Matt Pass
3926d4468c
xssClean function added & used by serverMessage
...
Replaces 5 x based HTML chars
2014-04-22 08:55:09 +01:00
Matt Pass
493950667b
Clean tags from HTTP UA
...
Users can alter this, causing an XSS
2014-04-22 08:06:17 +01:00
Matt Pass
d6a7db8f3e
xssClean function added
...
Had 4 different contexts, the first 2 alter parts of strings, the last 2
remove those parts
2014-04-22 08:05:40 +01:00
Matt Pass
d6fcf5a121
Need CSRF on URL called on logout
2014-04-21 08:32:22 +01:00
Matt Pass
328a8a9808
Adjustment to value, should just be nosniff
2014-04-21 08:15:34 +01:00
Matt Pass
0daf6c3081
Redo security headers
2014-04-21 07:57:41 +01:00
Matt Pass
1d5c74e424
Add CSRF and clickjacking protection
...
This header file included in all PHP files as first item.
CSRF checks happen on GET or POST instances
Security related headers also added to prevent clickjacking
2014-04-18 18:21:17 +01:00
Matt Pass
c6bb782118
Add csrf to end of all querystrings
2014-04-18 18:19:58 +01:00
Matt Pass
b45817ec65
headers.php included and csrf POST added
2014-04-18 18:10:50 +01:00
Matt Pass
a15dfda92c
headers.php included and csrf POST and GET added
2014-04-18 18:07:49 +01:00
Matt Pass
6030e9a4ca
This is now set, in headers.php
2014-04-18 17:59:27 +01:00
Matt Pass
a3c0243772
Include headers lib & csrf hidden form field
...
To help protect against CSRF and clickjacking
Also include hidden form field containing this for postback
top.ICEcoder.csrf also set
2014-04-18 17:57:54 +01:00
Matt Pass
3d89af7e17
Add trailing slash to path
...
Otherwise, will ignore files such as lib/plugins-display.php etc
2014-04-18 12:44:36 +01:00
Matt Pass
03655c4c4b
Find config- files and update those
...
No longer using 3 hardcoded examples in array, but scanning the old dir
and updating files beginning 'config-'. That covers the .php and old
files also.
2014-04-18 12:21:49 +01:00
Matt Pass
acfcb6bf9d
$context added & sub function to transpose
...
$context added as global so we don't get undefined
transposeSettings function added as sub function we can all with params
copyOverSettings is now a function which calls that sub function 3
times.
2014-04-18 11:39:14 +01:00
Matt Pass
57593d730f
Now copying over users template & settings
...
Coping over system settings now won't set line if $thisKey is blank
2 more functions added to copy over users template and users settings
files. These are largely the same as copying over settings, so will make
a sub function and call will params as a next step.
2014-04-18 10:17:48 +01:00
Matt Pass
a141a4bdf5
Remove line breaks and extra tabs
...
Makes it easier to update in the updater process
2014-04-18 10:11:10 +01:00
Matt Pass
33e751027d
Get rid of line breaks, puts settings onto 1 line
...
Makes it easier to update in the updater process
2014-04-18 10:10:05 +01:00
Matt Pass
e65d2b0805
Copying over settings now completed
...
Gets old and new settings info, counts through each line of new settings
and if we have a match on the old settings, copy that over if it's not
versionNo or codeMirrorDir.
Saves settings once the $content is established
2014-04-18 08:35:21 +01:00
Matt Pass
9d7f7f8e93
Start copying settings over
...
$updateDone = true moved to end of new function, copyOverSettings
Extra echo line in openNewZip and then calls this function
Get settings from old config___settings.php file
For now, for each one, get $key and $value
Need to save these info new config___settings.php file
2014-04-16 08:48:24 +01:00
Matt Pass
91f14785b7
Don't move plugins dir
2014-04-16 08:10:45 +01:00
Matt Pass
1267a3c895
String replace on beta in filename and fopen alt
...
Establish $remoteFile which replaces ' beta' with '-beta'
Add fopen method also as not everyone has cURL
Display die message if both of those fail
2014-04-16 07:44:29 +01:00
Matt Pass
0748f495df
On moving files pass fileOrFolder with add action
2014-04-15 08:40:37 +01:00
Matt Pass
83f6c5cf53
Only move to different folder and 3 x bug fixes
...
Global iceRoot so it can be used
Escape apostrophe's in $fileName on upload
Establish $srcDir and $tgtDir and only consider moving if $srcDir !=
$tgtDir and $fileLoc != ""
$fileOrFolder now established on moving and passed as param to
updateFileManagerList
2014-04-15 08:39:46 +01:00
Matt Pass
1385d65a2b
Use new fileOrFolder param to determin type
...
Rather than rely on a . in the name
2014-04-14 08:36:23 +01:00
Matt Pass
68e5e0b5a5
Specify if it's a file or folder on updating FM
...
folder on new folder
set $fileOrFolder on pasting, that is used then on updating
file on uploading
file on saving
2014-04-14 08:35:26 +01:00
Matt Pass
72e98816f0
Need to check dir exists before removing
...
Subdirs could end up being removed in a race condition via rmdir at end
of deletePlugin function
Tweak die error messages to indicate dir or file
2014-04-14 07:35:44 +01:00
Matt Pass
641ff79493
Only use location if iceRoot is blank
...
Because setting an root path has its own relative file path
2014-04-11 08:50:23 +01:00
Matt Pass
dff16e9b3f
8 new languages added
...
C, C++, C#, Go, Lua, Perl, Rust and Sass added
Perl has # comments (single & block)
Lua has --[[xyz]] for block, and -- for single lines
2014-04-10 10:04:29 +01:00
Matt Pass
7264deee67
8 new languages added
...
C, C++, C#, Go, Lua, Perl, Rust and Sass added
2014-04-10 10:04:28 +01:00
Matt Pass
f08552c5e3
Upgrade to CodeMirror 3.23
2014-04-10 10:04:26 +01:00
Matt Pass
b131ef1524
8 new languages added
...
C, C++, C#, Go, Lua, Perl, Rust, Sass icons added
2014-04-10 10:04:24 +01:00
Matt Pass
b6c16d938d
Languages added, merged & removed
...
Go, Lua, Perl, Rust and Sass added
Less removed, part of CSS now
Julia no longer loaded as seperate lang file
2014-04-10 10:04:22 +01:00
Matt Pass
842d7e5b37
Julia lib removed, in main codemirror JS lib now
2014-04-10 10:04:21 +01:00
Matt Pass
91a28990e0
Upgrade to v3.23 & new langs
...
Go, Lua, Perl, Rust and Sass added
2014-04-10 10:04:19 +01:00
mattpass
7843b5fac6
Merge pull request #381 from darkgrin/server_addr_err
...
Fix error "Undefined index: SERVER_ADDR".
2014-03-31 18:15:51 +01:00
darkgrin
bdf3d6615e
Fix error "Undefined index: SERVER_ADDR".
...
This is reproducible when we use php's built in server via 'php -S ...'.
2014-04-01 00:38:33 +08:00
Matt Pass
1c81713063
Break down into var and then array usage
...
Won't work this way on old versions of PHP
2014-03-24 07:32:23 +00:00
Matt Pass
12ced2c7fc
Commenting on Erlang, Julia, Java and YAML
...
Using commentChar now to handle char used on commenting (# or % for
Erlang)
Erlang, Julia, Java and YAML commenting covered
Include Python also as forgotten
adjustCursor to be set to 1 on single chars, overriding 2
Cursor adjusting done here now, not in parent function anymore as
adjustCursor value not available from that scope
2014-03-20 14:36:39 +00:00
Matt Pass
43ddc3d78f
Moved into sub function
...
adjustCursor not available from child scope
2014-03-20 14:33:08 +00:00
Matt Pass
400524169e
Better Julia and YAML logos (switched with zip!)
2014-03-20 14:31:39 +00:00
Matt Pass
6b35c5dd2c
Update to match main JS
2014-03-20 07:18:55 +00:00
Matt Pass
33b2c7a06c
Should be an array, not a string
2014-03-19 19:05:07 +00:00
Matt Pass
04a11bdc4a
Using CodeMirror 3.22 now
2014-03-19 18:48:16 +00:00
Matt Pass
9ee6a80209
Julia added as a seperate file as a temp measure
...
Not available in CodeMirror minification helper right now
2014-03-19 18:48:04 +00:00
Matt Pass
686813e6be
4 new lanuages added
...
Erlang, Java, Julia and YAML
Need to handle commenting
2014-03-19 18:47:37 +00:00
Matt Pass
08c17154a8
4 new languages added
...
Erlang, Java, Julia and YAML
2014-03-19 18:46:55 +00:00
Matt Pass
0beb6df2c8
Erlang, Julia and YAML languages included
...
Java is part of the C Like language group
Julia available as part of CodeMirror minification helper, seperate JS
file used for now
2014-03-19 18:46:28 +00:00
Matt Pass
68a08d9636
Upgrade from 3.20 to 3.22
...
Includes a load of good bug fixes plus Erlang and YAML and 2 new themes
- MDN Like and Pastel on Dark
2014-03-19 18:44:32 +00:00
Matt Pass
5ea9c857e9
Version 4.0 beta
2014-03-15 14:24:42 +00:00
