Aevann1
73a78f0e97
add pagination to simps/haters/simps for/hates lists and remove loop.index
2022-11-28 03:45:20 +02:00
Aevann1
d0047dcc5a
include users who have more than 30 days to be unbanned/unchhuded in /banned and /chuds for accountability
2022-11-28 03:32:01 +02:00
Aevann
ca8c8297c5
sort pinned top-level comments by most recent first
2022-11-28 01:16:49 +02:00
Aevann
4b8387a01c
dont count votes as real if made by alt
2022-11-28 01:16:49 +02:00
Aevann
053ef9fd66
fix error on votes on localhost
2022-11-28 01:16:49 +02:00
Snakes
8eb50d8bf9
worldcup2022: add winnings column to leaderboard.
...
There is probably a more compact way to write this SQL. I don't know
what it is. But it works and should be reasonably efficient.
2022-11-27 18:05:08 -05:00
Aevann
5d49821e7a
use https whenever u can
2022-11-28 00:53:37 +02:00
Snakes
7551add5d8
Unify admin badge page listings source.
2022-11-27 17:02:18 -05:00
Snakes
427f54175c
WPD: constantify badge whitelist, extend set.
2022-11-27 16:49:20 -05:00
justcool393
0c9d0d1bcd
world cup leaderboard 2022 ( #23 )
...
insert witty PR message here
a temporary lb for worldcup stuff
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: #23
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-11-27 19:59:53 +00:00
justcool393
5a1224ddc7
fix shadowbanned and nonexistent users in marseys table
2022-11-27 11:13:23 -06:00
justcool393
767cc467bb
marseys: cache marseys and emojis and fun stuff ( #15 )
...
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: #15
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-11-27 16:59:36 +00:00
justcool393
77bdb6e87f
themes: add glitter bg category per joan request
2022-11-27 10:15:15 -06:00
Aevann
d45fd6e645
fix designed hats being duplicated
2022-11-27 03:45:28 +02:00
Aevann1
4e4e649dc9
remove carp exception in /followers since we have pages now
2022-11-27 03:27:06 +02:00
Aevann1
c42a0e6a20
Revert "Revert "Revert "fix session bug" - pls for the love of god visit localhost after making a commit""
...
This reverts commit e6a328fc3a
.
2022-11-27 03:01:02 +02:00
Aevann1
84b6f43cf6
Revert "fix missing loggedin_counter and loggedout_counter"
...
This reverts commit 14828bd9f4
.
2022-11-27 03:00:32 +02:00
Aevann1
a46b62db0b
add pages to /followers /following /blockers and order them all by most recent first
2022-11-27 02:59:20 +02:00
justcool393
14828bd9f4
fix missing loggedin_counter and loggedout_counter
2022-11-26 18:55:26 -06:00
justcool393
e6a328fc3a
Revert "Revert "fix session bug" - pls for the love of god visit localhost after making a commit"
...
This reverts commit b7efa6ddd3
.
2022-11-26 18:45:12 -06:00
Aevann1
b7efa6ddd3
Revert "fix session bug" - pls for the love of god visit localhost after making a commit
...
This reverts commit fcdad601fb
.
2022-11-27 02:43:10 +02:00
Aevann1
395e136cd4
order user blocks by most recent first
2022-11-27 02:36:09 +02:00
justcool393
ffb79a1bb2
literally one line lmao
2022-11-26 18:33:55 -06:00
justcool393
fcdad601fb
fix session bug
2022-11-26 18:33:04 -06:00
Aevann1
a44bc53f3a
limited designed hats loserboard to rdrama.net
2022-11-27 02:27:33 +02:00
Aevann1
575a5080bd
unpaywall profile views
2022-11-27 02:20:54 +02:00
Aevann1
61612e7be3
fix missing "+ 1"
2022-11-27 02:19:50 +02:00
Aevann1
641926b425
restore diff messages to debug an issue
2022-11-27 02:16:08 +02:00
Aevann1
daa9d9c80b
Revert "calc users: log so we can find the root of this problem"
...
This reverts commit ba6e4721d3
.
2022-11-27 01:10:38 +02:00
Aevann1
14b2b9328a
Revert "don't want to crash on our precious logging code"
...
This reverts commit 992e4a0d1c
.
2022-11-27 01:08:44 +02:00
Aevann1
27bb38c0d5
Revert "the request is prolly boned anyway, let's help friends help me :)"
...
This reverts commit cfffbc61a0
.
2022-11-27 01:08:27 +02:00
justcool393
a56633c3b1
api: manual revert of e1f785c370
(by @Aevann1's request)
2022-11-26 15:25:00 -06:00
justcool393
6c5070f24d
fix 155a5b40c9
2022-11-26 15:19:10 -06:00
Aevann1
155a5b40c9
excise niggabit's solution for now
2022-11-26 23:04:42 +02:00
justcool393
0ff034b01b
add typing to a bunch of routes
2022-11-26 15:00:16 -06:00
Aevann1
15c7add942
fix bug
2022-11-26 22:54:17 +02:00
justcool393
19b73f8e7e
api: fix some missing imports
2022-11-26 14:46:49 -06:00
justcool393
e1f785c370
Merge branch 'docs' into 'master'
2022-11-26 14:40:32 -06:00
justcool393
ae50cc2772
const: rename constants from LIMIT to MINIMUM
...
the new name is much much clearer
2022-11-26 14:20:44 -06:00
Aevann1
bb153e541d
Revert "you posts: constantify truescore requirement"
...
This reverts commit 1b721126a2
.
2022-11-26 22:09:07 +02:00
justcool393
1b721126a2
you posts: constantify truescore requirement
2022-11-26 13:39:31 -06:00
Aevann1
d624dbe2de
fix this https://rdrama.net/post/125682
2022-11-26 08:11:00 +02:00
Aevann1
8a80616f84
insanely ghetto solution to long back-and-forth chains in notifs
2022-11-26 07:52:37 +02:00
Aevann1
4eb66e5802
fix login redir bug
2022-11-26 07:38:59 +02:00
Aevann1
a641acaf8f
use sets instead of lists in some statements
2022-11-26 06:52:47 +02:00
Nekobit
f59f641331
Merge branch 'docs' of fsdfsd.net:nekobit/rDrama into docs
2022-11-25 23:31:49 -05:00
Nekobit
dea8c3f7e3
docs: Remove unneccesary imports; @auth_desired
2022-11-25 23:30:49 -05:00
Aevann1
b3c47f5598
tell ppl how much Truescore they need to see /h/chudrama
2022-11-26 06:22:09 +02:00
Aevann1
bcbf524fbe
make sure stickied child comments are always at the top place they can be
2022-11-26 06:01:20 +02:00
justcool393
cfffbc61a0
the request is prolly boned anyway, let's help friends help me :)
2022-11-25 20:57:24 -06:00
justcool393
992e4a0d1c
don't want to crash on our precious logging code
2022-11-25 20:22:55 -06:00
justcool393
ba6e4721d3
calc users: log so we can find the root of this problem
2022-11-25 20:21:38 -06:00
justcool393
46204ea223
ranking: be site specific when boosting users or excluding users from boosts
...
otherwise we may unintentionally rank for the wrong users (since we're using literal IDs)
2022-11-25 20:04:09 -06:00
Aevann1
5523747c3a
fix 500 error
2022-11-26 04:02:41 +02:00
Aevann1
bf72234873
remove SITE url from badge urls to make them relative in the event of a future domain change
2022-11-26 03:45:20 +02:00
Aevann1
e96274308a
sneed
2022-11-26 03:31:17 +02:00
justcool393
35b1532bb4
admin: remove meme admin vestige
2022-11-25 19:15:39 -06:00
Aevann1
5e2f449df7
fix prev commit lol
2022-11-26 01:52:39 +02:00
Aevann1
c470cb7516
make shit award not give DC
2022-11-26 01:50:25 +02:00
Aevann1
642d19b861
move ratelimit_user after auth
2022-11-26 01:37:04 +02:00
Aevann1
bf4031c832
remove annoying excalmation sign in notifs
2022-11-26 01:18:24 +02:00
Nekobit
2e1d2cb774
Merge branch 'master' into docs
2022-11-25 22:27:15 +00:00
justcool393
7e403469cd
polls: constantify max poll options
2022-11-25 16:12:25 -06:00
justcool393
f86d351ac4
fix saved subscribers stuff
2022-11-25 16:06:18 -06:00
Aevann1
e4b521a63f
limit polls to 10 options to prevent spam
2022-11-25 23:33:38 +02:00
Aevann1
2938f930fd
make me not see modmail, if its important the other jannies will tell me
2022-11-25 22:56:11 +02:00
Nekobit
af4411b0d7
Documentation page
2022-11-25 15:36:29 -05:00
justcool393
0356c589a4
api: don't hit calc_users if this is the API
...
sometimes we render HTML where we probably... shouldn't. in most cases
this is fine, but if API clients hit it it can errenously set
2022-11-25 14:31:07 -06:00
justcool393
23505c68b3
errors: use abort for sign up errors
2022-11-25 12:27:18 -06:00
justcool393
816389cf28
security: fix DoS on title getter
...
the `timeout` parameter only applies to seconds per *byte* received (and time to first
byte), not the entire request
this means an attacker could theoretically send a very... slow...
stream... of... bytes... and... crash... the... worker... when... the...
timeout... is... reached...
2022-11-25 07:10:05 -06:00
Snakes
af7df7f62d
Ensure all entry points get sessions.
...
Somewhat speculative, but the change in f62a9769fd
, while fixing
certain errors where logged-out users sometimes didn't have sessions
come calc_users, also opened the possibility of certain request
sequences that wouldn't give a user a session.
In the interest of conservatism, we create a session if not exists
in both the new location in calc_users and the previous spot in
before_request.
2022-11-22 18:37:55 -05:00
Aevann1
755cfbf335
temp fix to shitting up console
2022-11-23 00:23:04 +02:00
Aevann1
9e89166e2f
restore reload icon for legacy app users
2022-11-22 23:34:33 +02:00
Aevann1
e198102383
repurpose "upvoted" to "voted"
2022-11-22 23:28:30 +02:00
Aevann1
4640abed4b
remove hole nerf
2022-11-22 22:25:48 +02:00
justcool393
6acd896967
sbs: since propagation isn't optional anyway, let's propagate on a ban to get their alts
2022-11-22 09:51:44 -06:00
Aevann1
0b1f166211
remove "alts" checkbox for shadowbanning since shadowbans propagate anway via check_for_alts()
2022-11-22 17:44:16 +02:00
justcool393
b0ff8916a5
win loss stats to casino games ( #475 )
...
* casino: add stats to casino
* casino: stats should target the right thing
casino: properly style
* pluralize properly
* refactor casino leaderboards :marseytroublemarker:
* fsfsdsd
* fsdsdsdsd
* i'm r-slurred
* -
2022-11-22 07:11:01 -08:00
justcool393
007e41e7d0
security: validate YouTube link IDs
2022-11-22 06:13:44 -06:00
Snakes
9eab252e5b
Fix reply/mention notifications from muted users.
...
Consider the case of the current /notifications filter condition:
WHERE ... NOT ((comments.sentto = 2) AND (users.is_muted))
SELECT 1 WHERE NOT ((null = 2) AND (true)); ⇒ 0 rows
SELECT 1 WHERE NOT ((1 = 2) AND (true)); ⇒ 1 row
SELECT 1 WHERE NOT ((2 = 2) AND (true)); ⇒ 0 rows
We want the first expression, where comments.sentto = null, to evaluate
to false, not to null, so it negates to true. Behavior as written is:
SELECT 1 WHERE NOT ((null = 2) AND (true)); →
SELECT 1 WHERE NOT (null AND true); →
SELECT 1 WHERE NOT null; →
SELECT 1 WHERE null;
Which guarantees a null return set. If we check first for non-nullity:
SELECT 1 WHERE NOT ((null IS NOT null) AND (null = 2) AND (true)); ⇒ 1
SELECT 1 WHERE NOT ((1 IS NOT null) AND (1 = 2) AND (true)); ⇒ 1
SELECT 1 WHERE NOT ((2 IS NOT null) AND (2 = 2) AND (true)); ⇒ 0
2022-11-21 23:08:31 -05:00
justcool393
272e2ee936
sneed (rename procoins to marseybux) ( #472 )
...
* sneed (rename procoins to marseybux)
* literally unusable
Co-authored-by: TLSM <duolsm@outlook.com>
2022-11-21 18:08:29 -05:00
Aevann1
f272989735
Revert "stop adding target="_blank" in the backend and move it to the frontend (to accomodate PWA users) - THANK YOU GEESE I LOVE YOU SO MUCH ( #473 )"
...
This reverts commit 88f3cd519d
.
2022-11-21 19:37:38 +02:00
Aevann1
0d6b26d404
sneed
2022-11-21 19:09:04 +02:00
Aevann1
2f31fdfdd7
Revert "remove User.newtab and see if anyone complains"
...
This reverts commit 787c89961f
.
2022-11-21 18:55:13 +02:00
justcool393
79b2b5cff8
cookies: set SameSite Lax to get rid of annoying console warning
2022-11-21 09:36:34 -06:00
justcool393
427d8f643d
ratelimiting: use ratelimit_user everywhere
2022-11-21 09:30:27 -06:00
Aevann1
88f3cd519d
stop adding target="_blank" in the backend and move it to the frontend (to accomodate PWA users) - THANK YOU GEESE I LOVE YOU SO MUCH ( #473 )
...
* test
* bleg
* remove User.newtab and see if anyone complains (#471 )
* fddf
2022-11-21 07:14:26 -08:00
justcool393
f52aec0477
fix betting on 0
2022-11-21 09:13:14 -06:00
justcool393
4d096a5bb6
make roulette cute and valid python syntax
2022-11-21 09:10:41 -06:00
justcool393
9f51259ee6
[DO NOT MERGE] roulette 0 and 00 bets redux ( #470 )
...
* backend support for roulette betting on 0 and 00
* casino: roulette: add 0 and 00 frontend
* add spacer
* roulette: fix the thing
* don't payout where needful not to
* sanity check
* roulette: validate requests properly
* roulette actions from API make more sane
2022-11-21 06:44:16 -08:00
Aevann1
787c89961f
remove User.newtab and see if anyone complains
2022-11-21 16:36:17 +02:00
Aevann1
1de69518be
stop forcing posts in /h/chudrama
2022-11-21 16:13:21 +02:00
justcool393
153fb4e2a2
[DO NOT MERGE] titlesssssssssss ( #468 )
...
* titles
* testing
* self
* Revert "self"
This reverts commit d6c12d5a5ba125feb44673f55e1fdac75f151cb5.
* Revert "testing"
This reverts commit 86d800f9fd552196b31f0e0b3891d4fc072a9bc0.
* testing on devrama
* rewrite the html head
* reference error or smth idk
* tempalte debug
* template debug redux
* default2
* rename default2 -> root, page title
* fix settings2
* include the set_variables block
* root scope variables 2
* test 3
* remove unnecessary set
* add pagetitles to all settings2 pages
* add pagetitle to casino
* remove bloat
* remove duplicate site name thingy
* page titles 2
* page titles 3
* remove duplicate imports and add page titles everywhere iirc
* ok but actually this time
* remove unnecessary newlines
* fix title lol
* >
* fsdfsfsfsfsfs
* fsfs
* template configurations
* fix 500
* reduce login template bloat
* move files and add status codes where needful
* move authfroms to login
* remove 2fa bloat
* verification code
* sign up fixes
* readability
* fssfsfsfs
* move forgot password to login/
* readability
* don't emit comments
* add page titles where needful
* gsgsgs
* modals: move to respective pages
* testing on devrama
* get home garbage out of title
* remove insane amount of icon duplication
* sign up text
* add votes pagetitle
* fix blank lines
* Revert "fix blank lines"
This reverts commit b2c54339970725d00b6fc82bb458c1757909952c.
* Fix blank lines on sign_up.html.
* title: votes.html more meaningful identifier.
* titles: Lottery, Directory, Notifications
* head final in submission.html
* fix missing comma
* >
* test
* title: /comments
* fsfsfsfsf
* titles: user_cards
* head: only load video and audio meta attributes if they actually exist
* titlessssss: /admin/lottery/participants
* titlessssssss: extra quote in search.html
* titlessssss: userpage voters.
* titties: /h/<sub>/{followers,blockers,exilees[sic]}
* test banner
* Revert "test banner"
This reverts commit c3d875d03f3e60d72a60dab7d28bf108554a5826.
* make submit.html inherit from default.html
Co-authored-by: TLSM <duolsm@outlook.com>
2022-11-21 02:52:22 -06:00
Aevann1
cb2fd8e43f
increase approve hat ratelimit per minute from 30 to 120
2022-11-21 03:18:02 +02:00
Aevann1
e82d92d844
default response code is 200, dont need to specify it
2022-11-21 03:13:31 +02:00
Aevann1
0c9ed95c55
allow me and sneks to award carp and pizzashill
2022-11-21 03:12:01 +02:00
Snakes
220409c8fb
Fix 62ffe2d628: returning document, must send 200.
2022-11-20 20:11:17 -05:00
Aevann1
62ffe2d628
use postToast in betting so the js deducting coins only execute if responde code is < 300
2022-11-21 03:00:16 +02:00
Snakes
1f234ef67d
Actually call total_bet_voted in betting poll.
...
Currently always truthy because it's a non-None first-class function.
2022-11-20 19:56:28 -05:00
Snakes
44ef4bc551
search: fix tsquery when quoted unstripped space.
2022-11-20 19:31:27 -05:00
Aevann1
0c9d19c7eb
add safari and firefox screenshots to /app
2022-11-21 01:31:26 +02:00
Aevann1
ccfc71290d
fix 500 error
2022-11-21 01:20:57 +02:00
Aevann1
caabaf0c6f
expand IS_LOCALHOST
2022-11-21 00:16:49 +02:00
Aevann1
da34a099a3
fix 500 errors
2022-11-20 21:05:32 +02:00
Aevann1
6b7b2ff59a
show only permachudded users in /chuds
2022-11-20 19:37:45 +02:00
Aevann1
36a0d48fe6
sneed
2022-11-20 19:21:19 +02:00
Aevann1
d354a86cbb
fix 500 errors
2022-11-20 19:00:05 +02:00
Aevann1
f62a9769fd
fix annoying 500 errors
2022-11-20 18:46:15 +02:00
justcool393
a2c4bca2da
polls: don't allow bets on closed polls
2022-11-20 10:11:47 -06:00
Snakes
23ff5450d6
Rename ranking constant by Capy request.
2022-11-20 06:31:16 -05:00
Snakes
db329f487f
User.pay_account everywhere, fix lottery payout.
2022-11-20 05:50:02 -05:00
Snakes
f5563900ae
Un-nerf schizohole in rankings.
2022-11-19 21:19:06 -05:00
Aevann1
5288d7a7dc
remove android app and replace with instructions on how to install PWA
2022-11-20 00:04:08 +02:00
Aevann1
4eccfeb705
sneed
2022-11-19 18:23:53 +02:00
Aevann1
caff8815ee
restore pinning to how it was before JC raped it
2022-11-19 17:36:37 +02:00
justcool393
750a87713f
pins: fix removal behavior
2022-11-19 08:24:32 -06:00
justcool393
33878fcd02
remove unnecessary check
2022-11-19 07:46:23 -06:00
Aevann1
0be653e632
remove unecessary request when making a post linking to a yt video
2022-11-19 06:44:07 -06:00
Snakes
38ac92b4aa
search: escape apostrophes.
2022-11-18 16:55:15 -05:00
Aevann1
2fd63d7474
I hate you and I hope you die a violent death
2022-11-18 23:11:03 +02:00
justcool393
aaa6d6696e
lowercase it too
2022-11-18 14:39:52 -06:00
justcool393
fc5d78a4a1
don't do it for the POST either
2022-11-18 14:34:23 -06:00
Snakes
2c81db79ef
Fix API for /comment/<cid>, /search/comments.
2022-11-18 15:33:07 -05:00
justcool393
6f1b9014b4
fix 400: improve 4e57369e68
...
a couple of other places shouldn't redirect either
2022-11-18 14:32:00 -06:00
Aevann1
4e57369e68
dont actually redirect to /reset_2fa
2022-11-18 22:16:28 +02:00
Aevann1
785fb28bb2
fix bug when 2fa toggle looked like it didnt apply
2022-11-18 22:07:07 +02:00
Aevann1
bcfe98c295
remove hole pins when post moved
2022-11-18 21:58:12 +02:00
Aevann1
446ef58c2c
sneed
2022-11-18 21:20:17 +02:00
Snakes
ce84861a44
admin_home: add git HEAD to server status.
2022-11-18 14:05:47 -05:00
justcool393
255d5b2453
security: fix mute bypass
...
modmail: constantify user ID
2022-11-17 16:50:06 -06:00
justcool393
83963470e8
user can_view functions ( #460 )
...
* user: move can_see_to user class
* stub out can_see in comments and posts
* make can_see a classmethod so it's usable for loggedoutfriends
* test
* kill me now
* threelargeclassesmating
* dfdfdfdfdfdfd
* sdsdsdsd
* classmethod should be above i think
* Revert "classmethod should be above i think"
This reverts commit df1772eb9e7e71bf7b89123f6277b648de2b1af3.
* Revert "Revert "classmethod should be above i think""
This reverts commit 32883406c2e2916fc6c436611376a1817c16cb84.
* test rewritnig thing
* go home python
* what the fuck python
* fix AttributeError
* sdsdsdsdsdsd
* lazy and user and stuff
* test
* Revert "test"
This reverts commit 45af5bb3d45f3ec17126ab117d494ec978062a38.
* merge
* newline
* test
* test 2
* Revert "test"
This reverts commit 196dae677e2ee8cd29261c93dcb747087cb399b6.
* revert test
* fix merge error
* fix import error ciruclation i think
* sdsd
* add type annotations back
* deleted_utc
* isinstance
* user_can_see in jinja and remove unnecessary things
* a bunch of stuff
remove can_see from comment and post
expand can_see to messages
* antiannoyingamountsofwhitespace
* fix for chudrama
* improve prev
2022-11-17 16:02:08 -05:00
justcool393
5b03c2535a
kofi: fix rare 500. don't attempt to activate via kofi on sites where it's not enabled
...
this can cause a weird 500
2022-11-17 13:55:07 -06:00
justcool393
8414cec5d5
kofi: don't let "blahblahblah" be considered a valid token
2022-11-17 11:12:32 -06:00
justcool393
caf3a81748
remove unnecessary fstrings
...
(or actually use the feature)
2022-11-17 10:01:03 -06:00
Aevann1
62ef32c9c5
Update votes.py
2022-11-16 21:00:18 +02:00
gooseman
16e23e6f54
make banners not retarded + increase future scalability
2022-11-16 12:07:20 -05:00
justcool393
eba6625b81
casino: procoins -> mbux
2022-11-16 10:14:46 -06:00
justcool393
d1197bac82
chat: sanitize raw body
2022-11-16 08:00:04 -06:00
justcool393
f1bfb87243
chat: permission for mute bypass
2022-11-16 07:00:03 -06:00
justcool393
5b313dd13d
hats: only load routes if feature flag enabled
2022-11-16 06:52:16 -06:00
justcool393
ee8df1e3f1
chat: mops are unmutable
2022-11-16 06:38:24 -06:00
justcool393
1559de125c
add error handler
2022-11-15 23:36:56 -06:00
justcool393
1565d9ca26
use abort(410) instead of the old message.html template
2022-11-15 23:32:57 -06:00
justcool393
5dedde4691
admin: move admin pages to admin dir
2022-11-15 17:15:53 -05:00
justcool393
ee8ad10fac
fix 500 on IntegrityError
2022-11-15 15:12:36 -06:00
justcool393
519a9f91f8
signup: don't accidentally leak *what* validation error it was
2022-11-15 12:59:38 -06:00
justcool393
711518d942
don't redirect to /signup page if registrations are closed
2022-11-15 12:56:57 -06:00
justcool393
01e18dc28b
remove unnecessary checks
...
* in post_reset even if get_account could return a None, it'd 500 anyway
* lmao even in get reset (why is this done twice anyway?)
2022-11-15 11:11:22 -06:00
justcool393
b2f5cf92d0
change msg to be more clear
2022-11-15 10:56:40 -06:00
justcool393
b95ee0864e
fix 2fa bug
2022-11-15 10:56:04 -06:00