Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2014-05-13 | Fix timing attack on session hash | Florian Pritz | 1 | -1/+8 | |
http://seclists.org/fulldisclosure/2014/May/54 Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-04-17 | migration 12: remove dependencies on users table again | Florian Pritz | 1 | -9/+0 | |
When using external authentication databases (ldap, fluxbb, ..) the users table is empty so adding the constraints won't work. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-04-15 | Use alter table to rename tables | Florian Pritz | 1 | -2/+2 | |
For some strange reason using "rename table" causes an exception in system/database/DB_driver.php:query() because it trys to call num_rows() on a boolean. Using "alter table" works. According to the php manpage mysqli::query() it should return a boolean too, but whatever... Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-04-15 | migration 12: Remove tablename, fix ordering problem | Florian Pritz | 1 | -6/+6 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-04-12 | Add foreign keys to database | Florian Pritz | 4 | -3/+32 | |
Changing the referrer value for the root admin from 0 to NULL to make the foreign key check work. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-03-02 | Clean up default config comments | Florian Pritz | 2 | -21/+34 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-03-02 | INSTALL: slightly improve SQL cmd | Florian Pritz | 1 | -4/+3 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-02-27 | Merge pull request #2909 from enderteszla/2.1-stable | Andrey Andreev | 5 | -1/+41 | |
added missed index.html files. | |||||
2014-02-27 | Added a .htaccess file to the application/cache folder for ↵ | Ender Teszla | 1 | -0/+1 | |
security-in-depths reasons (de bene esse). | |||||
2014-02-27 | Deleted useless .htaccess file, added missed index.html files. | Ender Teszla | 5 | -1/+40 | |
2014-02-23 | user/create_apikey: Use empty comment if unset | Florian Pritz | 1 | -0/+1 | |
False gets converted to "0" when being stored in the DB which we don't want. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-02-21 | Implement multiple access levels for api keys | Florian Pritz | 6 | -16/+71 | |
This allows to use an api key to write a completly standalone client. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-02-15 | Work around PHP 5.3 limitation | Florian Pritz | 1 | -3/+5 | |
$this in anonymous functions is only supported in PHP >= 5.4 Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-01-24 | client: add gentoo overlay | Florian Pritz | 1 | -0/+1 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-01-21 | Disable automatic code display for SVG files | Florian Pritz | 1 | -1/+0 | |
People usually want to view them rather than read the code. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-01-16 | INSTALL: clarify config change needed for mod_rewrite | Florian Pritz | 1 | -1/+1 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-01-10 | let GD itself determine what it can read | Florian Pritz | 1 | -14/+5 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2014-01-07 | Manually apply an improved version of PR #2427 | Andrey Andreev | 1 | -6/+5 | |
2013-12-11 | Merge pull request #2761 from a-krebs/2.1-stable | Andrey Andreev | 1 | -2/+2 | |
Make oci_execute() calls inside num_rows() non-committing. Fixes #696. | |||||
2013-12-11 | Make oci_execute() calls inside num_rows() non-committing. Fixes #696. | Aaron Krebs | 1 | -2/+2 | |
Fixes bug in Oracle driver. Calls to oci_execute() inside num_rows() of the Oracle driver can be made non-committing to fix bug with transactions. Since calls to oci_execute are only there to reset which row is next in line for oci_fetch() calls, it's fine to not commit. | |||||
2013-12-05 | Fix some spacing issues from PR #2689 | Andrey Andreev | 2 | -10/+5 | |
2013-11-09 | use cache_function() everywhere | Florian Pritz | 2 | -21/+16 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-11-09 | cache file/thumbnail responses | Florian Pritz | 1 | -5/+13 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-11-09 | implement cache_function to easily cache return values of functions | Florian Pritz | 1 | -0/+18 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-10-31 | Fix alignment of date column in plain text view | Florian Pritz | 1 | -1/+3 | |
This got broken by 2a6a1c63cb21015009fe4fd13f62cdac64e1fe36 and 05a4d686b578794c180ddfaf4945a9d7443f330e. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-10-22 | wrap long lines in README | Florian Pritz | 1 | -2/+5 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-10-22 | Remove unnecessary TODO | Florian Pritz | 1 | -1/+0 | |
It's fine if users can invite an unlimited amount of people. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-10-22 | Update CSP header; change order to fix svg display in firefox | Florian Pritz | 1 | -1/+1 | |
Apparently firefox doesn't like "style-src * 'unsafe-inline'", but wants "style-src 'unsafe-inline' *" otherwise it doesn't honor 'unsafe-inline'. In chromium both behave the same. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-10-18 | Merge pull request #2689 from blowdoof/upstream_21 | Andrey Andreev | 3 | -13/+16 | |
Bugfix 2.1 sqlsrv driver | |||||
2013-10-18 | Added changelog entries | blowdoof | 1 | -0/+1 | |
2013-10-18 | Merge branch 'upstream_21' of https://github.com/blowdoof/CodeIgniter into ↵ | blowdoof | 0 | -0/+0 | |
upstream_21 | |||||
2013-10-18 | Revert "Bugfix on the active record join statement with empty conditions" | blowdoof | 1 | -6/+2 | |
This reverts commit 2cfbfc54dc68d9e7ed7c20af4cf7693736bbd447. | |||||
2013-10-18 | Revert "Bugfix on the active record join statement with empty conditions" | blowdoof | 1 | -5/+1 | |
This reverts commit 2cfbfc54dc68d9e7ed7c20af4cf7693736bbd447. | |||||
2013-10-18 | Bugfix on the active record join statement with empty conditions | blowdoof | 1 | -2/+6 | |
2013-10-18 | Bugfix on the sqlsrv forge driver rename_table function | blowdoof | 1 | -5/+3 | |
2013-10-18 | Bugfix on the sqlsrv forge driver create_table function | blowdoof | 1 | -11/+9 | |
2013-10-18 | removed unnecessary assignment | blowdoof | 1 | -1/+0 | |
2013-10-18 | Style correction | blowdoof | 1 | -6/+6 | |
2013-10-18 | Fix on sqlsrv_forge drop_table | tino | 1 | -1/+8 | |
2013-10-18 | Bugfix on truncate command | tino | 1 | -1/+1 | |
2013-10-06 | Fix display error when redering markdown | Lukas Epple | 1 | -2/+4 | |
Initial-patch-by: Lukas Epple <lukas.epple@me.com> Switch from <table> to <div> like we did for pygments. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-09-25 | Align the brand image correctly | Markus Cisler | 2 | -1/+5 | |
2013-09-25 | Remove chmod on uploaded files | Florian Pritz | 1 | -2/+0 | |
It interferes with multiuser setups if you use X-Sendfile and it isn't really needed anyway because you can set an upload_path outside the docroot and because the default path is protected by an .htaccess file. Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-09-25 | Remove whitespaces from upload form textarea | Pierre Schmitz | 1 | -4/+4 | |
2013-09-25 | update NEWS | Florian Pritz | 1 | -0/+3 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-09-25 | Merge branch 'working' | Florian Pritz | 195 | -1373/+1067 | |
2013-09-25 | Change upload form layout | Markus Cisler | 2 | -35/+45 | |
2013-09-25 | Fix indentation on upload form | Markus Cisler | 1 | -13/+13 | |
2013-09-25 | Make tables responsive | Markus Cisler | 4 | -91/+99 | |
2013-09-23 | Limit header nav width to content width | Florian Pritz | 1 | -39/+39 | |
Looks like this has been missed somewhere along the way (36a1bb6770cb76ec7baf4e215c4379b070c60639) and ended up too deep down. Signed-off-by: Florian Pritz <bluewind@xinu.at> |