Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2013-07-05 | Added small improvement to the _remove_evil_attributes function | brian978 | 1 | -7/+6 | |
Signed-off-by: brian978 <dbrian89@yahoo.com> Signed-off-by: Wes Baker <wes@wesbaker.com> Conflicts: system/core/Security.php | |||||
2012-10-08 | Really fix #1715 | Andrey Andreev | 1 | -1/+1 | |
2012-10-08 | Fix issue #1715 | Andrey Andreev | 1 | -4/+4 | |
2012-10-07 | Bump version number to 2.1.3 | Andrey Andreev | 2 | -3/+3 | |
2012-10-06 | Backport security fixes | Andrey Andreev | 1 | -26/+25 | |
2012-10-06 | Fix issues #227 and #907 | Andrey Andreev | 1 | -32/+31 | |
2012-07-24 | Change is_loaded() to return a reference | Andrey Andreev | 1 | -1/+1 | |
2012-07-04 | Backport CI_Config::load() optimization from pull #1571 | Andrey Andreev | 1 | -6/+6 | |
2012-06-29 | Bumping version number to 2.1.2. | Wes Baker | 1 | -1/+1 | |
2012-06-29 | Updating XSS cleaning to better handle base64 encoded attributes. | Wes Baker | 1 | -70/+81 | |
Conflicts: system/core/Security.php | |||||
2012-06-11 | Fixed conflicts | Phil Sturgeon | 1 | -4/+131 | |
Why were there conflicts merging into master? | |||||
2012-06-07 | Revert a change | Andrey Andreev | 1 | -1/+1 | |
2012-06-07 | Fixed valid_ip() for PHP < 5.2 | Andrey Andreev | 1 | -22/+21 | |
2012-06-07 | Adding IPv6 support to the Input and Form_validation libraries. | Pascal Kriete | 1 | -3/+131 | |
2012-05-17 | Added upgrade for 2.1.1 and updated version. | Phil Sturgeon | 1 | -1/+1 | |
2012-05-17 | Check cookie against md5 regex. | Alexander Hofstede | 1 | -1/+1 | |
Otherwise, cookie can contain arbitrary injected code that gets sent back directly to the browser. | |||||
2011-11-14 | Tweaking the xss filter for IE <comment> tags, parameter injection, and ↵ | Pascal Kriete | 1 | -50/+41 | |
weird html5 attributes. | |||||
2011-11-14 | Removing stray docblocks | Pascal Kriete | 1 | -12/+0 | |
2011-11-02 | Fix #8 - Load core classes from the application folder first. | Shane Pearson | 1 | -3/+3 | |
2011-10-28 | add html_escape() function to escape HTML. | kenjis | 1 | -0/+24 | |
2011-10-27 | Bumped CodeIgniter version to 2.1.0. | Phil Sturgeon | 1 | -1/+1 | |
2011-10-27 | get_magic_quotes_gpc() to be executed only if PHP version is 5.3 or lower | Andrey Andreev | 1 | -4/+7 | |
2011-10-27 | CI_Loader::driver() processes empty library. Fixed. | Tom Klingenberg | 1 | -0/+5 | |
This causes endless recursion calls _ci_load_class(), see #550 | |||||
2011-08-15 | Merge branch 'develop' of github.com:philsturgeon/codeigniter-reactor into ↵ | Phil Sturgeon | 11 | -73/+420 | |
develop | |||||
2011-08-15 | Added some docs to CI core files | David Behler | 4 | -48/+221 | |
2011-08-14 | Added some docs to CI core files | David Behler | 5 | -13/+110 | |
2011-08-14 | Added some docs to CI core files | David Behler | 1 | -0/+14 | |
2011-08-14 | Added some docs to CI core files | David Behler | 2 | -13/+64 | |
2011-08-14 | Added some docs to CI core files | David Behler | 3 | -0/+32 | |
2011-08-14 | Fixed conflict. | Phil Sturgeon | 3 | -16/+38 | |
2011-08-14 | Added some docs to CI core files | David Behler | 1 | -7/+22 | |
2011-08-14 | Added some docs to CI core files | root | 2 | -0/+18 | |
2011-08-13 | Got changelog in sync with changes after v2.0.3 release branch merged a ↵ | Phil Sturgeon | 1 | -1/+1 | |
bunch of stuff. Anyone moving a develop change into v2.0.3 should move the changelog item too. | |||||
2011-08-13 | Bumped the version number. Can somebody with a working find and replace fix ↵ | Phil Sturgeon | 1 | -1/+1 | |
up the docs? | |||||
2011-08-13 | Fixed conflicts. | Phil Sturgeon | 2 | -2/+2 | |
2011-08-13 | Fixed conflict in changelog. | Phil Sturgeon | 1 | -0/+15 | |
2011-08-13 | Get php_sapi_name() == 'cli' involved in the 'is this the command line?' ↵ | Phil Sturgeon | 2 | -2/+2 | |
decision. | |||||
2011-08-13 | Merged my GitHub mirror. | Phil Sturgeon | 4 | -13/+45 | |
2011-08-13 | Merge branch 'develop' of ellislab.beanstalkapp.com:/codeigniter into develop | Phil Sturgeon | 1 | -12/+46 | |
2011-08-13 | If a config class was loaded first then a library with the same name is ↵ | Phil Sturgeon | 1 | -4/+4 | |
loaded, the config would be ignored. | |||||
2011-08-12 | Merging - fingers crossed | Pascal Kriete | 1 | -0/+15 | |
Conflicts: system/database/drivers/mysql/mysql_driver.php system/database/drivers/mysqli/mysqli_driver.php system/libraries/Email.php user_guide/changelog.html user_guide/database/configuration.html user_guide/helpers/url_helper.html user_guide/libraries/cart.html user_guide/libraries/form_validation.html | |||||
2011-08-10 | Reset loaded files arrays in the Loader so the 404_override controller can ↵ | Shane Pearson | 2 | -11/+12 | |
access autoloaded libraries. If a controller exists but a method is not found the current $CI instance is unset and a new one is created for the 404 override controller. Any autoloaded libraries will not be available to the 404 override controller because the Loader sees them as already have been loaded. To fix this we need to reset the loader. I implemented it via an initialize function that resets the loaded files arrays and then calls the autoloader. This also simplifies things in CI_Controller because it only has to call one loader function instead. | |||||
2011-08-10 | 404_override route now works for missing controllers in subdirectories and ↵ | Shane Pearson | 2 | -2/+33 | |
functions that fail the security check in CodeIgniter.php | |||||
2011-07-23 | Added ->load->get_var() to check against ->load->_ci_cached_vars[]. | Phil Sturgeon | 1 | -0/+15 | |
2011-07-02 | hand merged remaining unresolved files following the backout of ↵ | Derek Jones | 1 | -13/+48 | |
648b42a75739, which was a NON-trivial whitespace commit | |||||
2011-07-02 | backed out 648b42a75739, which was a NON-trivial whitespace commit. It ↵ | Derek Jones | 16 | -194/+194 | |
broke the Typography class's string replacements, for instance | |||||
2011-07-02 | hand merged remaining unresolved files following the backout of ↵ | Derek Jones | 16 | -194/+194 | |
648b42a75739, which was a NON-trivial whitespace commit | |||||
2011-07-02 | backed out 648b42a75739, which was a NON-trivial whitespace commit. It ↵ | Derek Jones | 16 | -194/+194 | |
broke the Typography class's string replacements, for instance | |||||
2011-06-15 | Merged base_url changes. | philsturgeon | 1 | -12/+46 | |
2011-05-08 | Wrapped all common functions to check if it already exists. This allows ↵ | Dan Horrigan | 1 | -13/+48 | |
anyone to override a lot more of the core by simply defining these function prior to loading them. |