7 Commits

Author	SHA1	Message	Date
Matt Pass	47af30e0b6	Include common settings and xssClean output ... inlcude_once the settings-common.php file so we have the xssClean function Set $req to the xssClean'd value or blank Also xssClean other strings that are output	2014-05-20 07:25:15 +01:00
Matt Pass	8133adeab8	!isset($_REQUEST["csrf"]) is extra fail cond	2014-05-03 14:19:24 +01:00
Matt Pass	1a85a1ddc3	Display a more helpful & useful error message	2014-05-03 14:09:09 +01:00
Matt Pass	1306853e1e	Cannot use $_REQUEST, should be $_GET || $_POST ... $_REQUEST appears to contain other system info, need to check on the existence of $_GET or $_POST data	2014-04-23 07:23:02 +01:00
Matt Pass	328a8a9808	Adjustment to value, should just be nosniff	2014-04-21 08:15:34 +01:00
Matt Pass	0daf6c3081	Redo security headers	2014-04-21 07:57:41 +01:00
Matt Pass	1d5c74e424	Add CSRF and clickjacking protection ... This header file included in all PHP files as first item. CSRF checks happen on GET or POST instances Security related headers also added to prevent clickjacking	2014-04-18 18:21:17 +01:00