All pull requests

Pull requests

• database: Do not fail on a version that does not exist

  #536·guidol-ive opened Oct 27, 2026Collaborator·

  ·
  1

• peer_reviewed_article: Let only the creator or an administrator publish

  #535·guidol-ive opened Oct 27, 2026Collaborator·

  ·
  1

• database: Keep the ids of versions unique over the languages of a page

  #534·guidol-ive opened Oct 27, 2026Collaborator·

  ·
  1

• Fix invalid HTML that libxml reports on every page

  #533·guidol-ive opened Oct 27, 2026Collaborator·

  ·
  1

• hypha.php: Pack subfolders, assets, macros and the default theme, and create data/

  #532·guidol-ive opened Oct 27, 2026Collaborator·

  ·
  1

• peer_reviewed_article: Write the title into the page heading as text

  #531·guidol-ive opened Oct 27, 2026Collaborator·

  ·
  1

• Stop logged-in article views and the moderation view from crashing

  Impact: HighLevel: ModerateStatus: Needs reviewType: BugValue: Users
  #519·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

  6

• Cache anonymous page views and site data in APCu (#411)

  Impact: HighLevel: DifficultStatus: Needs reviewType: BugValue: Security
  #518·guidol-ive opened Oct 26, 2026Collaborator·

  ·

• index: Step through the letters without $capital++

  Impact: MediumLevel: EasyStatus: Needs reviewType: BugValue: Users
  #516·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• hypha_incrementStats: Skip the view instead of waiting for the lock

  Impact: LowLevel: EasyStatus: Needs reviewType: EnhancementValue: Coders
  #513·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• upload/image: Require login and escape markup in the JSON answer

  Impact: HighLevel: EasyStatus: Needs reviewType: BugValue: Security
  #511·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• Remove imagedestroy() (deprecated in PHP 8.5) and the mcrypt fallback

  Impact: LowLevel: EasyStatus: Needs reviewType: BugValue: Coders
  #510·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• Mark parameters with a null default explicitly nullable (deprecated in PHP 8.4)

  Impact: LowLevel: EasyStatus: Needs reviewType: BugValue: Coders
  #509·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• Fix PHP 8.1 deprecations: strftime(), null to setAttribute(), float to int

  Impact: LowLevel: EasyStatus: Needs reviewType: BugValue: Coders
  #508·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• pages: Use {$var} instead of ${var} in a string (deprecated in PHP 8.2)

  Impact: LowLevel: EasyStatus: Needs reviewType: BugValue: Coders
  #507·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• hypha.php: Confine maintenance to system files, add a token, use HTTPS

  Impact: HighLevel: ModerateStatus: Needs reviewType: BugValue: Security
  #506·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• hypha.php: Refuse login while the superuser values are empty

  Impact: HighLevel: EasyStatus: Needs reviewType: BugValue: Security
  #505·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

  2

• hypha.php: Only embed shareable system files in the builder

  Impact: HighLevel: EasyStatus: Needs reviewType: BugValue: Security
  #504·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• Keep image names inside data/images and survive unreadable images

  Impact: MediumLevel: ModerateStatus: Needs reviewType: BugValue: Security
  #503·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• Only accept known datatypes as the type of a new page

  Impact: MediumLevel: EasyStatus: Needs reviewType: BugValue: Security
  #502·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• Require login for tag commands and fix creating a tag

  Impact: HighLevel: EasyStatus: Needs reviewType: BugValue: Security
  #501·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• Stop the request when the CSRF token is invalid

  Impact: MediumLevel: EasyStatus: Needs reviewType: BugValue: Security
  #500·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• Add a configurable site address and stop trusting the Host header

  Impact: HighLevel: ModerateStatus: Needs reviewType: BugValue: Security
  #499·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• jquery: Upgrade from 1.7.1 to 3.7.1

  Impact: MediumLevel: ModerateStatus: Needs reviewType: EnhancementValue: CodersValue: Security
  #498·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1

• mailinglist: Send at most one confirmation mail per 15 minutes

  Impact: MediumLevel: EasyStatus: Needs reviewType: BugValue: Security
  #497·guidol-ive opened Oct 26, 2026Collaborator·

  ·
  1