5130689325
- sa-2006-003: Session fixation issue
2006-03-14 01:19:55 +00:00
ffc9c6f25a
- sa-2006-002: XSS issues with username
2006-03-13 21:26:33 +00:00
29bdf46b38
- Patch #40351 by Richard/chx: filter_xss_bad_protocol too hungry.
2005-12-08 09:06:41 +00:00
587eacb7a2
- Patch #39670 by frjo: fixed problem with filtering URLs twice.
2005-12-05 08:59:03 +00:00
ef16a76879
- Fixed referer handling.
2005-12-01 09:20:16 +00:00
d992d1d23d
- Replaced call.
2005-11-30 22:26:14 +00:00
d476224080
- Improved the protocol whitelist code.
2005-11-30 20:18:40 +00:00
6ca614bfc1
- More fixes
2005-11-30 15:29:16 +00:00
23b7f630c1
- Removed valid_input_check().
2005-11-30 10:07:39 +00:00
35c2450b8e
- #39362 : Fix code warnings in filter.module
2005-11-30 00:11:40 +00:00
2ebbb630b7
- Various fixes
2005-11-29 20:12:06 +00:00
dd18a2f623
- Patch #25923 by robertgarrigos: fixed whitespace problem in search indexing.
2005-08-29 19:40:33 +00:00
2b24ba83e3
- Backported chx's XML-RPC changes.
2005-08-15 00:03:14 +00:00
d02681afa4
- Fixed problems with filter formats and problem with XML-RPC server.
2005-06-29 19:53:59 +00:00
e3260447be
- Fixed registration bug.
2005-06-01 19:27:12 +00:00
99b3875935
- Patch #14109 by wulff/Morbus: added missing t() funciton
2005-03-16 19:32:27 +00:00
0a41fd20b4
- Patch #16949 by Neil: fixed two HTML typos/brainos in the help text.
...
I found another HTML typo, and replaced a <u></u> by <strong></strong> because <u> does not validate as 'XHTML 1.0 stict'.
2005-02-08 19:19:37 +00:00
6a1bf8241c
- Patch #14658 by Zed Pobre: fixed node-level permission bug in the taxonomy API.
2005-01-31 21:17:01 +00:00
d07d55c16d
- Patch #13184 by JonBob: changed the 'my account' menu to a 'dynamic menu' so it can't be edited.
2005-01-27 21:32:14 +00:00
581ea2c479
- Patch #15948 by matteo: the book module should call the nodeapi hook when printing printer-friendly pages.
2005-01-23 22:39:24 +00:00
04ea277ed3
- Patch #14936 by Junyor: the 'add comment link' was not available for polls.
2005-01-20 19:38:59 +00:00
30678ff4fc
- Patch #15690 by Goba: the vocabulary node types checks in taxonomy.module are very vulnerable to having node types names as prefixes of other node type names %%%s%% as it is there with %%blog%% will match a lot more, then just this simple node type. Since the node types are stored in a comma separated list, the solution is to search for 'blog' or '%%,blog,%%' or 'blog,%%' or '%%,blog', that is matching only for that node type, or matching that node type in a list, or at the beginning of a list, or at the end of a list. It does not look elegant, but this is the solution for the format used.
2005-01-19 20:35:27 +00:00
b1717abfee
#15500 : Fix tracker not showing nodes without comments.
2005-01-19 01:10:25 +00:00
b6ac0a860a
- Patch #15500 by Morbus: ignore unpublished comments when determining last_post. (This matches the behavior in HEAD.)
2005-01-14 15:43:05 +00:00
114ed8da76
- Fix comment pager counting unpublished comments.
2005-01-12 16:01:55 +00:00
afd422b8e0
- #15172 : Old search.module punctuation stripping error.
2005-01-11 04:18:12 +00:00
3732774137
- Patch #11366 by Junyor: fixed problem with comment counts.
2005-01-05 20:17:35 +00:00
b1bc89701c
- Added missing space
2004-12-29 23:03:20 +00:00
486ad3f9f7
- Patch #14545 by nysus: don't grant access to files if the node is not accessible.
2004-12-29 23:01:33 +00:00
18fd82142e
- Patch #14882 by Jeremy: removed some cruft: status = 2 is no more.
2004-12-29 18:42:05 +00:00
4e6465241e
#10949 : Incorrect output with invalid term id
2004-12-24 06:49:46 +00:00
3b2484bbee
#11548 : node.module - Ensure that only valid fields are saved
2004-12-24 06:44:01 +00:00
87314b80df
- Patch #14709 by matteo: added missing call to the nodeapi's 'view' hook.
2004-12-23 23:27:44 +00:00
71df0fcbd2
- Patch #14710 by tangent: only show post button if preview is optional or if we are in preview mode. We show the post button in preview mode even if there are form errors so that optional form elements (e.g., captcha) can be updated in preview mode.
2004-12-23 06:48:09 +00:00
788d2dc1d9
- Patch #12366 by mathias: fixed missing book edit tab.
2004-12-22 20:50:05 +00:00
9aac2d98d3
- Bug #14609 : improved the status messages and avoid empty roles being saved.
2004-12-22 08:51:45 +00:00
f9c685b64d
- Patch #14614 by Neil: made the archive module respect the node-level permissions.
2004-12-20 22:01:39 +00:00
410a2f6d91
Making comment moderation query PGSQL/ANSI compatible.
2004-12-20 02:05:13 +00:00
bae399f47a
- Patch #14288 by Goba: "the archive module calendar indexes the array used to build up the header cells by the short names of the days. In Hungary, we have both Wednesday and Sunday start with the same two letters, so if I translate the short versions with the same two letters, the second associative array index will overwrite the first. The obvious soluion was to swap the array, and index by the full day name, which is expected to be unique in all languages."
2004-12-14 06:46:56 +00:00
31ab842cca
- Modified patch by Goba: don't save user roles in the serialized data field of the user table.
2004-12-08 19:42:18 +00:00
1915e2931f
- Patch #14035 by Goba: fixed problem with UTF-8 conversion when mixing LOWER() and strtolower().
2004-12-07 17:42:57 +00:00
6b52988578
- Patch #14006 by Neil:
...
* user/view/$n has been replaced with user/$n.
* More blank lines in the right places.
* Prevent unwanted case fallthrough.
2004-12-07 07:25:31 +00:00
95463a0fef
- Patch #13786 by drumm: fixed handling of HTTP 301 response codes.
2004-12-02 18:38:04 +00:00
2fc351cf79
- Fixed #13643 : increased the maxlength of the 'path to custom logo'-setting.
2004-11-30 18:40:48 +00:00
e6ba3497e2
- Modified patch #6475 by Killes: sites -> drupalsites -> drupal-sites.
2004-11-30 18:26:26 +00:00
e4f1b30dd5
- Patch #13647 by Goba:
...
1. Fixed broken watchdog calls: two watchdog calls omitted the type parameter, and thus injected logs into the type field, instead of the message field.
2. Removed t() functions from user contributed content.
2004-11-29 17:59:53 +00:00
096d4c9122
- Patch #12555 by svemir: fixed problem with the 'Preview comment' button not being present when previews are optional.
2004-11-29 12:58:13 +00:00
8ce7ce5a05
- Patch #11977 by matteo: added extra DISTINCT()s to two SQL queries to make them work with node-level permissions.
2004-11-29 12:53:46 +00:00
a713cecfc3
- Patch #10697 by matteo: avoid people creating nodes with the wrong node type.
2004-11-29 12:48:11 +00:00
8cc8579690
- Bug 13503: updating the locale settings might impact the interface (eg. menu's) so we have to flush the cache.
2004-11-27 09:53:43 +00:00
Steven Wittens
Dries Buytaert