Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2016-01-07 | Fix #4362 | Andrey Andreev | 2 | -2/+8 | |
2016-01-06 | Fix #4337 | Andrey Andreev | 4 | -2/+48 | |
2016-01-04 | Fix #4350 | Andrey Andreev | 1 | -1/+31 | |
2015-12-30 | Fix #4343 | Andrey Andreev | 1 | -2/+1 | |
2015-12-30 | Fix #4331 | Andrey Andreev | 1 | -13/+24 | |
2015-12-15 | Fix logical errors from af849696d43f5c3b68962af1ae5096151a6d9f1a | Andrey Andreev | 3 | -4/+4 | |
2015-12-15 | Really fix #4039 | Andrey Andreev | 1 | -1/+1 | |
A typo from 8df6efd402180a6361b4dd619f5535d6c2bed334 | |||||
2015-12-14 | Fix version() for Oracle DB drivers | Andrey Andreev | 2 | -2/+29 | |
2015-12-14 | Close #4313 | Andrey Andreev | 1 | -0/+12 | |
2015-12-14 | Fix #4312 | Andrey Andreev | 1 | -6/+3 | |
2015-12-12 | [ci skip] Proper error handling for Sessions on PHP 5 | Andrey Andreev | 5 | -78/+133 | |
This was actually a PHP bug, see https://wiki.php.net/rfc/session.user.return-value Also related: #4039 | |||||
2015-12-11 | Fix #4039 | Andrey Andreev | 1 | -0/+6 | |
2015-12-11 | Fix #4306 | Andrey Andreev | 1 | -1/+1 | |
2015-12-07 | Merge pull request #4291 from b-kaxa/fix-phpdoc | Andrey Andreev | 2 | -1/+2 | |
[ci skip] phpdoc adjustments in CI_Router and CI_URI | |||||
2015-12-03 | Fix #4283 | Andrey Andreev | 1 | -1/+2 | |
2015-11-24 | Use PHP7's random_bytes() when possible | Andrey Andreev | 2 | -0/+21 | |
Close #4260 | |||||
2015-11-24 | [ci skip] Remove some redundant code from DB_forge | Andrey Andreev | 1 | -4/+0 | |
2015-11-16 | [ci skip] Fix #4245 | Andrey Andreev | 1 | -1/+1 | |
2015-11-16 | Fix #4244 | Andrey Andreev | 1 | -3/+28 | |
2015-11-09 | Merge pull request #4223 from j0inty/develop | Andrey Andreev | 1 | -1/+4 | |
CI_DB_driver->simple_query() to check initialize() return value | |||||
2015-11-09 | [ci skip] Fix an infinite loop in captcha helper | Andrey Andreev | 1 | -1/+2 | |
2015-11-09 | Merge pull request #4217 from natesilva/fix-ipv6-base_url | Andrey Andreev | 1 | -1/+10 | |
Build base_url correctly if SERVER_ADDR is IPv6 | |||||
2015-11-04 | [ci skip] Fix a false default-fallback bug in set_checkbox(), set_radio() | Andrey Andreev | 1 | -8/+33 | |
Relevant: #4210 | |||||
2015-11-04 | Fix #4212 | Andrey Andreev | 1 | -1/+1 | |
2015-11-04 | [ci skip] Start of 3.0.4 development | Andrey Andreev | 1 | -1/+1 | |
2015-10-31 | [ci skip] Update changelog, version & upgrade instructions | Andrey Andreev | 1 | -1/+1 | |
2015-10-31 | Use proper randomness when generating CAPTCHAs | Andrey Andreev | 1 | -2/+87 | |
2015-10-31 | Prevent Host header injections | Andrey Andreev | 1 | -4/+2 | |
2015-10-31 | Harden xss_clean() | Andrey Andreev | 1 | -27/+39 | |
2015-10-30 | Fix #4192 | Andrey Andreev | 1 | -5/+8 | |
2015-10-30 | Fix #3201 | Andrey Andreev | 1 | -1/+6 | |
2015-10-19 | Fix #4171 and a number of other transaction bugs | Andrey Andreev | 13 | -354/+162 | |
2015-10-19 | Fix #4173 | Andrey Andreev | 1 | -1/+7 | |
This reverts commit 7cc6cea2d421862726081a39e932dbceeefcc775 from PR #3968. At the time this seemed logical, but turns out it breaks the ability to create non-PRIMARY composite keys, so ... | |||||
2015-10-18 | Fix #4179 | Andrey Andreev | 1 | -0/+4 | |
2015-10-13 | [ci skip] Fix #4170 | Andrey Andreev | 1 | -3/+1 | |
2015-10-12 | [ci skip] This is 3.0.3-dev | Andrey Andreev | 1 | -1/+1 | |
2015-10-12 | Optimize csv_from_result speed. | Ahmad Anbar | 1 | -2/+3 | |
2015-10-08 | [ci skip] Prepare 3.0.2 release | Andrey Andreev | 1 | -1/+1 | |
2015-10-05 | Some more intrusive XSS cleaning | Andrey Andreev | 1 | -5/+11 | |
2015-10-05 | Close #4155 | Andrey Andreev | 1 | -1/+1 | |
2015-10-02 | More XSS stuff | Andrey Andreev | 1 | -1/+1 | |
2015-09-29 | Merge pull request #4126 from zoaked/patch-1 | Andrey Andreev | 1 | -1/+0 | |
Persist config file rules when using FV reset_validation() | |||||
2015-09-24 | Fix #4137 | Andrey Andreev | 1 | -1/+1 | |
2015-09-21 | More XSS stuff | Andrey Andreev | 1 | -3/+3 | |
2015-09-17 | Don't allow open-ended tags to pass through xss_clean() | Andrey Andreev | 1 | -4/+9 | |
This was a regression caused by the previous commit | |||||
2015-09-17 | Refactor 'evil attributes' sanitization logic | Andrey Andreev | 1 | -92/+66 | |
Turned out pretty much impossible to do remove 'evil attributes' with just one pattern - it either breaks something else, hits pcre.backtrack_limit or causes PHP to segfault. No benchmarks made, but there shouldn't be any performance regressions since we're now trying to strip attributes only after it is determined that they are inside a tag; up until now this was done seprately for _sanitize_naughty_html() and _remove_evil_attributes(). | |||||
2015-09-16 | Fix #4116 | Andrey Andreev | 1 | -6/+6 | |
Close #4117 | |||||
2015-09-16 | Fix #4120 | Andrey Andreev | 1 | -3/+13 | |
2015-09-15 | Missing character in the evil attributes pattern | Andrey Andreev | 1 | -1/+1 | |
2015-09-14 | Another addition to tag detection patterns in xss_clean() | Andrey Andreev | 1 | -1/+4 | |