tim/xxx
1
0
Fork 0
Code Issues Pull Requests Releases Activity
69 Commits 2 Branches 0 Tags
ed6f98e0ac9cfafdab3605bcbfdb2df0886a773f
Commit Graph
10 Commits
Author SHA1 Message Date
tim 65426a327d Remove Google Analytics. 
Google shut down the Universal Analytics script that the pages loaded,
and we haven't used it probably a decade
 2026-09-26 15:27:51 +02:00
tim 77800174c9 Use the reCAPTCHA Enterprise API. 2026-09-26 15:27:51 +02:00
tim 504d363642 Limit each image to 1 MB. 
UPLOAD_MAX_MB changes the limit, and UPLOAD_MAX_MB=none removes it.
 2026-09-26 15:27:51 +02:00
tim c4fcef21aa Limit the images that previews keep. 
A preview that fails the captcha or the form token keeps no image. A session keeps one image, the directory has a size limit, and abandoned images go at the next upload.
 2026-09-26 15:27:51 +02:00
tim 5d657d7e45 Take the site address from SITE_URL. 
The feed links, the notification email, the webmaster address and the cookie domain now use it.
 2026-09-26 15:27:51 +02:00
tim be814a3ba5 Take redirects off the Host header. 
Same-site redirects are now relative paths, and a saved page on another site is ignored. The HTTP to HTTPS redirect takes its host from the new SITE_URL setting, and without it the pages refuse plain HTTP.
 2026-09-26 15:27:51 +02:00
tim 2c3a744e2e Turn the captcha off when RECAPTCHA_SITE_KEY is empty. 2026-09-26 00:19:21 +02:00
tim f97bdecbc1 Log database errors instead of showing them. 
display_errors is off unless DISPLAY_ERRORS is set in .env.
 2026-09-25 21:57:11 +02:00
tim e881ddb458 Keep uploads outside the web root. 
save_uploaded_file() read, and prune_images() deleted, any path in the
"uploaded" POST field. Uploads now go to UPLOAD_DIR under a random name
that only the session knows.
 2026-09-25 21:31:47 +02:00
tim 7fc40728f5 Initial commit. 2013-05-17 23:38:44 +02:00