Commit graph

696 commits

Author SHA1 Message Date
Kijin Sung
1a81fd43f3 Convert Object class to BaseObject in core classes 2017-11-27 22:34:28 +09:00
Kijin Sung
87d8ba41e3 Update procMemberAuthAccount
- 불필요한 중복 체크 제거
- 인증 성공시 alert을 사용하지 않고 인증 관련 안내 메시지를 XE_VALIDATOR_MESSAGE에 넣은 후 로그인 화면으로 리다이렉트
- XE_VALIDATOR_MESSAGE를 임의로 지정할 수 있도록 Context::setValidatorMessage() 함수 추가
2017-10-13 17:08:35 +09:00
Kijin Sung
d17eaf63a0 Preserve some commonly used POST variables
091199bc
2017-09-11 19:49:15 +09:00
bnu
7721a64dc9 fix #2139 XEVE-17-026
- 제보 및 패치 제공 : @kijin
2017-09-11 18:22:07 +09:00
BJRambo
f033e4e36f Fix comment Context::set parameter type. 2017-08-24 08:08:46 +09:00
BJRambo
ee0ac2b573 Fix Context::get return comment 2017-08-17 16:55:21 +09:00
Kijin Sung
118b209042 Add Context::isLocked() to detect site lock easily 2017-07-31 23:33:25 +09:00
Kijin Sung
8289a4b925 Do not use output buffering if invoked on the CLI 2017-07-08 21:43:44 +09:00
Kijin Sung
5ae15f4b66 Remove _rx_ajax_compat and _rx_csrf_token from request vars
JSON/XMLRPC 호환성 확보와 CSRF 공격 방지를 위해 사용되는 이 변수들이
Context::getRequestVars()에 포함되어 불필요하게 여기저기 저장되거나
URL에 포함되어 나오는 문제를 방지합니다.
2017-07-02 21:46:50 +09:00
bnu
e91c2114ab fix #2110 다중 파일을 업로드 시 첨부한 파일의 목록을 잘못 처리하는 문제 고침
- `aaa[]`, `bbb[]` 폼 전송 시 `aaa[]`파일이 `bbb[]`에도 동일하게 업로드한 것처럼 잘못 처리하는 문제
2017-06-27 14:40:46 +09:00
conory
07ede48e7c canonical url이 엔티티로 중복 처리 될 수 있는 문제 수정 2017-05-16 19:27:06 +09:00
Kijin Sung
8ca0ca4a47 Fix Context::loadLang() compatibility when lang.xml is specified 2017-05-05 11:47:22 +09:00
conory
02731e1a57 response method 호환성 개선
https://www.xetown.com/qna/576560
2017-04-27 10:37:35 +09:00
Kijin Sung
1591f8b728 Fix missing default URL during install, especially on SSL
https://www.xetown.com/lakepark/560017
2017-04-11 15:59:19 +09:00
Kijin Sung
97047d1279 Add list of reserved words #763 2017-03-23 19:43:49 +09:00
Kijin Sung
b0bf971cee Fix default URL and other relative paths when invoked on the CLI 2017-03-23 18:56:46 +09:00
Kijin Sung
cbfd88dfb8 Fix warning when trying to get info of nonexistent domain 2017-03-13 16:15:54 +09:00
Kijin Sung
0184021e73 Remove 'vid' from URL handling and clean up the remainder 2017-03-13 14:50:29 +09:00
Kijin Sung
e8bb0cf029 Fix missing parse_url 2017-03-13 14:21:16 +09:00
Kijin Sung
e27e0f275a Some cleanup of getUrl() routine 2017-03-13 14:17:51 +09:00
Kijin Sung
2e3e969767 Implement redirect to default domain if unregistered domain is requested 2017-03-13 14:07:18 +09:00
Kijin Sung
51d0aa5e5e Do not redirect to SSL when invoked on the CLI 2017-03-13 13:46:49 +09:00
Kijin Sung
a984665efc Implement default timezone for domains 2017-03-13 12:51:24 +09:00
Kijin Sung
2af279d6c3 Always redirect to SSL if the current domain always uses SSL 2017-03-13 00:34:53 +09:00
Kijin Sung
fc6002f2cb Apply site title, subtitle, and footer for each domain 2017-03-12 23:33:35 +09:00
Kijin Sung
8cf3d7b520 Update SSO mechanism to use new domain system 2017-03-04 22:05:16 +09:00
Kijin Sung
210b6b4147 Merge branch 'develop' into pr/multidomain 2017-03-01 21:50:51 +09:00
Kijin Sung
fc63b2e9b8 Properly initialize user object even when not logged in 2017-02-27 15:45:25 +09:00
Kijin Sung
e5126c7f98 Fix domain handling in getUrl() 2017-02-22 16:45:25 +09:00
Kijin Sung
c82c2f307a Various changes to URL handling routines 2017-02-20 21:22:38 +09:00
Kijin Sung
726220d3eb Load site_module_info from 'domains' table instead of 'sites' table 2017-02-20 20:43:30 +09:00
conory
0869e629b9 getUrl 에 rewrite category 추가 2017-02-11 20:27:55 +09:00
Kijin Sung
dfdbc1db85 Add session helper class and move remainder of session validation logic to Session class 2017-02-10 20:50:38 +09:00
Kijin Sung
2af90c8e1d Implement autologin in the Session class 2017-02-08 17:08:31 +09:00
Kijin Sung
af41f36bf7 Move checkSSO() from Context class to Session class 2017-02-07 23:26:43 +09:00
Kijin Sung
483ac84796 Merge branch 'develop' into pr/session-class 2017-02-07 22:13:08 +09:00
Kijin Sung
bef2e35f84 Fix disappearing validator message due to XE 1.8.29 security patch
- xpressengine/xe-core#2020
- https://www.xetown.com/qna/491042
2017-02-02 15:33:58 +09:00
Kijin Sung
079daf8a21 XEVE-16-009 보완 2017-01-12 14:53:04 +09:00
bnu
fe5feddc63 Fix #2006 XEVE-16-009 Form validator에서 사용되는 세션 데이터가 G/P/C 데이터로 대치되어 발생할 수 있는 XSS 취약점 해결
- 제보 : setuid0
2017-01-12 14:42:13 +09:00
Kijin Sung
98b32a2572 Do not apply site lock when called on the CLI 2016-11-22 09:44:07 +09:00
Kijin Sung
b7c558a96f Move session delay feature into Session class 2016-10-05 17:26:05 +09:00
Kijin Sung
d07bd15b80 Integrate session class with Context class and Member module 2016-08-15 21:49:17 +09:00
Kijin Sung
07d97242ec Unify lang and locale config files 2016-07-03 23:58:11 +09:00
Kijin Sung
f8b76b5571 Fix not recognizing POST arguments if Content-Type is wrongly set to application/json 2016-05-16 11:25:37 +09:00
Kijin Sung
503a332f9b Merge pull request #490 from kijin/pr/tablet-as-mobile
태블릿 기기를 모바일로 취급할지 선택할 수 있도록 함
2016-05-11 15:16:23 +09:00
Kijin Sung
3fbf94f630 Fix #491 no display of canonical URL on some pages 2016-05-11 15:15:05 +09:00
Kijin Sung
ad8a07096c Allow tablets to be treated as mobile or not depending on configuration 2016-05-10 23:33:12 +09:00
Kijin Sung
9b374861be Fix #488 extra hyphen when there is no subtitle 2016-05-10 11:15:28 +09:00
Kijin Sung
9bdc30b325 Add options to customize the browser title format 2016-05-09 22:39:19 +09:00
Kijin Sung
f25e685209 Make OpenGraph configurable, and fix canonical URL to include mid 2016-05-09 11:51:11 +09:00