Customized version of FreshRSS, a self-hosted RSS feed aggregator https://git.rdnlsmith.com/fresh-rss-custom/atom?h=1.20.2 2022-08-05T13:10:41+00:00 2022-08-05T13:10:41+00:00 Alexandre Alapetite alexandre@alapetite.fr 2022-08-05T13:10:41+00:00 urn:sha1:6af7854de36be215d7ef59a2663b492d5bd13cfd Allow an empty `--db-prefix` parameter (i.e. optional) in CLI to have no DB prefix 2022-05-23T12:03:19+00:00 Alexandre Alapetite alexandre@alapetite.fr 2022-05-23T12:03:19+00:00 urn:sha1:f89819bd64bb5ada706f9b85abd6f7b600a95786 * Custom logo HTML Add option for custom HTML logo/title in the main Web UI view. Can potentially be different per user. #fix https://github.com/FreshRSS/FreshRSS/pull/3830/files#r850472247 * logo_html in main config With new `./data/config.custom.php` to provide custom values before install * Docker documentation * whitespace * Auto relax CSP to allow images for HTML logo * Documentation 2021-03-26T18:41:33+00:00 berumuron dev@marienfressinaud.fr 2021-03-26T18:41:33+00:00 urn:sha1:cc6c529562ef5751133d97e3fec067c0072f215b * Remove file data/do-install.txt This file was painful during update because we had to remember to delete it each time. It added a security issue by allowing an attacker to reinstall FreshRSS during the update process. The (more powerful) file data/applied_migrations.txt has been introduced in 8619cf6fa to replace do-install.txt. We had to wait for at least one release in order to make sure existing instances of FreshRSS created the migration file. It should be ok now. * Replace i18n install.not_deleted key * Update documentation to update FreshRSS 2021-03-20T17:25:55+00:00 Alexandre Alapetite alexandre@alapetite.fr 2021-03-20T17:25:55+00:00 urn:sha1:a62d6288b17be77a686bb5288ab49931c51aaeef #fix https://github.com/FreshRSS/FreshRSS/issues/3528 config was not properly reloaded after being populated 2021-01-11T21:36:50+00:00 Alexandre Alapetite alexandre@alapetite.fr 2021-01-11T21:36:50+00:00 urn:sha1:8dfe2097992307b572b42647b53a76dd5d93aaa9 * Possiblity to autoinstall in Docker Compose #fix https://github.com/FreshRSS/FreshRSS/issues/3349 It is simply calling our existing CLI: do-install.php and create-user.php https://github.com/FreshRSS/FreshRSS/tree/master/cli FreshRSS will typically be ready a few seconds before the database, so introduce a tolerance when the database is not available / up (yet) by trying a few times to connect. Also useful to avoid service interruption when DB service is restarted. Example: ```yml freshrss-app: image: freshrss/freshrss container_name: freshrss-app hostname: freshrss-app restart: unless-stopped ports: - "8080:80" depends_on: - freshrss-db volumes: - data:/var/www/FreshRSS/data - extensions:/var/www/FreshRSS/extensions environment: CRON_MIN: '*/20' FRESHRSS_ENV: development FRESHRSS_INSTALL: |- --api_enabled --base_url https://rss.example.net --db-base freshrss --db-host freshrss-db --db-password freshrss --db-type pgsql --db-user freshrss --default_user admin --language en FRESHRSS_USER: |- --api_password freshrss --email user@example.net --language en --password freshrss --user admin TZ: Europe/Paris ``` * Minor type f in find * shellcheck 2021-01-02T20:20:19+00:00 Alexandre Alapetite alexandre@alapetite.fr 2021-01-02T20:20:19+00:00 urn:sha1:9c6682e7edf8cbad828088cbeeef66c7ecefdd9a * Avoid manual intialisations of system or user configuration More consistent use of Context * Simplify FreshRSS_Context::initUser * Remove a few manual get_user_configuration * A bit of debugging * Fix context user init * Fix install * Fix concurrency Concurrent requests could lead to bad race condition * Fix actualize cron Fix case when system i initialised several times 2020-10-06T21:19:45+00:00 Alexandre Alapetite alexandre@alapetite.fr 2020-10-06T21:19:45+00:00 urn:sha1:0319cc9d234e107109d988f36f2361b25f9f0777 * Minz allow parallel sessions #fix https://github.com/FreshRSS/FreshRSS/issues/3093 * Array optimisation * Array optimisation missing * Reduce direct access to $_SESSION except in install process * Fix session start headers warning * Use cookie only the first time the session is started: `PHP Warning: session_start(): Cannot start session when headers already sent in /var/www/FreshRSS/lib/Minz/Session.php on line 39` * New concept of volatile session for API calls Optimisation: do not use cookies or local storage at all for API calls without a Web session Fix warning: ``` PHP Warning: session_destroy(): Trying to destroy uninitialized session in Unknown on line 0 ``` * Only call Minz_Session::init once in our index It was called twice (once indirectly via FreshRSS->init()) * Whitespace * Mutex for notifications Implement mutex for notifications https://github.com/FreshRSS/FreshRSS/pull/3208#discussion_r499509809 * Typo * Install script is not ready for using Minz_Session 2020-07-08T10:11:55+00:00 Marien Fressinaud dev@marienfressinaud.fr 2020-07-08T10:11:55+00:00 urn:sha1:8619cf6fa65bbd90871e7b7fe29816092a9d6c33 * Add a Minz_Migrator class Until now, we updated the database structure somewhere in the code but it wasn't always consistent and somehow complicated to find. Also, this code was always checked for nothing. The Migrator aims to improve and ease the creation of migrations. It should improve the way we apply the updates, making the update server almost useless. References: - example of migration (before Migrator): https://github.com/FreshRSS/FreshRSS/commit/cc0db9af4f980829faa4bf0960617807b32fb4fa#diff-11a53443fa81512b128c66b065df0679R10 - update server: https://github.com/FreshRSS/update.freshrss.org - PR moving the code of the update server to the core: https://github.com/FreshRSS/FreshRSS/pull/1760 * Automatically apply migrations For now, administrators are used to have nothing to do during an update else than getting the new code. I suggest to keep this behaviour and automatically apply migrations if we detect new ones. Another solution would be to create a CLI command and ask admins to call it after getting the new code. It could hide migrations errors to end users, but admin can forget to apply migrations since there are not used to it. * Add documentation for Minz Migrator * Execute migrations even if next ones are applied * Change mechanism to prevent multiple update at once * Use mkdir to create the lock and to test it exists Reference: https://stackoverflow.com/a/731634 * Append .lock to applied_migrations_path There are no needs to define another file to serve as a lock. * Change migrations naming convention * Apply suggestions from code review Co-Authored-By: Alexandre Alapetite <alexandre@alapetite.fr> * Perform a low-cost migration versions comparaison * Clarify version numbers concerning the migration system Co-authored-by: Alexandre Alapetite <alexandre@alapetite.fr> 2020-06-06T17:04:21+00:00 Alexis Degrugillier aledeg@users.noreply.github.com 2020-06-06T17:04:21+00:00 urn:sha1:1694264e2ca454a0cc51064ed09a6ed1a759cb01 The new shebang is a portable way to find the php interpreter. It works on Mac, GNU/Linux and BSD. 2020-01-04T22:35:42+00:00 Alexandre Alapetite alexandre@alapetite.fr 2020-01-04T22:35:42+00:00 urn:sha1:2aff347b2e942286292b21e0b20d93ab85220a17 * Fix wrong getHeader refactoring Fix regression introduced by https://github.com/FreshRSS/FreshRSS/pull/2373 The refactoring required a call to init() even for static functions, which is most of the time not done. Removed premature abstraction of `$_SERVER`, which was the root cause of the bug. https://github.com/FreshRSS/FreshRSS/issues/2748#issuecomment-569898931 * Refactoring: Move serverIsPublic to Minz_Request * Add mitigations for wrong configurations Due to the regression, we have some existing configurations with a bad base_url * Forgot one instance