Another web based photo gallery

Nicolas

Last update: Oct 13, 2022

Related tags

Imagery mysql api php demo gallery database js sqlite postgresql behat looking-for-contributors photo phpstan atoum

Overview

Phyxo

Simply share your images.

Requirements

This project use severals librairies that need at least PHP 7.3.0

This project uses a database and support all database engines managed by DBAL like Mysql, PostgreSQL and SQLite engines.

Installation

From web browser

Download the latest stable version and unarchive it. Transfer the content to your web space with any FTP client. Open your website and install database and first user through web interface.

From source

Clone this repository:

$ git clone [email protected]:nikrou/phyxo.git

Download the composer.phar executable or use the installer.

$ curl -sS https://getcomposer.org/installer | php
$ mv composer.phar composer

Update dependencies via composer:

$ composer install

Install Phyxo through web interface.

For both methods you can make installation process from command line:

$ ./bin/console phyxo:install

And create first user:

$ ./bin/console phyxo:user:create

Contributing

If you'd like to contribute, please read the CONTRIBUTING.md file. You can submit a pull request, or feel free to use any other way you'd prefer.

Running tests

You must have install phyxo first, and update base_url in behat.yml.dist

phyxo is tested using a BDD framework - Behat. To run test:

$ ./bin/behat

But there's also unit tests in phyxo runned with PHPUnit. To run tests:

$ ./bin/simple-phpunit --testdox

$ make unit-test

You can also get coverage report for tests by running:

$ ./bin/simple-phpunit --testdox --coverage-html=coverage

$ make unit-test-coverage

Static code analysis

Analysis is made using PHPStan :

$ composer phpstan

The analysis is made with level 5 but the idea is to increase that level and fix more and more possible issues.

Demo

You can find, discover and play with a demo

Documentation

Documentation is available on the wiki. Work in progress...

Todo

Add more tests
See TODO file.

Comments

Logo Proposal

Hi... Came across your fantastic project and I find it really amazing. I am a logo/icon designer and I want to help create a logo/icon for your project as my free contribution and love for contributing to amazing open source projects.

Currently working on some idea concept, I will update it here when I finish it up, so you can give your feedback on the design and also suggest any tweak or changes to suit your needs.

Will really appreciate your response...

Regards!

opened by chimzycash 7
PHP 7 compatibility

Hi,

CentOS 7, Phyxo 1.5.2, recently upgraded to PHP 7 via remi repo. Since then, upon login, I get Catchable fatal error: session_regenerate_id(): Failed to create(read) session ID: user (path: /var/lib/php/session) in /var/www/html/phyxo/src/Phyxo/Model/Repository/Users.php on line 316

PHP7 does work correctly, as several other php apps run flawlessly.

Thanks and keep up the good work :)

opened by lwandrebeck 6
Installation error

On web installation:

Fatal error: Uncaught Symfony\Component\Dotenv\Exception\PathException: Unable to read the "/home/clients/89bc9bd72e54950241bd9b1e083c63a4/phyxo/.env" environment file. in /home/clients/89bc9bd72e54950241bd9b1e083c63a4/phyxo/vendor/symfony/dotenv/Dotenv.php:465Stack trace: #0 /home/clients/89bc9bd72e54950241bd9b1e083c63a4/phyxo/vendor/symfony/dotenv/Dotenv.php(50): Symfony\Component\Dotenv\Dotenv->doLoad(false, Array) #1 /home/clients/89bc9bd72e54950241bd9b1e083c63a4/phyxo/index.php(24): Symfony\Component\Dotenv\Dotenv->load('/home/clients/8...') #2 {main} thrown in /home/clients/89bc9bd72e54950241bd9b1e083c63a4/phyxo/vendor/symfony/dotenv/Dotenv.php on line 465

=> no file ".env"

opened by regexgit 2
Lien 'Visiter la gallerie'
A partir du menu administration il y a un lien 'Visiter la gallerie' qui renvoie à la visualisation des photos.

Ce lien renvoie à la racine du site, cad :

pour le site démo à dev.phyxo.net qui fonctionne

et pour mon site à .../phyxo/ qui ne fonctionne pas car il faudrait .../phyxo/index.php

Je pense que la solution serait de rajouter index.php et que cela fonctionnera dans les 2 cas de figure.
opened by PmGs 2
Bump loader-utils from 2.0.2 to 2.0.3 in /themes/treflez
Bumps loader-utils from 2.0.2 to 2.0.3.

Release notes

Sourced from loader-utils's releases.

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

Changelog

Sourced from loader-utils's changelog.

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

Commits

7162619 chore(release): 2.0.3

a93cf6f fix(security): prototype polution exploit (#217)

90c7c4b chore(release): 2.0.2

8c2d24e fix: base64 generation and unicode characters (#197)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump loader-utils from 2.0.2 to 2.0.3 in /admin/theme
Bumps loader-utils from 2.0.2 to 2.0.3.

Release notes

Sourced from loader-utils's releases.

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

Changelog

Sourced from loader-utils's changelog.

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

Commits

7162619 chore(release): 2.0.3

a93cf6f fix(security): prototype polution exploit (#217)

90c7c4b chore(release): 2.0.2

8c2d24e fix: base64 generation and unicode characters (#197)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump twig/twig from 3.3.9 to 3.4.3
Bumps twig/twig from 3.3.9 to 3.4.3.

Changelog

Sourced from twig/twig's changelog.

3.4.3 (2022-09-28)

Fix a security issue on filesystem loader (possibility to load a template outside a configured directory)

3.4.2 (2022-08-12)

Allow inherited magic method to still run with calling class

Fix CallExpression::reflectCallable() throwing TypeError

Fix typo in naming (currency_code)

3.4.1 (2022-05-17)

Fix optimizing non-public named closures

3.4.0 (2022-05-22)

Add support for named closures

3.3.10 (2022-04-06)

Enable bytecode invalidation when auto_reload is enabled

Commits

c38fd6b Prepare the 3.4.3 release

5a858ac Merge branch '2.x' into 3.x

ab40267 Prepare the 2.15.3 release

fc18c2e Update CHANGELOG

2e8acd9 Merge branch '2.x' into 3.x

d6ea14a Merge branch '1.x' into 2.x

35f3035 security #cve- Fix a security issue on filesystem loader (possibility to load...

be33323 Merge branch '2.x' into 3.x

9170edf Fix doc CS

fab3e0f minor #3744 Adding installation instructions for Symfony (ThomasLandauer)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies php
opened by dependabot[bot] 1
Bump terser from 5.11.0 to 5.14.2 in /themes/treflez
Bumps terser from 5.11.0 to 5.14.2.

Changelog

Sourced from terser's changelog.

v5.14.2

Security fix for RegExps that should not be evaluated (regexp DDOS)

Source maps improvements (#1211)

Performance improvements in long property access evaluation (#1213)

v5.14.1

keep_numbers option added to TypeScript defs (#1208)

Fixed parsing of nested template strings (#1204)

v5.14.0

Switched to @jridgewell/source-map for sourcemap generation (#1190, #1181)

Fixed source maps with non-terminated segments (#1106)

Enabled typescript types to be imported from the package (#1194)

Extra DOM props have been added (#1191)

Delete the AST while generating code, as a means to save RAM

v5.13.1

Removed self-assignments (varname=varname) (closes #1081)

Separated inlining code (for inlining things into references, or removing IIFEs)

Allow multiple identifiers with the same name in var destructuring (eg var { a, a } = x) (#1176)

v5.13.0

All calls to eval() were removed (#1171, #1184)

source-map was updated to 0.8.0-beta.0 (#1164)

NavigatorUAData was added to domprops to avoid property mangling (#1166)

v5.12.1

Fixed an issue with function definitions inside blocks (#1155)

Fixed parens of new in some situations (closes #1159)

v5.12.0

TERSER_DEBUG_DIR environment variable

@copyright comments are now preserved with the comments="some" option (#1153)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump terser from 5.11.0 to 5.14.2 in /admin/theme
Bumps terser from 5.11.0 to 5.14.2.

Changelog

Sourced from terser's changelog.

v5.14.2

Security fix for RegExps that should not be evaluated (regexp DDOS)

Source maps improvements (#1211)

Performance improvements in long property access evaluation (#1213)

v5.14.1

keep_numbers option added to TypeScript defs (#1208)

Fixed parsing of nested template strings (#1204)

v5.14.0

Switched to @jridgewell/source-map for sourcemap generation (#1190, #1181)

Fixed source maps with non-terminated segments (#1106)

Enabled typescript types to be imported from the package (#1194)

Extra DOM props have been added (#1191)

Delete the AST while generating code, as a means to save RAM

v5.13.1

Removed self-assignments (varname=varname) (closes #1081)

Separated inlining code (for inlining things into references, or removing IIFEs)

Allow multiple identifiers with the same name in var destructuring (eg var { a, a } = x) (#1176)

v5.13.0

All calls to eval() were removed (#1171, #1184)

source-map was updated to 0.8.0-beta.0 (#1164)

NavigatorUAData was added to domprops to avoid property mangling (#1166)

v5.12.1

Fixed an issue with function definitions inside blocks (#1155)

Fixed parens of new in some situations (closes #1159)

v5.12.0

TERSER_DEBUG_DIR environment variable

@copyright comments are now preserved with the comments="some" option (#1153)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump jquery-ui from 1.13.1 to 1.13.2 in /admin/theme
Bumps jquery-ui from 1.13.1 to 1.13.2.

Release notes

Sourced from jquery-ui's releases.

jQuery UI 1.13.2 Released!

https://blog.jqueryui.com/2022/07/jquery-ui-1-13-2-released/

Commits

d6c028c 1.13.2

8cc5bae Checkboxradio: Don't re-evaluate text labels as HTML

b53e7be All: Remove deprecated .click() usage in demos/tests

bb00536 Build: Update AUTHORS.txt

9d1fc97 Datepicker: Capitalize some Indonesian words

1f467ba Selectmenu: Remove a call to the deprecated .focus() method

ac1866f Build: Update AUTHORS.txt

395aa7d Datepicker: Add missing localization for prevText and nextText

218c6af Datepicker: Remove symbols in localization

3126e12 Datepicker: Remove symbols in localization

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump async from 2.6.3 to 2.6.4 in /admin/theme
Bumps async from 2.6.3 to 2.6.4.

Changelog

Sourced from async's changelog.

v2.6.4

Fix potential prototype pollution exploit (#1828)

Commits

c6bdaca Version 2.6.4

8870da9 Update built files

4df6754 update changelog

8f7f903 Fix prototype pollution vulnerability (#1828)

See full diff in compare view

Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump loader-utils from 2.0.2 to 2.0.4 in /admin/theme
Bumps loader-utils from 2.0.2 to 2.0.4.

Release notes

Sourced from loader-utils's releases.

v2.0.4

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

Changelog

Sourced from loader-utils's changelog.

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

Commits

6688b50 chore(release): 2.0.4

ac09944 fix: ReDoS problem (#225)

7162619 chore(release): 2.0.3

a93cf6f fix(security): prototype polution exploit (#217)

90c7c4b chore(release): 2.0.2

8c2d24e fix: base64 generation and unicode characters (#197)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 0
Bump loader-utils from 2.0.2 to 2.0.4 in /themes/treflez
Bumps loader-utils from 2.0.2 to 2.0.4.

Release notes

Sourced from loader-utils's releases.

v2.0.4

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

Changelog

Sourced from loader-utils's changelog.

2.0.4 (2022-11-11)

Bug Fixes

ReDoS problem (#225) (ac09944)

2.0.3 (2022-10-20)

Bug Fixes

security: prototype pollution exploit (#217) (a93cf6f)

Commits

6688b50 chore(release): 2.0.4

ac09944 fix: ReDoS problem (#225)

7162619 chore(release): 2.0.3

a93cf6f fix(security): prototype polution exploit (#217)

90c7c4b chore(release): 2.0.2

8c2d24e fix: base64 generation and unicode characters (#197)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 0

Releases(v2.4.0)

v2.4.0(Oct 31, 2022)
updates Treflez theme dependencies (Photoswipe,...)

Reword category in album (the same for plural forms)

Source code(tar.gz)
Source code(zip)
phyxo-2.4.0.tgz(14.96 MB)
phyxo-2.4.0.zip(18.75 MB)
v2.3.0(Feb 28, 2022)
Remove site Entity. Not used anymore.

Use abstraction to manipulate images (imagine/imagine library)

Move to Symfony 5

Use Symfony forms

Revamp calendar views

Plugin example : language switcher

Source code(tar.gz)
Source code(zip)
phyxo-2.3.0.tgz(16.86 MB)
phyxo-2.3.0.zip(20.63 MB)
v2.2.0(Nov 6, 2021)
no more database config file in local/config. Use config/database.yaml instead.

move back index.php in public directory

replace atoum by phpunit for tests

add plugin system

Source code(tar.gz)
Source code(zip)
phyxo-2.2.0.tgz(11.91 MB)
phyxo-2.2.0.zip(15.25 MB)
v2.1.0(Feb 21, 2021)
upgrade to Symfony 4.4 (use HttpClient instead of guzzle, use Mailer instead of Swiftmailer)

use Doctrine as database abstraction layer through Doctrine::DBAL and Object Relation Mapper through Doctrine::ORM

Source code(tar.gz)
Source code(zip)
phyxo-2.1.0.tgz(10.25 MB)
phyxo-2.1.0.zip(14.08 MB)
v2.0.4(Feb 17, 2021)

fix upgrade : missing update URL when severals upgrades are available
Source code(tar.gz)
Source code(zip)
phyxo-2.0.4.tgz(6.87 MB)
phyxo-2.0.4.zip(8.90 MB)
v2.0.3(Jan 30, 2021)

fix smalls issues preventing major upgrade
Source code(tar.gz)
Source code(zip)
phyxo-2.0.3.tgz(6.73 MB)
phyxo-2.0.3.zip(8.68 MB)
v2.0.2(Jul 27, 2020)
A small release wiating for a major one

updates php dependencies

updates administration theme dependencies

updates Treflez theme dependencies

fix small issue setting guest params

Source code(tar.gz)
Source code(zip)
phyxo-2.0.2.tgz(6.73 MB)
phyxo-2.0.2.zip(8.67 MB)
v2.0.1(Apr 21, 2020)
updates some translations

fix various bugs (missing titles on albums pages). Thanks to @regexgit for report

fix batch actions (missing localStorage keys and datepicker library). Thanks to @regexgit for report

restore image ordre configuration in theme. Thanks to @regexgit for report

Source code(tar.gz)
Source code(zip)
phyxo-2.0.1.tgz(6.61 MB)
phyxo-2.0.1.zip(8.56 MB)
v2.0.0(Apr 13, 2020)
move all administration URL under symfony routing. Fix #34.

remove deprecated functions/methods : delete_elements, delete_element_files, safe_version_compare, get_icon, get_moment, create_navigation_bar

use symfony translation system. Fix #37

use voters for permissions. Fix #26

use symfony event system. Fix #22

remove Smarty and use Twig as template engine

add favicon (and logo)

Source code(tar.gz)
Source code(zip)
phyxo-2.0.0.tgz(6.65 MB)
phyxo-2.0.0.zip(8.59 MB)
v1.10.4(Apr 11, 2020)
A maintenance release to prepare next major release.

Restore Upgrade class needed to upgrade for next major release.

Source code(tar.gz)
Source code(zip)
phyxo-1.10.4.tgz(5.76 MB)
phyxo-1.10.4.zip(7.74 MB)
v1.10.3(Oct 28, 2019)
Fix menubar incorrectly saved causing error 500

Fix small issues in template: links to home, links to calendar

Source code(tar.gz)
Source code(zip)
v1.10.2(Oct 6, 2019)

Fix issue #36 installation process was broken. .env file was missing preventing installation process to start. Thanks to @regexgit
Source code(tar.gz)
Source code(zip)
v1.10.1(Sep 7, 2019)

Fix upgrade from branch 1.9. Upgrade script has not the correct name.
Source code(tar.gz)
Source code(zip)
phyxo-1.10.1.tgz(5.75 MB)
phyxo-1.10.1.zip(7.74 MB)
v1.10.0(Sep 5, 2019)
Move webservice and media factory (i.php) under symfony router.

Use symfony sessions.

Default theme is now Treflez.

Add symfony commands to install phyxo, create or list users.

Source code(tar.gz)
Source code(zip)
phyxo-1.10.0.tgz(5.76 MB)
phyxo-1.10.0.zip(7.74 MB)
v1.9.8(Sep 2, 2019)
Fix issue with upgrade link on admin area index page.

URL update was not correct

Prepare upgrade process for next major release

Source code(tar.gz)
Source code(zip)
phyxo-1.9.8.tgz(5.17 MB)
phyxo-1.9.8.zip(6.91 MB)
v1.9.7(Jan 12, 2019)

Fix issue preventing users using nginx as http server to connect.

You can download relases : https://download.phyxo.net/phyxo-1.9.7.zip https://download.phyxo.net/phyxo-1.9.7.tgz
Source code(tar.gz)
Source code(zip)
v1.9.6(Dec 31, 2018)
Fix random page when no photos.

Fix retrieve of elegant config after upgrade

Fix permission on image (space after comma in explode function)

You can download relases : https://download.phyxo.net/phyxo-1.9.6.zip https://download.phyxo.net/phyxo-1.9.6.tgz
Source code(tar.gz)
Source code(zip)
v1.9.5(Dec 24, 2018)
fix various mispelling

fix empy collation for mysql

You can download relases : https://download.phyxo.net/phyxo-1.9.5.zip https://download.phyxo.net/phyxo-1.9.5.tgz
Source code(tar.gz)
Source code(zip)
v1.9.3(Dec 10, 2018)
Fix many small issues in various files: thanks to PHPStan

Improve upgrade.

Upgrade symfony to 4.2.1

Fix assets path for Elegant theme.

Source code(tar.gz)
Source code(zip)
phyxo-1.9.3.tgz(5.17 MB)
phyxo-1.9.3.zip(6.91 MB)
v1.9.2(Dec 2, 2018)

Do not install that release. Upgrade process will finish with a 500 http error.

Small fixes.
Source code(tar.gz)
Source code(zip)
v1.9.0(Nov 16, 2018)
Do not install that release. Upgrade process will finish with a 500 http error.

Improve installation process

Admin responsive.

Use Symfony in front of Phyxo. Use severals components

Sanitize code. (Work in progress : lot of work to do)

Source code(tar.gz)
Source code(zip)
v1.8.0(Jul 3, 2018)

Responsive admin theme
Source code(tar.gz)
Source code(zip)
phyxo-1.8.0.tgz(3.96 MB)
phyxo-1.8.0.zip(4.70 MB)
v1.7.0(Jan 20, 2018)
Remove template extensions. Use inheritance instead.

PHP minimum version is now 7.0.0. PHP 5 reaches end of life and is now only security fixes.

Switch to Swiftmailer instead of phpmailer

Source code(tar.gz)
Source code(zip)
phyxo-1.7.0.tgz(5.16 MB)
phyxo-1.7.0.zip(6.36 MB)
v1.6.5(Mar 14, 2017)
Update dependencies. Fix issue with Guzzle 5.*

Backport issue #10 from master. (Warning when session starts)

Source code(tar.gz)
Source code(zip)
phyxo-1.6.5.tgz(6.54 MB)
phyxo-1.6.5.zip(8.16 MB)
v1.6.4(Jan 12, 2017)

Security issue with phpmailer. Please update
Source code(tar.gz)
Source code(zip)
v1.6.3(Jan 5, 2017)

Fix issue (#9) that prevents updating.
Source code(tar.gz)
Source code(zip)
phyxo-1.6.3.tgz(6.84 MB)
phyxo-1.6.3.zip(8.50 MB)
v1.6.2(Jan 5, 2017)

Security release. Please update
Source code(tar.gz)
Source code(zip)
phyxo-1.6.2.tgz(6.84 MB)
phyxo-1.6.2.zip(8.50 MB)
v1.6.1(Dec 12, 2016)

Fix issue with theme activation (#6)
Source code(tar.gz)
Source code(zip)
phyxo-1.6.1.tgz(6.89 MB)
phyxo-1.6.1.zip(8.56 MB)
v1.6.0(Dec 7, 2016)
Remove fetchRemote. Mark as deprecated.

Refactoring of TabSheet class

Refactoring of plugins, themes and languages classes

move admin.php to admin/index.php

Add sessions class.

Remove session_regenerate_id.

use non minified js files.

Source code(tar.gz)
Source code(zip)
phyxo-1.6.0.tgz(6.89 MB)
phyxo-1.6.0.zip(8.56 MB)
1.5.0(Feb 9, 2016)

That release should work with php 7
Source code(tar.gz)
Source code(zip)
phyxo-1.5.0.tgz(7.52 MB)
phyxo-1.5.0.zip(9.62 MB)

Another web based photo gallery

Related tags

Overview

Phyxo

Requirements

Installation

From web browser

From source

Contributing

Running tests

Static code analysis

Demo

Documentation

Todo

Comments

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

2.0.3 (2022-10-20)

Bug Fixes

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

2.0.3 (2022-10-20)

Bug Fixes

3.4.3 (2022-09-28)

3.4.2 (2022-08-12)

3.4.1 (2022-05-17)

3.4.0 (2022-05-22)

3.3.10 (2022-04-06)

v5.14.2

v5.14.1

v5.14.0

v5.13.1

v5.13.0

v5.12.1

v5.12.0

v5.14.2

v5.14.1

v5.14.0

v5.13.1

v5.13.0

v5.12.1

v5.12.0

jQuery UI 1.13.2 Released!

v2.6.4

v2.0.4

2.0.4 (2022-11-11)

Bug Fixes

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

2.0.4 (2022-11-11)

Bug Fixes

2.0.3 (2022-10-20)

Bug Fixes

v2.0.4

2.0.4 (2022-11-11)

Bug Fixes

v2.0.3

2.0.3 (2022-10-20)

Bug Fixes

2.0.4 (2022-11-11)

Bug Fixes

2.0.3 (2022-10-20)

Bug Fixes

Releases(v2.4.0)

v2.4.0(Oct 31, 2022)

v2.3.0(Feb 28, 2022)

v2.2.0(Nov 6, 2021)

v2.1.0(Feb 21, 2021)

v2.0.4(Feb 17, 2021)

v2.0.3(Jan 30, 2021)

v2.0.2(Jul 27, 2020)

v2.0.1(Apr 21, 2020)

v2.0.0(Apr 13, 2020)

v1.10.4(Apr 11, 2020)

v1.10.3(Oct 28, 2019)

v1.10.2(Oct 6, 2019)

v1.10.1(Sep 7, 2019)