-
POTI-board v2.26.0 and earlier all versions is vulnerable to XSS.
Malicious JavaScript can be executed. -
POTI-board v3.09.x and earlier all versions have a serious bug.
You may lose all log files. -
POTI-board v3.x gives a deprecated error in PHP8.1 It will not work with future versions of PHP.
Please update to v5.x or higher.
A POTI-board that can use HTML5 versions of PaintBBS NEO ,tegaki.js , Axnos Paint , ChickenPaint , and klecks.
In v3.0, the HTML5 version of the high-performance paint application ChickenPaint is available.
The HTML5 version of PaintBBS NEO is still available.
This is a project to translate POTI-board EVO into English.
POTI-board Kai official website English.
Required PHP version.PHP7.4 to PHP8.4
MONO's HTML and CSS have been significantly updated in v3.07.5.
Therefore, if you use a CSS file older than v3.07.5, some designs will not be displayed correctly.
For example, footers and catalogs don't look as intended.
If you want to change only the color scheme, please use the SCSS for development.
It's easy to change the color scheme because the settings are separated for the color scheme and other designs.
However, an environment that can handle SCSS is required.
For example, the free Visual Studio Code and its extension, DartJS Sass Compiler and Sass Watcher.
- Fixed an issue where the ChickenPaint Be texture palette could not be scrolled.
(Scrolling the texture palette is necessary on devices with small screens such as smartphones.)
- As a result of cramming functions into
thumbnail_gd.php, the readability of the source code significantly decreased, so we reorganized it into a static class.
thumbnail_gd.phphas been deleted.
Usethumbnail_gd.inc.phpinstead.
thumbnail_gd.phpis no longer necessary, but there is no problem if it remains on the server.
Please be careful when deleting, as you may delete a necessary file when trying to delete an unnecessary file. thumbnail_gd.inc.php` is now a common class with Petit Note.
There is no longer a need to maintain two types of files, one for Petit Note and one for POTI-board.
// The maximum size for width and height during upload, any larger will be resized.
define("MAX_W_PX", "1024"); //Width
define("MAX_H_PX", "1024"); //Height
Fixed a bug that reduced the image size when the size set with MAX_W_PX or MAX_H_PX was smaller than the maximum size that can be drawn.
The image size limit for drawing images should have been specified as the maximum size that can be drawn, and it was unintended that the image would become smaller than the initial image after posting.
- Because there is an input field at the top, previously the top of the reply screen was displayed once posting was completed.
However, this could make it difficult to tell if the reply comment was posted, so we've made it so that the screen scrolls to a position where the reply comment is visible.
-
I have improved the function to convert PNG images to JPEG when they exceed MAX_KB, and moved the GD processing that was processed in potiboard.php to thumbnail_gd.php.
By utilizing the existing GD processing, the code in potiboard.php has been shortened. -
When drawing, even if the image file size exceeds the value specified in MAX_KB, the post will be completed without an error.
As before, images attached from the posting form will result in an error when they exceed MAX_KB.
This specification has existed until now, but even if the original file size is very large, it will be reduced due to the vertical and horizontal limitations, and if the file size is larger than MAX_KB, PNG will be converted to JPEG, and if the final file size is within the MAX_KB range, the post will be successful.
- The process that was optimized for the mouse has been rewritten as PointerEvent so that it can be operated with the pen.
In addition, to prevent malfunctions, the default behavior of touchmoveEvent for each palette and the main menu has been canceled.
Fixed an issue where a dragged object would continue to move even if the pen was removed from the screen.
- Added "Noise Texture" to "Texture Palette".
Previously, you could add noise by using the "Monochrome Noise" option in the Effects menu in combination with layer effects, but the addition of "Noise Texture" allows you to create a slightly different type of noise.
By using it in combination with a pen or pencil, you can draw more pencil-like lines.
It is also effective when applying thick paint with a watercolor brush.
- Added a process to disable texture when using eraser.
You can now erase with the eraser even if a texture is selected.
Previously, if you selected a texture and used the eraser, you could not erase it completely. - Textures are applied when using the soft eraser. Please use the soft eraser when creating patterns by combining textures with the eraser.
- To improve code readability, the same process was made into a function. By making it a function, 16 lines that repeated the same process were reduced to 4 lines.
- Bootstrap is no longer declared globally, but is imported where necessary.
In addition, processes that can be reduced were deleted.
The build date is now listed in "About ChickenPaint Be".
This makes it possible to see at a glance when ChickenPaint Be was built.
-
The shortcut keys for zooming in and out in ChickenPaint Be have been changed to "+" and "-", the same as Klecks and AXNOS Paint.
Previously, it was necessary to press the "ctrl key" at the same time, such as "ctrl + +" or "ctrl + -". -
The file size of ChickenPaint Be has been reduced by 23.7%.
By changing the build tool and removing the polyfill package used for IE compatibility, the file size, which was 779KB, has been reduced to 594KB.
This weight reduction has made startup faster.
- Lightbox updated to v2.11.5 and changed to a drawing board.
- The background of the layer thumbnail images has been changed from a solid gray to a checkerboard pattern.
This is a change in the unofficial version of AXNOS Paint. The original AXNOS Paint developer is not responsible for any issues caused by this change, so please do not contact the original AXNOS Paint developer.
PaintBBS NEO has a function to restore images when you move to another page or accidentally close the browser tab, but if you accidentally select a small canvas size when restoring, the image will be cropped to fit that small canvas size.
Even if you then select a larger canvas size and reopen the image, the image will remain cropped small.
With this update, you can now restore the image to its original size by selecting a larger canvas size and reopening it.
PaintBBS NEO has a function to restore images when you move to another page or accidentally close the browser tab, but if the PC is turned off due to a power outage caused by lightning, images cannot be restored.
Backup data was only saved when you moved to another page or closed the tab, so if an unexpected power outage caused by lightning occurred, the data for restoration was not saved.
To address this issue, data for restoration will be saved every 10 strokes.
Data will also be saved if the browser is closed.
The data storage destination has been changed to local storage, similar to mobile devices.
However, this alone will still leave problems.
Test drawing data, etc. will continue to be saved for more than a week and may be restored at unexpected times.
Taking this into consideration, restoration data older than three days will be automatically discarded.
Due to recent climate change, power outages due to thunderstorms are increasing.
With PaintBBS NEO v1.6.5, you can now restore your Drawing bulletin board data even in the event of a sudden power outage.
Operation has been confirmed on PC versions of Chrome, Edge, and Firefox.
We created a test environment for the PHP8.4 RC version, which is scheduled to be released in November 2024, and tested POTI-board.
As a result, we found that a deprecated error occurred in BladeOne.
Since PHP8.4 has not yet been officially released, it will be some time before BladeOne supports PHP8.4.
For this reason, we created an unofficial patched version of BladeOne and included it.
Code that mixed substring() and slice() has been unified into slice(). (No change in behavior)
- Removed unnecessary Bootstrap 3 and Bootstrap 4 legacy CSS classes.
- "1 post omitted" and "2 posts omitted" now display correctly in singular and plural.
- Fixed a bug that caused image files such as PNG and JPEG to fail to load when continuing to draw with Klecks.
- Fixed a bug in template used with Klecks where loading a transparent PNG would result in a white background instead of transparent. This issue was discovered late, as it did not occur when a PSD file with layer information was present.
- Fixed the 404 error message that appears when the file to save the image does not exist. The error message displayed the file name that was included but not called directly.
The released AXNOS Paint V2.3.0 has been remodeled for POTI-board.
- The maximum and minimum canvas size set in the bulletin board are now reflected in the maximum and minimum canvas size in the AXNOS Paint Settings tab.
- If the browser's preferred language setting is anything other than Japanese, the UI now launches in English.
- The draft image loading process has been replaced with the official AXNOS Paint one.
- Modified the layer compositing results to be closer to SAI and FireAlpaca. This is currently a change to the specifications of AXNOS Paint derivatives, so if any problems with the layer compositing results occur due to this change, it is a problem with the derivative, not the original version.
- Implemented a measure to prevent repeated pressing of the post button in AXNOS Paint and Tegaki Fixed an issue where multiple images were sent when the post button was pressed repeatedly, and were added to the list of unposted images. Changed the communication process to comply with AXNOS Paint specifications.
- Resolved an issue when moving the tool palette on Mac Safari browser.
This issue does not reproduce in the latest versions of Safari. This is an unofficial fix to address an issue occurring in Safari 14.
What is AXNOS Paint (What is Axnos Paint) [Word article] - Niconico Encyclopedia
//Use Axnos Paint
// (1: Enabled, 0: Disabled)
define("USE_AXNOS", "1");
If this setting item does not exist, Axnos Paint will be used. If you don't want Axnos Paint to appear in the paint app selection list, add the above setting.
- The Blur tool in the Tool Palette now has a shortcut key set to U. This assigns all shortcut keys in the Tool Palette except for rotating the canvas and moving the hand tool. Since rotating the canvas is already available with R+drag and the hand tool with Shift+drag, there is no need to set shortcut keys for these functions in the Tool Palette.
- The apply transform button now expands to the full width of the palette, just like in the original ChickenPaint. This was an issue we ran into when we changed to Bootstrap 5, which was missing some needed CSS from the original ChickenPaint, so we restored some of the CSS from the original ChickenPaint.
- The code handling matching article numbers and passwords when rendering continuations is now less nested.
"MSG051", "[Locked due to incorrect password attempts.]"
- 2024/07/13 In v6.32.9, ChickenPaint Be starts with two layers, but the transparent layer that is automatically created at that time did not work properly. When drawing with a watercolor brush, black was dragged and the screen became black. This issue was fixed by setting the layer color correctly.
- Added a duplicate icon to the Layer palette. You can now duplicate layers and layer groups with one tap. Previously you had to use a shortcut key or select duplicate from the top menu.
- Changed the Merge Down icon.
- The layer group merge icon is now in the same position as the Merge Down icon. When you select a layer group folder, it becomes the group merge icon, and when you select a layer, it is replaced by the Merge Down icon.
- Starts with a total of two layers: background layer and transparent layer.
Reduces accidents of drawing lines on a white background layer.
- If the iPad Air width or height is 820px or less and is a touch device, it will launch in mobile mode. Previously, the width or height was 800px or less, so the app launched in PC UI when using iPad Air.
Also, the app switched to the mobile screen when the browser window size was reduced on the PC, but by adding touch device detection processing, the app will launch in PC UI when using PC.
- The setting was set to prohibit the calling of files with the
.jsonextension. However, this also prohibits the calling ofmanifest.json, which sets the icons to be set on the home screen of PWA and smartphones. Since this makes it impossible to set touch icons, the setting was changed to allow the calling of files with the file namemanifest.json.
- BladeOne has been updated to the latest version v4.13.
The template has been updated. The explanations for the form input fields have been made easier to understand. The way the form is displayed on mobile devices has been changed.
- Fixed an issue where the text on the opacity adjustment slider in the layer palette was blurred.
- Increased the spacing between the tool option sliders so they can be operated with your finger.
- Switch to mobile UI and collapse palette when using a device with width and height less than 768px. The UI takes up less space and you can draw on a larger canvas.
iPad.mini.mp4
- The margins of color swatches in mobile UI have been enlarged so that they can be tapped with a finger.
Issue where on-screen keyboard appears when tapping the drawing time clock on PaintBBS NEO drawing screen
- Added readonly attribute to prevent on-screen keyboard from appearing.
This issue occurred before 2018.
- The thickness of the palette title bar in smartphone mode has been increased to make collapse/expand easier.
- The spacing between the operation icons in the layer palette in smartphone mode was narrow, so it has been widened.
- Displaying both the collapse/expand icon and the close icon could lead to accidental tapping and accidentally closing the palette, so the close icon is no longer displayed in smartphone mode. Instead, use the show/hide shortcut menu at the top.
- The shortcut menu for hiding palettes is now always visible on devices other than smartphones and tablets.
- Further optimized responsive design for different widths.
- The color of the shortcut menu has been changed from yellow to light gray.
default.mp4
- The brand logo is now intentionally visible even in smartphone mode to prevent accidentally tapping the browser home button.
- The shortcut menu to hide palettes now spans the entire width of the device. Previously, the spacing was too narrow, so it was sometimes impossible to tap the yellow shortcut menu where you intended.
- In v1.36.10, we fixed the issue of the canvas size not returning to full screen after entering numerical values for blurring, grid settings, etc., when using the ChickenPaint menu on a smartphone. However, there was an issue with the palette placement being misaligned when performing this operation, which remained as an issue. We found that this issue was caused by both the modal window and the Hamburger menu being displayed, so we set it so that the display event of the modal window is obtained and the Hamburger menu is automatically closed. This fixed the issue of the palette placement being misaligned.
- Detects changes in the orientation of the smartphone or tablet and initializes the palette placement of ChickenPaint. In v6.31.10, we added a process to initialize the palette placement when the window size was changed, but the appearance of the on-screen keyboard when renaming a layer was detected as a window size change, making it impossible to change the layer name, so we decided to initialize the palette placement when the smartphone or tablet orientation was changed.
- If you want to change brushes while drawing, collapsing the palette each time would require more taps. Since you can hide all palettes by tapping the shortcut menu in Mobile mode, we have removed the auto-collapse feature for tool palettes.
- Smartphone mode with collapsed palettes can now be displayed even on smartphones with large screens.
- Fixed an issue where the canvas size would not return to full screen after entering numerical values for blurring, grid settings, etc., when using the ChickenPaint menu on a smartphone.
To address the issue where the layer palette would not appear in the expected position when tilting the smartphone vertically or horizontally, the palette layout is now automatically initialized when the screen is resized. The palette layout is also initialized every time the browser window size is changed on a PC. This also solves the issue where the palette would shift to the left when the window width was narrowed and would not return to its original position even if the window was widened again. However, since the palette layout is initialized even if the window is changed slightly, problems may occur if you want to move the palette position while drawing. However, it will not be initialized unless the window size is changed, so there should be no problem if you draw with a fixed browsers window size.
- Adjusted the operation icons of ChickenPaint Be's layer palette so that they fit in one horizontal row.
- Added a horizontal flip icon to the operation palette of ChickenPaint Be.
You can now easily flip horizontally even on devices that cannot use keyboard shortcut keys.
- Updated the bootstrap used by ChickenPaint Be to v5.3.3.
- Fixed ChickenPaint Be's deprecated JavaScript syntax
returnValue.
Even if the setting is twitter.com or x.com, a SNS sharing link will now be created with the x.com URL.
// Servers displayed in the list when sharing on SNS
//Example ["Display name","https://example.com (SNS server URL)"], (comma is required at the end)
$servers =
[
["X","https://x.com"],
["Bluesky","https://bsky.app"],
["pawoo.net","https://pawoo.net"],
["fedibird.com","https://fedibird.com"],
["misskey.io","https://misskey.io"],
["misskey.design","https://misskey.design"],
["nijimiss.moe","https://nijimiss.moe"],
["sushi.ski","https://sushi.ski"],
];
You can now create a link to x.com without any problems even if the URL of X (old Twitter) in config.php remains twitter.com.
If you don't mind leaving the name of the SNS that opens in the list as "Twitter", there is no need to modify config.php.
However, the settings in config.php take precedence, so if you want to display the old Twitter as "X", change to ["X","https://x.com"] ,.
- Even if Bluesky is not in the sharing list, you can now share to Bluesky by directly entering
https://bsky.app. - Fixed an issue where when sharing to X, Bluesky, Misskey, etc. on a smartphone, the app version would launch and the shared server selection screen would remain on the Chrome side.
We solved this problem by closing the screen when the focus is removed from the SNS shared server list screen.
However, if the screen has already been moved from the list screen to an SNS site, it will not close even if the focus is removed.
If so, it's because you're already typing or viewing a social media post.
Also resolved the problem that occurred when using the app on a PC, where multiple SNS sharing windows remained open.
// Servers displayed in the list when sharing on SNS
//Example ["Display name","https://example.com (SNS server URL)"], (comma is required at the end)
$servers =
[
["Twitter","https://twitter.com"],
["Bluesky","https://bsky.app"],
["pawoo.net","https://pawoo.net"],
["fedibird.com","https://fedibird.com"],
["misskey.io","https://misskey.io"],
["misskey.design","https://misskey.design"],
["nijimiss.moe","https://nijimiss.moe"],
["sushi.ski","https://sushi.ski"],
];
Bluesky must be added to the SNS server list in config.php.
["Bluesky","https://bsky.app"],
const handleExit=()=>{
When I attempted to change handleExit to a constant by adding const, this function stopped working. To avoid that, the handleExit function has been moved from inside "DOMContentLoaded" to outside.
Fixed regular expressions for automatic links. Identifies : as part of the URL.
This allows automatic linking of Internet Archive URLs.
https://example.com/https://www.example.com
Fixed an issue where the ChickenPaintn screen would remain scrolled and the menu bar would disappear when you finished using the iPad's onscreen keyboard. When you rename the ChickenPaint layer, an onscreen keyboard appears and forces scrolling. Displaying the onscreen keyboard forces the screen to scroll. And I had a problem with the keyboard not returning to its original position after it disappeared. Fixed this issue.
The IP address sent by the Java applet is IPv4, but the PHP script receives an IPv6 IP address.
As a result, there were cases where posts were not determined to be by the same person.
Fixed an issue where the image would not be displayed in the posted image list even if you posted a drawing image due to an IP address mismatch.
Even if the IP addresses do not match, if the cookies match, the image will be displayed in the posted image list, so this problem rarely occurred.
In addition to the conventional right-click, you can now register colors in the palette by long-pressing with a pen or finger. However, if you press the palette for a long time, it will become a long press and will register the color instead of selecting the color. Please be careful not to press for too long when just picking up colors.
Added shortcut keys. You can now invert negative and positive images using "ctrl+i". It is also possible to invert negative and positive layer masks. You can also invert the visible area by inverting the negative/positive mask.
Due to the update of the template engine BladeOne, the operating environment has been changed to PHP7.4-PHP8.2.
If PHP is lower than 7.4, please switch the PHP version using the server control panel etc. to PHP 7.4.0 or higher.
Fixed an issue where the ChickenPaint Be selection menu was not working in Safari and Chrome on iPad iOS.
Fixed an issue where it was possible to post using a password other than the admin password even if the admin pass was set to be required for new posts.
Fixed a bug where new posts were made using a password other than the administrator password, even though the administrator password was set to be required for new posts. This is a bug that has existed since v3.x.
The format of article IDs sent via email has also been unified to "?res={$resno}#{$no}".
Fixed an issue where session_start() was called in picpost.inc.php when the SESSION had already started, causing a minor error.
Avoid warnings from Chrome by explicitly setting "passive" values for ChickenPaint and PaintBBS NEO event listener handling.
Sensitive data in Java applet Shi-Painter has been changed from GET to more secure POST.
Changed sensitive data in the HTML5 version of the Paint app from GET to more secure POST.
Fixed undefined error in paint time. Fixed an issue where Shi-Painter posting would fail when using the Waterfox Classic+Java plugin.
Fixed an issue where variable text was being interpreted as HTML.
On the screen where NEO is running, key operations other than NEO's keyboard shortcut keys and text input could not be performed. Therefore, it was only possible to use the right-click menu of the mouse to paste palette data to the "textarea" of the dynamic palette. It was also not possible to edit the pasted palette data.
By acquiring and pasting dynamic palette data, you can use your own palette on any bulletin board. With this update, it is now possible to enter keys in the palette data input field. Like the original PaintBBS, ctrl+v (paste) crtl+x (cut) ctrl+c (copy) crtl+a (select all), etc. can now be used in the palette data input field.
Additionally, an issue where browser shortcut keys such as ctrl+r (reload) would work when using the text input function has been fixed.
We fixed an issue where neo's drawing animation file size was too large for the server to handle, causing all posts containing images to fail. If the post from neo exceeds the POST limit, we will stop posting the drawing animation file and allow the image post to succeed.
If you want to upload a large drawing animation file, please make the following settings in php.ini.
upload_max_filesize = 25M
post_max_size = 25M
CheerpJ v3.0 supports Shi-Painter's drawing playback function and detailed settings of dynamic palette
CheerpJ is a tool that converts Java applets to JavaScript on your browser. Previously, with CheerpJ v2, it was not possible to adjust the brightness or create gradients in the dynamic palette of the Java applet ShiPainter or PaintBBS.
Unfortunately, CheerpJ v3 is designed to not work on XAMPP's Localhost, and posts by Shi-Painter will also fail. This can be said to be a specification of CheerpJ because it only supports Java applets that are published on the Internet, not in the local environment.
//Use an older version of CheerpJ Yes:1 No:0
//If there is a problem with the latest version, do this:1
define("USE_CHEERPJ_OLD_VERSION","1");
"Luminous" which was used to display popup images, The LICENSE file has been removed from the repository, so LICENSE is now unknown. To resolve this issue, use a "Lightbox" to display the popup. I'm customizing the "Lightbox" to create a "luminous" like popup.
- Make transparent PNG transparent Since the background color of the "Lightbox" is white, I made the background part transparent so that the background of the transparent PNG image can be seen through.
- Long press on image to save In "Lightbox", you cannot save an image by long-pressing it, so I adjusted the CSS so that you can save it by long-pressing the image.
- Reposition the forward and backward navigation bars. The arrows that display the previous and next images that were displayed above the image have been repositioned to match the left and right width, and if there is space on the left and right, the navigation arrows will be displayed on the left and right.
- Close button Images now close when pressed anywhere other than the fo prev / next navigation arrows. As a result, the close button is no longer needed.
- Image loading image Change the loading circle GIF to two large and small circles created with transparent PNG. Rotate the image using CSS3.
The system that matches the cookie value set in HTML with the actual cookie value has been abolished. Even if the cookie does not exist at the time of posting, it is now possible to reissue the user code cookie and post. I believe that this not only addresses the issue of cookies disappearing from the user's browser, but also the issue of cookies not being able to be verified due to the server's WAF settings. Also, information was packed in the extension header of Shi-Painter and PaintBBS NEO, but we have switched to a method of obtaining it with GET parameters instead of via the extension header. To maintain compatibility, if it is not possible to obtain with GET, it is now possible to obtain with extension header.
- This ChickenPaint is a customized from original ChickenPaint.
satopian/ChickenPaint_Be Customized ChickenPaint working with Bootstrap5
Fixed an issue where shortcut keys would not work when operating a check box or select box on a palette.
- Redo is "ctrl+y".
- Transform is "ctrl+h".
- This ChickenPaint is a customized from original ChickenPaint. satopian/ChickenPaint_Be Customized ChickenPaint working with Bootstrap5
Using icomoon, the file size required to load fontawesome fonts was reduced to 1/18. The HTML of the dropdown menu has been unified to Bootstrap 5.3 format.
- Fixed a bug that caused "Cookie check failed" when painting.
- The code has been significantly updated to work with Bootstrap5 instead of the older Bootstrap4.
- Fixed minor bugs.
- This ChickenPaint is a customized from original ChickenPaint. satopian/ChickenPaint_Be Customized ChickenPaint working with Bootstrap5
Fixed a bug where when pressing the enter key to confirm numerical input in ChickenPaint's grid settings, the screen would move to the top of the bulletin board and the drawn picture would disappear.
- Fixed an issue where an error "User code mismatch" occurred and posts that were supposed to be able to post failed. Set a user code in both the cookie and SESSION data so that it can be posted if either the cookie or the SESSION matches the user code.
- Performs a cookie check when starting drawing mode, and checks in advance whether the user code matches the user code stored in Cookie or SESSION. Checks for problems and displays error messages before you start drawing. This fixes an issue where drawing work is lost.
- Press the “D” key to switch to Smudge tool.
- Press the “C” key to switch to Blender tool.
PaintBBS NEO Shortcut Keys Fixed an issue where the Firefox menu bar would show/hide when the Alt key was released.
- Fixed an issue where keyboard shortcut keys would stop working immediately after pressing the alt key.
- Press the “A” key to switch to airbrush tool.
- Rotate the canvas with "R" key + left click.
- Press the "H" key to flip horizontally.
- Press the “W” key to switch to watercolor brush tool.
- Press the "S" key to switch to soft eraser tool.
231125_ChickenPaint_._._.mp4
- ChickenPaint has been updated.
Switch the image popup display to gallery mode when there are multiple images in the individual thread display.
- When displaying Luminous' image popup display in a separate thread, if there are multiple images, they will be displayed in gallery mode. View previous and next images Use the arrows to view images in sequence.
Fixed an issue in "Waterfox Classic" and "Pale Moon" where an error would occur during POST from Shi-Painter started using the Java plugin.
- Added a corruption check function for images sent from Shi-Painter. Added a check for image corruption that is already implemented in drawing apps other than Shi-Painter.
- Updated Klecks.
If the PNG image sent from the drawing app is corrupted, the drawing screen will not switch to the posting screen. You will then receive an error message asking you to take a screenshot.
- Updated ChickenPaint.
- Updated Klecks.
- Improved processing when JPEG images are rotated or have location information added.
Previously, when rotation or position information was detected, a JPEG image of the same size was output.
With this update, it is now scaled down to the value specified by
MAX_W_PXandMAX_H_PX(for example, 1024px). This eliminates the need to process the image a second time if the width and height exceed the specified values. This eliminates the wasteful processing of creating a JPEG image and then creating the JPEG image again, as well as the deterioration of image quality.
- updated Klecks
This isn't about creating thumbnail images. Reduces the size of the uploaded image itself. so, just like Discord.
// The maximum size for width and height during upload, any larger will be resized.
define("MAX_W_PX", "1024"); //幅(width)
define("MAX_H_PX", "1024"); //高さ(height)
Analyze the Exif and if the image is rotated, correct it to the correct orientation. If location information is included, it will be deleted.
JavaScript for mobile judgment processing has been externalized. Removed unused code.
The bug preventing Shi Painter from starting in version 6.10.6 has been fixed.
Previously, both the drawn image and the uploaded image were converted from PNG to JPEG when the IMAGE_SIZE setting was exceeded, but now only the uploaded image is affected by the setting.
If an error occurs and you cannot post because the posting capacity limit of MAX_KB is exceeded, both the drawn image and the uploaded image will be converted from PNG to JPEG.
After conversion, if the file size is reduced to a size that can be posted, it will be posted in JPEG format.
New setting items have been added to config.php.
// If a drawing size smaller than this is input, it will be the minimum value set here.
define("PMIN_W", "300"); //幅 (width)
define("PMIN_H", "300"); //高さ (height)
- Fixed an issue where the Open in another tab button on the search screen remained disabled.
- The response display screen has been displayed faster.
// Use the oekaki function (1: Enabled, 0: Disabled)
define("USE_PAINT", "0");
//Allow admins to use all apps regardless of settings
// (1: Enabled, 0: Disabled)
define('ALLOW_ADMINS_TO_USE_ALL_APPS_REGARDLESS_OF_SETTINGS', '1');
Fixed a bug where the canvas size value was not displayed on the Paint form when using this configuration combination.
To simplify the work, we externalized the paint form so that it can be used as a common component.
Added mime type check for pch files of Java's Shi-Painter and PaintBBS.
Previously, with POTI-board, if 10,000 comments were recorded in the log file, even if only one comment was displayed on the reply screen, it would read the data for 10,000 comments. To solve this problem, we have made it possible to retrieve only the necessary parts from the log file when displaying the reply screen or catalog screen.
We have updated our own modified version of tegaki.js. Improved direct numerical input of brush size and opacity. The up arrow key increases the value and the down arrow key decreases the value.
- Optimized the display conditions for the thumbnail images of the previous and next threads at the bottom of the reply sending screen. Split processing before and after the current thread for a more optimal display.
- Security update. Fixed an issue where mime type was not checked when acquiring ChickenPaint specific format files. It also checks the mime type when downloading app-specific files.
-
Rewritten ChickenPaint's sending process to "fetch API" from old "xhr". (PaintBBS NEO, Tegaki, and klecks have already been sent using the "fetch API")
-
Change the template's "Web Style" to "Template".
-
The corresponding thread is now displayed when posting a new post or replying to a post. Previously, the top of the bulletin board was displayed when a new post was posted, and the corresponding thread was displayed when replying to a post.
Fixed an issue where validation was not performed when logging tool names to log files.
- The first and last page of paging can now be displayed. Click "Last" to display the oldest posts.
- The number of images displayed on one page when in catalog mode was fixed at 30, but can now be set.
- Fixed a minor error that occurred when accessing from a browser other than a browser without a user agent.
- Reduce the load by checking whether the drawn animation file exists before checking its extension.
- Corrected that the calculation part of the last update date on the search screen did not correspond to the year 2286 problem.
- shi-Painter -> Shi-Painter
The image attached and uploaded is now displayed as "Tool:Upload".
The name of the paint tool used is now displayed.
Addresses the year 2286 problem.
The type of timelapse file and the presence or absence of thumbnails are now recorded in the log file. As a result, the load can be reduced because it is not necessary to check the existence of the file each time.
Log files are backward compatible.
It can also be read with an older version of POTI-board.
Conversely, POTI-board v6.x can also read old version log files.
Log files do not need to be converted, you can use your existing log files.
// Display a link to the [Admin mode] Yes: 1 No: 0
define("USE_ADMIN_LINK", "1");
// No: 0 Hide link to the admin mode.
- klecks/ (Update directory by overwriting)
- potiboard.php
- templates/mono_en/paint_klecks.blade.php
- templates/mono_en/mono_paint.blade.php
- klecks/ (Update directory by overwriting)
- tegaki/ (Update directory by overwriting)
- Fixed a bug that could not be displayed in IE mode of Edge.
- potiboard.php
- search.inc.php (Some variables were undefined.)
- templates/mono_en/mono_main.blade.php (There was a part where the search link was still "search.php".)
- templates/mono_en/paint_tegaki.blade.php (When used on an iPad, the screen was being magnified by double-tap zoom.)
Added a new setting item to config.php.
""
// Width and height of window to open when SNS sharing
//window width initial value 350 define("SNS_WINDOW_WIDTH","350"); //window height initial value 490 define("SNS_WINDOW_HEIGHT","490");
""
When adding a server for SNS sharing, the height of the shared screen window was insufficient and scrolling was sometimes required. Solved the problem by making it possible to set the width and height of the shared screen of the server list when sharing with SNS. If the above setting items do not exist in config.php, the default values of 350px width and 490px height will be applied.
Servers to share can be selected not only directly above the label string, but also by tapping the right margin of the label.
- petitnote/template/basic/set_share_server.html Fixed HTML grammar errors.
The structure of jsearch.php has been fundamentally overhauled, modified and incorporated into potiboard.php. Search results that were previously displayed with a URL like "search.php?". The URL will be changed like "potiboard.php?mode=search&".
templates/mono/parts/style-switcher.blade.php contains the following parts that have been written in many templates so far.
<style>
body{
visibility: hidden;
}
</style>
<noscript>
<style>
body{
visibility: visible;
}
</style>
</noscript>
<link rel="stylesheet" href="{{$skindir}}css/mono_main.css?{{$ver}}">
<link rel="stylesheet" href="{{$skindir}}css/mono_dark.css?{{$ver}}" id="css1" disabled>
<link rel="stylesheet" href="{{$skindir}}css/mono_deep.css?{{$ver}}" id="css2" disabled>
<link rel="stylesheet" href="{{$skindir}}css/mono_mayo.css?{{$ver}}" id="css3" disabled>
Also set CSS visibility: hidden; here to hide the screen until the DOM and JavaScript have finished loading.
This prevents MONO's color settings from temporarily appearing in a different color scheme.
Name searches are now case insensitive when the exact match option is selected.
Search function was not working. This bug was introduced in v5.58.10 and fixed in v5.62.2.
In addition to "Twitter", you can now share posts on short-text posting SNS such as "Mastodon" and "Misskey".
You can also change it to a conventional tweet button by setting it in config.php. You can also edit the list of "Mastodon" and "Misskey" servers.
/* ---------- SNS share function advanced settings ---------- */
//Include Mastodon and Misskey servers in the share function
// (1: Include, 0: Do not include)
define("SWITCH_SNS","1");
// Servers displayed in the list when sharing on SNS
//Example ["display name","https://example.com (SNS server url)"], (comma is required at the end)
$servers =
[
["Twitter","https://twitter.com"],
["mstdn.jp","https://mstdn.jp"],
["pawoo.net","https://pawoo.net"],
["fedibird.com","https://fedibird.com"],
["misskey.io","https://misskey.io"],
["misskey.design","https://misskey.design"],
["nijimiss.moe","https://nijimiss.moe"],
["sushi.ski","https://sushi.ski"],
];
If this setting item does not exist in config.php, the above setting will be applied by default.
If you do not need detailed settings, please use the config.php you are currently using as it is.
It now add at the cursor position in the text field. Previously, it was added at the end of the line.
- Updated PaintBBS NEO to v1.6.0.
- Updated to original modified version of ChickenPaint.
- Fixed an issue where the URL of the fixed link of the article was not set correctly when the tweet button was pressed.
- This bug was introduced in v5.58.6 and fixed in v5.59.0.
- Updated jQuery from jQuery3.6.0 to jQuery3.7.0.
- jQuery versioning is done inside potiboard.php, so you don't have to change individual templates.
- templates/mono_en/js/mono_common.js
- Klecks update
- Blade One update
- klecks update
- Fixed an issue where the canvas aspect ratio was incorrect when ChickenPaint was launched in full screen mode on an iPad.
- In order to deal with the problem that the aspect ratio of the drawing area is broken when the orientation of the device is changed on the iPad, we have included a version of ChickenPaint that has been customized and built independently. (Temporary measure until the problem is resolved)
- This issue only occurs when using ChickenPaint in fullscreen mode.
- Therefore, I stopped starting in full screen mode and started in normal mode. You can switch the display to full screen mode by selecting full screen mode from ChickenPaint's menu bar.
-
Fix WCS dynamic palette script's deprecated JavaScript Rewrote substr() to substring() . String.prototype.substr() - JavaScript | MDN MDN
-
Added a "Post in the same thread" checkbox.
Added a "Post in the same thread" checkbox. However, in the case of "image replacement", there is no choice but to post in the same thread, so this option is unnecessary.
Therefore, I used JavaScript to display the "Post in the same thread" checkbox only when a new post is selected.
- bad host chek
When a user has the same host name and IP address, we made it possible to specify a few characters from the front of the IP address displayed as the host name and reject it with a prefix match.
$badhost =["example.com","100.100.200"];
If set like this:
"example.com" will be rejected with a suffix match, and "100.100.200" will be rejected with a prefix match.
- Dark theme is now selectable.
- Added French language support.
- Fixed touch gesture freezing issue on iPhone and iPad.
- Updated BladeOne to v4.8.
- Fixed that the order of the search screen was not in the latest order.
- Improved search screen code.
- Added missing klecks help file.
// Use URL input field (Yes: 1, No: 0)
define("USE_URL_INPUT_FIELD", "1");
//No: 0, the URL field disappears from the form input fields.
// Even if the form is faked, the URL will not be entered.
In addition to prohibiting the writing of URLs in the text, if you can also make it impossible to write URLs in the URL field, you can eliminate advertisement spam whose purpose is to write URLs.
URL judgment of URL writing prohibition in the text is quite strict, so even if http:// is omitted, it should be almost impossible to write URL of advertisement spam.
Fixed an issue where the template could not be sent due to a JavaScript error when the URL or subject fields did not exist.
It's not a bug, but I've rewritten the JavaScript so that it works fine even if the template is modified by the user.
In PaintBBS NEO, improved so that the screen does not move up and down when manipulating the canvas area such as copy and layer combination.
If the width of the terminal is large compared to the canvas size, it will not scroll even if you grab the mesh of NEO. This is because the screen moves up and down when copying, layer merging, and Bz curve operations. However, you can now grab and scroll the mesh when zooming in with pinch zoom. This is to avoid inoperability. These are implemented with inline JavaScript in NEO's paint screen, so you'll need to update the paint screen template.
- PaintBBS NEO data was not received at all in the environment of PHP5.6 to PHP7.x. Since it works without causing an error in PHP8.1 and PHP8.2, the discovery was delayed.
Overwrite and update
saveneo.php.
Fixed a bug where setting the minimum number of seconds required to draw would cause all alerts that should have been displayed as "15 sec" to be displayed as "0 seconds". Even if this bug exists, if you set it to 60 seconds, you can post normally when it exceeds 60 seconds. The problem was that the remaining time was not displayed accurately, and it was all "remaining 0 sec".
- fixd saveneo.php
Fixed an issue where depending on the content of the error that occurred, it would not be displayed as an alert and the screen would transition and fail to post.
Changed communication of PaintBBS NEO from raw data to formData to avoid false positive error by WAF.
- In order to be able to post to the conventional oekaki bulletin board, we modified NEO, which used to send raw data, and made it possible to send header, image, and timelapse animetion data with formData. With this change, the probability that the conventional WAF will detect NEO transmission data as an attack and block it will be greatly reduced, and the probability of successful posting will be dramatically increased. Added an option to send data individually with formData so that WAF does not judge it as an attack. by satopian Pull Request #94 funige/neo
-
Receipt of shi-Painter data is done by
picpost.phpas before. However, the data of PaintBBS NEO is received by newly addedsaveneo.php. If you forget to upload this file, you will not be able to post from NEO, so be sure to update it. Transfer it to the same directory as potiboard.php. Please update -
Updated Paint screen template
paint.blade.php
A parameter has been added to switch to the formData submit mode.
Until now, it was not possible to remove PaintBBS NEO from apps that use it, but now you can choose to use or not use NEO. If you set it to not use all, it will be a setting that does not use the drawing function. You can also set it to use only Klecks or only ChickenPaint. When there is only one app to use, the pull-down menu for app selection disappears and the screen becomes clean.
For example, if you want to reject submissions with only lines drawn in less than 1 minute,
// Security timer (unit: seconds). If not set, use ""
define("SECURITY_TIMER", "");
It was possible to specify the minimum required drawing time with , but until now, it was effective only for Shi-Painter and PaintBBS NEO. With this update, ChickenPaint and Klecks now have this setting enabled. In the old method, when there was a violation, it was possible to jump to another site (for example, the Metropolitan Police Department site), but instead of that method, an alert will open "Please draw for another 30 seconds.".
- fixd saveneo.php
Fixed an issue where depending on the content of the error that occurred, it would not be displayed as an alert and the screen would transition and fail to post.
Changed communication of PaintBBS NEO from raw data to formData to avoid false positive error by WAF.
- In order to be able to post to the conventional oekaki bulletin board, we modified NEO, which used to send raw data, and made it possible to send header, image, and timelapse animetion data with formData. With this change, the probability that the conventional WAF will detect NEO transmission data as an attack and block it will be greatly reduced, and the probability of successful posting will be dramatically increased. Added an option to send data individually with formData so that WAF does not judge it as an attack. by satopian Pull Request #94 funige/neo
-
Receipt of shi-Painter data is done by
picpost.phpas before. However, the data of PaintBBS NEO is received by newly addedsaveneo.php. If you forget to upload this file, you will not be able to post from NEO, so be sure to update it. Transfer it to the same directory as potiboard.php. Please update -
Updated Paint screen template
mono_paint.blade.php
A parameter has been added to switch to the formData submit mode.
Until now, it was not possible to remove PaintBBS NEO from apps that use it, but now you can choose to use or not use NEO. If you set it to not use all, it will be a setting that does not use the drawing function. You can also set it to use only Klecks or only ChickenPaint. When there is only one app to use, the pull-down menu for app selection disappears and the screen becomes clean.
For example, if you want to reject submissions with only lines drawn in less than 1 minute,
// Security timer (unit: seconds). If not set, use ""
define("SECURITY_TIMER", "");
It was possible to specify the minimum required drawing time with , but until now, it was effective only for Shi-Painter and PaintBBS NEO. With this update, ChickenPaint and Klecks now have this setting enabled. In the old method, when there was a violation, it was possible to jump to another site (for example, the Metropolitan Police Department site), but instead of that method, an alert will open "Please draw for another 30 seconds.".
It is now possible to extract the width and height from the old Java version pch file and load it into the canvas.
All apps no longer require canvas size input when uploading an app specific file and loading it into the canvas.
- It has become easier and more convenient to upload and paint PaintBBS NEO and Java Shi Painter videos from the administrator screen.
Until now, it was necessary to specify the canvas size before loading the pch animation file into the canvas.
With v5.52, you can now automatically get the canvas size from the animation file.
However, it is necessary to specify the canvas size when uploading the animation file of the Java version of PaintBBS.
For HTML5 version PaintBBS NEO, you can automatically get the canvas size when uploading animation files.
↑
This is a GIF animation created to introduce the operation when uploading files in specific formats for shi-Painter, PaintBBS NEO, Klecks, and ChickenPaint from the administrator screen.
The canvas size is still 300x300, but the canvas is open at its original size.
If you can download a PSD file, why not upload it? Including the meaning of the explanation for those who were wondering, I also uploaded the ChickenPaint .chi file and the Klecks .psd file (Photoshop format). I created this GIF animation for description.
-
PaintBBS NEO update v1.5.16
-
Solved the problem that cookies could not be read with JavaScript when WAF (Web Application Firewall) was turned on. If WAF is turned on, cookies are encrypted and have the httpOnly attribute. POTI-board uses JavaScript to load cookies into static HTML files. Therefore, with the conventional POTI-board, it was not possible to read the cookie of the form input content when the WAF was turned on. I solved this problem by issuing a form input cookie not only in PHP programs, but also in JavaScript. However, it is safer to use httpOnly cookies, which prevent JavaScript from reading the cookie. There is also a drawing board that uses httpOnly cookies. satopian/Petit_Note_EN: Petit Note English ver.PHP script for PaintBBS,ChickenPaint, and Klecks PHP5.6-PHP8.2 Log conversion from POTI-board is also possible. satopian/PetitNote_plugin: Petit Note Plugin for Drawing Board
-
Adding JavaScript to HTML files to emit cookies for form inputs increases the number of lines of inline JavaScript. So I externalized my JavaScript. This externalized JavaScript also includes the back to top button JavaScript and the Luminous image popup JavaScript. We apologize for the inconvenience and the need to update templates frequently. A directory for JavaScript has also been added, such as
templates/mono_en/js/. Please note that if you forget to upload this directory, things like the back button that appears when you scroll down or the JavaScript that appears on the same screen when you click on an image will not work. Overwrite everything in thetemplates/directory if you haven't customized the templates. Just upload all new installations.
- Changed the format of the canvas size pull-down menu formula generation loop to prevent XSS.
- Removed self-closing tag due to warnings when checked by W3C Markup Validation Service.
- Add same-origin check. Illegal posts from different origins are now rejected. However, for browsers that do not support Orijin headers, such as Edge's IE mode, Orijin headers are not checked. This is because if this check becomes mandatory, it will not be possible to start the shi-painter using Java. CheerpJ, for example, cannot smoothly play Shi-Painter's drawing animation, so Java must be started.
- Protection against directory traversal attacks. Invalidate hierarchies such as
../../in basename() when variables are entered in fopen(). - Rejection when the password is incorrect 5 times in a row. If you enter the wrong administrator password five times in a row, you can now refuse to enter it any more. If you want to use this function, please add the following setting items anywhere in config.php.
/safety/
//Reject if admin password is wrong for her 5 times in a row // (1: Enabled, 0: Disabled) // 1: Enabled for more security, but if the login page is locked it will take more effort to unlock it.
define("CHECK_PASSWORD_INPUT_ERROR_COUNT", "0");
// Access via ftp etc. // Remove the
templates/errorlog/error.logand you should be able to login again. //This file contains the IP addresses of clients who entered an incorrect admin password.
-
Changed the method to get IP address and host name because some servers cannot get IP address with getenv().
-
Use uniqid() to emit user-code repcode. It now changes in micro time units.
-
Increased the replacement code length from 8 to 12 characters.
-
Added original error message for WAF false positive to PaintBBS NEO.
- Updated Klecks.
- Fixed brush shortcut key behavior. Updated BladeOne to v4.7.1.
-
Even if the timestamps used in the working files overlap, advance the post time by 1 second so that the timestamps do not overlap. Previously, the working file could be overwritten by another file.
-
An error does not occur when the post time to be compared is in the future. In the post waiting time calculation process, even if the post time after the current time is detected, it will not be an error. For example, if the posting time is delayed by one year due to some mistake, the next posting will not be possible until one year has passed. To avoid this, if the waiting time is a negative value, it will pass without generating an error.
-
BladeOne v4.7.1. Along with that, I changed potiboard.php to automatically generate the cache directory. The cache directory auto-generation feature has been removed from BladeOne. As an alternative function, added a cache directory auto-creation function to potiboard.php.
-
Change the permission of files that need to be written in advance to 0606 (606). The log file that cannot be viewed externally is 0600 (600).
-
The types of error messages have increased when posting OEKAKI images fails.
- When you click the image file link on the management screen, it now pops up with luminous. Previously, images were opened in separate tabs.
- Corrected [tweet] to [Tweet].
- Corrected [TOOL] to [Tool].
- Added back to top page function that is displayed when scrolling to template MONO.
- Display optimized for smartphones. If the resolution is iPad (768px) , unfloat the image. Set the image margins to 0. As a result, the left and right margins of the image displayed on the smartphone are the same. Previously, the margin on the right side of the screen was larger. ・The administrator can now edit the article by clicking the article number on the MONO administrator deletion screen.
- If the script content of CheerpJ Applet Runner has been tampered with by hacking, etc., it will be detected and the script will not be executed. Subresource Integrity See MDN. If you change the version of CheerpJ, it will not work unless you change the hash value. However, the calculated hash value is included in the latest version of potiboard.php ・If the image file received by picpost.php, which receives data from the Shi applet or PaintBBS NEO, is not jpeg, png, etc. image, it will be judged as illegal and deleted.
When using Shii applet and PaintBBS NEO, the behavior of rejection due to the time required for drawing or the number of steps required has been changed.
・shi-chan has developed a function to redirect the drawing screen to the police site when the drawing time is short or the number of drawing processes is small. However, this feature was impractical and of no use. Therefore, instead of suddenly jumping to the specified URL from the drawing screen, we changed the specification to display an alert on the drawing screen that "drawing time is too short" and "the number of steps is low".
- Restored the force thumbnail feature that was in v1.3.
Using the latest
thumbnail_gd.phpturns this feature on. If the file size exceeds 1MB, a thumbnail image in jpeg format will be output. Assumed case. If a GIF animation image file that is small in height and width but large in file size exceeds 1 MB, a thumbnail image in JPEG format will be displayed instead of the GIF animation. Click the image to view the original GIF animation.
- Changed the initial error message to switch automatically between Japanese and English.
- Reduce load by avoiding unnecessary processing. For example, if there are no comments, you don't have to check the length of the comment or the bad words, so returning immediately reduces the load.
Fixes an issue where white fills after using distortion tool show lines that follow the shape of the Liquify. Added how-to video link to help page and added gradient shortcut keys section.
The attached image is a GIF animation when I did a reproduction test of the problem that the color picker is not displayed. Updated to the latest version of ChickenPaint to avoid a bug in Google Chrome 105,106 that causes this problem.
- Added option to use gradient tool as an eraser.
- Added vanishing point filter.
- Updated Klecks to latest version. Gradient tool and pattern filter added.
- Updated BladeOne to v4.6.
- Fixed a bug that an E-WARNING level PHP error occurred when specifying an article number other than the article number of the thread's parent on the reply screen.
Please update
potiboard.php.
- If the password field is blank for password authentication when drawing a continuation or download authentication of pch, chi, psd, the cookie password will be used instead. Unified to the same behavior as password authentication during edit function.
- Fixed function
check_password()for password checking. Password authentication will not succeed if no password is entered and the password is not present in the cookie. - Fixed the multilingual support of the mail notification function was insufficient.
- Increased page number spacing for template MONO.
- Fixed paint screen's clock javascript .
- Changed the unit of file size on the managed post screen from bytes to kb.
- Updated Klecks to the latest version. Added noise filter.
- Updated BladeOne to v4.5.5.
- Updated jQuery to v3.6.0. Since the existence of the file is checked, the program will not run if the included jQuery does not exist. The case an error message telling you that the file does not exist.
- Fixed clickjacking vulnerability. It will not be possible to display in frames or iframes. It's more secure, but I know some people want to display it in a frame. Therefore, we added a new setting item to config.php so that you can select whether or not to display it in the frame. If you do not need to display in the frame, you do not need to add setting items.
// Deny display in iframe: (1: Deny, 0: Allow)
// We strongly recommend "Deny" to avoid security risks.
define('X_FRAME_OPTIONS_DENY', '1');
I think it is difficult to rewrite config.php from scratch, so if you add the above setting items anywhere, you will be able to display it in the frame.
-
Improved mobile usability. Optimized tap target size and spacing.
-
Improved page loading speed Prefetch externally loaded JavaScript such as jQuery and loadcookie.js to avoid rendering blocking.
-
JavaScript execution timing to
DOMContentLoaded. -
Fixed a fatal error if not written carefully. error() function to built-in function die().
-
Enabled to change the jQuery version without touching the template directly.
-
Added width and height of image in search screen.
-
In order to speed up loading speed, loading="lazy" is not applied to the range displayed from the beginning.
-
The JavaScript description of the timer under the PaintBBS startup screen was deprecated, so it has been fixed. After setting the content security policy, the clock on the drawing screen of POTI-board stopped working. ｜Satopian｜note
- Reduced the probability of duplicate file names when posting drawing images to 1/1000.
- Even if it is duplicated, 1 second will be added to the posting time.
- Add a process to check if there is a posted image, make sure that the drawn image is sent to the server, and then move from the drawing screen.
- Klecks has been updated. Added a grid to the editing function.
- BladeOne has been updated. A minor bug has been fixed.
Release POTI-board EVO EN v5.20.2 released.
- Since it was confirmed that it does not work with PHP7.1, the required operating environment has been changed to PHP7.2 or higher. In the PHP7.1 environment, it will not start and will issue an error message telling you that the PHP version is low.
- The form is not displayed when there is no unposted image.
- Fixed the issue that the layout was broken when posts omitted .
- ChickenPaint now launches in full screen.
More information can be found in the release.
Updated Klecks to the latest version.
Updated CheerpJ, which converts Java applets to JavaScript when using the painter, to v2.3.
- Fixed a bug that the rejected character string and rejected url for anti-spam could not be processed correctly if they contained
/(slash). - Fixed a minor error when calculating the number of days elapsed for deleting temporary unnecessary files.
- Fixed the problem that the date and time when closing the reply in the specified number of days was not the parent's posting date and time but the latest reply posting date and time.
- Reimplemented tripcode function.
- Several issues with the iPad OS have been fixed.
- Traditional Chinese has been added to the available languages.
- BladeOne has been updated to v4.5.3.
-
If the cause of the transmission failure of klecks is a server error, the error number is displayed as an alert. For example, if
saveklecks.phpdoes not exist ," Error 404 "will be displayed in the alert. -
Changed the working directory of the PNGtoJPEG process to
TEMP_DIR. Even if the process fails and the working files are left behind, they are now automatically deleted over time.
- When the
.pchsave directory was specified other than'src /', the automatic directory creation function did not work and the required files could not be saved. Changed to be created automatically when the directory does not exist.
- fix search template.
- fix main template. Fixed a grammatical error in the HTML of the search screen.
- Corrected incorrect English notation.
- klecks updated The number of layers that can be used has been increased from 8 to 16.
- Translated Klecks into Japanese. I was able to bundle a Japanese version with POTI-board. This new version of Klecks will automatically detect your browser's language priority and switch languages for you. You can also specify the language to use regardless of the browser language setting. You can select English, German, or Japanese. Chinese is only in Simplified Chinese and details are still in English. Japanese translation resources have already been merged into the klecks repository.
. Pchfile (PaintBBS). Chifile (ChickenPaint). Psdfile (Klecks)
The file containing the layer information for Klecks is a .psd file in Photoshop format.
The downloaded .psd file can be opened by CSP, SAI and many other apps.
.pch and .chi can be opened with NEO and ChickenPaint, respectively.
If you attach .pch, .chi, .psd from the administrator posting screen and press the paint button, you can load it on the canvas and post it.
- Fixed the problem that the transparent part of transparent PNG was black when it was converted to JPEG. It is not a mistake that the transparent color is black, but since it often results in unintended results, when converting from transparent GIF or transparent PNG to JPEG, the transparent color is converted to white.
- Fixed the case where a minor error occurred when operating the upload format specific to the paint application used when logging in to the administrator, and the automatic deletion function of unnecessary temporary files such as pch, chi, and psd.
Updated template engine BladeOne to v4.5.
- Fixed the issues that the menu could not be operated with Apple Pencil. Fixed that the menu operation of ChickenPaint and Klecks could not be operated with. It was caused by Javascript added to the paint related template in v3.19.5. I deleted the corresponding Javascript and confirmed that it works normally.
- Updated Klecks to the latest version. A new brush has been added. You can now do mirror painting.
- You can use the new painting app Klecks.
Easy-to-understand UI, powerful brushes, and filter functions. You can use 8 layers.
Many minor bugs have been fixed.
When the character string specified by the "String blacklists" exists in the URL, it is now rejected. In addition, we have added a "URL blacklists" .
// URL blacklists
$badurl = array("example.com","www.example.com");
Previously, no spam word checking was done on the URL.
There was a function to lock the editing of articles that exceeded the specified number of days, but I was able to draw the continuation. I created these settings because the article will be modified if the password is compromised by a third party. Even if the article is locked, it can be deleted by the user. In addition, the administrator can edit even after the specified number of days.
However, I think that some people may be in trouble if the lock is applied within a certain number of days.
define ('ELAPSED_DAYS', '365');
Threads older than 1 year will be locked in 365,
define ('ELAPSED_DAYS', '0');
If set to 0, it will not be locked.
- If the specified number of days has passed while drawing, it will be a new post. Also, when the thread is deleted while drawing, it will be a new post.
I changed the template engine to BladeOne because I get a deprecated error from Skinny.php in PHP8.1 environment.
However, that means that the templates will be incompatible.
Templates with the extension HTML have been replaced with templates with the extension blade.php.
When you open the content, it's not much different from a traditional template. However, it may seem difficult because the extension is not HTML.
- I was developing it to work in PHP5.6 environment, but I found that v4.2 of BladeOne only works in PHP7.4 or higher environment. POTI-board EVO v5.x requires PHP 7.4 or higher.
The thread display process has changed significantly. Previously, there was processing for the parent of the thread, and there was separate processing for reply.
In v5.x, the loop of the array of one thread is ended at once.
It then treats the first loop as the parent of the thread. Specifically, it looks like the following.
@foreach ($ress as $res)
{{-- Parent article header -}}
@if ($loop->first)
{{-- First loop -}}
<h2 class="article_title"><a href="{{$self}}?res={{$ress[0]['no']}}">[{{$ress[0]['no']}}]
{{$ress[0]['sub']}}</a></h2>
@else
<hr>
{{-- article header for reply -}}
<div class="res_article_wrap">
<div class="res_article_title">[{{$res['no']}}] {{$res['sub']}}</div>
@endif
@if ($loop->first) is true for the first loop of the thread.
When @if ($loop->first) is true, it is processed as the parent of the thread.
The <h2> tag of the title that is displayed differently only when it is the parent of the thread is put in that place.
If you install the extension laravel-blade in a free editor called VScode, the editor screen will appear. Switch to a color scheme optimized for the blade syntax. Both the extension and the editor itself can be used free of charge.
all.
We apologize for the incompatibility of the template and the resetting of config.php, but we hope you understand it.
Also, please use the PHP script for the Oekaki bulletin board called Petit Note, which was newly recreated from scratch.
- Added the ability to display images of the next and previous threads in the reply view.
-
When you continue from the Reply image with a "new post", that image becomes the Reply image.
Previously, if you continue and draw from the image of Reply, a new thread was created. -
After replying, the screen of each thread that replied is now displayed. Previously, the top page was displayed regardless of where you replied to the thread.
-
Changed the display method when editing / deleting in reply mode or catalog mode and completing the work. For example, when the edit / delete work is completed on the second page of the catalog mode, the second page of the catalog mode is displayed. Until now, the top page was displayed.
-
Individual threads are now displayed when you continue drawing and the post is complete. Until now, the top page was displayed. If the image you want to continue is many pages away from the top page, you had to find the image from many pages.
-
ChickenPaint Swipe a specific part of the screen to prevent it from moving up or down. The relevant parts are controlled by JavaScript.
-
Updated index.php required for new installations.
Even if the PHP version is PHP5.3 or lower, an error message will be displayed indicating that it will not work because the PHP version is low.
Previously it was a fatal PHP error. -
Fixed an issue where long press the ChickenPaint's palette with the pen would open an unwanted mouse right-click menu.
-
Fixed an issue where the screen would move up and down when copying and layer merging with PaintBBS NEO.
If you select a rectangle to perform a copy and layer combination operation, the pen may protrude slightly from the canvas.
At this time, the PaintBBS NEO's canvas may move up and down.
Occurs when using Windows ink or Apple Pencil.
If a screen width wider than the iPad is detected, the screen will not move even if you swipe the mesh part around the canvas of PaintBBSNEO.
When using a smartphone, the operation is the same as before. Because if you want to pinch out the canvas and zoom in,If you cannot swipe, you cannot operate.
Please update mono_paint.html to resolve these issues.
-
picpost.php Fixed false positives for languages.
-
Many translations have been improved.
- Chi file deletion process after upload painting
I added it because there was no process to delete the chi file after uploading the ChickenPaint-specific file and the chi format file and loading it on the canvas in the administrator's post.
This fix removes it from the temporary directory 5 minutes after uploading. Prior to this fix, files that were no longer needed were deleted after a few days. - The HTML ALT for images has been fixed. The HTML translation of the theme has been improved.
- Fixed the calculation method of the width and height of the thumbnail image and the width and height of the HTML image when drawing the continuation. The setting value of connfig.php is set as the maximum value and the calculation is restarted from the beginning. In ChickenPaint, you can change the height and width of the image by rotating it, but until now, the size of the thumbnail image became smaller each time it was rotated.
- The actual canvas size is now set in the cookie. Previously, the value entered by the user was set as is. Since there is a maximum value for the canvas size, for example, when the maximum is 800px, even if you enter 8000px, the actual canvas size that opens is 800px. Previously, the cookie was set to 8000px even in such cases.
- An error is now returned when a file name with an invalid length is entered.
- Checks the length of the reply number and returns an error if the length is incorrect.
- Fixed the specification that the full text of the parent's comment is displayed in the description of the article displayed on the reply screen, and now omits 300 bytes or more.
- The translation has been improved.
Please update potiboard.php.
- In order to mitigate unauthorized posting from external sites, the usercode set in the usercode and cookie during post processing is now checked.
Please update picpost.php and save.php.
- Added password length check.
- Moved the length check of each input item to the first half of the process.
Fixed a minor error that occurred when displaying the management screen.
The file needed to fix this issue is potiboard.php.
Please update potiboard.php by overwriting.
- All versions of POTI-board prior to v3.09.5 have a serious bug.
You may lose all log files.
For those who are using POTI-board v2.
You cannot use all the functions of v3 system just by replacing potiboard.php, but you can deal with this problem.
Please update potiboard.php by overwriting.
-
To prevent the use of weak passwords, an error message will be displayed when the password is 5 characters or less. The error message is "Password is too short. At least 6 characters."
-
In order to prevent tampering with articles by third parties, the function to lock replies to threads older than the set number of days has been expanded to lock editing of old articles. You can delete it. In addition, the administrator can edit and delete as before.
-
If you used the old config.php that doesn't have the following settings, you had to check or uncheck [no_imane].
// Use to the checkbox of [no_imane], do:'1', do not:'0'
define('USE_CHECK_NO_FILE', '0');
we changed this default value from "do:'1'" to "do not:'0'".
Previously, even if you were using a new theme HTML file, you had to check or uncheck "[no_imane]" when the version of config.php was old.
- Changing the copyright link on the site. https://paintbbs.sakura.ne.jp/poti/
- Fixed a bug in POTI-board EVO v3.08.1.
There was a problem switching the color scheme of the theme MONO because the necessary JavaScript was accidentally deleted.
- Fixed an issue where the submit button was not enabled when using the browser's "History Back" or error screen "Back" links.
- Fixed the processing specification that determines whether to start the drawing time calculation.
- Even if an error occurs during the posting process, you can repost the drawing image from the unposted image. Moved work file deletion to almost the end of the post process. Previously, if an error occurred in the second half of the posting process, the posted illustration would remain on the server but could not be displayed on the bulletin board.
- Linkd from thread title to reply screen.
Click the thread title to open the reply screen .
- The color scheme of the search screen is closer to that of the bulletin board.
When editing or deleting an article, if you enter the article number and press the edit button, the password may be saved as a set with the user name as the article number.
-
The chickenpaint icon has been updated
-
Changed the color scheme of the theme MONO
Change vivid color to pastel color. -
Fix garbled characters
Fixed the problem that the character string posted on the Twitter screen when the Tweet button was pressed was garbled.
Fixed garbled characters in post notification emails. -
Administrator deletion screen
Improved security. Strengthened XSS measures.
Changed the number of items displayed on one page from 2000 to 1000. -
Fixed error message
"chi" has been added to the description of supported formats because you can use "chi" files for the ability to upload files and load them onto the canvas.
2021/08/23 Due to my mistake, there was no new icon for chicken paint.
I apologize for any inconvenience, but please overwrite and update the ChickenPaint directory.
It has been fixed in (v3.06.8.1).
- Added decoding process because Tweet and notification emails are HTML-escaped garbled characters.
- Added output variables corresponding to the title and name used for Tweet.
<% def(oya/share_sub)><% echo(oya/share_sub) %><% else %><% echo(oya/sub|urlencode) %><% /def %>
<% def(oya/share_name)><% echo(oya/share_name) %><% else %><% echo(oya/name|urlencode) %><% /def %>
If the version of the POTI board itself is low and the newly added variables are undefined, use the variables for the old Tweet.
When a newly added variable is defined.
Use a new variable.
- ChickenPaint has been updated to fix many iOS related bugs. Bugs related to palm rejection have been resolved.
You can now recognize your palm and Apple Pencil. Until now, unintended straight lines have occurred.
- Resolved an issue where using ChickenPaint on an iPad would cause unintended double-tap zoom issues that would make drawing difficult.
Please update the HTML for Paint screen. <img loading = "lazy">. Addedloading =" lazy "to theimgtag of theme.
- CSRF measures using fixed tokens have been introduced. You can reject unauthorized posts from outside the site.
If the theme HTML does not support tokens
define('CHECK_CSRF_TOKEN', '1');
To Change to
define('CHECK_CSRF_TOKEN', '0');. If you enable this setting when the theme is not supported, you will not be able to post. If this setting is not present inconfig.php
define('CHECK_CSRF_TOKEN', '0');
Is treated the same as. - Moved to the method of checking HTML at the time of output.
Administrators can no longer use HTML tags.
HTML tags that have already been entered will be deleted.
The output is the HTML tags removed and escaped. - The form on the top page and the mini-less form displayed in each thread have been abolished.
This is because you cannot set the CSRF token in a static HTML file. - ChickenPaint is now available on your smartphone.
- Resolved an issue where using ChickenPaint on an iPad would cause unintended double-tap zoom issues that would make drawing difficult.
Please update the HTML for Paint screen. <img loading = "lazy">. Addedloading =" lazy "to theimgtag of theme.
- Addressed an issue where the Chicken Paint screen would be selected.
- Prevents returning to the previous screen with Windows ink and two-finger gestures when drawing with PaintBBS NEO and shi-Painter.
- Changed CSS switching to pull-down menu method.
-
Updated to the latest version of "ChickenPaint".
If the browser language is other than Japanese, it will be displayed in English. If the browser language is Japanese, it will be displayed in Japanese. -
Management screen paging Page breaks in units of 2000.
Improved paging on the main page and catalog page.
Shifted to a method of paging in 35-page units. -
Addressed the version of CheerpJ where the "shi-painter" does not start.
The JavaScript url required to start CheerpJ is managed in potiboard.php.
- Chicken Paint is now available.
- The name of the script has changed to POTI-board EVO.
Change the working directory of png2jpg to the real path of src. The behavior is the same as before it was made into a function.
- Corrected English translation of
config.php. - Fixed an issue where images were not displaying as intended in the theme.
- Fixed a mistake in v2.26.5 regarding email addresses (by satopian)
- Fix E_WARNING level error when posting a response with no destination (by satopian)
- Fixes writing process to
img.lognot to occur in a different way from POTIv1.33b1.
- Fixes writing process to
- Fixed that fopen() of user deletion was not closed.
- Fixed a bug in the administrator's delete screen (by satopian)
- Email addresses are now passed through a validation filter, and those with invalid email formats are not sent to links.
- Fixed a bug where MD5 was not displayed.
- Fixed an E_WARNING level error (by satopian)
- Fixed an error where the rightmost tab of the tab separator was trimmed and the tab character was also lost.
- In
config.php, when$badfileis not set, E_WARNING level error occurs, so I made sure it is defined and is an array before processing. If config.php is set up correctly, there is no problem.
- There are changes in
potiboard.phpandpicpost.php.
- Fixed a bug that when a mail or URL in the log is not in the correct format, it is checked when outputting and not sent out as a link (by satopian)
- The form() function used to be called for the number of HTML pages when updating the HTML of an article, but now it is assigned to a variable so that it can be called only once (by satopian)
- The difference is so slight that you can't tell.
- Fixed XSS vulnerability in v2.23.1 lot.210203 (by satopian)
- This is quite dangerous, so please make sure to update.
- Fixed a character string that could not be set in cookies (by Satopia)
- Added support for setting error messages when uploading pch files in template_ini.php (by satopian)
- Fixed an error when the administrator password is undefined (by satopian)
- Fixed a bug that a string to restrict only in admin mode was rejected in normal writing (by satopian)
- There is an additional message in
template_ini.phpof theme.
- There is an additional message in
- Changed the English translation of the palette buttons a little bit (by sakots)
- overwrite
mono_paint.html,template_ini.php.
- overwrite
- Fixed error message displayed when administrator password is undefined (by satopian)
- There is an additional message in
template_ini.phpof theme; Reserveed MSG040.
- There is an additional message in
- Fixed the problem that the string to restrict only in admin mode is rejected even when writing normally (by satopian)
- Fixed vulnerability in admin rights when config is under certain conditions (by satopian)
- Fixed cookie errors (by satopian)
- Please overwrite and update
loadcookie.js.
- Please overwrite and update
- Rewind to v2.23.2 due to operability issues found due to multiple sending of sessions.
- You can use the theme as is.
- v2.25.0 will be developed while looking for a way to solve the problem.
- Changed to use session and one-time token when posting and editing by administrators (by satopian)
- The old method of authenticating by putting the admin password in the hidden field has been abandoned, and the security has been improved because the admin password is not shown in the HTML file source.
- Update the theme MONO (by sakots)
- Discontinue use of Font Awesome and use svg files for icons.
- Changed the image size input method from a pull-down menu to a numerical input method.
- Support for pch upload painting in admin posts.
- Fixed not to create a link unless the correct character string is entered as an email address in the email field (by satopian)
- Fixed remained Japanese message that should have been replaced with a constant (by satopian)
- Fixed a large number of blank lines in the log file when the number of log holdings is exceeded (by satopian)
- Fixed double cookie encoding (by satopian)
- Fine-tuning the source code of
picpsot.phpandthumbnail.php(by sakots)- The function itself has not changed.
- Not to do use variables that can be obtained with filter_input() as function arguments (by satopian)
- To be a function of input check (by satopian)
- Tuning the source code (by satopian)
- Move
picpost.systemlogsettings topicpost.php(by satopian)- Please overwiter
picpost.php. Fixed a mistake in moving the settings.
- Please overwiter
- Fine-tuning the source code (by sakots)
- Fine-tuning the source code (by satopian)
- Fixed a bug that sometimes displayed as "0 response(s) Omitted." (by satopian)
- Fixed minor error in php8 environment (by sakots)
- Fixed a bug that caused a fatal error in PHP8 environment (by satopian)
- Fixed a bug that it cannot be processed when the log for one statement is 4096 bytes or more (by satopian)
- Improved English translation
- Multilingual support of NOTICEMAIL (by satopian)
- The settings exist in
theme/template_ini.php.
- The settings exist in
- Avoid fatal errors in php8 when the timestamp doesn't exist in the log. (by satopian)
- The permissions of
picpost.systemlogcan be set inconfig.php. (Leakage of previous work)
- Revised LICENSE by sakots.
- I misunderstood the "inheritance" of CC BY-NC-SA 3.0.
- Sort config items according to importance (by satopian)
- The error log settings in picpost.php have been moved to potiboard.php. It is a setting item for developers.
- You don't have to modify config.php. Sometimes we might add new settings in the config file. When that happens, these should be changed only when it's necessary. Otherwise they should work as they are.
- About rejected character. Click here for details
- Multilingual support
- All messages output by potiboard.php can now be set in template_ini.php. (by satopian)
- Fixed a bug where constants are defined twice (by satopian)
- Enabled to set the timezone in config.php (by satopian)
- Removed wondercatstudio 'http' from copyright notice for safety. (by sakots)
- Because someone else has taken the domain.
Replace potiboard.php picpsot.php. Add settings to config.php theme/template_ini.php.
- Improved translation (by satopian)
- Translated. (by satopian)
search.phpandtheme/search.html
- "-san" (by satopian)
- Update translation of config.php (by aaroncdc)
- Fixed fatal error when the posting time (UNIX timestamp) was not recorded in the log file. (by satopian)
- Improve English config descriptions (by Craftplacer)
- Files and Directories php outputs permissions can be set in config.php
- theme
- [Picture in the middle of posting] to [temporary pictures]
- Readme_Shichan.html, readme_pch.html
- Those files are Not allowed to change when bundling the Shi-Painter applet.
- So I made Readme_Shichan_utf-8.html and readme_pch_utf-8.html.
- Just changed the character code to UTF-8. (Information for developers are written in.)
- managed to get rid of the untranslated part ( [L] and [R] )
- translating project started.
- config.php, picpost.php, and security_c.html were done.
- readme.txt, potiboard.php, and search.php is not yet.
- theme has a problem. I couldn't translate a short word well.