Joca
ef06bf160a
All: Enhance session management and security features
...
Using proper auth + security on login.
2025-12-21 21:26:02 -03:00
Joca
7b0528ef36
feat: Add file-based avatar system
...
- A new `files` table to store metadata about uploaded files, including original name and hash.
- The `users` table is updated to reference a `pfp_file_id` from the new `files` table, removing the insecure `pfp_url` field.
- A new `/file` endpoint and handler (`handlers/file.go`) are created to serve files securely based on their ID, preventing direct file system access.
- Profile editing (`handlers/profile_edit.go` and `templates/pages/profile_edit.html`) is updated to handle file uploads instead of URL inputs.
- The chat feature (`models/chat.go` and `templates/pages/chat.html`) is updated to work with the new file ID system, ensuring avatars are displayed correctly.
Should also fix #68 .
2025-06-21 16:21:21 -03:00
Joca
bdf81e7c68
Ask admin credentials on initialize instead of defining them on config.json
2025-06-15 02:48:43 +02:00
869d974f71
config: rename files to better hint at what they’re used for
2025-06-15 02:47:16 +02:00
0bee74ab5b
about page: move all page content into config/about.template, also rewrite most of said content
2025-06-15 02:47:16 +02:00
Joca
4eb97f27d8
Create admin user, admin can edit news blotter
2025-06-15 02:41:36 +02:00
Joca
92fd9948eb
Add config skeleton
2025-06-15 02:41:03 +02:00
Joca
eee9540bdc
Initial Commit
2025-06-15 02:37:02 +02:00
af91df4986
everything: Delete everything, full project reset. Keep a copy of variable_grabbler in case we ever need it.
2025-06-15 02:25:56 +02:00
7384091b71
hpefully fixed everything?
2021-09-08 10:41:43 +02:00
a3d60795d8
undoing changes, I guess
2021-09-08 10:29:58 +02:00
d2bb9ceadb
I did another dum dum
2021-09-08 10:25:18 +02:00
1b69da5ffa
I did a dum dum
2021-09-08 10:21:08 +02:00
c88d5e4c6e
correction of said clarification
2021-09-08 10:20:41 +02:00
c10f3770c7
clarified documentation
2021-09-08 10:18:50 +02:00
e08b8ae91e
yea me stoopid
2021-09-08 10:12:08 +02:00
c2c501531a
reconfigured instance to be hosted directly on the web root
2021-09-08 10:06:41 +02:00
d2b0c46510
un-hard-coded db name and server
2021-09-02 17:01:28 +02:00
7e62d6f11e
updated documentation
2021-09-02 15:47:01 +02:00
57d5859e04
un-hard-coded database user credentials fixing #25
2021-09-02 09:02:48 +02:00
3e5f92c6b3
messing around with macros to make ThreadR less LostCave specific
2021-09-02 07:49:10 +02:00
0b6179a386
variable grabbler not happy with unicode -_-
2021-09-02 02:58:25 +02:00
1a4787d87f
added customizable part of about page
2021-09-02 02:40:53 +02:00
39af301484
new about page, I guess?
2021-09-02 02:20:02 +02:00
Joca
BodgeMaster