iarv/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-03-28 17:42:57 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
6ac6db0d2da3ba43f1203751afd34ce7353944be
Piwigo/admin
History
plegall 619849ff8b fixes #1150 prevent HTML code in group name 
It avoids any stored XSS between administrators and it's totally useless to have HTML code in the group name.
2020-02-07 17:05:56 +01:00
..
include
during upgrade, use the new default Piwigo theme (modus) instead of hardcoded "elegant"
2019-10-08 12:23:54 +02:00
themes
fixes #1150 prevent HTML code in group name
2020-02-07 17:05:56 +01:00
album_notification.php
fixes #996 escape word "groups" in SQL queries, new reserved word with MySQL 8
2019-06-28 18:07:53 +02:00
album.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
batch_manager_global.php
fixes #1090 move warning about missing checksums from dashboard to sync page
2019-10-14 14:14:54 +02:00
batch_manager_unit.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
batch_manager.php
fixes #1012 prevent SQL injection with a check on user input
2019-08-12 14:52:56 +02:00
cat_list.php
Quote 'rank' field name in SQL
2019-06-27 17:50:59 +02:00
cat_modify.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
cat_move.php
fixes #1010 prevent from SQL injection with user input check
2019-08-12 16:24:27 +02:00
cat_options.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
cat_perm.php
fixes #996 escape word "groups" in SQL queries, new reserved word with MySQL 8
2019-06-28 18:07:53 +02:00
comments.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
configuration.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
element_set_ranks.php
Quote 'rank' field name in SQL
2019-06-27 17:50:59 +02:00
extend_for_templates.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
group_list.php
fixes #1150 prevent HTML code in group name
2020-02-07 17:05:56 +01:00
group_perm.php
fixes #1011 add user input checks (and pwg_token) to avoid SQL injection (and CSRF)
2019-08-12 16:45:21 +02:00
help.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
history.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
index.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
intro.php
fixes #1090 move warning about missing checksums from dashboard to sync page
2019-10-14 14:14:54 +02:00
languages_installed.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
languages_new.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
languages.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
maintenance.php
fixes #1040 move check upgrade action to maintenance page
2019-06-27 19:09:40 +02:00
menubar.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
notification_by_mail.php
fixes #1058 prevent CSRF on notification by mail, with a pwg_token
2019-08-12 12:31:24 +02:00
permalinks.php
issue #1075 check the url keys are expected
2019-09-20 14:02:03 +02:00
photo.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
photos_add_applications.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
photos_add_direct.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
photos_add_ftp.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
photos_add.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
picture_coi.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
picture_modify.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
plugin.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
plugins_installed.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
plugins_new.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
plugins.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
popuphelp.php
fixes #1057 use a popin instead of popup to display admin page help.
2019-08-13 12:07:16 +02:00
profile.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
rating_user.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
rating.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
site_manager.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
site_reader_local.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
site_update.php
include/functions_cookie: use proper brackets for offset access
2019-12-04 10:40:47 +01:00
stats.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
tags.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
theme.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
themes_installed.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
themes_new.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
themes.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
updates_ext.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
updates_pwg.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
updates.php
issue #830 simplify PHP files header, remove copyright/license info
2019-06-04 17:13:51 +02:00
user_list_backend.php
Quote mysql keyword groups
2019-12-16 10:53:46 +01:00
user_list.php
fixes #996 escape word "groups" in SQL queries, new reserved word with MySQL 8
2019-06-28 18:07:53 +02:00
user_perm.php
fixes #1011 add user input checks (and pwg_token) to avoid SQL injection (and CSRF)
2019-08-12 16:45:21 +02:00