Commit graph

1582 commits

Author SHA1 Message Date
Kijin Sung
90cf3ec442 Version 1.8.25 2016-09-25 14:40:01 +09:00
Kijin Sung
4f52122a3c Fix #593 incorrect result from checkCSRF() in GET+JSON request 2016-09-25 12:35:50 +09:00
Kijin Sung
cf6c5f727e Add option to control error logging 2016-09-14 13:13:29 +09:00
Kijin Sung
ab3d1b5fd6 Fix miscellaneous bugs and improve security of Session class 2016-08-19 23:07:11 +09:00
Kijin Sung
02a45ece9a Fix missing static keyword 2016-08-16 21:55:32 +09:00
Kijin Sung
a74daeb071 Fix typo in variable name 2016-08-16 11:39:40 +09:00
Kijin Sung
d21990d322 Add session shield addon to blacklist 2016-08-15 23:36:42 +09:00
Kijin Sung
d07bd15b80 Integrate session class with Context class and Member module 2016-08-15 21:49:17 +09:00
Kijin Sung
12ee156374 Update DateTime class to use timezone information from Session 2016-08-15 17:58:48 +09:00
Kijin Sung
e2b2861e81 Implement most of the functionality of the Session class 2016-08-15 17:58:13 +09:00
Kijin Sung
6de0bc45db Merge branch 'develop' into pr/session-class 2016-08-15 15:59:19 +09:00
Kijin Sung
6a1f7844bf Version 1.8.24 2016-08-05 17:12:26 +09:00
Kijin Sung
7e2894b7d3 Version 1.8.23 2016-08-02 16:38:47 +09:00
Kijin Sung
910f7220e6 Import cryptographic signature functions from XE 1.8.23 2016-08-02 16:30:33 +09:00
Kijin Sung
05128b9f4b When SSL is optional, redirect to http after writing (#1939) 2016-08-02 16:05:07 +09:00
bnu
61c54504ef - invalid_float 메시지 추가
- 파일 용량 설정의 룰셋 추가 수정
- XML Filter에서 float를 처리할 수 있도록 룰세 추가
2016-08-02 16:00:47 +09:00
Kijin Sung
c71b90b2d6 Fix error when writing an empty file 2016-07-18 21:34:53 +09:00
Kijin Sung
1d1171344a Merge branch 'develop' into pr/session-class 2016-07-17 23:07:06 +09:00
Kijin Sung
273c95b449 Fix error when loading XML lang file with simplexml_load_file() 2016-07-12 23:35:44 +09:00
Kijin Sung
55547c56e4 Do not use safe_overwrite if target directory is not writable 2016-07-11 11:14:00 +09:00
Kijin Sung
2f5d51076c Add generic getter and setter methods 2016-07-09 23:13:44 +09:00
Kijin Sung
7816062044 Initial structure of session class 2016-07-05 23:27:25 +09:00
Kijin Sung
ba8ff52904 Do not interfere with letsencrypt access to .well-known 2016-07-05 22:42:22 +09:00
Kijin Sung
07d97242ec Unify lang and locale config files 2016-07-03 23:58:11 +09:00
Kijin Sung
038a158dc7 Update Korean IPv4/IPv6 ranges to latest data 2016-07-03 23:44:07 +09:00
Kijin Sung
63b6ac9e37 Set the default umask automatically upon install 2016-07-03 21:48:09 +09:00
Kijin Sung
f0e6b818af Add method to recommend the best umask for the current server environment 2016-07-03 21:42:47 +09:00
Kijin Sung
480e27b55d Apply permissions before moving temp file into place 2016-07-03 21:25:05 +09:00
Kijin Sung
ce878bcaf6 Merge branch 'develop' into pr/umask 2016-07-03 21:21:17 +09:00
Kijin Sung
a15095dd00 Use umask consistently 2016-07-03 20:46:22 +09:00
Kijin Sung
ce594eece7 Throw user warnings when a file operation fails dangerously 2016-07-03 17:30:46 +09:00
Kijin Sung
2dddc982a7 Treat user warnings as same as PHP warnings 2016-07-03 17:27:59 +09:00
Kijin Sung
ffd6c42447 Add rewrite rules to map nonexistent minified scripts to original file 2016-06-29 19:41:30 +09:00
Kijin Sung
aef4797c1c Update routine for broken symlink detection 2016-06-29 19:20:53 +09:00
Kijin Sung
1463e7571b Version 1.8.22 2016-06-29 16:49:58 +09:00
Kijin Sung
ba28484545 Update .htaccess and nginx rewrite rules 2016-06-29 16:49:36 +09:00
Kijin Sung
d2c98830cc Update recommended nginx configuration
- Rewrite legacy paths only if the requested file does not exist.
- Add example configuration for installation in a subdirectory.
2016-06-27 23:05:42 +09:00
Kijin Sung
866b709f36 Merge pull request #535 from kijin/pr/ua-improvement
User-Agent 감지 기능 개선
2016-06-26 17:55:46 +09:00
Kijin Sung
976fa799f3 Add more edge cases and tests, always default to Mozilla/X.X 2016-06-26 17:25:59 +09:00
Kijin Sung
2086c73295 Change detection order of Opera/Konq/Chrome/Safari 2016-06-26 17:07:05 +09:00
Kijin Sung
38b3db1238 Rename OS X to macOS (official name change since Sierra) 2016-06-26 15:41:07 +09:00
Kijin Sung
c9c4d7cda1 Improve filename encoding for miscellaneous old browsers 2016-06-25 21:37:35 +09:00
Kijin Sung
c3fe8d265b Move RFC5987 encoding function to UA class 2016-06-25 21:22:32 +09:00
Kijin Sung
8fe8c9203e Improve browser detection
- Distinguish iOS from Mac OS X
- Better detection of Android default browser and webview
- Detect Chrome and Firefox on iOS
- Detect common search robots
2016-06-25 20:59:14 +09:00
Kijin Sung
8f3a9db69a Call clearstatcache() after write operations 2016-06-23 17:29:32 +09:00
Kijin Sung
30106b7fc4 Use atomic rename to safely overwrite frequently accessed files 2016-06-23 00:00:48 +09:00
Kijin Sung
1c55d8b411 Allow access to HTML files in common/manual folder 2016-06-22 23:37:25 +09:00
Kijin Sung
50a8c77097 Merge pull request #526 from kijin/pr/proxy-improvement
외부 요청시 프록시 설정 방식 개선
2016-06-18 15:27:27 +09:00
Kijin Sung
6c545fce08 Only use proxy server when the constant is defined 2016-06-18 15:07:42 +09:00
Kijin Sung
e2828ed155 Improve precision and security of .htaccess and nginx configuration
- Block direct access to HTML and XML files in all modules, themes, etc.
- Block direct access to environment information in files/env/*
- Block direct access to dotfiles and other developer resources
- Block direct access to cache store
- Block PHP execution in upload directory (for additional protection)
- Ensure consitency between Apache and nginx rewrite rules
- Remove redundant rewrite rules
2016-06-18 13:16:02 +09:00