rvelices 7550df3915 - security fix : when conf['question_mark_in_urls']=true , $_SERVER['PATH_INFO'] was not sanitized against sql injection ...

- mysql errors are now dumped using trigger_error instead of echo and die -> allow admins to see later on if someone tries funny stuff

git-svn-id: http://piwigo.org/svn/branches/branch-1_7@2483 68402e56-0260-453c-a942-63ccdbb3a9ee

2008-08-23 01:15:33 +00:00

..

php_compat

Resolved issue 0000712: PWG-ERROR-VERSION on remote synchronization

2008-02-16 13:22:47 +00:00

ws_protocols

Update svn properties (svn:eol-style and svn:keywords)

2007-03-16 06:30:07 +00:00

calendar_base.class.php

Updates:

2007-03-13 22:44:45 +00:00

calendar_monthly.class.php

web service: added method to query search elements

2007-02-19 16:25:47 +00:00

calendar_weekly.class.php

Update svn properties (svn:eol-style and svn:keywords)

2007-03-16 06:30:07 +00:00

category_cats.inc.php

Add triggers for category name (render_category_name).

2008-07-12 14:27:22 +00:00

category_default.inc.php

merge revisions 2121, 2122 and 2123 from trunk to branch-1_7

2007-10-08 23:13:56 +00:00

class_smtp_mail.inc.php

Resolved issue 0000815: Email format standardization

2008-03-18 21:58:48 +00:00

common.inc.php

- security fix : when conf['question_mark_in_urls']=true , $_SERVER['PATH_INFO'] was not sanitized against sql injection

2008-08-23 01:15:33 +00:00

config_default.inc.php

Resolved issue 0000815: Email format standardization

2008-03-18 21:58:48 +00:00

constants.php

Change PWG version to "branch 1.7"

2007-04-06 17:34:28 +00:00

feedcreator.class.php

RSS feed improvements:

2006-09-18 22:51:09 +00:00

filter.inc.php

Change initialization of $filter in order to prevent of problem with some systems

2007-09-29 22:38:49 +00:00

functions_calendar.inc.php

- refactoring page['category'] before 1.7 release

2007-02-27 01:56:16 +00:00

functions_category.inc.php

Add triggers for category name (render_category_name).

2008-07-12 14:27:22 +00:00

functions_comment.inc.php

Send comment notification only if comment is not validated and $conf is true.

2007-11-20 22:34:13 +00:00

functions_filter.inc.php

Update svn properties (svn:eol-style and svn:keywords)

2007-03-16 06:30:07 +00:00

functions_html.inc.php

Add triggers for category name (render_category_name).

2008-07-12 14:27:22 +00:00

functions_mail.inc.php

Resolved issue 0000815: Email format standardization

2008-03-18 21:58:48 +00:00

functions_metadata.inc.php

- better code in filter.inc.php (remove unused code + filter is not reseted

2007-01-11 05:10:16 +00:00

functions_notification.inc.php

Admin waiting page was changed to upload, there are a lot time...

2008-05-10 21:26:40 +00:00

functions_picture.inc.php

merge revisions 2205 and 2206 from trunk to branch-1_7

2008-02-13 01:25:07 +00:00

functions_plugins.inc.php

Plugins: new way of adding links and content to administration pages...

2007-01-09 11:38:54 +00:00

functions_rate.inc.php

- bug fix: registered users could rate a picture several times from diffrent ip adresses

2008-08-11 11:24:59 +00:00

functions_search.inc.php

- merge r2451 from trunk: normalize behaviour of query search versus std search (now both return items already sorted and permission checked); also more optimized sql queries (in some cases)

2008-07-23 00:56:53 +00:00

functions_session.inc.php

Issue 0000619: bad result of cookie_path() function

2007-05-14 21:09:21 +00:00

functions_tag.inc.php

- tags improvement : pass to templates all fields in table #tags (handy for plugins such as type tags)

2008-07-01 02:10:13 +00:00

functions_url.inc.php

- merge optimizitation of sql query (in section_init from trunk)

2008-04-08 01:35:02 +00:00

functions_user.inc.php

Trigger correction in functions_user.inc.php

2008-03-09 08:10:01 +00:00

functions_xml.inc.php

Resolved issue 0000712: PWG-ERROR-VERSION on remote synchronization

2008-02-16 13:22:47 +00:00

functions.inc.php

- security fix : when conf['question_mark_in_urls']=true , $_SERVER['PATH_INFO'] was not sanitized against sql injection

2008-08-23 01:15:33 +00:00

index.php

Update index.php header.

2007-03-16 06:15:27 +00:00

menubar.inc.php

- tags improvement : pass to templates all fields in table #tags (handy for plugins such as type tags)

2008-07-02 01:13:12 +00:00

page_header.php

Add second parameter for render_category_description to differentiate both triggers in category_cats.inc.php and section_init.inc.php.

2007-11-29 13:03:15 +00:00

page_tail.php

Replace old use of $lang by l10n function.

2008-01-30 22:16:01 +00:00

picture_comment.inc.php

- send status code 403 when attempt to enter a comment, but comments are disabled

2007-10-29 23:10:31 +00:00

picture_metadata.inc.php

Updates:

2007-03-13 22:44:45 +00:00

picture_rate.inc.php

- merge r2308 and r2309 from trunk to branch-1_7

2008-04-25 23:39:06 +00:00

section_init.inc.php

- merge r2451 from trunk: normalize behaviour of query search versus std search (now both return items already sorted and permission checked); also more optimized sql queries (in some cases)

2008-07-23 00:56:53 +00:00

template.php

- fix: quick search error if the query term contained " or '

2007-09-19 03:06:16 +00:00

user.inc.php

Resolved issue 0000784: Mail notification disabled on register user

2007-12-11 06:04:07 +00:00

ws_core.inc.php

- fix set_status_header for fastCGI installations that are strict in terms of http protocol (1.0 or 1.1)

2007-07-06 01:04:50 +00:00

ws_functions.inc.php

- merge r2451 from trunk: normalize behaviour of query search versus std search (now both return items already sorted and permission checked); also more optimized sql queries (in some cases)

2008-07-23 00:56:53 +00:00