Matt Pass b811cfe92f strClean $_GET['plugin'] and use that

2014-04-28 08:00:22 +01:00

..

bug-files-check.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

config___settings.php

Upgrade to CodeMirror 3.23

2014-04-10 10:04:26 +01:00

config___users-template.php

Should be an array, not a string

2014-03-19 19:05:07 +00:00

download.php

Don't allow directory traversal

2014-04-23 07:12:13 +01:00

editor.css

Toned down colors by 20%, gutter BG color change

2013-07-23 08:55:05 +01:00

file-control.php

Strip ../ so we don't have dir traversal vuln

2014-04-26 12:24:01 +01:00

file-type-icons.css

8 new languages added

2014-04-10 10:04:28 +01:00

file-types.css

Language related items moved to seperate files

2014-03-15 14:09:06 +00:00

files.css

Icons have new position in spritesheet

2014-02-21 09:15:09 +00:00

foldcode.js

CSS class name changes

2013-05-29 08:16:33 +01:00

get-branch.php

xssClean the displayed file/folder name

2014-04-26 12:23:29 +01:00

headers.php

Cannot use $_REQUEST, should be $_GET || $_POST

2014-04-23 07:23:02 +01:00

help.css

Cmd/Ctrl shortcuts, Ctrl+space added and [?] info

2013-07-24 08:23:51 +01:00

help.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

ice-coder.css

Darker input field BG's

2014-03-15 13:24:42 +00:00

ice-coder.js

If we have GET QS params, add &crsf=xyz to end

2014-04-26 16:12:55 +01:00

ice-coder.min.js

If we have GET QS params, add &crsf=xyz to end

2014-04-26 16:12:55 +01:00

login.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

mmd.js

Markdown parser added

2013-04-30 17:48:54 +01:00

multiple-results.css

Remove o prefix add ms

2013-07-07 15:27:09 +01:00

multiple-results.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

php.ini

Turn magic quotes gpc off

2013-04-20 16:12:32 +01:00

plugins-display.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

plugins-manager.css

Plugins Manager added

2013-12-29 14:41:18 +00:00

plugins-manager.php

strClean $_GET['plugin'] and use that

2014-04-28 08:00:22 +01:00

properties.css

Renamed to properties.php & css

2012-10-09 07:57:28 +01:00

properties.php

Include headers lib & csrf hidden form field

2014-04-18 17:57:54 +01:00

settings-common.php

strClean now replaces javascript:

2014-04-26 12:25:12 +01:00

settings-save-current-files.php

previousFiles and last10Files updated here now

2014-01-11 15:15:44 +00:00

settings-screen.css

Darker side text, blue links

2014-04-26 14:59:18 +01:00

settings-screen.php

Removed list of people, now on website

2014-04-26 14:59:53 +01:00

settings-update.php

xssClean using 'html' filter

2014-04-23 07:43:17 +01:00

settings.php

Replace on SCRIPT_FILENAME

2014-01-16 14:15:34 +00:00

updater.php

Also attempt to get over https, then http

2014-04-26 16:55:55 +01:00