summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)AuthorFilesLines
2017-11-17Fix display of char measurements when only weight is knownYorhel1-1/+1
Fixes https://vndb.org/t2520.229
2017-08-14API: Some additions to the "get *list" commandsYorhel1-6/+16
2017-06-21API: Various additionsYorhel1-2/+18
2017-06-15Fixup variable rename in last commitYorhel1-2/+2
2017-06-15Handler::Chars: Hide instances block when hidden by spoiler settingsYorhel1-2/+5
https://vndb.org/t950.339
2017-06-05Fix "All except characters" to show staffYorhel1-1/+1
Fixes https://vndb.org/t2520.222
2017-05-25API: Add some hidden checks to staff stuffYorhel1-4/+11
2017-05-22API: Add some flags to query staff/seiyuu dataYorhel1-0/+47
2017-04-28API: Made a start on "get staff" supportYorhel1-0/+75
2017-03-26Multi::RG: Fix inverse check for non-official relationsYorhel1-1/+1
2017-03-26Multi::RG: Remove unofficial relations from graph if #vns > 30Yorhel2-9/+28
This makes the relation graphs useful again for several large (mostly) independent graphs that are sometimes linked together by unofficial relations. e.g. https://vndb.org/t8985
2017-03-05Fix 500 when editing character entry without traitsYorhel1-1/+1
Fixes https://vndb.org/t2520.215
2017-03-03Add date filters to VN searchYorhel2-2/+7
2017-03-03VNBrowse: Remember sort options when changing query or filtersYorhel1-2/+2
2017-03-03API: Add traits filter to get characterYorhel1-0/+4
2017-03-03Don't allow deleted or unapproved traits to be linked to char entriesYorhel2-0/+4
Fixes https://vndb.org/t2520.213
2017-02-20APIDump: Add votes2.gz with dates, update sizes in d14Yorhel1-1/+9
2017-02-20Multi::IRC: Whitelist c64 in id detectionYorhel1-1/+1
2017-01-29IRC: Remove eval commandYorhel1-9/+0
I never use it. And it's scary.
2017-01-25Ignore duplicate board IDs in threat editYorhel1-1/+1
https://vndb.org/t2520.209
2017-01-25Disable links to AnimeNFO for the momentYorhel1-4/+5
https://vndb.org/t2520.210
2017-01-25API: Fix Unicode password login + some messagesYorhel1-3/+3
2017-01-21Don't omit metadata with a value of '0'flan1-1/+1
2017-01-19Add Open Graph tags for the main page and vrspcflan7-10/+70
2016-12-04API: Add username filter to "get user" + d11 updatesYorhel1-0/+5
2016-11-27SQL: Use separate role for Multi2.26Yorhel1-25/+24
2016-11-27SQL: Use separate role for the website + disallow access to user dataYorhel3-135/+170
Previously the website was connected to the database with a "database owner" user, which has far too many permissions. Now there's a special vndb_site user with only the necessary permissions. The primary reason to do this is to decrease the impact if the site process is compromised. E.g. it's now no longer possible to delete or modify old entry revisions. An attacker can still do a lot of damage, however. Additionally (and this was the main reason to implement this change in the first place), the user sessions, passwords and email data is now not easily accessible anymore. Hopefully, the new user management abstractions will prevent email and password dumps in case of an SQL injection or RCE vulnerability in the site code. Of course, this only works if my implementation is fully correct and there's no privilige escalation vulnerability somewhere. Furthermore, changing your password now invalidates any existing sessions, and the password reset function is disabled for 'usermods' (because usermods can list email addresses from the database, and the password reset function could still allow an attacker to gain access to anyone's account). I also changed the format of the password reset tokens, as they totally don't need to be salted.
2016-11-03List deleted releases when adding a new releaseYorhel2-5/+29
2016-11-03Add duplicate check to producer entryYorhel3-12/+76
2016-10-16Support more than 100 characters per VNYorhel2-2/+2
2016-10-16VNPage: Add gender icons to character summaryYorhel1-0/+1
2016-10-16Doc update + IRC bot language fixYorhel1-1/+1
2016-09-18Suppress silly Perl 5.22 warnings about extra sprintf argsYorhel3-0/+3
2016-09-11API: Add VN relations "official" fieldYorhel1-5/+2
2016-09-11Fix http->https in d14 + increase IRC quote spam intervalYorhel1-1/+1
2016-08-31API: Add simple "get user" commandYorhel1-4/+24
2016-07-31Handler::VNEdit: Fix bug with new staff/cast being removed on form errorYorhel1-6/+5
The names of the staff were fetched from the existing VN entry, so any newly added staff were not present in that list, and would thus not show up when the form validation failed. This fix makes sure to always fetch the required data from the database.
2016-07-31API: Support array mathing in "get character" vn filterYorhel1-0/+1
2016-07-03Generalize substring search relevance + apply to most dropdown searchesYorhel8-51/+40
This is a generalization of the search improvements made in 7da2edeaa0f6cf7794f4f8f68960497dc1be893c and 92235222dba4e5d0c7713d53ef12e0f10e371b83 And has been applied to the dropdown searches for producers, staff, tags and traits. For all those searches, exact matches are listed first, followed by prefix matches, and then substring matches. Relevance is currently only based on the primary name/title and ignores aliases (except for staff). This is fixable, but not trivial, and I'm not sure it's all that useful.
2016-07-03DB::Tags::dbTTTree: Use hash lookup for parent IDsYorhel1-3/+4
Reduces page load time of the trait index from 200ms to 20ms. Also provides a slight improvement for other tag/trait tree views.
2016-07-03Charedit/traits: Prioritize exact match when finding traitsYorhel2-2/+15
2016-07-03Various staff search improvementsYorhel3-19/+25
- Exact match is now case-insensitive - Main staff search supports exact match with =-prefix - On VN edit dropdown: exact matches are sorted before other matches - VN edit dropdown now also displays original name
2016-07-02JS: Use alias ID in dropdown search to fix selectionYorhel1-1/+1
2016-07-02Util::ValidateTemplates: Fix forgotten import of kv_validateYorhel1-0/+1
2016-07-02Validate release dates + move validation out of vndb.plYorhel3-1/+104
2016-06-19API: Add "tags" filter to "get vn" + increase throttle throttleYorhel1-4/+8
2016-06-12API: Increase some limits + set custom TCP keepalive valuesYorhel1-3/+15
2016-06-05Fix typo on release page.Albin Bernhardsson1-1/+1
2016-05-15API: Allow sorting 'get vn' on stats fieldsYorhel1-1/+4
2016-04-11API: Added "vns" flag and member to "get character"Yorhel1-0/+9