Blog - A simple blog system with Markdown support, written in PHP & MySQL.

Age	Commit message (Collapse)	Author	Files	Lines
2021-09-27	Fix incorrect parameter list for logout action	Thomas Lange	1	-1/+1

2021-09-19	Rename some session array keys	Thomas Lange	1	-1/+1
	* Rename "auth" to "USER_ID" * Rename "token" to "CSRF_TOKEN"
2021-08-05	Show error message if CSRF token does not matches	Thomas Lange	1	-17/+17
	Print an error message for various actions in the administration area if the security token is invalid, instead of silently preventing the user's desired action to perform if the token is invalid for some reason. This change applies for the delete actions on all entity types and also for the login action and the database command execution form; the forms for creating/modifying entities had already shown a CSRF error before.
2021-06-26	Use const to define expressionless admin constants	Thomas Lange	1	-1/+1

2021-06-22	Implement new Repository and Entity classes	Thomas Lange	1	-5/+6
	This commit adds new Repository and Entity classes which are better abstracted from the rest of the application. They dont know anymore about configuration options or how to parse to HTML because this is not the job for the ORM but for other parts of the application. The previous commits were a preparation for this big change. An entity now represents just a single record from a specific table of the database – nothing more. The repositories job is it to fetch or update records of the database and instantiate the entities. Another problem that was solved is the high amount of database queries that was needed before. For example, on the blogs home page first were all 10 latest post IDs fetched from the database and then another query was executed with "WHERE id = :id" for each single post?! ... This problem is solved with the new repository classes; they now use a single query to fetch and build the entities of the 10 latest posts. This change also solves the problem with database queries spread across the application and limits the exzessive use of try/catch blocks which were used before. The new classes make the whole code much cleaner. :)
2021-06-20	Call password_verify directly in login script	Thomas Lange	1	-1/+2

2021-06-14	Remove more redundant try/catch blocks	Thomas Lange	1	-23/+14
	Remove all try/catch blocks where the exception handling did not differ from the exception handler already defined by "set_exception_handler".
2019-10-29	Remove PHP closing tags and add LF to text files	Thomas Lange	1	-1/+0
	Remove the unnecessary PHP closing tags and ensure that all text files ending with a LF character.
2017-10-24	Some comments have been updated, unnecessary whitespace at the end of some ↵	Thomas Lange	1	-3/+2
	files was removed and some missing PHP closing tags were added.
2017-09-02	An unnecessary "else" block in admin/auth.php was removed and spelling ↵	Thomas Lange	1	-21/+16
	mistakes and inconsistencies in some comments were corrected.
2017-04-12	Inconsistency in the admin template parameters fixed (this does not affect ↵	Thomas Lange	1	-3/+1
	any template parameters for the frontend templates).
2017-04-11	The control structures "require_once" have been replaced by a simple ↵	Thomas Lange	1	-1/+1
	"require" (except within the 403.php and 404.php where it makes sense, because these files can be directly called or included).
2017-04-11	Class "ExceptionHandler" has been removed and several files has been changed.	Thomas Lange	1	-1/+1

2017-02-24	Initial commit.v1.0	Thomas Lange	1	-0/+86