125 Commits

Author SHA1 Message Date
Roardom ec9b19ffbf refactor: use boolean for user audible
Instead of int.
2025-09-30 06:58:59 +00:00
AnabolicsAnonymous 89bff77fbb update: correct conditional checks 2025-08-30 18:15:47 -05:00
AnabolicsAnonymous 6ae124defb update: compare status and claimed values to null 2025-08-30 17:54:32 -05:00
AnabolicsAnonymous 2775ceee18 update: add null check for bounties 2025-08-25 10:32:40 -05:00
AnabolicsAnonymous 8832a12cd8 fix: check for null values on claimed & filled 2025-08-25 10:24:54 -05:00
AnabolicsAnonymous 016ab7bd20 update: use conditional relationships 2025-08-25 10:17:54 -05:00
unit3d-bot 33327b3765 automation: laravel pint ci 2025-08-24 19:47:07 +00:00
AnabolicsAnonymous 3766503f91 update: add tyoe to request resource 2025-08-24 14:43:46 -05:00
unit3d-bot fae49f177a automation: laravel pint ci 2025-08-22 23:27:24 +00:00
AnabolicsAnonymous 50a756154c chore: larastan 2025-08-22 18:25:07 -05:00
unit3d-bot a41fe736fd automation: laravel pint ci 2025-08-22 23:04:19 +00:00
AnabolicsAnonymous 75e3200381 add: torrent request API controller 2025-08-22 18:02:05 -05:00
HDVinnie d822bab3a8 chore: larastan ci
- missed in #4910
2025-08-21 10:14:39 -04:00
HDVinnie fcc64d8e72 Merge pull request #4910 from Roardom/remove-infohash 2025-08-21 09:45:11 -04:00
Roardom 84ddc74447 fix: most phpstan types in eloquent api resources 2025-08-21 00:50:13 +00:00
Roardom e1486613bb security: randomize info_hash upon upload and hide it from users
Require a user to download a .torrent file in order to view the info_hash.
2025-08-20 12:27:12 +00:00
Roardom 46bfccc8b7 refactor: use enums for auth guards, middleware groups, and rate limits 2025-06-22 20:00:02 +00:00
Roardom ae33c74f2b refactor: prefix tmdb metadata models with tmdb
Will help for when there exists other metadata sources available (such as already done for igdb)

Step 4 in cleaner meta fetching code.
2025-03-17 20:41:01 +00:00
Roardom 32cf8da4db refactor: split tmdb into movie_id and tv_id
Step 2 in cleaner meta fetching code.
2025-03-16 22:55:24 +00:00
Roardom df9fa5004c fix: normalize torrent featured flag
When the featured flag goes out of sync with the featured_torrents table (for reasons still unknown), the torrent is permanently labeled as freeleech, while 100% of traffic is always credited.
2025-02-10 17:47:12 +00:00
Roardom ad716d7cc3 update: remove XSS cleaner and remove XSS vulnerabilities
We've been mostly relying on the 3rd party xss cleaner to make sure user submitted content is clean. This PR fixes up any leftover holes in the bbcode parser that allow xss vulnerabilities, and as a result, the 3rd party library isn't needed anymore. It cleans responsibly by first, running `htmlspecialchars()` over the content, followed by sanitizing the untrusted urls and whitelisting their protocol.
2025-01-20 02:52:42 +00:00
HDVinnie db9cf0e8cc fix: UserResource 2024-12-11 01:00:28 -05:00
HDVinnie a279ef653b chore: phpstan ci 2024-11-12 22:46:53 -05:00
HDVinnie c09dff69be add: personal user api
- wiki updated https://github.com/HDInnovations/UNIT3D-Community-Edition/wiki/Torrent-API-(UNIT3D-v8.3.4)
2024-11-12 16:07:22 -05:00
HDVinnie 9d7e9d072c update: chat message resource to remove htmlspecialchars_decode
- this is not needed with voku otherwise inputted html will parse
2024-10-23 16:10:16 -04:00
HDVinnie af21147802 remove: hdvinnie/laravel-html-purifier in preparation for octane 2024-10-22 22:10:43 -04:00
HDVinnie c9bb2fb2d6 Merge branch '8.x.x' into Donation-System 2024-09-16 16:58:34 -04:00
Audionut e5f2e9124a add: Torrent folder to API
Folder always shown
2024-09-16 09:22:54 +10:00
HDVinnie 428bf63910 add: base donation system 2024-09-12 13:03:38 -04:00
HDVinnie f92194281c refactor: release years
- remove the release_year column from the torrents table and just search the movie/tv tables instead
2024-08-13 22:18:38 -04:00
Roardom b86475a732 add: strict types to all files 2024-05-23 13:58:29 +00:00
HDVinnie 6e4be4d83b chore: pint 2024-04-22 15:22:22 -04:00
Audionut 4444d9ce5b API - expose options
Expose featured and personal_release
2024-04-21 13:18:05 +00:00
LostRager 3152cc554f (Fix) Call to a member function pluck() on array 2024-04-03 04:39:28 +02:00
HDVinnie a87887734d add: #3665 2024-03-14 12:33:33 -04:00
HDVinnie 7997033fd4 Merge pull request #3640 from Roardom/no-genres
(Update) don't include `None` when there aren't any genres in api
2024-03-11 09:31:24 -04:00
Roardom 4fb8e3217d update: don't include None when there aren't any genres in api
Makes more sense than using special keywords and is undesired by downstream api consumers: https://github.com/Jackett/Jackett/pull/15106
2024-03-11 05:28:14 +00:00
Jay Sizzla c59d3957e6 Add refundable to API for post and get requests 2024-03-06 07:27:59 +00:00
HDVinnie 492c97d518 chore: pint 2024-02-04 20:57:34 -05:00
HDVinnie ea0018a862 PHP Style Change (Laravel Pint CI) 2024-01-16 18:05:08 +00:00
HDVinnie 568a422cad security: chatbox data 2023-12-30 10:04:35 -05:00
HDVinnie 656647649f Revert "cleanup: pt.2"
This reverts commit 33d9927abd.
2023-10-12 23:11:20 -04:00
HDVinnie 33d9927abd cleanup: pt.2 2023-10-12 22:41:46 -04:00
HDVinnie b3f0386149 cleanup: pt.1 2023-10-12 22:30:52 -04:00
Roardom 5fc28983a6 fix: redundant movie db query for tv api calls
Tv torrents don't have the `movie` relation eager loaded so it will try and fetch the `movie` relation if it's not eager loaded. Since we don't care about movies on a tv torrent, use a variable that doesn't have the same name as a relation so that it can't get loaded.
2023-09-09 07:19:43 +00:00
Roardom 42c23aa0b5 fix: Resource php doc blocks 2023-08-25 03:07:58 +00:00
Roardom 4f95933797 update: use eager loading in torrent api 2023-07-23 10:49:28 +00:00
Roardom 0000838d8b refactor: cruddy torrents
Separate torrents into cruddy route names. Route model binding isn't possible due to the global scope on unapproved torrents. Use form requests. Simplify the controller flow where possible.
2023-07-07 03:18:13 +00:00
Roardom 9d4789ba91 refactor: require whitespace before statements 2023-07-07 00:27:13 +00:00
Roardom b5493c5642 refactor: swap where('id', '=', ) for find() 2023-06-19 23:18:40 +00:00