Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-05-17 | Check cookie against md5 regex. | Alexander Hofstede | 2 | -1/+2 | |
Otherwise, cookie can contain arbitrary injected code that gets sent back directly to the browser. | |||||
2012-05-07 | Added a return false if an image doesn't pass XSS cleaning to prevent ↵ | Wes Baker | 1 | -0/+4 | |
file_get_contents from returning a NULL and passing through unscathed. | |||||
2012-04-23 | Merge pull request #1274 from Repox/2.1-stable | Phil Sturgeon | 1 | -1/+1 | |
Corrected the migration_missing_down_method language string | |||||
2012-04-23 | Corrected the migration_missing_down_method language string | Repox | 1 | -1/+1 | |
2012-03-04 | Merge pull request #1116 from tubalmartin/helpers|url|2.1-stable | Phil Sturgeon | 3 | -23/+24 | |
2.1 stable - An improved url_title helper function | |||||
2012-03-04 | Changelog updated | tubalmartin | 1 | -1/+1 | |
2012-03-04 | User guide updated | tubalmartin | 1 | -3/+3 | |
2012-03-04 | Allow developers to use any string as a separator, not just dashes or ↵ | tubalmartin | 1 | -10/+19 | |
underscores. Backwards compatible when using 'dash' or 'underscore' as string separator. Tests: http://codepad.org/DWcxVH5r | |||||
2012-03-04 | Merge pull request #1117 from tubalmartin/Upload|library|2.1-stable | Phil Sturgeon | 1 | -1/+1 | |
2.1 stable - CI_Upload::_file_mime_type() could've failed if popen() is used for the detection. | |||||
2012-03-04 | Removed changelog entry | tubalmartin | 1 | -1/+0 | |
2012-03-03 | Fixed a bug - CI_Upload::_file_mime_type() could've failed if popen() is ↵ | tubalmartin | 2 | -1/+2 | |
used for the detection. | |||||
2012-03-03 | An even better url_title helper. Tests: http://codepad.org/tuJgvkyN | tubalmartin | 2 | -20/+12 | |
Changelog entry added for 2.1.1 | |||||
2012-03-02 | Merge pull request #1100 from rrdial/2.1-stable | Andrey Andreev | 2 | -6/+7 | |
2.1-stable: bug fix: compile binds before caching the query… | |||||
2012-03-01 | compile binds before caching the query, otherwise the cached query will ↵ | Ryan Dial | 2 | -6/+7 | |
never match the unbound query. updated changlog to mention bug fix. | |||||
2012-02-12 | Merge pull request #757 from narfbg/2.1-stable | Phil Sturgeon | 2 | -24/+83 | |
Improve CI_Upload::_file_mime_type() realiability (2.1-stable) | |||||
2011-12-26 | Merge pull request #709 from tubalmartin/2.1-stable | Phil Sturgeon | 1 | -0/+14 | |
2.1.0 - Fatal error: Call to undefined method CI_DB_Driver::_reset_select() | |||||
2011-12-15 | Merge remote-tracking branch 'upstream/2.1-stable' into 2.1-stable | Andrey Andreev | 2 | -1/+2 | |
2011-12-14 | Merge pull request #766 from andrewmackrodt/2.1-stable | Phil Sturgeon | 2 | -1/+2 | |
Fixed issue #538: CI_Image_lib->new_image doesn't recognise backslashes | |||||
2011-12-13 | Tweak MIME regular expression check again | Andrey Andreev | 1 | -1/+1 | |
2011-12-11 | Updated changelog with fix for bug #538. | Andrew Mackrodt | 1 | -0/+1 | |
2011-12-11 | Fix regular expression for validating MIME type string | Andrey Andreev | 1 | -1/+1 | |
2011-12-11 | Fix for Issue #538. | Andrew Mackrodt | 1 | -1/+1 | |
2011-12-09 | Update the ChangeLog | Andrey Andreev | 1 | -0/+5 | |
2011-12-09 | Improve CI_Upload::_file_mime_type() | Andrey Andreev | 1 | -24/+78 | |
2011-12-02 | Merge pull request #733 from narfbg/2.1-stable-upload-hotfix | Phil Sturgeon | 2 | -3/+7 | |
Hotfix for a bug in the Upload library | |||||
2011-12-02 | Update the change log | Andrey Andreev | 1 | -1/+2 | |
2011-12-02 | Update a comment, just to be clearer | Andrey Andreev | 1 | -1/+1 | |
2011-12-02 | Hotfix for a file type detection bug in the Upload library | Andrey Andreev | 1 | -2/+5 | |
2011-12-01 | Merge pull request #729 from Repox/2.1-stable | Phil Sturgeon | 1 | -2/+8 | |
This fixes issue #725 | |||||
2011-12-01 | This fixes issue #725 | Repox | 1 | -2/+8 | |
2011-11-27 | Merge pull request #710 from johnnicely/2.1-stable | Phil Sturgeon | 2 | -1/+2 | |
Changed form_open() to compare $action against base_url(). | |||||
2011-11-24 | Changed form_open() to compare $action against base_url() | John Nicely | 2 | -1/+2 | |
Checking for strpos($action, $CI->config->site_url()) === FALSE causes CSRF token to not be added in form_open() output. When site_url()'s first parameter ($uri) is empty, site_url's return value is the base URL plus the $CI->config->item('index_page') value. form_open() and CodeIgniter's URI routing do not require index.php to be in the URL, so any call to form_open() in which the $action parameter does not have index.php will always return false for the strpos() call. | |||||
2011-11-24 | Added dummy _reset_select() method to CI_DB_Driver class to allow Active ↵ | Túbal Martín | 1 | -0/+14 | |
Record class to be disabled. Otherwise a fatal error is triggered. | |||||
2011-11-23 | Merge pull request #697 from MVUG/upload-fixes-2.1 | Phil Sturgeon | 3 | -3/+20 | |
Fixed bug in Upload library tmp_path does not exists, should be tmp_name. | |||||
2011-11-23 | dutch typo | Michiel Vugteveen | 1 | -1/+1 | |
2011-11-23 | changelog updated | Michiel Vugteveen | 1 | -0/+17 | |
2011-11-23 | tmp_path does not exists, should be tmp_name | Michiel Vugteveen | 1 | -1/+1 | |
2011-11-23 | docx and xlsx have a zip/application mimetype | Michiel Vugteveen | 1 | -2/+2 | |
2011-11-22 | Readded PDO drivers. | Phil Sturgeon | 5 | -15/+565 | |
2011-11-14 | Merge branch 'release/2.1.0' | Pascal Kriete | 202 | -731/+5366 | |
Conflicts: user_guide/helpers/url_helper.html | |||||
2011-11-14 | Changelogging and setting release date. | Pascal Kriete | 1 | -2/+3 | |
2011-11-14 | Tweaking the xss filter for IE <comment> tags, parameter injection, and ↵ | Pascal Kriete | 1 | -50/+41 | |
weird html5 attributes. | |||||
2011-11-14 | Removing stray docblocks | Pascal Kriete | 1 | -12/+0 | |
2011-11-13 | More changelog tweaking. | Phil Sturgeon | 1 | -0/+3 | |
2011-11-13 | Added TLS and SSL support to Email library. Fixes issue #171 | Radu Potop | 1 | -1/+19 | |
2011-11-13 | Resolved issue 65 - made action on form_open_multipart helper function call ↵ | Ben Edmunds | 1 | -1/+1 | |
optional | |||||
2011-11-13 | Updated changelog. | Phil Sturgeon | 1 | -9/+10 | |
2011-11-13 | Fix invalid datetime format | Syahril Zulkefli | 1 | -3/+3 | |
2011-11-13 | Fix invalid date format | Syahril Zulkefli | 1 | -1/+1 | |
2011-11-13 | Fix invalid date format | Syahril Zulkefli | 1 | -1/+1 | |