rvelices ebc3c2e2f7 merge 2755 and 2756 from branch 2.0 to trunk ...

- 2755 fix vulnerability http://www.milw0rm.com/exploits/6755
- 2756 security paranoia: protect session/remember me cookies from XSS attacks (works only if php>=5.2 and with IE/FF maybe others)


git-svn-id: http://piwigo.org/svn/trunk@2757 68402e56-0260-453c-a942-63ccdbb3a9ee

2008-10-16 00:38:26 +00:00

..

php_compat

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

smarty

- upgrade smarty to latest release 2.6.20

2008-09-16 10:17:20 +00:00

ws_protocols

- images.file categories.permalink old_permalinks.permalink - become binary

2008-09-12 02:17:35 +00:00

block.class.php

- based on test_menu by grum (thanks to you) - integration of dynamic menu bar to pwg

2008-08-28 00:32:39 +00:00

calendar_base.class.php

updating files for the Menu class (test_menu)

2008-08-09 21:27:58 +00:00

calendar_monthly.class.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

calendar_weekly.class.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

category_cats.inc.php

- fix undefined template vars U_LOST_PASSWORD (menubar), F_ACTION (extend_for_templates) and F_C13Y_ACTION (check_integrity)

2008-09-10 01:16:13 +00:00

category_default.inc.php

- fix undefined template vars U_LOST_PASSWORD (menubar), F_ACTION (extend_for_templates) and F_C13Y_ACTION (check_integrity)

2008-09-10 01:16:13 +00:00

class_smtp_mail.inc.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

common.inc.php

- replace a preg_match with simple comparison (faster)

2008-10-10 13:11:31 +00:00

config_default.inc.php

- the author in RSS feed can be configured in config_default.inc.php

2008-09-26 01:43:41 +00:00

constants.php

version management: trunk codename changes to Colibri, see topic:13884.

2008-10-12 18:47:46 +00:00

feedcreator.class.php

- an optimization of a Mysql query for tags (oddly but it's faster)

2008-04-04 19:47:07 +00:00

filter.inc.php

- optim dont include a php file if not required

2008-08-16 01:32:37 +00:00

functions_calendar.inc.php

- better management of fatal errors (instead of die or trigger_error rather use fatal_error ...)

2008-09-05 01:24:01 +00:00

functions_category.inc.php

- sql optim: do not include category_cats (which makes a query) if current category does not have children (info known when building menubar)

2008-09-25 00:39:12 +00:00

functions_comment.inc.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

functions_cookie.inc.php

- fix status header (web services + IE6 min display)

2008-09-17 01:48:31 +00:00

functions_filter.inc.php

- add #user_cache.cache_update_time - useful for plugins or the filter when it is not possible/desirable to cache/calculate data specific to the user when pwg core does it; note that this opens the possibility to implement a data cache (file/shared mem/ etc...) for every user (for very large databases)

2008-07-22 10:32:25 +00:00

functions_html.inc.php

- Install process now looks like goto/roma.

2008-10-15 17:50:12 +00:00

functions_mail.inc.php

Use directly $lang_info on tpl files.

2008-10-04 09:50:02 +00:00

functions_metadata.inc.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

functions_notification.inc.php

- fix status header (web services + IE6 min display)

2008-09-17 01:48:31 +00:00

functions_picture.inc.php

- local.lang is loaded without fallback on default language or PHPWG_DEFAULT_LANGUAGE (needed to change the signature of load_language which became a little too big)

2008-08-20 00:35:22 +00:00

functions_plugins.inc.php

Change some PhpWebGallery to Piwigo.

2008-05-14 22:25:36 +00:00

functions_rate.inc.php

git-svn-id: http://piwigo.org/svn/trunk@2471 68402e56-0260-453c-a942-63ccdbb3a9ee

2008-08-11 11:25:07 +00:00

functions_search.inc.php

- removed #debug css rule (why would we need that in default-layout?)

2008-09-23 01:04:41 +00:00

functions_session.inc.php

merge 2755 and 2756 from branch 2.0 to trunk

2008-10-16 00:38:26 +00:00

functions_tag.inc.php

- remember me cookie security improvement (the time when the cookie was generated is saved and checked in range [now-remember_me_length; now]

2008-07-01 02:09:21 +00:00

functions_url.inc.php

- better management of fatal errors (instead of die or trigger_error rather use fatal_error ...)

2008-09-05 01:24:01 +00:00

functions_user.inc.php

merge 2755 and 2756 from branch 2.0 to trunk

2008-10-16 00:38:26 +00:00

functions_xml.inc.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

functions.inc.php

- replace a preg_match with simple comparison (faster)

2008-10-10 13:11:31 +00:00

index.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

menubar.inc.php

- fix undefined template vars U_LOST_PASSWORD (menubar), F_ACTION (extend_for_templates) and F_C13Y_ACTION (check_integrity)

2008-09-10 01:16:13 +00:00

page_header.php

Use directly $lang_info on tpl files.

2008-10-04 09:50:02 +00:00

page_tail.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

picture_comment.inc.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

picture_metadata.inc.php

Bug fixed: as rvelices notified me by email, my header replacement script was

2008-04-05 14:14:07 +00:00

picture_rate.inc.php

- less mysql queries on picture page (under some circumstances)

2008-04-25 23:38:04 +00:00

section_init.inc.php

feature 169 added: ability to manually sort images inside a category. A

2008-09-11 21:40:00 +00:00

template.class.php

- Remove known_template function.

2008-10-11 17:21:52 +00:00

user.inc.php

merge 2755 and 2756 from branch 2.0 to trunk

2008-10-16 00:38:26 +00:00

ws_core.inc.php

- some checks for admins that are advisers (no write access)

2008-09-25 00:30:42 +00:00

ws_functions.inc.php

merge 2755 and 2756 from branch 2.0 to trunk

2008-10-16 00:38:26 +00:00