FreshRSS (Customized)/app/Controllers/userController.php, branch edge

Message for closed registration (#8462)

2026-01-24T14:31:43+00:00

* Add closed msg field i18n fix * Display based on registration type * Save as FreshRSS_Context::systemConf()->closed_registration_message instead * Improve messages * Revert unrelated changes * make fix-all * Minor whitespace * Simplify logic * Fix invalid use of empty() and sympler syntax --------- Co-authored-by: Alexandre Alapetite

Scaling of user statistics (#8277)

2025-12-04T18:11:31+00:00

Fix https://github.com/FreshRSS/FreshRSS/issues/8268 To better support user management on FreshRSS instance with many users. SQL speed improved. On a reduced test with 5 users, including some large accounts (PostgreSQL on a very tiny and slow server), improving from ~2.3s to ~1.8s, which gives ~20% speed improvement. Then tested with 1000 users, with only the default feed (on my old desktop computer): ```sh for i in {1..1000}; do ./cli/create-user.php --user=freshrss$i --password=freshrss; done app/actualize_script.php cli/access-permissions.sh ``` SQLite: ```console $ time cli/user-info.php | wc -l 1001 real 0m1.366s user 0m0.908s sys 0m0.475s ``` PostgreSQL: ```console $ time cli/user-info.php | wc -l 1001 real 0m28.498s user 0m12.137s sys 0m2.217s ``` MariaDB: ```console # time ./cli/user-info.php | wc -l 1001 real 0m49.485s user 0m1.276s sys 0m2.258s ``` Yes, SQLite is much faster - not a surprise for such use-cases, where the TCP connection is not re-used. I have added some CLI options to disable some statistics: ```sh cli/user-info.php --no-db-size --no-db-counts ``` For the Web UI, I have disabled detailed user statistics if it takes too long, and retrieve missing user statistics asynchronously via JavaScript. Lazy loading of the user details based on IntersectionObserver, with maximum 10 requests in parallel. Web UI tested on 1000 users as well. Checked with SeaMonkey.

Fix CLI user creation warning when language is not given (#8283)

2025-12-03T22:41:06+00:00

Discovered during https://github.com/FreshRSS/FreshRSS/pull/8277

Housekeeping lib_rss.php (#8193)

2025-11-11T07:17:12+00:00

* Housekeeping lib_rss.php `lib_rss.php` had become much too large, especially after https://github.com/FreshRSS/FreshRSS/pull/7924 Moved most functions to other places. Mostly no change of code otherwise (see comments). * Extension: composer run-script phpstan-third-party

Strengthen some crypto (#8061)

2025-10-04T12:32:18+00:00

For login, tokens, nonces

configurable notification timeout (#7942)

2025-10-01T08:48:07+00:00

Ref #7931 Ref #5466 Ref #6409 added configuration in "Display" * i18n: fr * Update app/i18n/pl/conf.php Co-authored-by: Inverle * make fix-all * max() * Minor whitespace (I am not a fan of excessive vertical indenting) --------- Co-authored-by: Alexandre Alapetite Co-authored-by: Inverle

Fix autocomplete issues in change password form (#7812)

2025-09-30T08:12:15+00:00

## Screenshots

Before

After

This is an example on Firefox, where the `Master authentication token` field was incorrectly being autofilled. Red borders are indicating that the fields are required. ## List of changes * `required="required"` is now being added to the password fields if the section is open * The `challenge` field is being added if section is open instead of when at least one of the password fields isn't empty due to autocomplete * Added `autocomplete="new-password"` on fields that shouldn't be autocompleted * Unfortunately Chrome requires a workaround with CSS * Not tested on Safari yet * User will be redirected to profile page after successfully changing their password instead of index page ## How to test Autocomplete related changes should be tested on a HTTPS page with saved credentials for FreshRSS

Fix another user self-delete regression (#7877)

2025-09-15T20:17:14+00:00

Regression from #7763 Earlier regression which was fixed before #7626 In addition: * get rid of `data-toggle` (refactor) * show invalid login message if deleting account and entered incorrect password instead of redirect to 403 * remove unused reference to `r` parameter * `forgetOpenCategories()` on login not on any crypto form

Use `Minz_Translate::exists()` for language check in `createUser()` (#7934)

2025-09-09T21:11:38+00:00

(consistency) Related / follow-up: #7878

Add a default language constant (#7933)

2025-09-09T20:01:04+00:00

This replace the use of `en` through out the code.