diff options
| author | Andrey Andreev <narf@bofh.bg> | 2011-09-24 13:25:33 +0200 |
|---|---|---|
| committer | Andrey Andreev <narf@bofh.bg> | 2011-09-24 13:25:33 +0200 |
| commit | 3a3c947790d3d072e14de2b5d21ae43743947ce8 (patch) | |
| tree | f1538fa1ead2de0a3f34dc56a60226825ace2dfb /user_guide | |
| parent | d26133be24eef68b1bead61e7e808f4424a71a0a (diff) | |
Added _file_mime_type() method to system/libraries/Upload.php in order to fix a possible MIME-type injection (issue #60)
Diffstat (limited to 'user_guide')
| -rw-r--r-- | user_guide/changelog.html | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/user_guide/changelog.html b/user_guide/changelog.html index 7ff2af2f5..fdf7227f3 100644 --- a/user_guide/changelog.html +++ b/user_guide/changelog.html @@ -79,7 +79,7 @@ Change Log <li>Helpers <ul> <li>Added <samp>increment_string()</samp> to <a href="helpers/string_helper.html">String Helper</a> to turn "foo" into "foo-1" or "foo-1" into "foo-2".</li> - <li>Altered form helper - made action on form_open_multipart helper function call optional. Fixes (#65)</li> + <li>Altered form helper - made action on form_open_multipart helper function call optional. Fixes (#65)</li> <li><samp>url_title()</samp> will now trim extra dashes from beginning and end.</li> <li>Improved speed of <a href="helpers/string_helper.html">String Helper</a>'s <b>random_string()</b> method</li> </ul> @@ -132,6 +132,7 @@ Change Log <li>Fixed a bug (#344) - Using schema found in <a href="libraries/sessions.html">Saving Session Data to a Database</a>, system would throw error "user_data does not have a default value" when deleting then creating a session.</li> <li>Fixed a bug (#112) - OCI8 (Oracle) driver didn't pass the configured database character set when connecting.</li> <li>Fixed a bug (#182) - OCI8 (Oracle) driver used to re-execute the statement whenever num_rows() is called.</li> + <li>Fixed a bug (#60) - Added _file_mime_type() method to the <a href="libraries/file_uploading.html">File Uploading Library</a> in order to fix a possible MIME-type injection.</li> </ul> <h2>Version 2.0.3</h2> |