Commit graph

391 commits

Author SHA1 Message Date
Kijin Sung
c3f1e24b02 Ensure more consistent operation of security checks
- 수상한 파일이 업로드되었을 때 isSuccessInit = false로 지정
- isSuccessInit = false인 경우 무조건 에러메시지 출력 (xpressengine/xe-core#2304)
- 보안정책 관련 에러메시지는 msg_security_violation으로 통일
2018-10-10 16:27:23 +09:00
bnu
71651c0542 검색엔진 수집이 불필요한 페이지에 대한 robots 메타 태그 추가
xpressengine/xe-core#2293 patch by @bnu
2018-10-02 22:50:05 +09:00
Kijin Sung
9b6e88bc33 Add try...catch to trigger functions 2018-09-06 19:44:25 +09:00
Kijin Sung
10c8d11785 Add FeatureDisabled and SecurityViolation exception classes 2018-09-06 10:00:47 +09:00
Kijin Sung
f6fa7493f6 Catch Rhymix\Framework\Exception in module act and triggers 2018-08-26 23:46:13 +09:00
conory
bacca5d025 getActionForward() 에서 값이 없을 경우 빈 리턴을 하도록 개선
rss 모듈의 action forward가 등록되지 않는 문제 수정 (기존 서드파티에도 같은 문제가 발생될 것 같아 이렇게 수정함)
2018-06-21 16:13:03 +09:00
conory
54ff7076c7 문서가 존재하지 않는 경우 엉뚱하게 403 코드를 출력하는 문제수정 2018-02-05 18:11:08 +09:00
Kijin Sung
42a57421f1 Fix check for DB connection in ModuleHandler 2017-12-21 00:19:51 +09:00
Kijin Sung
d3b78d1d47 Fix unnecessary cache file refresh in menu module 2017-12-19 12:00:19 +09:00
conory
f8ac11bda6 isAccessible()로 통일 2017-12-12 13:23:45 +09:00
Kijin Sung
6f35f5bafc Fix strict count() behavior in PHP 7.2 2017-12-01 01:42:03 +09:00
Kijin Sung
1a81fd43f3 Convert Object class to BaseObject in core classes 2017-11-27 22:34:28 +09:00
Kijin Sung
ecb598dc15 Add option to specify a global header script per domain 2017-09-12 14:39:33 +09:00
Kijin Sung
2cd6140a89 Also allow selecting a PC layout for mobile view 2017-07-01 21:03:10 +09:00
Kijin Sung
395fa7c229 Revert "Fix #844 fill in default act if none is given in the URL"
This reverts commit d25cf782e9.
2017-06-10 09:38:48 +09:00
Kijin Sung
d25cf782e9 Fix #844 fill in default act if none is given in the URL 2017-06-09 22:46:39 +09:00
Kijin Sung
0be7e72fe5 Fix #836 compatibility with third-party modules that use document_srl for their own purposes 2017-05-30 12:48:52 +09:00
conory
f224a4aea0 <action>에 퍼미션 속성 추가
승인 권한 (grant)도 퍼미션 체크를 할 수 있도록 추가
2017-04-07 14:55:33 +09:00
conory
cd2760c4f5 check_var 속성 기본값 제거
'all-managers', 'same-managers'  퍼미션 타입 추가
코드 정리
2017-03-29 12:54:27 +09:00
conory
926f50ef8d 관리자 권한 코드 개선 2017-03-21 21:01:39 +09:00
conory
e03d8e7333 관리자 페이지는 root를 기본 퍼미션으로... 2017-03-21 17:49:06 +09:00
Kijin Sung
0184021e73 Remove 'vid' from URL handling and clean up the remainder 2017-03-13 14:50:29 +09:00
Kijin Sung
139bb8ac84 Fix installation error 2017-03-13 14:14:59 +09:00
Kijin Sung
2e3e969767 Implement redirect to default domain if unregistered domain is requested 2017-03-13 14:07:18 +09:00
Kijin Sung
ce895ff640 Implement index document functionality 2017-03-13 12:42:18 +09:00
Kijin Sung
fc6002f2cb Apply site title, subtitle, and footer for each domain 2017-03-12 23:33:35 +09:00
Kijin Sung
c82c2f307a Various changes to URL handling routines 2017-02-20 21:22:38 +09:00
Kijin Sung
cbae2c374e Use meta refresh instead of 302 redirect on new session
Attempting to fix missing session cookie in some versions of Android webview and Chrome.
This may or may not be of any use, but why not try?

See https://bugs.chromium.org/p/chromium/issues/detail?id=150066
2017-02-16 11:53:27 +09:00
Kijin Sung
03866c7777 Populate an empty SessionHelper object if not logged in 2017-02-10 21:26:38 +09:00
Kijin Sung
45e930f04c Populate 'user' property of every module instance with current user info 2017-02-10 21:08:05 +09:00
Kijin Sung
67d16d0f3c Fix xe_validator_id being overwritten by input error 2017-01-10 00:09:50 +09:00
Kijin Sung
69ea93914a Don't redirect from site start module unless request method is GET 2016-09-18 20:59:07 +09:00
BJRambo
81f59b83bd Fixed typo 2016-08-10 21:37:43 +09:00
BJRambo
d59f7ae29c fixed typo 2016-08-08 21:30:04 +09:00
BJRambo
792a6b731b 태블릿 설정여부와 상관없이 모바일최적화 버튼이 뜨는 문제 고침 2016-08-08 21:23:15 +09:00
Kijin Sung
e771e4ae0b Apply non-GET/non-POST CSRF patch from XE 1.8.24 (bed604e) 2016-08-05 17:03:24 +09:00
Kijin Sung
bfc212cc09 Add reCAPTCHA addon for signup page 2016-05-26 22:52:19 +09:00
conory
096a1926a9 부모 모듈이 블랙리스트에 올라있을때 확장모듈의 트리거도 실행되지 않는 문제 수정 2016-05-13 12:34:08 +09:00
Kijin Sung
9bdc30b325 Add options to customize the browser title format 2016-05-09 22:39:19 +09:00
Kijin Sung
f84715db5b Fix escaping and userlang encoding of site keywords and description 2016-05-08 23:29:47 +09:00
Kijin Sung
faf4b1ea54 Use global keywords and description if a module does not have its own SEO info 2016-05-08 23:23:27 +09:00
Kijin Sung
d87bbf635c Enable multi-language for site title and subtitle 2016-05-08 21:49:11 +09:00
Kijin Sung
e90f60de22 Add site subtitle 2016-05-08 21:14:50 +09:00
conory
951d992ed4 임시글에도 적용 2016-04-20 15:41:10 +09:00
conory
29507df48f httpStatusCode 를 정수형으로 만들기 2016-04-19 23:14:50 +09:00
conory
107996918e 비밀글일 경우에도 적용 2016-04-19 22:02:28 +09:00
conory
de0b09f4e3 최종단계에서 Set http status message 2016-04-19 17:10:15 +09:00
conory
0cb9958319 stop()사용시에도 http status code 적용 2016-04-19 16:02:42 +09:00
conory
649e25ab63 HttpStatusCode가 정수형일 경우 대비 2016-04-19 12:56:28 +09:00
conory
f930ec74f8 시스템 에러 메세지를 출력할 경우 403 HTTP 코드로 설정 2016-04-18 23:43:04 +09:00