Commit Graph

76 Commits (c56c5b41793eea279aed941ad49fab3c62842976)

Author SHA1 Message Date
Neil Drumm cc61cd3028 #81845 by Ralf Stamm. Add Apache .htaccess restriction for .info files. 2006-10-17 08:36:19 +00:00
Neil Drumm 17bffb056c #80861 by m3avrck. Avoid clobbering subdomains in the example code. 2006-09-01 07:25:25 +00:00
Neil Drumm abba0a4c2d #73590 by Flanker, protect .profile files from prying eyes 2006-07-14 01:03:28 +00:00
Neil Drumm 1b1ceb6edc #61082 by Uwe Hermann, Cosmetic fixes in .htaccess 2006-05-01 08:32:56 +00:00
Gerhard Killesreiter 52379be172 #58647, don't show tpl.php files to people, patch by Morbus Iff 2006-04-14 09:08:26 +00:00
Gerhard Killesreiter dec8354485 #56634, docs improvement, patch by JonBob 2006-04-13 08:49:45 +00:00
Steven Wittens 69726b0d7b #56634: Resolve issues with varying $base_url
- Fix locations links in watchdog
- Fix repeated subdirectory in page cache CIDs
2006-04-12 08:42:47 +00:00
Gerhard Killesreiter f830e05a45 #54784, protect .install, .*sql files, patch by eafarris. 2006-03-24 18:00:27 +00:00
Steven Wittens b4933bcd30 - #47711: Better PHP5 htaccess compatibility 2006-02-08 20:42:29 +00:00
Dries Buytaert 316e35784a - Patch #29344 by Morbus: .htaccess file needs file protection update 2005-12-01 16:02:09 +00:00
Dries Buytaert 28cc8eabdb - Patch #19126 by Uwe: fixed inconsistent whitespace in .htaccess. 2005-03-20 19:15:00 +00:00
Dries Buytaert 2919df0e08 - More improvements by Morbus, Goba, TDobes et al:
Per TDobes' comments:

* INSTALL.txt corrected to use 4.3.3, not 4.33.
* .htaccess: removed allow_call_time_pass_reference. two confirmations that a) the setting was wrong in the first place, b) there were no adverse affects for the incorrect setting, c) the PHP docs say it is deprecated.
* .htaccess: removed short_open_tag. Running grep -r "<? " * across the entire directory tree of both core and contributions only brought up contributions and no core. I agree that the fuller form is better. The following contributions will need to be updated: modules/edit_template/edit_template.module, sandbox/garym/themes/marvin_2k/templates/page.tpl.php, sandbox/killes/compare.php, sandbox/paolino/import/click.php, themes/spreadfirefox/block.tpl.php. For error's sake, I also did a manual verification for "<?" (no space) across core and came up against nothing in addition to the above contribs.

Per Goba's comments:

* .htaccess: Moved session.auto_start back.
* sites/default/settings.php: Removed track_vars.

Per mailing list comments:

* INSTALL.txt: Added text about the files/ directory, creating it, and permissions.
* INSTALL.txt: Added an example of why Drupal requires cron (the search.module) in an attempt to justify why a crontab is a good, nay, required step.

And my own further analities:

* .htaccess: cleaned up some whitespace valleys (i hate 'em, hate 'em!) and fixed a few stray colons.
* settings.php: minor whitespace error.
2005-03-15 21:07:49 +00:00
Dries Buytaert 2eec4e806f - Patch #18641 by Morbus: .htaccess improvements. Modified a bit by me. 2005-03-12 10:42:48 +00:00
Steven Wittens 59e86f61b7 #5900: Fix mod_expire forcing page caching on the client side. 2005-02-21 04:01:24 +00:00
Dries Buytaert c7a200d403 - Set the DirectoryIndex. 2005-02-20 11:24:30 +00:00
Dries Buytaert 4f79fafb3c - Patch #17303 by tangent: moved the session settings into /sites/default/settings.php so that subsites can have better control over them. One of the advantages of the site specific settings.php file is that it will never get overwritten during upgrades and having these settings here should prove to be more friendly. 2005-02-18 18:44:33 +00:00
Dries Buytaert 144dab22c7 - Oops. 2005-01-28 16:30:37 +00:00
Dries Buytaert 92320b2b21 - Patch #10425 by ccourtne and walkah: added admin screens to maintain forums instead of forcing the user to add a taxonomy. 2005-01-28 15:47:03 +00:00
Dries Buytaert 63c2d32900 - Changed FollowSymLinks to +FollowSymLinks. 2004-10-09 20:41:49 +00:00
Dries Buytaert 6ea5c56ded - Theme system changes. Please consult http://drupal.org/node/view/9576 for details. 2004-08-20 07:51:27 +00:00
Dries Buytaert 033b2e2c0d - Direct 404s to Drupal. Suggested by Goba. 2003-12-18 18:53:11 +00:00
Dries Buytaert 670a292277 - Reworked 404 (page not found) handling. Patch by walkah. You can specify a
custom 404 page in the administration page.  As a result, error.php could be
  removed.
2003-12-16 21:06:34 +00:00
Dries Buytaert ce5d3a06e4 - Added some Apache 2 specific instructions. 2003-12-15 23:37:54 +00:00
Dries Buytaert e4695fd5ed - Added a comment about 'RewriteBase' 2003-09-18 20:32:23 +00:00
Dries Buytaert 8e657f64ef - Gerhard's uid 0 patches. These patches bring various performance
improvements.  Requires a database update.
2003-09-09 18:18:43 +00:00
Dries Buytaert 60ce4e054e - Set session.gc_maxlifetime to something more sensible than the default
1440 seconds.
2003-08-22 21:51:19 +00:00
Dries Buytaert 594aff05f1 - Set some additional options to avoid installation pains. 2003-06-26 04:54:01 +00:00
Dries Buytaert 05288ac48a - Bugfix: made request_uri() rewrite ( and ) with their entity equivalents
to avoid XSS attacks!  Patch by Al, Moshe, Marco, Kjartan and me.

- Bugfix: the admin module does now import drupal.css prior to admin.css.
Patch by me.

- Bugfix: the admin module was still emitting a <base href=""> tag.  I
removed this as it is been taken care of by theme_head();  Patch by me.

- Bugfix: made the tracker module's pager only consider published pages.
Patch by Moshe.

- Bugfix: cured some typos in the comment module's help function.  Patch by
Marco.

- Bugfix: fixed a typo in the pager_display() that caused optional
attributes to be discarded.

- Bugfix: made the Xtemplate emit empty boxes like any other theme does.
Patch by Al.

- Bugfix: fixed broken link on the statistics module's log page.
Reported by Kjartan.

- CSS improvements: made the HTML output emitted by the tracker module
look nicer.  Patch by Moshe and Al.

- CSS improvements: added CSS classes for form elements.  Patch by Al.

- CSS improvements: added a vertical gap between the last form item and the
submit button.  Patch by Al.  Note that Opera 6 is not picking up this
CSS but apparently others browsers such as Konqueror do.

- Xtemplate improvements: changed the color of the selected day in the
archive module's calendar.  Patch by Al.

- Usability improvements: made the "birthday" field of the profile module
look nicer.  Patch by Al.

------

- TODO: it might be a good idea to emit the following meta tag in the
theme_head() function:

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

Currently, some themes (and modules!) emit this while others don't.  This
would also make it possible to change the charset site-wide.

- TODO: now we added support for td.dark and td.light to drupal.css, maybe
it can be removed from admin.css as well as xtemplate.css?
2003-06-03 18:04:47 +00:00
Dries Buytaert c2d2fb7309 - Fixed a typo in the PostgreSQL database scheme. Patch by Michael Frankowski.
- Fixed a typo in the MSSQL database scheme.  Patch by Michael Frankowski.

- Removed dependency on "register_globals = on"!  Patches by Michael Frankowski.

  Notes:

  + Updated the patches to use $foo["bar"] instead of $foo['bar'].
  + Updated the INSTALL and CHANGELOG files as well.

- Tiny improvement to the "./scripts/code-clean.sh" script.
2003-05-13 18:36:38 +00:00
Dries Buytaert 07bb678662 - Some .htaccess file fixes/improvements. Thanks Ax. 2003-03-11 12:57:13 +00:00
Dries Buytaert f2c914af5b - The .htaccess file will now correct the majority of the external referers
that still use the old URL scheme!  Thanks Ax and Gerhard for providing a
  better upgrade path.
2003-03-09 17:04:14 +00:00
Dries Buytaert a6a3215ee3 - Bugfix: made the pager work when clean URLs are enabled. Patch by Ax. 2003-02-20 08:02:57 +00:00
Dries Buytaert d038729797 - Clean URLs. 2003-02-14 19:52:45 +00:00
natrak 62212c7b3d - fixing a typo in the RewriteRule 2003-02-13 09:18:32 +00:00
natrak ebd9535140 - Fixed blog.module to accept blog/name URLs as well as blog/id
- Changed the RewriteRule in .htaccess.
- Fixed form_select() matching incorrectly.
- Added missing $Id$ to menu.inc
2003-02-12 21:37:55 +00:00
Dries Buytaert 20e8f9eba9 - Added 'php_value arg_separator.output "&amp;"' as suggested by Curtis. 2003-01-14 19:44:16 +00:00
Dries Buytaert 296a01f399 - Made sure session.cache_limiter is set to "none" as suggested by Moshe
and Ax.
2002-12-08 08:19:29 +00:00
Dries Buytaert 7c187f894c - Added "short_open_tag 1" to the PHP settings. 2002-12-07 21:21:35 +00:00
Kjartan Mannes 564574ba07 - setting magic_quotes_gpc to 0 (off). IF it causes any problems please report. 2002-09-27 16:50:42 +00:00
Kjartan Mannes d480507f0d - changing php_register_globals to register_globals which is the correct setting. 2002-06-10 12:10:55 +00:00
Kjartan Mannes 3f14fd77bf - small update .htaccess, fixed the blog link.
- some interface changes in block admin page.
2002-05-02 19:55:22 +00:00
Kjartan Mannes 9062b566b2 - applying patches from Axel Kollmorgen. See
http://list.drupal.org/drupal-devel/2002-February/thread.html#6678
  http://list.drupal.org/drupal-devel/2002-February/thread.html#6629
- removed references to $this->user() from themes.
- removed $BaseTheme->user(). It was deprecated a while back.

NOTE: this update will break custom themes, so make sure you update your
themes before updating!
2002-02-17 13:04:50 +00:00
Dries Buytaert 7a673ac3cc - Made the "http://foo.com/blog/username" URL syntax work again. Patch by
Foxen.
2001-12-30 13:00:00 +00:00
natrak 6c69a8bfe6 - tweaked some of the php settings. 2001-12-09 14:23:06 +00:00
natrak cd40123540 - cleaned up .htaccess. Removed some php settings and made the deny
filters more specific.
2001-11-24 13:18:58 +00:00
natrak e7fd76a1c9 - added the CVS keyword $Id$ to all files to make future version tracking
easier. Also changed the <? tag to <?php in some cases.
2001-10-20 18:57:10 +00:00
natrak 21dd55a763 - set session.save_handler to user. required to use
session_set_save_handler() in user.module.
2001-09-18 20:36:28 +00:00
natrak 01a8b5edad - Adding the rewrite rule for blog until a better system can be implemented. 2001-07-14 14:28:32 +00:00
Dries Buytaert e32241e59a - Renamed syndication.module to import.module.
- Removed headline.module: it became obsolete.

- Removed backend.class: it became obsolete.

- Added export.module.

  For now, you can use:
    1. http://drupal/export.php?headlines.rss
    2. http://drupal/export.php?headlines.rdf

- Renamed export to export.php.

  For now, you can use:
    1. http://drupal/export.php?headlines.rss
    2. http://drupal/export.php?headlines.rdf

  Renaming this file has main 3 advantages:
    1. We no longer rely on .htaccess for being able to export.
    2. It is more conform with the general naming conventions.
    3. It removes a pseudo-hack with formatting the URI.

- Made import.module export blocks with feeds.
2001-05-28 18:53:48 +00:00
natrak a28bf8f399 - Fixed regexp bug in <Files>. This used to work on older versions of
Apache, but seems that the latest versions are not as forgiving.
2001-05-23 13:27:42 +00:00