Commit Graph

149 Commits

Author SHA1 Message Date
3fdfb206cd style: cleaner register UI with email+code on same line 2026-07-17 00:47:15 +08:00
926bcb626b feat: send-code before register, dup game_name check, skin hides uid 2026-07-17 00:42:19 +08:00
511d5ab36f fix: inline email verification after registration, no separate page 2026-07-17 00:35:50 +08:00
ead50beccd feat: 6-digit email verification code, fix missing script+route includes 2026-07-17 00:34:47 +08:00
bfc63a8194 fix: captcha uses dark high-contrast colors only 2026-07-17 00:30:18 +08:00
17bf5a611d feat: type tabs on create form (report/suggestion/appeal) 2026-07-17 00:21:48 +08:00
2961ca67d1 fix: sidebar highlights tickets-create when on create form 2026-07-17 00:10:34 +08:00
1762b016cd fix: tickets-create route matches create?type param, proper redirect 2026-07-17 00:09:02 +08:00
c3cd97676e fix: create user server toggle only shows for admin/owner, initial state correct 2026-07-17 00:07:58 +08:00
18bb8152ef feat: multi-channel notifications (Discord/email/generic Webhook) 2026-07-16 23:51:09 +08:00
ab08b1a2a9 feat: feature discussion as separate detail page, not inline 2026-07-16 23:50:16 +08:00
e9ef425545 fix: simplify player ticket list - hide type/priority/tab filters 2026-07-16 23:47:24 +08:00
09f0d8f2aa fix: 12 issues - admin permission scope, player sidebar nav, SMTP label, user create servers 2026-07-16 23:04:15 +08:00
e46dad9f95 fix: features page use .filter-bar class instead of inline style 2026-07-16 22:05:38 +08:00
547348d4fe fix: placeholder examples, filter bar styling improvement 2026-07-16 22:00:23 +08:00
a417a1c376 style: features page CSS classes, onclick→data-action, site name hot-reload 2026-07-16 06:03:33 +08:00
4d2dade44e fix: site name hot-reloads from DB on every page load, no restart needed 2026-07-16 05:49:22 +08:00
f423e1f791 fix: dynamic site name from DB, displayed in header/title/sidebar 2026-07-16 04:02:19 +08:00
abf747e3af feat: dedicated server groups management page in sidebar 2026-07-16 03:56:09 +08:00
8ecefdcb19 fix: remove stale admin_servers column reference from users UPDATE 2026-07-16 03:33:40 +08:00
a8309aa456 refactor: use user_servers junction table instead of JSON column 2026-07-15 04:55:57 +08:00
a34314ac9d feat: admin server assignment in user management 2026-07-15 04:53:27 +08:00
de22a9d9cb docs: full README+INSTALL sync, plugin source field 2026-07-15 04:47:31 +08:00
4fe1b30278 fix: include source in auth login response 2026-07-15 04:44:14 +08:00
efe6b084be sync: add source field to user list, create, edit, and external API 2026-07-15 04:43:30 +08:00
880e3905dc fix: CSP scriptSrcAttr explicitly allow unsafe-inline 2026-07-15 04:39:23 +08:00
125b4f99fc fix: only two sources (netease/skin), plugin uses skin 2026-07-15 04:36:01 +08:00
c493c1204b feat: registration source selector (netease/skin/java) 2026-07-15 04:34:06 +08:00
c892b18d33 fix: CSP script-src-attr:none blocked all onclick handlers since day 1 2026-07-15 03:58:16 +08:00
021351d898 fix: restore from regex corruption, JS-bind modal close, data-action delegation 2026-07-15 03:53:16 +08:00
80f8342c0b debug: add window.onerror to display JS errors in sidebar 2026-07-15 03:49:50 +08:00
0f64af42a1 feat: password reset + data-action delegation for all onclick 2026-07-15 02:45:33 +08:00
f0e891b17c fix: data-action delegation + convert onclick to event listeners, sidebar+logout+modals 2026-07-15 02:44:18 +08:00
9e15a319f5 fix: replace all inline onclick with JS event listeners (sidebar nav + logout) 2026-07-14 05:37:37 +08:00
b4df827f0d fix: restore missing window.App=App causing sidebar+logout broken 2026-07-14 04:30:38 +08:00
8c36314253 fix: hide top bar in admin, add polls+features links, logout text 2026-07-14 04:06:45 +08:00
0d26653c85 fix: migrate new tables on every startup, not just fresh install 2026-07-14 04:00:49 +08:00
4d8bc848e1 feat: features as GitHub Issues style with comments/discussion, status filter 2026-07-14 03:25:50 +08:00
f277711082 docs: README + optimize auth getSecret, features id fix, token error msg 2026-07-14 03:19:36 +08:00
4913984391 feat: poll groups/servers, timed polls, features sort+filter by group 2026-07-14 03:17:13 +08:00
d61ad2109f refactor: remove polls+features, move to standalone mc-vote repo 2026-07-14 03:11:26 +08:00
3d7393817c fix: polls /active route order, features redundant auth check 2026-07-14 03:03:56 +08:00
ee2f33c61f feat: feature voting (PCL-style), poll owner edit/delete, blind polls for all 2026-07-14 01:17:56 +08:00
74974864cd fix: no revote, blind result after voting, admin 1.5 vote weight 2026-07-13 22:01:03 +08:00
116fe89ac8 feat: poll/voting system with live results and bar charts 2026-07-13 21:37:16 +08:00
eed4591059 security: timing-safe API key, SSRF webhook guard, API no-cache, Referrer-Policy 2026-07-13 19:49:44 +08:00
bc16833a57 feat: SVG image captcha with noise and color distortion 2026-07-13 18:33:31 +08:00
befd51dbd5 fix: prevent username/email enumeration via registration error messages 2026-07-13 18:29:32 +08:00
b24f8cd74d fix: critical - external POST parameter count mismatch (11 vs 10) 2026-07-13 18:26:49 +08:00
8d9e154ce1 fix: restrict PUT /tickets to admin's own claims (enforce claim system) 2026-07-13 18:19:28 +08:00