MDClub 社区系统后端代码

zdhxiong

Last update: Dec 30, 2022

Related tags

CMS mdclub

Overview

MDClub 官网 | 在线体验

关于 MDClub

MDClub 是一个漂亮、轻量的开源社区系统。它运行快速且易于使用，完全具备一个成熟社区所需的功能。它的特性包括：

Material Design 设计语言
响应式设计
超级轻量级
自动适配暗色模式
单页面应用，且完美支持 SEO
定制的富文本编辑器
方便安装
强大的 Restful API 接口
OpenAPI 规范的文档
多平台 JavaScript SDK

MDClub 项目由以下子项目组成：

项目	说明
mdclub	MDClub 服务端代码
mdclub-theme-material	MDClub 前端代码
mdclub-admin	MDClub 后台管理系统代码
mdclub-openapi	MDClub 的 OpenApi 描述文件代码
mdclub-sdk-js	MDClub 的 JavaScript SDK 代码

安装

安装 MDClub 需要 PHP 7.2+ 和 MySQL 5.6+。请阅读安装说明了解安装过程。

若安装过程遇到困难，可以在 MDClub 的问答区进行搜索，或发帖寻求帮助。

在此项目基础上进行二次开发

你需要在本地安装 mdclub。如果你还需要修改前端代码或后台管理系统代码，则还需要安装 mdclub-theme-material 和 mdclub-admin 。

mdclub 的安装步骤

克隆项目源码到本地

git clone https://github.com/zdhxiong/mdclub

安装项目依赖

cd mdclub
composer install

安装完依赖后，再根据 MDClub 安装说明进行安装。

安全漏洞

如果你发现 MDClub 中存在安全漏洞，请给作者发送电子邮件。安全漏洞会最优先得到解决。

Comments

建议支持部分常用的markdown格式

通过api可以看到内部应该是支持md的：

{
    "data":[
        {
            "question_id":1,
            "user_id":1,
            "title":"La ds sal asdwe klwfnmsakld sd  ?",
            "content_markdown":"## asdfasd

kasd jkf lkl nefklen dfk. lwek w lksd ndv oasdkf ok oskda fwken",
            "content_rendered":"<h2>asdfasd</h2><p>kasd jkf lkl nefklen dfk. lwek w lksd ndv oasdkf ok oskda fwken</p>",
...

如果编辑器能够开放目前已经支持的那些简单的md语法，编辑起来会方便很多。

标题
代码块
行内代码
列表
链接
图片
加粗

opened by xaoxuu 5

SodionAuth联动需求

https://github.com/Mohist-Community/SodionAuth

如果在插件内添加SodionAuth，我注意到你的api文档中提供的登录方法需要验证码的验证，是否可以像xenforo提供一个需要管理员token的无限制的验证密码api。

如果在网站上添加SodionAuthApi，可以参考 https://github.com/Mohist-Community/SodionAuthFlarum https://github.com/Mohist-Community/SodionAuthPhp 实现。

如果使用添加api方式，请回复是否需要pull request （很棒的项目，我会在熟悉结构后参与开发

opened by hs-err 5
Bump axios from 0.21.1 to 0.21.2 in /frontend/packages/sdk-js
Bumps axios from 0.21.1 to 0.21.2.

Release notes

Sourced from axios's releases.

v0.21.2

0.21.2 (September 4, 2021)

Fixes and Functionality:

Updating axios requests to be delayed by pre-emptive promise creation (#2702)

Adding "synchronous" and "runWhen" options to interceptors api (#2702)

Updating of transformResponse (#3377)

Adding ability to omit User-Agent header (#3703)

Adding multiple JSON improvements (#3688, #3763)

Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#3738)

Adding parseInt to config.timeout (#3781)

Adding custom return type support to interceptor (#3783)

Adding security fix for ReDoS vulnerability (#3980)

Internal and Tests:

Updating build dev dependancies (#3401)

Fixing builds running on Travis CI (#3538)

Updating follow rediect version (#3694, #3771)

Updating karma sauce launcher to fix failing sauce tests (#3712, #3717)

Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#2154)

Fixing tests by bumping karma-sauce-launcher version (#3813)

Changing testing process from Travis CI to GitHub Actions (#3938)

Documentation:

Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#3539)

Remove duplication of item in changelog (#3523)

Fixing gramatical errors (#2642)

Fixing spelling error (#3567)

Moving gitpod metion (#2637)

Adding new axios documentation website link (#3681, #3707)

Updating documentation around dispatching requests (#3772)

Adding documentation for the type guard isAxiosError (#3767)

Adding explanation of cancel token (#3803)

Updating CI status badge (#3953)

Fixing errors with JSON documentation (#3936)

Fixing README typo under Request Config (#3825)

Adding axios-multi-api to the ecosystem file (#3817)

Adding SECURITY.md to properly disclose security vulnerabilities (#3981)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

Sasha Korotkov

Daniel Lopretto

Mike Bishop

Dmitriy Mozgovoy

Mark

Philipe Gouveia Paixão

... (truncated)

Changelog

Sourced from axios's changelog.

0.21.2 (September 4, 2021)

Fixes and Functionality:

Updating axios requests to be delayed by pre-emptive promise creation (#2702)

Adding "synchronous" and "runWhen" options to interceptors api (#2702)

Updating of transformResponse (#3377)

Adding ability to omit User-Agent header (#3703)

Adding multiple JSON improvements (#3688, #3763)

Fixing quadratic runtime and extra memory usage when setting a maxContentLength (#3738)

Adding parseInt to config.timeout (#3781)

Adding custom return type support to interceptor (#3783)

Adding security fix for ReDoS vulnerability (#3980)

Internal and Tests:

Updating build dev dependancies (#3401)

Fixing builds running on Travis CI (#3538)

Updating follow rediect version (#3694, #3771)

Updating karma sauce launcher to fix failing sauce tests (#3712, #3717)

Updating content-type header for application/json to not contain charset field, according do RFC 8259 (#2154)

Fixing tests by bumping karma-sauce-launcher version (#3813)

Changing testing process from Travis CI to GitHub Actions (#3938)

Documentation:

Updating documentation around the use of AUTH_TOKEN with multiple domain endpoints (#3539)

Remove duplication of item in changelog (#3523)

Fixing gramatical errors (#2642)

Fixing spelling error (#3567)

Moving gitpod metion (#2637)

Adding new axios documentation website link (#3681, #3707)

Updating documentation around dispatching requests (#3772)

Adding documentation for the type guard isAxiosError (#3767)

Adding explanation of cancel token (#3803)

Updating CI status badge (#3953)

Fixing errors with JSON documentation (#3936)

Fixing README typo under Request Config (#3825)

Adding axios-multi-api to the ecosystem file (#3817)

Adding SECURITY.md to properly disclose security vulnerabilities (#3981)

Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:

Jay

Sasha Korotkov

Daniel Lopretto

Mike Bishop

Dmitriy Mozgovoy

Mark

Philipe Gouveia Paixão

... (truncated)

Commits

c0c8761 [Updating] changelog to include links to issues and contributors

619bb46 [Releasing] v0.21.2

82c9455 Create SECURITY.md (#3981)

5b45711 Security fix for ReDoS (#3980)

5bc9ea2 Update ECOSYSTEM.md (#3817)

e72813a Fixing README.md (#3818)

e10a027 Fix README typo under Request Config (#3825)

e091491 Update README.md (#3936)

b42fbad Removed un-needed bracket

520c8dc Updating CI status badge (#3953)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump lodash from 4.17.15 to 4.17.20 in /frontend/packages/sdk-js
Bumps lodash from 4.17.15 to 4.17.20.

Commits

ded9bc6 Bump to v4.17.20.

63150ef Documentation fixes.

00f0f62 test.js: Remove trailing comma.

846e434 Temporarily use a custom fork of lodash-cli.

5d046f3 Re-enable Travis tests on 4.17 branch.

aa816b3 Remove /npm-package.

d7fbc52 Bump to v4.17.19

2e1c0f2 Add npm-package

1b6c282 Bump to v4.17.18

a370ac8 Bump to v4.17.17

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by bnjmnt4n, a new releaser for lodash since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump hosted-git-info from 2.8.8 to 2.8.9 in /frontend/packages/sdk-js
Bumps hosted-git-info from 2.8.8 to 2.8.9.

Changelog

Sourced from hosted-git-info's changelog.

2.8.9 (2021-04-07)

Bug Fixes

backport regex fix from #76 (29adfe5), closes #84

Commits

8d4b369 chore(release): 2.8.9

29adfe5 fix: backport regex fix from #76

See full diff in compare view

Maintainer changes

This version was pushed to npm by nlf, a new releaser for hosted-git-info since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump glob-parent from 5.1.0 to 5.1.2 in /frontend/packages/sdk-js
Bumps glob-parent from 5.1.0 to 5.1.2.

Release notes

Sourced from glob-parent's releases.

v5.1.2

Bug Fixes

eliminate ReDoS (#36) (f923116)

v5.1.1

Bug Fixes

unescape exclamation mark (#26) (a98874f)

Changelog

Sourced from glob-parent's changelog.

5.1.2 (2021-03-06)

Bug Fixes

eliminate ReDoS (#36) (f923116)

6.0.1 (2021-07-20)

Bug Fixes

Resolve ReDoS vulnerability from CVE-2021-35065 (#49) (3e9f04a)

6.0.0 (2021-05-03)

⚠ BREAKING CHANGES

Correct mishandled escaped path separators (#34)

upgrade scaffold, dropping node <10 support

Bug Fixes

Correct mishandled escaped path separators (#34) (32f6d52), closes #32

Miscellaneous Chores

upgrade scaffold, dropping node <10 support (e83d0c5)

5.1.1 (2021-01-27)

Bug Fixes

unescape exclamation mark (#26) (a98874f)

Commits

eb2c439 chore: update changelog

12bcb6c chore: release 5.1.2

f923116 fix: eliminate ReDoS (#36)

0b014a7 chore: add JSDoc returns information (#33)

2b24ebd chore: generate initial changelog

9b6e874 chore: release 5.1.1

749c35e ci: try wrapping the JOB_ID in a string

5d39def ci: attempt to switch to published coveralls

0b5b37f ci: put the npm step back in for only Windows

473f5d8 ci: update azure build images

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump path-parse from 1.0.6 to 1.0.7 in /frontend/packages/sdk-js
Bumps path-parse from 1.0.6 to 1.0.7.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies javascript
opened by dependabot[bot] 1
Bump phpmailer/phpmailer from 6.2.0 to 6.5.0
Bumps phpmailer/phpmailer from 6.2.0 to 6.5.0.

Release notes

Sourced from phpmailer/phpmailer's releases.

PHPMailer 6.5.0

This is a security release.

SECURITY Fixes CVE-2021-34551, a complex RCE affecting Windows hosts. See https://github.com/PHPMailer/PHPMailer/blob/HEAD/SECURITY.md for details.

The fix for this issue changes the way that language files are loaded. While they remain in the same PHP-like format, they are processed as plain text, and any code in them will not be run, including operations such as concatenation using the . operator.

Deprecation The current translation file format using PHP arrays is now deprecated; the next major version will introduce a new format.

SECURITY Fixes CVE-2021-3603 that may permit untrusted code to be run from an address validator. See https://github.com/PHPMailer/PHPMailer/blob/HEAD/SECURITY.md for details.

The fix for this issue includes a minor BC break: callables injected into validateAddress, or indirectly through the $validator class property, may no longer be simple strings. If you want to inject your own validator, provide a closure instead of a function name.

Haraka message ID strings are now recognised

Thanks to Vikrant Singh Chauhan, listensec.com, and the WordPress security team for reporting and assistance with this release.

PHPMailer 6.4.1

This is a security release.

SECURITY Fixes CVE-2020-36326, a regression of CVE-2018-19296 object injection introduced in 6.1.8, see SECURITY.md for details

Reject more file paths that look like URLs, matching RFC3986 spec, blocking URLS using schemes such as ssh2

Ensure method signature consistency in doCallback calls

Ukrainian language update

Add composer scripts for checking coding standards and running tests

Thanks to Fariskhi Vidyan for the report and assistance, and Tidelift for support.

PHPMailer 6.4.0

This is a maintenance release. The changes introduced in 6.3.0 for setting an envelope sender automatically when using mail() caused problems, especially in WordPress, so this change has been reverted. It gets a minor version bump as it's a change in behaviour, but only back to what 6.2.0 did. See #2298 for more info.

Other changes:

Check for the mbstring extension before decoding addresss in parseAddress, so it won't fail if you don't have it installed

Add Serbian Latin translation (sr_latn)

Enrol PHPMailer in Tidelift, because supporting open-source is important!

PHPMailer 6.3.0

This is a maintenance release.

Handle early connection errors such as 421 during connection and EHLO states

Switch to Github Actions for CI

Generate debug output for mail(), sendmail, and qmail transports. Enable using the same mechanism as for SMTP: set SMTPDebug > 0

Make the mail() and sendmail transports set the envelope sender the same way as SMTP does, i.e. use whatever From is set to, only falling back to the sendmail_from php.ini setting if From is unset. This avoids errors from the mail() function if Sender is not set explicitly and php.ini is not configured. This is a minor functionality change, so bumps the minor version number.

Extend parseAddresses to decode encoded names, improve tests

Changelog

Sourced from phpmailer/phpmailer's changelog.

Version 6.5.0 (June 16th, 2021)

SECURITY Fixes CVE-2021-34551, a complex RCE affecting Windows hosts. See https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md for details.

The fix for this issue changes the way that language files are loaded. While they remain in the same PHP-like format, they are processed as plain text, and any code in them will not be run, including operations such as concatenation using the . operator.

Deprecation The current translation file format using PHP arrays is now deprecated; the next major version will introduce a new format.

SECURITY Fixes CVE-2021-3603 that may permit untrusted code to be run from an address validator. See https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md for details.

The fix for this issue includes a minor BC break: callables injected into validateAddress, or indirectly through the $validator class property, may no longer be simple strings. If you want to inject your own validator, provide a closure instead of a function name.

Haraka message ID strings are now recognised

Version 6.4.1 (April 29th, 2021)

SECURITY Fixes CVE-2020-36326, a regression of CVE-2018-19296 object injection introduced in 6.1.8, see SECURITY.md for details

Reject more file paths that look like URLs, matching RFC3986 spec, blocking URLS using schemes such as ssh2

Ensure method signature consistency in doCallback calls

Ukrainian language update

Add composer scripts for checking coding standards and running tests

Version 6.4.0 (March 31st, 2021)

Revert change that made the mail() and sendmail transports set the envelope sender if one isn't explicitly provided, as it causes problems described in PHPMailer/PHPMailer#2298

Check for mbstring extension before decoding addresss in parseAddress

Add Serbian Latin translation (sr_latn)

Enrol PHPMailer in Tidelift

Version 6.3.0 (February 19th, 2021)

Handle early connection errors such as 421 during connection and EHLO states

Switch to Github Actions for CI

Generate debug output for mail(), sendmail, and qmail transports. Enable using the same mechanism as for SMTP: set SMTPDebug > 0

Make the mail() and sendmail transports set the envelope sender the same way as SMTP does, i.e. use whatever From is set to, only falling back to the sendmail_from php.ini setting if From is unset. This avoids errors from the mail() function if Sender is not set explicitly and php.ini is not configured. This is a minor functionality change, so bumps the minor version number.

Extend parseAddresses to decode encoded names, improve tests

Commits

a5b5c43 Changelog

e121da3 Merge branch 'master' of https://github.com/PHPMailer/PHPMailer

74e512a Security update

acd264b Merge branch 'CVE-2021-34551'

0063f83 Changelog

707205f Changelog

1047838 Changelog

c2f191b Changelog

45f3c18 Deny string-based callables altogether

6334bab CVE docs

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump phpmailer/phpmailer from 6.2.0 to 6.4.1
Bumps phpmailer/phpmailer from 6.2.0 to 6.4.1.

Release notes

Sourced from phpmailer/phpmailer's releases.

PHPMailer 6.4.1

This is a security release.

SECURITY Fixes CVE-2020-36326, a regression of CVE-2018-19296 object injection introduced in 6.1.8, see SECURITY.md for details

Reject more file paths that look like URLs, matching RFC3986 spec, blocking URLS using schemes such as ssh2

Ensure method signature consistency in doCallback calls

Ukrainian language update

Add composer scripts for checking coding standards and running tests

Thanks to Fariskhi Vidyan for the report and assistance, and Tidelift for support.

PHPMailer 6.4.0

This is a maintenance release. The changes introduced in 6.3.0 for setting an envelope sender automatically when using mail() caused problems, especially in WordPress, so this change has been reverted. It gets a minor version bump as it's a change in behaviour, but only back to what 6.2.0 did. See #2298 for more info.

Other changes:

Check for the mbstring extension before decoding addresss in parseAddress, so it won't fail if you don't have it installed

Add Serbian Latin translation (sr_latn)

Enrol PHPMailer in Tidelift, because supporting open-source is important!

PHPMailer 6.3.0

This is a maintenance release.

Handle early connection errors such as 421 during connection and EHLO states

Switch to Github Actions for CI

Generate debug output for mail(), sendmail, and qmail transports. Enable using the same mechanism as for SMTP: set SMTPDebug > 0

Make the mail() and sendmail transports set the envelope sender the same way as SMTP does, i.e. use whatever From is set to, only falling back to the sendmail_from php.ini setting if From is unset. This avoids errors from the mail() function if Sender is not set explicitly and php.ini is not configured. This is a minor functionality change, so bumps the minor version number.

Extend parseAddresses to decode encoded names, improve tests

Changelog

Sourced from phpmailer/phpmailer's changelog.

Version 6.4.1 (April 29th, 2021)

SECURITY Fixes CVE-2020-36326, a regression of CVE-2018-19296 object injection introduced in 6.1.8, see SECURITY.md for details

Reject more file paths that look like URLs, matching RFC3986 spec, blocking URLS using schemes such as ssh2

Ensure method signature consistency in doCallback calls

Ukrainian language update

Add composer scripts for checking coding standards and running tests

Version 6.4.0 (March 31st, 2021)

Revert change that made the mail() and sendmail transports set the envelope sender if one isn't explicitly provided, as it causes problems described in PHPMailer/PHPMailer#2298

Check for mbstring extension before decoding addresss in parseAddress

Add Serbian Latin translation (sr_latn)

Enrol PHPMailer in Tidelift

Version 6.3.0 (February 19th, 2021)

Handle early connection errors such as 421 during connection and EHLO states

Switch to Github Actions for CI

Generate debug output for mail(), sendmail, and qmail transports. Enable using the same mechanism as for SMTP: set SMTPDebug > 0

Make the mail() and sendmail transports set the envelope sender the same way as SMTP does, i.e. use whatever From is set to, only falling back to the sendmail_from php.ini setting if From is unset. This avoids errors from the mail() function if Sender is not set explicitly and php.ini is not configured. This is a minor functionality change, so bumps the minor version number.

Extend parseAddresses to decode encoded names, improve tests

Commits

9256f12 6.4.1

fd7ec67 Add more tests for bad paths

26f2848 Reorder path checks, fixes CVE-2020-36326

bc51d1f Add not-strictly-necessary backslash to avoid ambiguity

7f267fb Match all RFC3986 scheme patterns

b1038ee Add composer scripts for syntax check and tests

0acc57d make text compliance with Ukrainian orthography (#2317)

08cf13b Make use of $to in doCallback consistent, see #2305

be427db Make use of $to in doCallback consistent

050d430 6.4.0

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
mdclub后端的go语言版本

mdclub-go 上面是我在业余时间用来学习go的一个项目，打算复刻一下mdclub的后端。目前已经实现了基本的框架和几个接口，且框架分层明确，代码简洁，易于扩展。

我将会持续开发，欢迎大家一起贡献力量~

另外，由于我本人对于前端不是很懂，想请教一下作者关于mdclub前端的问题，issue不便探讨，作者能否告知一下邮箱

opened by 1379 1
Bump phpmailer/phpmailer from 6.1.5 to 6.1.6
Bumps phpmailer/phpmailer from 6.1.5 to 6.1.6.

Release notes

Sourced from phpmailer/phpmailer's releases.

PHPMailer 6.1.6

This is a security release, with some other minor changes. For full details, refer to the advisory.

SECURITY Fix insufficient output escaping bug in file attachment names. CVE-2020-13625. Reported by Elar Lang of Clarified Security.

Correct Armenian ISO language code from am to hy, add mapping for fallback

Use correct timeout property in debug output

Changelog

Sourced from phpmailer/phpmailer's changelog.

Version 6.1.6 (May 27th, 2020)

SECURITY Fix insufficient output escaping bug in file attachment names. CVE-2020-13625. Reported by Elar Lang of Clarified Security.

Correct Armenian ISO language code from am to hy, add mapping for fallback

Use correct timeout property in debug output

Commits

c2796cb Merge pull request from GHSA-f7hx-fqxw-rvvj

a7f1b23 Add funding info

5b63b39 Fix typos (#2037)

c1c38e3 Correct Armenian language code

a12c95e Use correct timeout property in debug output, clarify debug output, see #2018

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1

Releases(v1.0.2)

v1.0.2(May 30, 2022)

jsdelivr 换 unpkg
Source code(tar.gz)
Source code(zip)
v1.0.1(Oct 29, 2020)
Bug 修复

Nginx 服务器下 sitemap 无法显示

备案链接错误

域名包含端口号时，静态资源缺少端口号，导致无法加载

文章页面首次加载时，最新文章列表排序错误

REST API 接口中，图片删除接口报错

首次打开话题页面时错误地显示了所有提问和文章

开始调试模式时页面报错

新特性

暗色模式下降低了图片亮度，避免图片刺眼

删除提问、回答、文章时，将一并删除其中的图片文件

在右上角的个人信息面板中添加了后台管理链接

后台系统信息中添加了提示文本，帮助修改 php.ini 文件的一些配置

取消了富文本编辑器中上传图片大小限制

优化在富文本编辑器中上传图片失败时的错误提示

升级指南

使用新文件覆盖原有文件

删除 var 目录中的文件。

Source code(tar.gz)
Source code(zip)
mdclub.zip(14.58 MB)
v1.0.0(Sep 2, 2020)

Source code(tar.gz)
Source code(zip)
mdclub-v1.0.0.zip(15.06 MB)

MDClub 社区系统后端代码

Related tags

Overview

MDClub 官网 | 在线体验

关于 MDClub

安装

在此项目基础上进行二次开发

mdclub 的安装步骤

安全漏洞

Comments

v0.21.2

0.21.2 (September 4, 2021)

0.21.2 (September 4, 2021)

2.8.9 (2021-04-07)

Bug Fixes

v5.1.2

Bug Fixes

v5.1.1

Bug Fixes

5.1.2 (2021-03-06)

Bug Fixes

6.0.1 (2021-07-20)

Bug Fixes

6.0.0 (2021-05-03)

⚠ BREAKING CHANGES

Bug Fixes

Miscellaneous Chores

5.1.1 (2021-01-27)

Bug Fixes

PHPMailer 6.5.0

PHPMailer 6.4.1

PHPMailer 6.4.0

PHPMailer 6.3.0

Version 6.5.0 (June 16th, 2021)

Version 6.4.1 (April 29th, 2021)

Version 6.4.0 (March 31st, 2021)

Version 6.3.0 (February 19th, 2021)

PHPMailer 6.4.1

PHPMailer 6.4.0

PHPMailer 6.3.0

Version 6.4.1 (April 29th, 2021)

Version 6.4.0 (March 31st, 2021)

Version 6.3.0 (February 19th, 2021)

PHPMailer 6.1.6

Version 6.1.6 (May 27th, 2020)

Releases(v1.0.2)

v1.0.2(May 30, 2022)

v1.0.1(Oct 29, 2020)

Bug 修复

新特性

升级指南

v1.0.0(Sep 2, 2020)

Owner

zdhxiong