Commit Graph

3853 Commits (4.5.8)

Author SHA1 Message Date
Steven Wittens 5130689325 - sa-2006-003: Session fixation issue 2006-03-14 01:19:55 +00:00
Gerhard Killesreiter 8b12ba7d41 updated Changelog 2006-03-13 21:37:59 +00:00
Steven Wittens c1e0293502 - sa-2006-004: E-mail header injection issue 2006-03-13 21:30:09 +00:00
Steven Wittens ffc9c6f25a - sa-2006-002: XSS issues with username 2006-03-13 21:26:33 +00:00
Steven Wittens aaa4f1eadf - sa-2006-001: Custom menu items are accessible to anyone 2006-03-13 21:25:29 +00:00
Dries Buytaert a8f696eb70 - Updated CHANGELOG.txt 2005-12-12 17:10:42 +00:00
Dries Buytaert f11fe2a7fd - Patch #40855 by Ber: fixed typo in watchdog message. 2005-12-12 11:37:52 +00:00
Dries Buytaert 29bdf46b38 - Patch #40351 by Richard/chx: filter_xss_bad_protocol too hungry. 2005-12-08 09:06:41 +00:00
Dries Buytaert 587eacb7a2 - Patch #39670 by frjo: fixed problem with filtering URLs twice. 2005-12-05 08:59:03 +00:00
Dries Buytaert d74e0479ec - Patch #39566 by chx: fixed incorrect encoding in URLs. 2005-12-02 10:30:27 +00:00
Dries Buytaert ef16a76879 - Fixed referer handling. 2005-12-01 09:20:16 +00:00
Dries Buytaert 8806e39ab1 - Patch #39494 by nsk: comment form not shown right. 2005-12-01 06:15:17 +00:00
Dries Buytaert d992d1d23d - Replaced call. 2005-11-30 22:26:14 +00:00
Dries Buytaert 64ed58d166 - Updated CHANGELOG.txt 2005-11-30 21:08:29 +00:00
Dries Buytaert d476224080 - Improved the protocol whitelist code. 2005-11-30 20:18:40 +00:00
Dries Buytaert 3fa2b0dcc4 - Fixed bug with checking for .txt files. 2005-11-30 19:27:56 +00:00
Dries Buytaert 6ca614bfc1 - More fixes 2005-11-30 15:29:16 +00:00
Dries Buytaert 23b7f630c1 - Removed valid_input_check(). 2005-11-30 10:07:39 +00:00
Steven Wittens 35c2450b8e - #39362: Fix code warnings in filter.module 2005-11-30 00:11:40 +00:00
Dries Buytaert 2ebbb630b7 - Various fixes 2005-11-29 20:12:06 +00:00
Dries Buytaert 51774722c2 - Patch #11758 by Richard Archer: fixed mbstring clash. 2005-11-28 15:45:50 +00:00
Dries Buytaert 97da640d0a - Patch #30676 by robertgarrigos: make the logout feature work. 2005-10-21 09:48:21 +00:00
Dries Buytaert 60dcb607c1 - Patch #33555 by leoburd: fixed typo in XML-RPC backend. 2005-10-10 09:06:53 +00:00
Dries Buytaert 7fc0b41027 - Patch #29143 by Cvbge: fixed invalid query in session handling when using PostgreSQL. 2005-09-06 19:15:20 +00:00
Dries Buytaert dd18a2f623 - Patch #25923 by robertgarrigos: fixed whitespace problem in search indexing. 2005-08-29 19:40:33 +00:00
Dries Buytaert dd37ff894a - Patch #14928 by Cvbge: fixed bug in PostgreSQL upgrade path. 2005-08-17 19:16:51 +00:00
Kjartan Mannes 6fd7ca955b - Patch by chk: replaced check_plain with check_form. 2005-08-15 23:04:57 +00:00
Dries Buytaert 7eaa486897 - Patch #28871 by Malthus: added missing quotes. 2005-08-15 11:46:28 +00:00
Dries Buytaert 2c20857f18 - Added missing function. 2005-08-15 01:42:01 +00:00
Dries Buytaert 507bde15b4 - Updating CHANGELOG.txt. 2005-08-15 00:42:54 +00:00
Dries Buytaert 49f7ce025b - Always use the database abstraction layer. 2005-08-15 00:05:38 +00:00
Dries Buytaert 2b24ba83e3 - Backported chx's XML-RPC changes. 2005-08-15 00:03:14 +00:00
Dries Buytaert ddf2ac294b - Backported chx's XML-RPC library. 2005-08-15 00:01:53 +00:00
Dries Buytaert f327ccc046 - Updated CHANGELOG.txt 2005-06-29 20:23:13 +00:00
Dries Buytaert d02681afa4 - Fixed problems with filter formats and problem with XML-RPC server. 2005-06-29 19:53:59 +00:00
Dries Buytaert e3260447be - Fixed registration bug. 2005-06-01 19:27:12 +00:00
Dries Buytaert 99b3875935 - Patch #14109 by wulff/Morbus: added missing t() funciton 2005-03-16 19:32:27 +00:00
Dries Buytaert 0a41fd20b4 - Patch #16949 by Neil: fixed two HTML typos/brainos in the help text.
I found another HTML typo, and replaced a <u></u> by <strong></strong> because <u> does not validate as 'XHTML 1.0 stict'.
2005-02-08 19:19:37 +00:00
Dries Buytaert 6a1bf8241c - Patch #14658 by Zed Pobre: fixed node-level permission bug in the taxonomy API. 2005-01-31 21:17:01 +00:00
Dries Buytaert d07d55c16d - Patch #13184 by JonBob: changed the 'my account' menu to a 'dynamic menu' so it can't be edited. 2005-01-27 21:32:14 +00:00
Dries Buytaert 581ea2c479 - Patch #15948 by matteo: the book module should call the nodeapi hook when printing printer-friendly pages. 2005-01-23 22:39:24 +00:00
Dries Buytaert a92e93e5e2 - Patch #15976 by Neil: if one single admin modifiable menu item is added then it is not put in the menu table because the comparison is > 1 instead of > 0. 2005-01-22 09:09:52 +00:00
Dries Buytaert 04ea277ed3 - Patch #14936 by Junyor: the 'add comment link' was not available for polls. 2005-01-20 19:38:59 +00:00
Dries Buytaert 30678ff4fc - Patch #15690 by Goba: the vocabulary node types checks in taxonomy.module are very vulnerable to having node types names as prefixes of other node type names %%%s%% as it is there with %%blog%% will match a lot more, then just this simple node type. Since the node types are stored in a comma separated list, the solution is to search for 'blog' or '%%,blog,%%' or 'blog,%%' or '%%,blog', that is matching only for that node type, or matching that node type in a list, or at the beginning of a list, or at the end of a list. It does not look elegant, but this is the solution for the format used. 2005-01-19 20:35:27 +00:00
Steven Wittens b1717abfee #15500: Fix tracker not showing nodes without comments. 2005-01-19 01:10:25 +00:00
Dries Buytaert 84b96713bb - Updated the CHANGELOG.txt 2005-01-15 09:09:01 +00:00
Dries Buytaert 7d73fa84a5 - Corrected the 'update_start' date. 2005-01-15 08:52:01 +00:00
Dries Buytaert b6ac0a860a - Patch #15500 by Morbus: ignore unpublished comments when determining last_post. (This matches the behavior in HEAD.) 2005-01-14 15:43:05 +00:00
Dries Buytaert 906e08411d - Patch #15337 by Gerhard: fixed bug in upgrade path. The 'update_start' variable got corrupted. 2005-01-13 19:25:30 +00:00
Steven Wittens 114ed8da76 - Fix comment pager counting unpublished comments. 2005-01-12 16:01:55 +00:00