summaryrefslogtreecommitdiffstats
path: root/web/html
AgeCommit message (Expand)AuthorFilesLines
2012-06-24Implement token system to fix CSRF vulnerabilitiescanyonknight5-44/+61
2011-10-25Wrap mysql_real_escape_string() in a functionLukas Fleischer6-24/+24
2011-09-05web/html/pkgsubmit.php: Deal with unset category IDLukas Fleischer1-3/+15
2011-08-12Use secure and httponly session cookiesLukas Fleischer1-1/+1
2011-08-11Use 'true' instead of 'True' everywhereDan McGee1-3/+3
2011-08-11Make package creation and update atomicDan McGee1-1/+5
2011-08-11Allow for merging deleted packages into existing onesLukas Fleischer1-2/+14
2011-08-11Rename package_exists() to pkgid_from_name()Lukas Fleischer1-2/+2
2011-08-10Segment the upload directory by package name prefixDan McGee1-3/+4
2011-07-29Fix empty depends database insertLukas Fleischer1-11/+16
2011-06-28Replace split() invocations with explode()Lukas Fleischer1-1/+1
2011-06-25Honor epoch field in PKGBUILD files.Slavi Pantaleev1-6/+10
2011-06-22rename *.inc files to *.inc.php and adjust imports and referenceselij10-19/+19
2011-06-22make rss.php use the apc cache instead of a cache fileelij1-5/+13
2011-05-29Cleanup RPC usage output a bitLukas Fleischer1-15/+11
2011-05-29Properly encode ampersands in the RPC usage outputLukas Fleischer1-2/+2
2011-05-29fix two issues (php notice level) with html/rss.phpelij1-1/+3
2011-05-29restructure the html/rpc.php endpointelij1-28/+33
2011-05-17test return value from db_query before assuming it is validelij2-5/+28
2011-04-27create variable before referencing it with .=elij1-0/+1
2011-04-27SQL: treat all UID/ID values as numbers, not stringsDan McGee2-3/+3
2011-04-27SQL: use standard LIMIT/OFFSET syntaxDan McGee2-2/+2
2011-04-24pkgsubmit.php: Ensure the session is linked to a valid user.Lukas Fleischer1-3/+8
2011-04-24pkgsubmit.php: Remove redundant uid_from_sid() invocations.Lukas Fleischer1-3/+1
2011-04-19Use HTTPs for links in password reset confirmation mails.Lukas Fleischer1-1/+1
2011-04-16rpc: introduce multiinfo query (fixes FS#17583)Dan McGee1-0/+1
2011-04-13Remove "New Package Notify" option from user account settings.Lukas Fleischer1-4/+4
2011-04-05Remove File_Find PEAR module from code base.Lukas Fleischer1-1/+0
2011-04-04Fix PHP warning when browsing a non-existent package.Lukas Fleischer1-4/+2
2011-04-03Remove Dummy Package conceptDan McGee2-14/+4
2011-04-03Always set ModifiedTS including new packagesDan McGee1-1/+1
2011-04-03Submission process code refactorDan McGee1-61/+35
2011-03-30Be more restrictive with source tarball contents.Lukas Fleischer1-2/+13
2011-03-30Fix PHP notice when submitting an empty file.Lukas Fleischer1-1/+1
2011-03-30Fix strict standards warnings in "web/html/pkgsubmit.php".Lukas Fleischer1-2/+2
2011-03-30Check if submitted files are in GZIP format.Lukas Fleischer1-2/+16
2011-03-30Fix XSS vulnerabilities in "web/html/voters.php".Lukas Fleischer1-2/+2
2011-03-30Fix PHP undefined notice in "web/html/packages.php".Lukas Fleischer1-1/+6
2011-03-11Fix broken XHTML.Lukas Fleischer4-8/+15
2011-03-10More PHP Notice undefined fixupsDan McGee1-1/+5
2011-03-04Fix PHP notices in account pagesDan McGee1-18/+20
2011-03-04Add action lookup helper functionDan McGee1-11/+11
2011-03-04Improve cookie handlingDan McGee1-2/+3
2011-03-01Fix potential injection vulnerabilityDan McGee1-2/+7
2011-02-27Define "Packages.SubmitterUID" and "Packages.MaintainerUID" as "NULL".Lukas Fleischer1-1/+1
2011-02-25Reject blacklisted packages on initial submission only.Lukas Fleischer1-9/+9
2011-02-23Protect users against ZIP bombs (fixes FS#22991).Lukas Fleischer1-0/+12
2011-02-21Reject packages with subdirectories (fixes FS#22995).Lukas Fleischer1-0/+3
2011-02-21Automatically adopt when updating an orphan package (fixes FS#22992).Lukas Fleischer1-5/+7
2011-02-21Use move_uploaded_file() instead of rename() in "pkgsubmit.php".Lukas Fleischer1-1/+1
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-11-01 10:03:05 +0100