Commit graph

2434 commits

Author SHA1 Message Date
Kijin Sung
1003f0ea49 Fix #1642 Fix #1647 보완
주의: 여기서 Context가 아닌 Session을 참조하면 무한루프에 빠지면서 memory_limit을 초과할 수 있음
2021-03-17 23:54:18 +09:00
Kijin Sung
fef8b10ce6 Fix #1642 Fix #1647 distinguish not-logged-in state before session start and after session start 2021-03-17 23:40:29 +09:00
Kijin Sung
a107ef1b90 Fix #1662 missing color scheme class on <body> when cookie exists 2021-03-17 23:01:43 +09:00
Kijin Sung
a64b91f72d Change default unregistered domain action to 'display' 2021-03-14 15:49:33 +09:00
Kijin Sung
72e7532764 Fix compatibility with PBKDF2 hashes with iteration counts that are not zero-padded 2021-03-14 00:26:15 +09:00
Kijin Sung
77b522249d Simplify autoloader logic 2021-03-08 16:51:39 +09:00
Kijin Sung
be1fbc9d65 Version 2.0.8 2021-02-28 11:16:47 +09:00
Kijin Sung
6b6c0eacfc Fix SQL error when list count is 0 2021-02-26 16:25:11 +09:00
Kijin Sung
91b03795dc Fix rx_ajax not working when a form contains file uploads 2021-02-24 11:02:29 +09:00
Kijin Sung
459fe2d959 Fix #1630 short URL for file download conflicts with other nginx directives
다운로드 짧은주소는 /files/download/123/456/filename.jpg 와 같은 형태를 띠므로
nginx에서 특정 확장자에 캐싱 헤더 추가 등의 설정을 걸어놓은 경우
해당 설정이 짧은주소보다 먼저 적용되어 짧은주소에서 404 오류가 나는 문제 해결.
2021-02-23 20:40:00 +09:00
Kijin Sung
e423cba24d Use Origin header before Referer to check CSRF
OWASP에서는 Referer 헤더보다 Origin 헤더를 먼저 체크하는 것을 권장합니다.
Referer가 비어 있는 경우에도 Origin 헤더에는 유용한 정보가 들어 있을 수 있기 때문입니다.

https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
2021-02-23 16:51:46 +09:00
Kijin Sung
f4758b7570 Fix #1610 memory leak in initial debug status check 2021-02-10 00:27:04 +09:00
Kijin Sung
9b714acb55 Show memory usage in debug panel 2021-02-09 23:52:35 +09:00
Kijin Sung
6b7486e74f Add 'ifvar' attribute to most query elements
XML 쿼리에서 'ifvar' 속성을 사용하여, 특정 변수가 있을 때만 유효한 테이블이나
컬럼, 인덱스 힌트 등을 지정할 수 있도록 합니다. 어떤 변수를 넣는지에 따라
<condition> 뿐 아니라 <table>, <column>, <index_hint? 등의 적용 여부도
XML 쿼리 수정 없이 자유롭게 컨트롤할 수 있게 됩니다.
2021-02-09 21:58:07 +09:00
Kijin Sung
1289776c97 Remove debug data from previous request (causes memory overage in PHP 8.0) 2021-02-09 19:33:47 +09:00
Kijin Sung
c5ceafc841 Fix debug disabled if first error or warning occurs before session start 2021-02-09 01:21:33 +09:00
Kijin Sung
0f33fa6539 Version 2.0.7 2021-02-05 21:37:44 +09:00
Kijin Sung
20871055e4 Support either/both username and password for Redis #1602 2021-02-05 21:04:20 +09:00
Kijin Sung
9160b867aa Fix incorrect relative URLs in other JS libraries #1601 2021-02-05 11:50:13 +09:00
Kijin Sung
5c0c4a3f76 Fix #1601 relative path in ui.colorpicker 2021-02-05 11:45:01 +09:00
Kijin Sung
20e9009b9b Add more items to reserved word list 2021-02-04 23:40:33 +09:00
Kijin Sung
a4ab4f4b03 Fix misleading error message 2021-02-04 21:09:23 +09:00
Kijin Sung
b9cb5f429a Use savepoints for nested transactions
- XE에서 사용하던 savepoint 방식을 복원
- 트랜잭션 안에서 commit이 무시되더라도 해당 사실을 알리는 로그를 남기도록 함
2021-02-04 16:39:09 +09:00
Kijin Sung
ca5d90fd07 Make rx_ajax forms more customizable 2021-02-02 16:04:53 +09:00
Kijin Sung
9dc8476f5d Set $output->data to NULL if query returns no rows 2021-01-31 01:43:07 +09:00
Kijin Sung
800f323b9c Fix count error when searching by extra_vars
https://xetown.com/questions/1519425
2021-01-31 01:34:56 +09:00
Kijin Sung
6b0ef1f468 Fix #1589 remove unnecessary build directory 2021-01-30 21:23:30 +09:00
Kijin Sung
f35692ffcf Version 2.0.6 2021-01-29 23:27:59 +09:00
Kijin Sung
957be16a25 Replace all wildcard columns with '1' in count-only subquery #1575 2021-01-29 14:40:28 +09:00
Kijin Sung
334b1cc277 Fix remainder of unit test warnings in PHP 8.0 2021-01-29 00:36:24 +09:00
Kijin Sung
e368cb2f2a Fix warnings in Debug class when config is empty 2021-01-28 23:34:15 +09:00
Kijin Sung
8e56fe5912 Fix warning in PHP 8.0 during unit tests 2021-01-28 23:04:27 +09:00
Kijin Sung
ebe28cd884 Fix warning in debug class if config doesn't exist 2021-01-28 22:46:52 +09:00
Kijin Sung
60465fb2db Fix various warnings in PHP 8.0 2021-01-28 22:32:56 +09:00
Kijin Sung
f46b41f437 Update unit tests for latest codeception 2021-01-28 21:53:44 +09:00
Kijin Sung
1ec6e1ec7a Change blacklist to 2-dimensional array
관리 편의를 위해 블랙리스트를 자료 종류별로 구분합니다.
단, 기존과 같이 Context::isBlacklistedPlugin()을 호출하면
자료 종류 구분 없이 블랙리스트 여부를 알려줍니다.
2021-01-24 11:39:42 +09:00
Kijin Sung
6b32bc6789 Fix #1573 add trackback module to blacklist 2021-01-24 11:03:06 +09:00
Kijin Sung
9bedd75a37 Wrap count query if there is a subquery column #1575 2021-01-24 11:00:09 +09:00
Kijin Sung
d7b9e0aa46 Change === to == because size can be a string 2021-01-22 01:10:23 +09:00
Kijin Sung
09a292440c Also restrict the charset if a column is defined as char(1) 2021-01-22 01:05:52 +09:00
Kijin Sung
2cec4ea6b4 Clean up utf8mb4 setting in default table schema 2021-01-22 01:01:58 +09:00
Kijin Sung
f751d59708 Use latin1 charset for ASCII-only columns that need to be short for indexing 2021-01-22 00:51:47 +09:00
Kijin Sung
aefa19e850 Fix SCSS imports with relative paths not working 2021-01-21 15:45:58 +09:00
Kijin Sung
2cdf9d0e2d Adjust loading priority of modules vs. plugins 2021-01-21 00:44:35 +09:00
Kijin Sung
e877b87664 Remove ssl_actions and add rewrite_level to inline JS 2021-01-20 23:55:09 +09:00
Kijin Sung
64baf4e8e3 Remove ssl_actions and add rewrite_level to inline JS 2021-01-20 23:53:58 +09:00
Kijin Sung
1bbd6cdb5f Force use of latest cacert.pem from Mozilla 2021-01-20 00:56:23 +09:00
Kijin Sung
0079fc7b38 Remove condition not needed in PHP 7 2021-01-20 00:55:57 +09:00
Kijin Sung
6f8a252cd1 Fix smtp security=none not being recognized 2021-01-20 00:34:23 +09:00
Kijin Sung
1e77fcdcf9 Version 2.0.5 2021-01-19 23:29:03 +09:00