Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2014-02-08 | simplify calendar library | Andrew | 1 | -68/+35 | |
it seemed quite strange that we ask users to pass in a template string the we parse with REGEX, to extract key/value pairs, when we can simply ask users for an array. the class still contains default variables for each part of the template. Users can simply pass in an array (instead of a string) when they initialize, $config['template'], which overwrites default values. this cuts down a little on file size by removing parse_template() function. I think arrays are much more straightforward and easy to read than 'encoded' strings. don't have to keep a running list of all template keys like in previous parse_template() function. gets rid of $this->temp[] property and changes it to $this->template[] which is more descriptive when generating output | |||||
2014-02-07 | Fixed Typo in String Helper function | Olanipekun Femi | 1 | -2/+2 | |
alnum spelled as alunum in random_string function documentation comment. | |||||
2014-02-07 | Merge branch 'develop' into 'feature/user-guide-cleanup' | Andrey Andreev | 11 | -19/+41 | |
2014-02-07 | Merge branch 'develop' into feature/encryption | Andrey Andreev | 3 | -4/+3 | |
2014-02-07 | Use is_really_writable() in captcha helper | Andrey Andreev | 1 | -1/+1 | |
2014-02-07 | Use is_really_writable() in get_file_info() | Andrey Andreev | 1 | -2/+1 | |
2014-02-07 | CI_Encryption: Optimizations and test cases | Andrey Andreev | 1 | -26/+18 | |
2014-02-06 | Typo Fix | Vivek Dinesh | 1 | -1/+1 | |
Signed-off-by: Vivek Dinesh <vivekdinesh5@gmail.com> | |||||
2014-02-06 | Merge changes from develop | Andrey Andreev | 2 | -2/+10 | |
2014-02-06 | Make CI_Session's HMAC comparison time-attack-safe | Andrey Andreev | 1 | -1/+9 | |
2014-02-06 | CI_Encryption: CAST-128/CAST5 and RC4/ARCFour compatibility | Andrey Andreev | 1 | -15/+50 | |
2014-02-06 | CI_Encryption: Time-attack-safe HMAC verification | Andrey Andreev | 1 | -4/+18 | |
2014-02-05 | Fix #2856 | Andrey Andreev | 1 | -1/+1 | |
2014-02-05 | CI_Encryption: HMAC to not be derived from the encryption key | Andrey Andreev | 1 | -58/+56 | |
2014-02-05 | More CI_Encryption improvements | Andrey Andreev | 1 | -46/+6 | |
- Make OpenSSL the default driver if available (because MCrypt is stupid). - Require MCRYPT_DEV_URANDOM for the MCrypt availability check (because security; also, incidentally - it's faster that way ;)). | |||||
2014-02-05 | CI_Encryption: More MCrypt/OpenSSL compatibility and get rid of the ↵ | Andrey Andreev | 1 | -17/+69 | |
MCRYPT_MODE_* constants | |||||
2014-02-05 | CI_Encryption: Add Blowfish to compatibility list | Andrey Andreev | 1 | -7/+11 | |
2014-02-05 | CI_Encryption: Work around MCrypt's dumb behavior in ECB mode | Andrey Andreev | 1 | -49/+65 | |
2014-02-05 | Merge branch 'develop' into feature/encryption | Andrey Andreev | 1 | -0/+5 | |
2014-02-05 | Integrate CI_Encryption into the framework | Andrey Andreev | 1 | -25/+30 | |
TODO: Add documentation in user_guide_src/source/libraries/encryption.rst | |||||
2014-02-04 | CI_Encryption: Remove ARCFour from aliased ciphers due ... | Andrey Andreev | 1 | -4/+2 | |
Seems like there are some issues with it | |||||
2014-02-04 | CI_Encryption: Fix more errors and add a 'portability' test case | Andrey Andreev | 1 | -17/+17 | |
2014-02-04 | Fix a logical error in CI_Encryption | Andrey Andreev | 1 | -3/+3 | |
2014-02-04 | CI_Encryption: Fix some errors and add unit tests for hkdf() | Andrey Andreev | 1 | -10/+10 | |
2014-02-04 | CI_Encryption improvements | Andrey Andreev | 1 | -99/+199 | |
- HMAC authentication by default. - HKDF support. - Reduce code repetition. | |||||
2014-02-03 | [ci skip] Update info on function_usable | Andrey Andreev | 1 | -0/+5 | |
2014-02-03 | Introducing CI_Encryption (a CI_Encrypt replacement) | Andrey Andreev | 1 | -0/+718 | |
2014-01-30 | Previous 2 commits were just dumb | Andrey Andreev | 2 | -3/+3 | |
2014-01-30 | Fix a syntax error from last commit | Andrey Andreev | 1 | -1/+1 | |
2014-01-30 | Some fail-safe pdo_pgsql adjustments | Andrey Andreev | 2 | -2/+7 | |
2014-01-28 | Fix #2845 | Andrey Andreev | 1 | -1/+1 | |
2014-01-28 | Fix #2844 | Andrey Andreev | 1 | -1/+1 | |
2014-01-25 | Add <math> to 'naughty' HTML elements | Andrey Andreev | 1 | -1/+1 | |
2014-01-25 | Previous commit caused side effects ... | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Fix CI_Security::_remove_evil_attributes() being way too aggressive | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Re-add 'on\w*' to evil attributes (rel #2667) | Andrey Andreev | 1 | -2/+1 | |
2014-01-25 | Partially fix #2667 | Andrey Andreev | 1 | -2/+8 | |
2014-01-24 | Merge branch 'develop' into feature/user-guide-cleanup | Andrey Andreev | 2 | -3/+6 | |
2014-01-24 | [ci skip] Add a link to PHP bug 54709 in is_really_writable()'s docblock | Andrey Andreev | 1 | -0/+1 | |
2014-01-24 | CI_Security: Also add <svg> to 'naughty' HTML elements | Andrey Andreev | 1 | -1/+1 | |
2014-01-24 | CI_Security: Add <select> and <keygen> tags to the list of 'naughty' HTML ↵ | Andrey Andreev | 1 | -1/+1 | |
elements | |||||
2014-01-24 | Fix syntax errors | Andrey Andreev | 1 | -2/+2 | |
2014-01-24 | CI_Security: Add 'form' and 'xlink:href' to evil attributes | Andrey Andreev | 1 | -1/+1 | |
2014-01-24 | Add &newline; and &tab; to CI_Security:: | Andrey Andreev | 1 | -1/+3 | |
2014-01-24 | Merge branch 'develop' into feature/user-guide-cleanup | Andrey Andreev | 11 | -72/+242 | |
2014-01-24 | Righting a wrong in the Session library | Andrey Andreev | 2 | -41/+50 | |
- Change userdata(), flashdata(), tempdata() to return all the respective data when no parameter is passed. - Revert the addition of all_flashdata(). - Deprecate all_userdata(). - Fix related changelog entries that were all inconsistent. | |||||
2014-01-24 | [ci skip] AND -> && | Andrey Andreev | 1 | -1/+1 | |
2014-01-23 | Fix #2836 | Andrey Andreev | 1 | -1/+1 | |
2014-01-22 | CI_Security::_decode_entity() to replace dangerous HTML5 entities | Andrey Andreev | 1 | -1/+19 | |
Related to issue #2771 | |||||
2014-01-21 | Add <button> to the list of 'naugthy' html elements in CI_Security::xss_clean() | Andrey Andreev | 1 | -2/+2 | |