Chad
6e2ff815f1
Fixed vulnerability.
...
view-source: codiad/data/users.php
nginx with fast cgi will disclose the commented out json unless you add a new line before hand.
Fixes username, password "sha1(md5(password))", and last project from being disclosed to public.
2017-01-17 18:43:03 -05:00
daeks
3f41226f16
Revert "CSRF checks"
2016-03-02 07:09:05 +01:00
Luca Reverberi
c5e5ac7c43
CSRF checks
2016-02-15 20:42:02 +00:00
daeks
8c64bc4c89
Update common.php
2015-04-28 07:08:17 +02:00
Никола Радовановић (Nikola Radovanović)
1ee8c26e3e
Update common.php
...
Lang fix
2015-04-20 13:43:01 +02:00
Никола Радовановић (Nikola Radovanović)
e2073b0112
Update common.php
...
Language select fix
2015-04-20 13:40:03 +02:00
Никола Радовановић (Nikola Radovanović)
68b96f87d4
Update common.php
2015-04-15 14:23:14 +02:00
Никола Радовановић (Nikola Radovanović)
13a3813bac
Update common.php
2015-04-14 03:08:17 +02:00
Никола Радовановић (Nikola Radovanović)
6f361b83ff
Update common.php
...
Default language fix
2015-04-14 03:06:44 +02:00
daeks
a7c7a858b3
Update common.php
2015-03-21 00:39:52 +01:00
daeks
cf45e7cc3e
added windows check
2015-03-21 00:38:10 +01:00
daeks
eb4b78ed6b
windows abspath support
2015-02-02 14:19:42 +01:00
Andr3as
3b39edfec3
Corrects file mode
2014-03-06 18:33:20 +01:00
Andr3as
774eaaec71
Implements security check method globally
2014-02-25 20:39:50 +01:00
daeks
8897134b45
wrong whitespace format
2013-12-12 11:15:52 +01:00
daeks
a2af5f8ae6
renamed to fit codiad convention
2013-12-12 11:13:37 +01:00
daeks
8fc2c572f6
external auth
2013-12-12 11:05:26 +01:00
daeks
bb2f9e0a24
removed json file
2013-09-16 18:48:04 +02:00
Yassine Guedidi
9206eb7b58
Make getConstant default value optional
...
Signed-off-by:Yassine Guedidi <yassine.guedidi@gmail.com >
2013-06-20 10:01:41 +02:00
Yassine Guedidi
87ab21bf9d
Rename getRemoteURL to getConstant + fix it
...
Signed-off-by:Yassine Guedidi <yassine.guedidi@gmail.com >
2013-06-20 09:43:02 +02:00
daeks
c76bf2f7dd
remote merge
2013-06-18 15:50:56 +02:00
daeks
e238ccb8e1
plugin url, part 1
2013-06-18 15:39:54 +02:00
Evertton de Lima
d73c470583
Fix the issues #420 (the language selector) and #427 (the undefined constant: base_path).
2013-06-11 06:57:43 -03:00
Danny Morabito
90651ca291
Small fix for some php configurations
...
Some php configurations handle `{$var}` in string as the var itself
2013-06-09 16:50:12 +03:00
Danny Morabito
f80ab9620d
Allow args in i18n
...
i18n function should be able to handle args, for example when a file name is required. Something like: `There's already a file named %{name}%`. In some languages it could be written differently so I added this to the core. Now language files could contain something like:
```php
$lang["There's already a file named %{name}%"] = "Esiste già un file chiamato %{name}%";
```
2013-06-09 16:47:11 +03:00
Evertton de Lima
f531816a21
Fix the language selector... Resolves issue #420 .
2013-06-05 22:42:30 -03:00
daeks
2c49b95c95
changed config loading for demo
2013-05-06 16:42:36 +02:00
daeks
d4c47d7155
initialize path
2013-05-03 11:31:09 +02:00
daeks
0f9abc96cb
better error message
2013-05-03 07:22:17 +02:00
daeks
c6c5657597
minor cleanups
2013-05-02 08:19:38 +02:00
daeks
43df642215
language stuff
2013-05-01 13:29:24 +02:00
daeks
d697d227e6
global cookie_lifetime
2013-05-01 13:19:51 +02:00
daeks
60a9423cd7
removed base_path for data stuff
2013-05-01 13:14:10 +02:00
daeks
d4c9cdd6ca
refactored common.php
2013-05-01 13:11:22 +02:00
daeks
e7c31ce210
merged common class
2013-05-01 12:55:28 +02:00
David Dyess
8c7315fef7
Check for DATA constant
...
Added a check for DATA constant to prevent a PHP Strict notice in
index.html
2013-04-28 17:44:51 +02:00
daeks
d70033c2ed
fix authentification for plugins
2013-04-19 10:47:58 +02:00
daeks
3d98029c0a
plugins
2013-04-19 10:35:19 +02:00
circuitbomb
d6c5ca717e
Replace common.php with index.php
2013-04-15 15:03:57 -04:00
circuitbomb
2c7348f8a3
Use session names instead of setting path
2013-04-12 12:21:56 -04:00
circuitbomb
45efa674af
removed appearance of a rogue s
2013-04-09 13:41:48 -04:00
circuitbomb
f97664a1a3
Rollback $rel check
2013-04-09 13:40:20 -04:00
circuitbomb
eb618d8732
Removed $rel check in cookie_path set
2013-04-09 13:12:12 -04:00
circuitbomb
f36d24710a
cookie lifetime in common.php fix
2013-04-09 10:40:34 -04:00
circuitbomb
521a2c084c
Fixed line 43
2013-04-09 08:41:34 -04:00
circuitbomb
bfebc3ee21
Misc fixes
2013-04-08 14:48:13 -04:00
Kent Safranski
d5cb5928aa
Merge pull request #263 from circuitbomb/installation_issues
...
Installation issues
2013-04-06 10:55:47 -07:00
circuitbomb
a049057e24
Add check for issues
2013-04-06 13:43:30 -04:00
daeks
0d3dcbe348
fixed minor issues
2013-04-05 22:17:36 +02:00
circuitbomb
75c59efa47
Fixes some install errors, part of #213 and #214
2013-04-05 16:12:03 -04:00