summaryrefslogtreecommitdiffstats
path: root/system/core
AgeCommit message (Collapse)AuthorFilesLines
2014-05-06Account for PHP 5.6 changes related to charsetsAndrey Andreev1-2/+10
2014-05-06xss_clean is not protecting GET requests that &item=/startwithslashDocumentopia.com1-1/+1
/webacd.do?isurlact=true&entactname=/webacd.do becomes /webacd.do?isurlact=true&entactname;=/webacd.do This commit adds / to the regex to it will escape those GET requests related to issue #3030
2014-05-01Fix a typoAndrey Andreev1-1/+1
2014-05-01Optimization in CI_URI::_set_uri_string()Andrey Andreev1-1/+1
2014-05-01Fix docblock of URI->rsegments propertyvlakoff1-1/+3
2014-04-29Merge branch 'develop' of github.com:EllisLab/CodeIgniter into developAndrey Andreev2-2/+2
2014-04-29Small fixes (PR #3022)Andrey Andreev2-3/+3
- Fix incorrect variable in mb_strlen() compat - Micro-optimization of array_replace(), array_replace_recursive() compat
2014-04-25Minor fixesvlakoff2-2/+2
2014-04-15Merge pull request #3006 from vlakoff/securityAndrey Andreev1-1/+1
Fix in $_protected array of register_globals security procedure
2014-04-15#3005Andrey Andreev1-2/+1
2014-04-15Fix in $_protected array of register_globals security procedurevlakoff1-1/+1
* Followup to b78a8c7d40446a3e2e36772706662fd033fe7d1d * Just FYI, renamed to "system_path" in 0c1e405437ceb3c1888e151e6a400653310ad6c1
2014-04-15Fix #3004Andrey Andreev2-53/+52
2014-04-15Follow-up to aeed15eb8556ab671507f17ef9a8cf28903999aaAndrey Andreev1-1/+1
2014-04-14Different method for handling "error_views_path" config itemvlakoff1-15/+10
2014-04-14Rename config item "error_templates_path" to "error_views_path"vlakoff1-2/+2
2014-04-12Make the error templates path configurablevlakoff1-2/+15
2014-04-09Minor changes in FV, TrackbackAndrey Andreev1-3/+0
2014-04-05Remove default parameter value of is_php()vlakoff1-2/+2
It was simply pointless.
2014-04-01Merge pull request #2981 from vlakoff/base_urlAndrey Andreev1-3/+3
Work on determination of "base_url" config item
2014-04-01Discard the unwanted changesvlakoff1-3/+10
2014-04-01Yet another method for determining "base_url"vlakoff1-8/+1
This one is great because we don't have to deal with the special cases: * in Windows, dirname('/foo/index.php') gives "/foo", but dirname('/index.php') gives "\" instead of "/" * dirname() doesn't include the trailing slash, with the expection of "/" (root) props @narfbg
2014-04-01Remove spaces around concatenationsvlakoff1-3/+3
per request
2014-03-31Different method for determining "base_url"vlakoff1-2/+7
Better performance by not using regex.
2014-03-31Robuster determination of "base_url" config itemvlakoff1-1/+3
Remove the basename only at the end, to avoid edge cases.
2014-03-31Refactoring in Config->__construct()vlakoff1-10/+3
Put the $_SERVER['HTTP_HOST'] fallback in a more logical place.
2014-03-30Fix #2976Andrey Andreev1-0/+4
2014-03-25Simplify callback routesAndrey Andreev1-29/+0
There's no need for all that Reflection magic, it's only slowing down the whole process
2014-03-242 more micro-optimizations in CI_LoaderAndrey Andreev1-3/+3
2014-03-24Yet another modification of CI_Loader::_ci_autoload()Andrey Andreev1-2/+1
2014-03-24Alter previous commitAndrey Andreev1-1/+1
2014-03-24CI_Loader::_ci_autoload() micro-optimizationAndrey Andreev1-3/+3
2014-03-21remove eolfabianozenatti1-1/+1
2014-03-21Fix typo in CI_Input constructorfabianozenatti1-2/+2
2014-03-20Fixed typo in model loader.James1-1/+1
Signed-off-by: James <me@tfel.net>
2014-03-18More xss_clean() improvementsAndrey Andreev1-2/+2
Issue described in https://github.com/EllisLab/CodeIgniter/issues/2667#issuecomment-37980030 + a false positive
2014-03-18Another xss_clean() improvementAndrey Andreev1-2/+2
Fixes this: https://github.com/EllisLab/CodeIgniter/issues/2667#issuecomment-37958136
2014-03-18xss_clean() improvementAndrey Andreev1-4/+4
Fixes this: https://github.com/EllisLab/CodeIgniter/issues/2667#issuecomment-37819186
2014-03-13Partially revert PR #2190Andrey Andreev5-20/+21
The core shouldn't depend on constants that are not defined by itself
2014-03-05Add support for simpler (Callable) hooks (issue #2917)Andrey Andreev1-1/+10
2014-02-27Add parameter to CI_Input::user_agent()Andrey Andreev1-14/+2
2014-02-26Don't use error suppression on is_dir(), file_exists()Andrey Andreev1-1/+1
2014-02-24Fix #2901Andrey Andreev1-1/+2
2014-02-24Remove a needless check in CI_Output::append_output()Andrey Andreev1-9/+1
2014-02-24Don't use globalsAndrey Andreev6-21/+16
- Use load_class() to get objects during bootstrap process. - Change load_class() to accept a class constructor parameter instead of previously unused class name prefix. - Change CI_Router::__construct() to accept as a parameter.
2014-02-21More CI_Lang testsAndrey Andreev1-1/+1
2014-02-20Method CI_URI::_fetch_uri_string() has been removed, removal of reference.Ivan Tcholakov1-1/+0
2014-02-20Don't use error suppression on ini_get() eitherAndrey Andreev3-8/+6
2014-02-20CI_Utf8-related changesAndrey Andreev1-8/+8
- Give priority to mb_convert_encoding() over iconv() in clean_string() (partially fixes #261) - Add more proper unit tests
2014-02-20Don't use error suppression with ini_set()Andrey Andreev1-1/+1
2014-02-19Add compatibility layer for array_column(), array_replace(), ↵Andrey Andreev3-1/+248
array_replace_recursive()