From cf7ea74b0ad4e3c3a5aa7a03dcb273f77c235a20 Mon Sep 17 00:00:00 2001 From: Garvin Hicking Date: Thu, 5 Apr 2018 14:17:19 +0200 Subject: [PATCH] Added legal notice for remaining plugins @th-h Please check serendipity_event_dejure if possible @onli please check serendipity_event_commentspice and serendipity_event_browserid if possible --- serendipity_event_browserid/ChangeLog | 3 ++ .../serendipity_event_browserid.php | 31 ++++++++++++++-- serendipity_event_cal/ChangeLog | 12 +++--- .../serendipity_event_cal.php | 22 ++++++++++- serendipity_event_commentspice/ChangeLog | 2 + .../serendipity_event_commentspice.php | 37 ++++++++++++++++++- serendipity_event_contactform/ChangeLog | 2 + .../serendipity_event_contactform.php | 22 ++++++++++- serendipity_event_dejure/ChangeLog | 2 + .../serendipity_event_dejure.php | 28 ++++++++++++-- serendipity_event_disqus/ChangeLog | 2 + .../serendipity_event_disqus.php | 29 +++++++++++++-- .../serendipity_event_dsgvo_gdpr.php | 20 +++++++--- serendipity_event_facebook/ChangeLog | 2 + .../serendipity_event_facebook.php | 24 +++++++++++- serendipity_event_filter_entries/ChangeLog | 2 + .../serendipity_event_filter_entries.php | 19 +++++++++- serendipity_event_flattr/ChangeLog | 1 + .../serendipity_event_flattr.php | 20 +++++++++- serendipity_event_forgotpassword/ChangeLog | 2 + .../serendipity_event_forgotpassword.php | 22 ++++++++++- serendipity_event_forum/ChangeLog | 2 + .../serendipity_event_forum.php | 2 +- serendipity_event_google_analytics/ChangeLog | 2 + .../serendipity_event_google_analytics.php | 2 +- serendipity_event_guestbook/ChangeLog | 2 + .../serendipity_event_guestbook.php | 2 +- .../serendipity_plugin_guestbook.php | 2 +- serendipity_event_karma/ChangeLog | 3 +- .../serendipity_event_karma.php | 2 +- serendipity_event_ljupdate/ChangeLog | 2 + .../serendipity_event_ljupdate.php | 2 +- serendipity_event_mailentry/ChangeLog | 1 + .../serendipity_event_mailentry.php | 19 +++++++++- serendipity_event_markread/ChangeLog | 1 + .../serendipity_event_markread.php | 20 +++++++++- serendipity_event_multilingual/ChangeLog | 1 + .../serendipity_event_multilingual.php | 20 +++++++++- serendipity_event_oembed/ChangeLog | 5 +++ .../serendipity_event_oembed.php | 22 +++++++++++ serendipity_event_openid/ChangeLog | 3 ++ .../serendipity_event_openid.php | 23 +++++++++++- serendipity_event_smtpmail/ChangeLog | 2 + .../serendipity_event_smtpmail.php | 23 +++++++++++- serendipity_event_social/ChangeLog | 3 ++ .../serendipity_event_social.php | 27 +++++++++++++- .../serendipity_event_spamblock_bayes.php | 20 +++++++++- serendipity_event_spamblock_bee/ChangeLog | 3 ++ .../serendipity_event_spamblock_bee.php | 17 +++++++++ .../version.inc.php | 2 +- serendipity_event_spamblock_rbl/ChangeLog | 4 ++ .../serendipity_event_spamblock_rbl.php | 23 +++++++++++- serendipity_event_spamblock_surbl/ChangeLog | 1 + .../serendipity_event_spamblock_surbl.php | 23 +++++++++++- serendipity_event_startcat/ChangeLog | 4 ++ .../serendipity_event_startcat.php | 19 +++++++++- serendipity_event_statistics/ChangeLog | 1 + .../serendipity_event_statistics.php | 17 ++++++++- serendipity_event_suggest/ChangeLog | 4 ++ .../serendipity_event_suggest.php | 20 +++++++++- serendipity_event_textlinkads/ChangeLog | 5 ++- .../serendipity_event_textlinkads.php | 27 ++++++++++++-- serendipity_event_trackexits/ChangeLog | 3 ++ .../serendipity_event_trackexits.php | 27 +++++++++++++- serendipity_event_youtube/ChangeLog | 4 ++ .../serendipity_event_youtube.php | 25 ++++++++++++- 66 files changed, 689 insertions(+), 57 deletions(-) diff --git a/serendipity_event_browserid/ChangeLog b/serendipity_event_browserid/ChangeLog index d14a2d94..291dfd99 100644 --- a/serendipity_event_browserid/ChangeLog +++ b/serendipity_event_browserid/ChangeLog @@ -1,3 +1,6 @@ +2.0.1 + Added legal gdpr/dsgvo info + Version 1.1 (brockhaus) --------------------------------- * Removed depedencies to OpenID (was working only if OpenID was installed, too) diff --git a/serendipity_event_browserid/serendipity_event_browserid.php b/serendipity_event_browserid/serendipity_event_browserid.php index e7e8e36c..262d7477 100644 --- a/serendipity_event_browserid/serendipity_event_browserid.php +++ b/serendipity_event_browserid/serendipity_event_browserid.php @@ -17,7 +17,7 @@ class serendipity_event_browserid extends serendipity_event $propbag->add('description', PLUGIN_BROWSERID_DESC); $propbag->add('stackable', false); $propbag->add('author', 'Grischa Brockhaus, Malte Paskuda'); - $propbag->add('version', '2.0'); + $propbag->add('version', '2.0.1'); $propbag->add('requirements', array( 'serendipity' => '2.0', 'php' => '7.0' @@ -32,6 +32,29 @@ class serendipity_event_browserid extends serendipity_event $propbag->add('configuration', array( 'plugin_desc', )); + + $propbag->add('legal', array( + 'services' => array( + 'browserid' => array( + 'url' => '#', + 'desc' => '???' + ), + ), + 'frontend' => array( + 'Does something with browserID/portier', + ), + 'backend' => array( + 'Does something with browserID/portier', + ), + 'cookies' => array( + 'Does something with browserID/portier, might save cookies', + ), + // I do not know if any of this is true + 'stores_user_input' => true, + 'stores_ip' => true, + 'uses_ip' => true, + 'transmits_user_input' => true + )); } function introspect_config_item($name, &$propbag) @@ -106,13 +129,13 @@ class serendipity_event_browserid extends serendipity_event } function auth($email) { - global $serendipity; + global $serendipity; $authUrl = $this->portier->authenticate($email); header("Location: $authUrl", true, 303); } function login_user($email) { - global $serendipity; + global $serendipity; $query = "SELECT DISTINCT a.email, a.authorid, a.userlevel, a.right_publish, a.realname FROM {$serendipity['dbPrefix']}authors AS a @@ -136,7 +159,7 @@ class serendipity_event_browserid extends serendipity_event $response->message= "Sorry, we don't have a user for $email"; $_SESSION['serendipityAuthedUser'] = false; @session_destroy(); - } + } } function reauth() { diff --git a/serendipity_event_cal/ChangeLog b/serendipity_event_cal/ChangeLog index 68f13895..ff563a26 100644 --- a/serendipity_event_cal/ChangeLog +++ b/serendipity_event_cal/ChangeLog @@ -1,8 +1,10 @@ *************************************************************************************************** * Legend: ! Bugfix, + New Features, * Changed, - Info Only -* - -1.76: Iconfont a11y fix (yellowled) +* + +1.77: Added legal gdpr/dsgvo info + +1.76: Iconfont a11y fix (yellowled) v.1.75: @@ -148,7 +150,7 @@ v.1.70: * 2010-02-08 CHANGED - CW week view in plugin_eventcal_calweek.tpl to be same as in month calendar and CW's date view in css to be xx-small * 2010-02-08 CHANGED - font css behaviour to be more strict to eventcal output only, get back control over blog templates settings * 2010-02-07 CHANGED - log ical request behaviour. Now it is possible to log via email and/or file backend/ical.log -* 2010-02-07 ADDED - in plugin_eventcal_ical.tpl the ORGANIZER part the RSVP=FALSE:MAILTO:"" directive, meaning "répondez, s'il vous plaît" set to NO +* 2010-02-07 ADDED - in plugin_eventcal_ical.tpl the ORGANIZER part the RSVP=FALSE:MAILTO:"" directive, meaning "r�pondez, s'il vous pla�t" set to NO * 2010-02-06 CHANGED - hook_event 'external_plugin' and ical function to support all approved events admin download via email or download * 2010-02-04 ADDED - changed recurring error constant in LANG files to show supposed startday number * 2010-02-04 BUG - in function calculate_recur_validday - check recurring errors if startday does not correspond to selected weekday now matches @@ -189,5 +191,5 @@ v.1.70: * * v.1.4 2009-11-21 Spartacus * ========================== -* +* *************************************************************************************************** \ No newline at end of file diff --git a/serendipity_event_cal/serendipity_event_cal.php b/serendipity_event_cal/serendipity_event_cal.php index b0b06931..de2e86fb 100644 --- a/serendipity_event_cal/serendipity_event_cal.php +++ b/serendipity_event_cal/serendipity_event_cal.php @@ -76,7 +76,7 @@ class serendipity_event_cal extends serendipity_event { ) ); $propbag->add('author', 'Ian (Timbalu)'); - $propbag->add('version', '1.76'); + $propbag->add('version', '1.77'); $propbag->add('groups', array('FRONTEND_FEATURES', 'BACKEND_FEATURES')); $propbag->add('requirements', array( 'serendipity' => '1.4', @@ -84,6 +84,26 @@ class serendipity_event_cal extends serendipity_event { 'php' => '5.1.0' ) ); + + $propbag->add('legal', array( + 'services' => array( + 'mail' => array( + 'url' => '#', + 'desc' => 'Transmits IP address and ical data via e-mail' + ), + ), + 'frontend' => array( + 'Transmits IP address and ical data via e-mail' + ), + 'backend' => array( + ), + 'cookies' => array( + ), + 'stores_user_input' => false, + 'stores_ip' => false, + 'uses_ip' => true, + 'transmits_user_input' => true + )); } function introspect_config_item($name, &$propbag) { diff --git a/serendipity_event_commentspice/ChangeLog b/serendipity_event_commentspice/ChangeLog index bb7be5ad..d41dc3e2 100644 --- a/serendipity_event_commentspice/ChangeLog +++ b/serendipity_event_commentspice/ChangeLog @@ -1,3 +1,5 @@ +1.10: Added legal gdpr/dsgvo info + 1.09: ----- * Fix Adress for Twitter JS-Script to avoid broken security chain when using https. diff --git a/serendipity_event_commentspice/serendipity_event_commentspice.php b/serendipity_event_commentspice/serendipity_event_commentspice.php index e00d4108..74354cb1 100644 --- a/serendipity_event_commentspice/serendipity_event_commentspice.php +++ b/serendipity_event_commentspice/serendipity_event_commentspice.php @@ -34,7 +34,7 @@ class serendipity_event_commentspice extends serendipity_event 'smarty' => '2.6.7', 'php' => '4.1.0' )); - $propbag->add('version', '1.09'); + $propbag->add('version', '1.10'); $propbag->add('event_hooks', array( 'entry_display' => true, @@ -49,7 +49,40 @@ class serendipity_event_commentspice extends serendipity_event 'avatar_fetch_userinfos' => true, )); $propbag->add('groups', array('FRONTEND_VIEWS')); - + + $propbag->add('legal', array( + 'services' => array( + 'twitter' => array( + 'url' => 'https://www.twitter.com/', + 'desc' => 'Transmits comment data and metadata to twitter.' + ), + 'identica' => array( + 'url' => 'http://www.identi.ca', + 'desc' => 'Transmits comment data and metadata to identica.' + ), + 'audio/boo' => array( + 'url' => 'http://boo.fm', + 'desc' => 'Transmits comment data and metadata to boo.fm / audioboo.fm.' + ), + 'rss' => array( + 'url' => '#', + 'desc' => 'Transmits comment data and metadata to RSS' + ), + ), + 'frontend' => array( + 'Various webservices can be enabled to provide widget functionality for enhancing user comments', + 'Comment data and metadata may be transferred to the configured service providers' + ), + 'backend' => array( + ), + 'cookies' => array( + '"Remember me" functionality can be offered when commenting with specific service providers' + ), + 'stores_user_input' => false, + 'stores_ip' => false, + 'uses_ip' => true, + 'transmits_user_input' => true + )); $config_bee = array(); if (!class_exists('serendipity_event_spamblock_bee')) { // Only do that, if spamblock is not installed. $config_bee[] = 'hint_bee'; diff --git a/serendipity_event_contactform/ChangeLog b/serendipity_event_contactform/ChangeLog index e323773a..03f21ef2 100644 --- a/serendipity_event_contactform/ChangeLog +++ b/serendipity_event_contactform/ChangeLog @@ -1,3 +1,5 @@ +1.22: Added legal gdpr/dsgvo info + 1.21 ----- * Reset content message, as also needed in staticpage plugin. diff --git a/serendipity_event_contactform/serendipity_event_contactform.php b/serendipity_event_contactform/serendipity_event_contactform.php index 863636b2..05835c0d 100644 --- a/serendipity_event_contactform/serendipity_event_contactform.php +++ b/serendipity_event_contactform/serendipity_event_contactform.php @@ -29,7 +29,7 @@ class serendipity_event_contactform extends serendipity_event { $propbag->add('event_hooks', array('entries_header' => true, 'entry_display' => true, 'genpage' => true)); $propbag->add('configuration', array('permalink', 'pagetitle', 'backend_title', 'email', 'subject', 'counter', 'intro', 'sent', 'articleformat', 'dynamic_tpl', 'dynamic_fields', 'dynamic_fields_tpl', 'dynamic_fields_desc')); $propbag->add('author', 'Garvin Hicking'); - $propbag->add('version', '1.21'); + $propbag->add('version', '1.22'); $propbag->add('requirements', array( 'serendipity' => '1.3', 'smarty' => '2.6.7', @@ -37,6 +37,26 @@ class serendipity_event_contactform extends serendipity_event { )); $propbag->add('stackable', true); $propbag->add('groups', array('FRONTEND_FEATURES')); + + $propbag->add('legal', array( + 'services' => array( + 'mail' => array( + 'url' => '#', + 'desc' => 'Visitor feedback of the contact form is transferred via e-mail' + ) + ), + 'frontend' => array( + 'desc' => 'Visitor feedback of the contact form is transferred via e-mail' + ), + 'backend' => array( + ), + 'cookies' => array( + ), + 'stores_user_input' => false, + 'stores_ip' => false, + 'uses_ip' => true, + 'transmits_user_input' => true + )); } function introspect_config_item($name, &$propbag) diff --git a/serendipity_event_dejure/ChangeLog b/serendipity_event_dejure/ChangeLog index 9cab6a12..6fb55e82 100644 --- a/serendipity_event_dejure/ChangeLog +++ b/serendipity_event_dejure/ChangeLog @@ -1,3 +1,5 @@ +1.8.4: Added legal gdpr/dsgvo info + 1.8.1: * Fix HTML error in local documentation. diff --git a/serendipity_event_dejure/serendipity_event_dejure.php b/serendipity_event_dejure/serendipity_event_dejure.php index e303c195..29474928 100644 --- a/serendipity_event_dejure/serendipity_event_dejure.php +++ b/serendipity_event_dejure/serendipity_event_dejure.php @@ -12,7 +12,7 @@ if (file_exists($probelang)) { include dirname(__FILE__) . '/lang_en.inc.php'; -define('DJO_VERSION', '1.8.3'); +define('DJO_VERSION', '1.8.4'); define('CACHE_VORHALT', 4); # (Tage) Wann ein vernetzter Text aus dem Cache entfernt und neu vernetzt werden soll class serendipity_event_dejure extends serendipity_event @@ -55,6 +55,26 @@ class serendipity_event_dejure extends serendipity_event 'cache' ) ); + + $propbag->add('legal', array( + 'services' => array( + 'dejure.org' => array( + 'url' => 'https://www.dejure.org', + 'desc' => 'Receives comment text from users (and the blog)' + ), + ), + 'frontend' => array( + 'Every visitor-generated comment text (no other visitor data) that is entered into the blog is transferred to dejure.org to reference links', + ), + 'backend' => array( + ), + 'cookies' => array( + ), + 'stores_user_input' => false, + 'stores_ip' => false, + 'uses_ip' => false, + 'transmits_user_input' => true + )); } function introspect_config_item($name, &$propbag) { @@ -177,7 +197,7 @@ class serendipity_event_dejure extends serendipity_event } function djo_vernetzen_ueber_dejure_org($ausgangstext, $parameter = array()) { - // Mögliche Parameter: Anbieterkennung / Dokumentkennung / target / class / AktenzeichenIgnorieren / zeitlimit_in_sekunden + // M�gliche Parameter: Anbieterkennung / Dokumentkennung / target / class / AktenzeichenIgnorieren / zeitlimit_in_sekunden $uebergabe = 'Originaltext='.urlencode($ausgangstext); foreach ($parameter as $option => $wert) { @@ -227,7 +247,7 @@ class serendipity_event_dejure extends serendipity_event } fclose($fp); if (!preg_match("/^(.*?)\r?\n\r?\n\r?\n?(.*)/s",$rueckgabe, $rueckgabeARR)) { - return false; // Zeitüberschreitung oder Verbindungsproblem + return false; // Zeit�berschreitung oder Verbindungsproblem } else if (strpos($rueckgabeARR[1],"200 OK") === false) { return false; // sonstiges Serverproblem } else { @@ -285,7 +305,7 @@ class serendipity_event_dejure extends serendipity_event $this->set_config('cache', false); } - if (!preg_match("/§|§|Art\.|\/[0-9][0-9](?![0-9\/])|[0-9][0-9], /", $text) || preg_match("//", $text)) { + if (!preg_match("/�|§|Art\.|\/[0-9][0-9](?![0-9\/])|[0-9][0-9], /", $text) || preg_match("//", $text)) { return false; } diff --git a/serendipity_event_disqus/ChangeLog b/serendipity_event_disqus/ChangeLog index e0e97153..42a3c1bd 100644 --- a/serendipity_event_disqus/ChangeLog +++ b/serendipity_event_disqus/ChangeLog @@ -1,3 +1,5 @@ +0.4: Added legal gdpr/dsgvo info + 0.3: Properly use the example() API method by returning, not echo'ing. Unimportant update. Version 0.2 * Made it work with articles not having an extended part. diff --git a/serendipity_event_disqus/serendipity_event_disqus.php b/serendipity_event_disqus/serendipity_event_disqus.php index de814518..0b888057 100755 --- a/serendipity_event_disqus/serendipity_event_disqus.php +++ b/serendipity_event_disqus/serendipity_event_disqus.php @@ -27,7 +27,7 @@ class serendipity_event_disqus extends serendipity_event { 'smarty' => '2.6.7', 'php' => '4.1.0' )); - $propbag->add('version', '0.3'); + $propbag->add('version', '0.4'); $propbag->add('groups', array('FRONTEND_VIEWS')); $propbag->add('event_hooks', array( 'frontend_display:html:per_entry' => true, @@ -36,6 +36,27 @@ class serendipity_event_disqus extends serendipity_event { )); $propbag->add('configuration', array('shortname', 'enable_since','template_hide_css','footer_comment_link')); + + $propbag->add('legal', array( + 'services' => array( + 'disqus' => array( + 'url' => 'https://www.disqus.com', + 'desc' => 'Embeds a javascript widget from disqus to display comment badges, which allows Disqus to receive visitor metadata (IP, browser, referrer).' + ), + ), + 'frontend' => array( + 'Embeds a javascript widget from disqus to display comment badges, which allows Disqus to receive visitor metadata (IP, browser, referrer).', + 'Comments will be stored in Disqus and are subject to their terms; all comment data will be handled on disqus servers.' + ), + 'backend' => array( + ), + 'cookies' => array( + ), + 'stores_user_input' => false, + 'stores_ip' => false, + 'uses_ip' => true, + 'transmits_user_input' => true + )); } function introspect_config_item($name, &$propbag) { @@ -101,7 +122,7 @@ class serendipity_event_disqus extends serendipity_event { (function () { var s = document.createElement('script'); s.async = true; s.type = 'text/javascript'; - s.src = 'http://' + disqus_shortname + '.disqus.com/count.js'; + s.src = 'https://' + disqus_shortname + '.disqus.com/count.js'; (document.getElementsByTagName('HEAD')[0] || document.getElementsByTagName('BODY')[0]).appendChild(s); }()); @@ -194,11 +215,11 @@ class serendipity_event_disqus extends serendipity_event { (function() { var dsq = document.createElement(\'script\'); dsq.type = \'text/javascript\'; dsq.async = true; - dsq.src = \'http://\' + disqus_shortname + \'.disqus.com/embed.js\'; + dsq.src = \'https://\' + disqus_shortname + \'.disqus.com/embed.js\'; (document.getElementsByTagName(\'head\')[0] || document.getElementsByTagName(\'body\')[0]).appendChild(dsq); })(); - + '; } diff --git a/serendipity_event_dsgvo_gdpr/serendipity_event_dsgvo_gdpr.php b/serendipity_event_dsgvo_gdpr/serendipity_event_dsgvo_gdpr.php index bfa127e8..fc7ae218 100644 --- a/serendipity_event_dsgvo_gdpr/serendipity_event_dsgvo_gdpr.php +++ b/serendipity_event_dsgvo_gdpr/serendipity_event_dsgvo_gdpr.php @@ -23,7 +23,7 @@ class serendipity_event_dsgvo_gdpr extends serendipity_event $propbag->add('description', PLUGIN_EVENT_DSGVO_GDPR_DESC); $propbag->add('stackable', false); $propbag->add('author', 'Serendipity Team'); - $propbag->add('version', '1.0.1'); + $propbag->add('version', '1.0.2'); $propbag->add('requirements', array( 'serendipity' => '2.0', 'smarty' => '2.6.7', @@ -159,6 +159,10 @@ class serendipity_event_dsgvo_gdpr extends serendipity_event if (is_array($legal)) { $out .= '

' . $class_data['classname'] . '

'; + // "services" should list every service that a plugin connects to via a HTTP or other API interface, + // and describe what each service does, and which data it gets. + // Only services that are executed on visitor input must be listed; services that the blog server (instead + // of a client) connects to are nice to have, but are only required to be shown if it includes visitor (meta)data if (is_array($legal['services']) && count($legal['services']) > 0) { $out .= '

Web services / Third Party

'; $out .= ''; } + // "frontend" lists descriptions what the plugin does on the frontendside and where it uses visitor data or metadata if (is_array($legal['frontend']) && count($legal['frontend']) > 0) { $out .= '

Frontend

'; $out .= ''; } + // "backend" lists descriptions what the plugin does on the backend and where it uses visitor data or metadata if (is_array($legal['backend']) && count($legal['backend']) > 0) { $out .= '

Backend

'; $out .= ''; } + // "cookies" lists an array of which cookies might be set a a plugin and why. If a plugin makes use of + // session features, also mention that it relies on that session id. if (is_array($legal['cookies']) && count($legal['cookies']) > 0) { $out .= '

Cookies

'; $out .= ''; } + // "sessiondata" lists an array of which PHP session data values are (temporarily) saved if (is_array($legal['sessiondata']) && count($legal['sessiondata']) > 0) { $out .= '

Session data

'; $out .= ''; } + // This is a list of TRUE/FALSE boolean toggles $out .= '

Attributes

'; $out .= '