summaryrefslogtreecommitdiffstats
path: root/system
AgeCommit message (Collapse)AuthorFilesLines
2008-05-15addition xss protection against certain data urls, stripping of anything ↵Derek Jones1-2/+12
sent with utf-7 encoding
2008-05-15added ability to use xss_clean() to test images, and improved security for ↵Derek Jones1-37/+49
vectors particular to the Opera family of browsers
2008-05-14Set the mime type check in the Upload class to reference the global mimes ↵Derek Allard1-1/+3
variable.
2008-05-14Added missing semicolon in upload_lang.phpDerek Jones1-3/+3
2008-05-14set $DB->char_set and $DB->dbcollat defaults to utf8 and utf8_general_ci ↵Derek Jones1-2/+2
respectively
2008-05-14fixed bug #3419 where the 'database' setting for DSN connections was using ↵Derek Jones2-2/+25
the host portion of the URL instead of the path. Added ability to set other db config values in DSN connections via query string
2008-05-14force closing tag on eval() for servers not running short_open_tagsDerek Jones1-1/+1
2008-05-13hotfix for a bug in database error display introduced by 1.6.2 fix for bugs ↵Derek Jones1-3/+8
#4451, #4299, and #4339
2008-05-13Hey you! Yeah, you, that other set of hardcoded arrays in xss_clean(). ↵Derek Jones1-21/+3
You're coming with me, pal!
2008-05-13increased security and performance of xss_clean(), added ↵Derek Jones1-24/+56
_sanitize_naughty_html() callback and removed "never allowed" items to a class property
2008-05-13The Zip class has undergone a substantial re-write for speed and clarityDerek Allard1-120/+101
2008-05-13removed some stray testing codeDerek Allard2-23/+17
2008-05-13reverted OR back to || for js_calendar_pi.php javascriptDerek Jones1-6/+6
2008-05-13Some sweeping syntax changes for consistency:Derek Jones105-879/+915
(! foo) changed to ( ! foo) || changed to OR changed newline standardization code in various places from preg_replace to str_replace
2008-05-13adjusted eval() statement in Loader to accommodate servers with ↵Derek Jones1-1/+1
short_open_tag disabled with the new change of removing closing PHP tags from files
2008-05-13minor source formattingDerek Allard4-36/+35
2008-05-13preg_split changed to explodeDerek Allard1-165/+165
2008-05-13substr checks swapped out with strncmpDerek Allard1-16/+72
{ braces } added around if and for statements
2008-05-12fixed a misspelling in the Input library of CDATADerek Allard1-1/+1
2008-05-12removed an ereg from configDerek Allard6-130/+131
added a qualifier to a str_replace for \t in Input changed substr to strncmp in Codeigniter.php and directory_map function added braces in an if statement of unit test Removed "scripts" from the auto-load search path. Scripts were deprecated in Version 1.4.1 (September 21, 2006). If you still need to use them for legacy reasons, they must now be manually loaded in each Controller.
2008-05-12Escape behaviour in where() clauses has changed; values in those with the ↵Derek Allard1-19/+22
"FALSE" argument are no longer escaped (ie: quoted).
2008-05-12(no commit message)Rick Ellis1-22/+57
2008-05-12Added protection in xss_clean() for GET variables in URLsDerek Jones1-3/+55
http://codeigniter.com/bug_tracker/bug/4167/
2008-05-12Fixed a bug in AR compiling, where select statements with arguments got ↵Derek Allard1-3/+10
incorrectly escaped (#3478).
2008-05-12changed $xmlrpcDateTime property to all lowercase 'datetime.iso8601' so it ↵Derek Jones1-3/+3
can be recognized as a valid XML-RPC type http://codeigniter.com/bug_tracker/bug/4153/
2008-05-12fixed a bug that would lead to a PHP notice error of array to string ↵Derek Jones1-2/+4
conversion in prep_for_form() http://codeigniter.com/bug_tracker/bug/4425/
2008-05-12passed db object by reference to DB Cache class, and changed the cache class ↵Derek Jones2-15/+17
to use that db object instead of $CI->db, to support returned db objects and multiple db connections http://codeigniter.com/bug_tracker/bug/4223/
2008-05-12changed overlay_watermark() to check for an alpha value before applying the ↵Derek Jones1-6/+19
image to help support PNG-24s with alpha transparency http://codeigniter.com/bug_tracker/bug/4506/
2008-05-12changed class instantiations to reference global $LANG and fetch existing ↵Derek Jones2-16/+9
Exceptions class, and added language variable for database error heading http://codeigniter.com/bug_tracker/bug/4421/
2008-05-11Removed closing PHP tags, replaced with a comment block identifying the end ↵Derek Jones120-121/+361
of the file
2008-05-11Undoing change committed in r1115Derek Jones114-0/+114
2008-05-11removed closing PHP tag from all framework filesDerek Jones114-114/+0
2008-05-09added dot transformation to body of email when sending via SMTPDerek Jones1-2/+3
2008-05-08removed extraneous error message from Upload lib on failure of ↵Derek Jones1-1/+1
validate_upload_path() http://codeigniter.com/bug_tracker/bug/4390/
2008-05-08added 'object' key to the XML-RPCS config allowing the passing of a class ↵Derek Jones1-6/+18
object for method calls that aren't part of the CI super object
2008-05-08added SET to the list of write type queriesDerek Jones1-1/+1
2008-05-08added symbolic_permissions() and octal_permissions() to the File helperDerek Jones1-0/+88
2008-05-08Fixed a bug where $data was not being converted to an array properly in ↵Derek Jones1-1/+1
set_rules() http://codeigniter.com/bug_tracker/bug/4220/
2008-05-08Fixed bug with recursive deletes in delete_dir()Derek Jones1-3/+3
http://codeigniter.com/bug_tracker/bug/4215/
2008-05-08flipped the $not flag for or_where_not_in()Derek Jones1-5/+1
http://codeigniter.com/bug_tracker/bug/4171/
2008-05-07added code comment for 'directory_trigger' config value which is not yet ↵Derek Jones1-1/+1
implemented
2008-05-07Added checks for objects in DB driver instead of just resources to ↵Derek Jones2-3/+3
accommodate MySQLi, and fixed check in mysqli_result.php checking for a resource. http://codeigniter.com/bug_tracker/bug/3461/
2008-05-07removed default title= attribute from anchor() in URL HelperDerek Jones1-5/+1
2008-05-07removed SCRIPT_NAME from path provided by ORIG_PATH_INFO to remove the path ↵Derek Jones1-1/+2
and script name from the URI data (bug #3191)
2008-05-07fixed a typo with a variable in the compatibility helperDerek Jones1-2/+2
2008-05-06updated CI_VERSION to 1.6.2Derek Allard1-1/+1
2008-05-06Added a Compatibility HelperDerek Jones1-0/+496
2008-05-06Flipped user guide page titles for easier recognition in tabs:Derek Jones1-1/+1
<title>CodeIgniter User Guide : Page TItle</title> to <title>Page Title : CodeIgniter User Guide</title>
2008-05-06fixed a bug where the dir resource was not closed in the directory helper, ↵Derek Jones1-3/+12
and made it more efficient http://codeigniter.com/bug_tracker/bug/4206/
2008-05-06Changed the radio() and checkbox() functions to default to not checked by ↵Derek Allard1-2/+2
default.
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-12-11 14:19:20 +0100