Commit graph

2154 commits

Author SHA1 Message Date
Kijin Sung
ba925150a3 Quash www subdomain to prevent duplicate sessions 2017-02-13 13:55:47 +09:00
conory
0869e629b9 getUrl 에 rewrite category 추가 2017-02-11 20:27:55 +09:00
Kijin Sung
99cb67b5db Merge pull request #567 from kijin/pr/session-class
세션 처리 관련 기능 정리 및 개선
2017-02-10 21:30:06 +09:00
Kijin Sung
03866c7777 Populate an empty SessionHelper object if not logged in 2017-02-10 21:26:38 +09:00
Kijin Sung
11883fb965 Populate 'user' property of TemplateHandler instances 2017-02-10 21:18:53 +09:00
Kijin Sung
45e930f04c Populate 'user' property of every module instance with current user info 2017-02-10 21:08:05 +09:00
Kijin Sung
dfdbc1db85 Add session helper class and move remainder of session validation logic to Session class 2017-02-10 20:50:38 +09:00
Kijin Sung
2af90c8e1d Implement autologin in the Session class 2017-02-08 17:08:31 +09:00
Kijin Sung
ca9a0aef25 Update autologin table with more columns 2017-02-08 16:16:31 +09:00
Kijin Sung
1a8dcd6a34 Do not cause fatal error when query cache file failed to load 2017-02-08 14:12:44 +09:00
Kijin Sung
af41f36bf7 Move checkSSO() from Context class to Session class 2017-02-07 23:26:43 +09:00
Kijin Sung
483ac84796 Merge branch 'develop' into pr/session-class 2017-02-07 22:13:08 +09:00
Kijin Sung
607e9357c2 Merge pull request #686 from kijin/pr/delete-empty-folders
빈 폴더 자동 삭제 및 일괄 삭제
2017-02-05 22:57:02 +09:00
Kijin Sung
bef2e35f84 Fix disappearing validator message due to XE 1.8.29 security patch
- xpressengine/xe-core#2020
- https://www.xetown.com/qna/491042
2017-02-02 15:33:58 +09:00
Kijin Sung
2ef85c2555 Use Storage::deleteEmptyDirectory() in FileHandler::removeEmptyDir() 2017-01-26 18:01:47 +09:00
Kijin Sung
079daf8a21 XEVE-16-009 보완 2017-01-12 14:53:04 +09:00
bnu
fe5feddc63 Fix #2006 XEVE-16-009 Form validator에서 사용되는 세션 데이터가 G/P/C 데이터로 대치되어 발생할 수 있는 XSS 취약점 해결
- 제보 : setuid0
2017-01-12 14:42:13 +09:00
Kijin Sung
67d16d0f3c Fix xe_validator_id being overwritten by input error 2017-01-10 00:09:50 +09:00
Kijin Sung
4f15ae24ea Display GB and TB sizes correctly in FileHandler::filesize() 2016-12-17 22:30:51 +09:00
Kijin Sung
d34ef5901f Improve FileHandler::returnBytes() to handle a wider range of sizes 2016-12-17 20:49:10 +09:00
Kijin Sung
2db14c1ea9 Show query errors in debug panel and error log 2016-12-13 14:09:51 +09:00
Kijin Sung
98b32a2572 Do not apply site lock when called on the CLI 2016-11-22 09:44:07 +09:00
Kijin Sung
eb467b5799 Fix #615 SEO compatibility with third-party modules using their own $oDocument 2016-10-23 15:05:11 +09:00
Kijin Sung
db7b613d03 Prevent Mobile class from adding data to session 2016-10-05 17:55:25 +09:00
Kijin Sung
a1618c236f Merge branch 'develop' into pr/session-class 2016-10-05 17:26:12 +09:00
Kijin Sung
b7c558a96f Move session delay feature into Session class 2016-10-05 17:26:05 +09:00
Kijin Sung
e9df310364 Additional fixes for #601 2016-10-01 23:32:59 +09:00
Kijin Sung
95a36477b7 Clean up path handling in TemplateHandler 2016-10-01 21:54:25 +09:00
Kijin Sung
b6113b9df8 Allow access to superglobals and constants in template code 2016-10-01 21:39:04 +09:00
Kijin Sung
78a0e857b5 Also trigger warning when template is not found 2016-10-01 21:16:01 +09:00
Kijin Sung
7e5356380f Fix #579 insufficient information in template error 2016-10-01 21:13:24 +09:00
Kijin Sung
69ea93914a Don't redirect from site start module unless request method is GET 2016-09-18 20:59:07 +09:00
Kijin Sung
be9a109a37 Support <offset> in XML query <navigation> section 2016-09-14 13:44:35 +09:00
Kijin Sung
d07bd15b80 Integrate session class with Context class and Member module 2016-08-15 21:49:17 +09:00
BJRambo
81f59b83bd Fixed typo 2016-08-10 21:37:43 +09:00
BJRambo
d59f7ae29c fixed typo 2016-08-08 21:30:04 +09:00
BJRambo
792a6b731b 태블릿 설정여부와 상관없이 모바일최적화 버튼이 뜨는 문제 고침 2016-08-08 21:23:15 +09:00
Kijin Sung
e771e4ae0b Apply non-GET/non-POST CSRF patch from XE 1.8.24 (bed604e) 2016-08-05 17:03:24 +09:00
Kijin Sung
910f7220e6 Import cryptographic signature functions from XE 1.8.23 2016-08-02 16:30:33 +09:00
bnu
61c54504ef - invalid_float 메시지 추가
- 파일 용량 설정의 룰셋 추가 수정
- XML Filter에서 float를 처리할 수 있도록 룰세 추가
2016-08-02 16:00:47 +09:00
bnu
46278a886b type 이름을 'float'로 변경 2016-08-02 15:58:10 +09:00
sejin7940
a37b288f1b Update Validator.class.php 2016-08-02 15:56:43 +09:00
Kijin Sung
3d8b7755ee Fix manual mobile setting not working 2016-07-09 23:00:16 +09:00
Kijin Sung
07d97242ec Unify lang and locale config files 2016-07-03 23:58:11 +09:00
Kijin Sung
313e7048d5 Remove safe_mode condition from FileHandler 2016-07-03 17:59:50 +09:00
Kijin Sung
222be43303 Remove condition of checking the content of minified scripts 2016-06-29 20:50:30 +09:00
Kijin Sung
aef4797c1c Update routine for broken symlink detection 2016-06-29 19:20:53 +09:00
Kijin Sung
3c15bf4129 Replace file_put_contents() with safe alternative 2016-06-23 00:07:29 +09:00
Kijin Sung
6c545fce08 Only use proxy server when the constant is defined 2016-06-18 15:07:42 +09:00
Kijin Sung
6791208ae1 Prevent function arguments from being exposed in the error log
Also: Produce backtrace when a regular error occurs
Also: Remove unnecessary check for DEBUG_BACKTRACE_IGNORE_ARGS
(This is not necessary in PHP > 5.3.6)
2016-06-15 17:03:32 +09:00