71 Commits

Author SHA1 Message Date
Chad
6e2ff815f1 Fixed vulnerability.
view-source: codiad/data/users.php
nginx with fast cgi will disclose the commented out json unless you add a new line before hand.
Fixes username, password "sha1(md5(password))", and last project from being disclosed to public.
2017-01-17 18:43:03 -05:00
daeks
3f41226f16 Revert "CSRF checks" 2016-03-02 07:09:05 +01:00
Luca Reverberi
c5e5ac7c43 CSRF checks 2016-02-15 20:42:02 +00:00
daeks
8c64bc4c89 Update common.php 2015-04-28 07:08:17 +02:00
Никола Радовановић (Nikola Radovanović)
1ee8c26e3e Update common.php
Lang fix
2015-04-20 13:43:01 +02:00
Никола Радовановић (Nikola Radovanović)
e2073b0112 Update common.php
Language select fix
2015-04-20 13:40:03 +02:00
Никола Радовановић (Nikola Radovanović)
68b96f87d4 Update common.php 2015-04-15 14:23:14 +02:00
Никола Радовановић (Nikola Radovanović)
13a3813bac Update common.php 2015-04-14 03:08:17 +02:00
Никола Радовановић (Nikola Radovanović)
6f361b83ff Update common.php
Default language fix
2015-04-14 03:06:44 +02:00
daeks
a7c7a858b3 Update common.php 2015-03-21 00:39:52 +01:00
daeks
cf45e7cc3e added windows check 2015-03-21 00:38:10 +01:00
daeks
eb4b78ed6b windows abspath support 2015-02-02 14:19:42 +01:00
Andr3as
3b39edfec3 Corrects file mode 2014-03-06 18:33:20 +01:00
Andr3as
774eaaec71 Implements security check method globally 2014-02-25 20:39:50 +01:00
daeks
8897134b45 wrong whitespace format 2013-12-12 11:15:52 +01:00
daeks
a2af5f8ae6 renamed to fit codiad convention 2013-12-12 11:13:37 +01:00
daeks
8fc2c572f6 external auth 2013-12-12 11:05:26 +01:00
daeks
bb2f9e0a24 removed json file 2013-09-16 18:48:04 +02:00
Yassine Guedidi
9206eb7b58 Make getConstant default value optional
Signed-off-by:Yassine Guedidi <yassine.guedidi@gmail.com>
2013-06-20 10:01:41 +02:00
Yassine Guedidi
87ab21bf9d Rename getRemoteURL to getConstant + fix it
Signed-off-by:Yassine Guedidi <yassine.guedidi@gmail.com>
2013-06-20 09:43:02 +02:00
daeks
c76bf2f7dd remote merge 2013-06-18 15:50:56 +02:00
daeks
e238ccb8e1 plugin url, part 1 2013-06-18 15:39:54 +02:00
Evertton de Lima
d73c470583 Fix the issues #420 (the language selector) and #427 (the undefined constant: base_path). 2013-06-11 06:57:43 -03:00
Danny Morabito
90651ca291 Small fix for some php configurations
Some php configurations handle `{$var}` in string as the var itself
2013-06-09 16:50:12 +03:00
Danny Morabito
f80ab9620d Allow args in i18n
i18n function should be able to handle args, for example when a file name is required. Something like: `There's already a file named %{name}%`. In some languages it could be written differently so I added this to the core. Now language files could contain something like: 
```php
$lang["There's already a file named %{name}%"] = "Esiste gi&agrave; un file chiamato %{name}%";
```
2013-06-09 16:47:11 +03:00
Evertton de Lima
f531816a21 Fix the language selector... Resolves issue #420. 2013-06-05 22:42:30 -03:00
daeks
2c49b95c95 changed config loading for demo 2013-05-06 16:42:36 +02:00
daeks
d4c47d7155 initialize path 2013-05-03 11:31:09 +02:00
daeks
0f9abc96cb better error message 2013-05-03 07:22:17 +02:00
daeks
c6c5657597 minor cleanups 2013-05-02 08:19:38 +02:00
daeks
43df642215 language stuff 2013-05-01 13:29:24 +02:00
daeks
d697d227e6 global cookie_lifetime 2013-05-01 13:19:51 +02:00
daeks
60a9423cd7 removed base_path for data stuff 2013-05-01 13:14:10 +02:00
daeks
d4c9cdd6ca refactored common.php 2013-05-01 13:11:22 +02:00
daeks
e7c31ce210 merged common class 2013-05-01 12:55:28 +02:00
David Dyess
8c7315fef7 Check for DATA constant
Added a check for DATA constant to prevent a PHP Strict notice in
index.html
2013-04-28 17:44:51 +02:00
daeks
d70033c2ed fix authentification for plugins 2013-04-19 10:47:58 +02:00
daeks
3d98029c0a plugins 2013-04-19 10:35:19 +02:00
circuitbomb
d6c5ca717e Replace common.php with index.php 2013-04-15 15:03:57 -04:00
circuitbomb
2c7348f8a3 Use session names instead of setting path 2013-04-12 12:21:56 -04:00
circuitbomb
45efa674af removed appearance of a rogue s 2013-04-09 13:41:48 -04:00
circuitbomb
f97664a1a3 Rollback $rel check 2013-04-09 13:40:20 -04:00
circuitbomb
eb618d8732 Removed $rel check in cookie_path set 2013-04-09 13:12:12 -04:00
circuitbomb
f36d24710a cookie lifetime in common.php fix 2013-04-09 10:40:34 -04:00
circuitbomb
521a2c084c Fixed line 43 2013-04-09 08:41:34 -04:00
circuitbomb
bfebc3ee21 Misc fixes 2013-04-08 14:48:13 -04:00
Kent Safranski
d5cb5928aa Merge pull request #263 from circuitbomb/installation_issues
Installation issues
2013-04-06 10:55:47 -07:00
circuitbomb
a049057e24 Add check for issues 2013-04-06 13:43:30 -04:00
daeks
0d3dcbe348 fixed minor issues 2013-04-05 22:17:36 +02:00
circuitbomb
75c59efa47 Fixes some install errors, part of #213 and #214 2013-04-05 16:12:03 -04:00