:40:39 -07:00
Timo 67a5dd6a89
Add option to enable or disable global tags per projects 2020-04-04 11:39:17 -07:00
Frédéric Guillot b39f857dc4 Rename "private" projects to "personal" 2020-02-29 18:51:52 -08:00
Frédéric Guillot c12bbb1613 Fix grammatical errors
Fixes #4420
2020-02-29 16:34:38 -08:00
Andre Nathan c8a617cfcb
Add per-project and per-swimlane task limits
This change allows projects and swimlanes to be configured with task limits that apply to their whole scope (i.e. all active tasks in a project or swimlane, respectively), as opposed to the usual per-column task limits.
2020-02-25 20:26:31 -08:00
Timo 2c98be3ead
Add the possibility to make tags global from project settings 2020-02-10 19:48:51 -08:00
Andre Nathan e59ab08af3 Allow task limits to be applied per-swimlane 2020-02-04 20:16:35 -08:00
Timo f0b53863fb Add colors to tag and category list
Add colors to:

- Global tag list
- Project tag list
- Project category list
2019-11-21 19:36:19 -08:00
Slade 89c8add4f4 Make sure incompatible plugins can be uninstalled from the web ui 2019-11-19 20:23:15 -08:00
Slade cac62d24b4 Show ISO date format in application settings 2019-11-16 17:10:58 -08:00
Michael Vickers 3855617743 Stop last project manager role from being removed
If the user will no longer be a project manager and there no other 
managers then stop the role from being changed
2019-10-09 20:34:21 -07:00
Frédéric Guillot 216f2dee12 Add project ID to ExternalTaskProviderInterface::fetch() 2019-07-30 12:58:36 -07:00
Frédéric Guillot e60686cd10 Fix English grammatical errors 2019-07-15 14:42:15 -07:00
KN4CK3R 1a39c46620 Save thumbnails as PNG to allow transparency 2019-07-10 13:12:02 -07:00
Florian 91d703eb8d Make sure the Project Identifier is saved when creating a project from anther one 2019-07-05 21:50:54 -07:00
Craig Crosby 48acf99fd1 Sort columns by due date 2019-07-02 19:52:22 -07:00
Florian Völker efed94b23d Add "identifier" beside "name" while creating a new project 2019-06-27 19:39:02 -07:00
Frédéric Guillot 0295388461 Add new actions to reorder tasks by column 2019-02-08 13:53:13 -08:00
Frédéric Guillot fa08493348 Limit avatar image size
fixes #4041
2019-02-01 12:12:36 -08:00
Frédéric Guillot 061ba4abe1 Avoid CSRF in users CSV import 2019-01-31 20:06:49 -08:00
Frédéric Guillot a1c437bce8 Do not show projects dropdown when prompting the 2FA code 2019-01-30 21:17:30 -08:00
Frédéric Guillot 322383b084 Always returns a 404 otherwise people might guess which user exist 2019-01-30 21:07:56 -08:00
Frédéric Guillot 19ea9ed620 Add missing CSRF check in TwoFactorController::deactivate() 2019-01-30 20:21:12 -08:00