Matt Pass 24ea1b108f Establish realpath test begins with $docRoot or die ...

No need to str_replace ../, as that isn't real protection, use realpath
instead
Always turn into a real path (we'll only pass relative paths here
anyway), and change \ to / on Windows setups
Only if file exists and begins with the root path do anything, die
otherwise

2014-09-18 10:57:41 +01:00

..

bug-files-check.php

realpath file, result in error if !exist / !docroot

2014-09-17 13:35:00 +01:00

config___settings.php

Undo 2 changes that shouldn't be committed

2014-08-06 09:30:13 +01:00

config___users-template.php

Setting moved and githubAuthToken added

2014-07-27 12:29:58 +01:00

download.php

realpath the file and die if !exist or !$docRoot

2014-09-17 12:54:24 +01:00

editor.css

Toned down colors by 20%, gutter BG color change

2013-07-23 08:55:05 +01:00

file-control.php

Need to establish full $file path first

2014-09-18 10:47:57 +01:00

file-type-icons.css

8 new languages added

2014-04-10 10:04:28 +01:00

file-types.css

Language related items moved to seperate files

2014-03-15 14:09:06 +00:00

files.css

githubOn/Off classes added for icons

2014-06-23 08:42:49 +01:00

foldcode.js

Rename function doFold and new namespace

2014-05-22 07:05:44 +01:00

get-branch.php

base64.js not needed

2014-09-18 09:27:24 +01:00

github-manager.css

Setup stylings for GitHub manager

2014-06-03 09:12:20 +01:00

github-manager.php

Placeholder vars added for more lang pieces

2014-08-10 21:07:42 +01:00

github.css

Font family needed for textarea

2014-09-18 09:15:46 +01:00

github.js

github.js, base64.js and underscore.min.js added

2014-07-27 12:27:19 +01:00

github.php

Establish realpath test begins with $docRoot or die

2014-09-18 10:57:41 +01:00

headers.php

Stop if running old version

2014-09-17 08:54:27 +01:00

help.css

Cmd/Ctrl shortcuts, Ctrl+space added and [?] info

2013-07-24 08:23:51 +01:00

help.php

LI shortcut added

2014-08-21 15:31:33 +01:00

ice-coder.css

Classes added for GitHub nav

2014-08-27 09:20:16 +01:00

ice-coder.js

Path fixes for add and delete actions

2014-09-17 12:10:18 +01:00

ice-coder.min.js

Update to match main JS file

2014-09-17 12:11:39 +01:00

login.php

Warn if using over non https connection

2014-09-17 14:18:28 +01:00

mmd.js

Markdown parser added

2013-04-30 17:48:54 +01:00

multiple-results.css

Remove o prefix add ms

2013-07-07 15:27:09 +01:00

multiple-results.php

$t needed in function to display text

2014-09-05 22:36:01 +01:00

php.ini

Turn magic quotes gpc off

2013-04-20 16:12:32 +01:00

plugins-display.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

plugins-manager.css

Plugins Manager added

2013-12-29 14:41:18 +00:00

plugins-manager.php

Final language replacement placeholders

2014-08-21 14:29:11 +01:00

properties.css

Renamed to properties.php & css

2012-10-09 07:57:28 +01:00

properties.php

realpath $fileName, die if !exist or !$docRoot

2014-09-17 12:46:33 +01:00

settings-common.php

Final language replacement placeholders

2014-08-21 14:29:11 +01:00

settings-save-current-files.php

Final language replacement placeholders

2014-08-21 14:29:11 +01:00

settings-screen.css

Tooltips now blue to stand out more

2014-07-27 12:38:20 +01:00

settings-screen.php

Final language replacement placeholders

2014-08-21 14:29:11 +01:00

settings-update.php

Final language replacement placeholders

2014-08-21 14:29:11 +01:00

settings.php

Need to use array_replace_recursive()

2014-09-05 22:07:26 +01:00

underscore-min.js

github.js, base64.js and underscore.min.js added

2014-07-27 12:27:19 +01:00

updater.php

Final language replacement placeholders

2014-08-21 14:29:11 +01:00