Kijin Sung
1003f0ea49
Fix #1642 Fix #1647 보완
...
주의: 여기서 Context가 아닌 Session을 참조하면 무한루프에 빠지면서 memory_limit을 초과할 수 있음
2021-03-17 23:54:18 +09:00
Kijin Sung
fef8b10ce6
Fix #1642 Fix #1647 distinguish not-logged-in state before session start and after session start
2021-03-17 23:40:29 +09:00
Kijin Sung
a107ef1b90
Fix #1662 missing color scheme class on <body> when cookie exists
2021-03-17 23:01:43 +09:00
Kijin Sung
a64b91f72d
Change default unregistered domain action to 'display'
2021-03-14 15:49:33 +09:00
Kijin Sung
72e7532764
Fix compatibility with PBKDF2 hashes with iteration counts that are not zero-padded
2021-03-14 00:26:15 +09:00
Kijin Sung
77b522249d
Simplify autoloader logic
2021-03-08 16:51:39 +09:00
Kijin Sung
be1fbc9d65
Version 2.0.8
2021-02-28 11:16:47 +09:00
Kijin Sung
6b6c0eacfc
Fix SQL error when list count is 0
2021-02-26 16:25:11 +09:00
Kijin Sung
91b03795dc
Fix rx_ajax not working when a form contains file uploads
2021-02-24 11:02:29 +09:00
Kijin Sung
459fe2d959
Fix #1630 short URL for file download conflicts with other nginx directives
...
다운로드 짧은주소는 /files/download/123/456/filename.jpg 와 같은 형태를 띠므로
nginx에서 특정 확장자에 캐싱 헤더 추가 등의 설정을 걸어놓은 경우
해당 설정이 짧은주소보다 먼저 적용되어 짧은주소에서 404 오류가 나는 문제 해결.
2021-02-23 20:40:00 +09:00
Kijin Sung
e423cba24d
Use Origin header before Referer to check CSRF
...
OWASP에서는 Referer 헤더보다 Origin 헤더를 먼저 체크하는 것을 권장합니다.
Referer가 비어 있는 경우에도 Origin 헤더에는 유용한 정보가 들어 있을 수 있기 때문입니다.
https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
2021-02-23 16:51:46 +09:00
Kijin Sung
f4758b7570
Fix #1610 memory leak in initial debug status check
2021-02-10 00:27:04 +09:00
Kijin Sung
9b714acb55
Show memory usage in debug panel
2021-02-09 23:52:35 +09:00
Kijin Sung
6b7486e74f
Add 'ifvar' attribute to most query elements
...
XML 쿼리에서 'ifvar' 속성을 사용하여, 특정 변수가 있을 때만 유효한 테이블이나
컬럼, 인덱스 힌트 등을 지정할 수 있도록 합니다. 어떤 변수를 넣는지에 따라
<condition> 뿐 아니라 <table>, <column>, <index_hint? 등의 적용 여부도
XML 쿼리 수정 없이 자유롭게 컨트롤할 수 있게 됩니다.
2021-02-09 21:58:07 +09:00
Kijin Sung
1289776c97
Remove debug data from previous request (causes memory overage in PHP 8.0)
2021-02-09 19:33:47 +09:00
Kijin Sung
c5ceafc841
Fix debug disabled if first error or warning occurs before session start
2021-02-09 01:21:33 +09:00
Kijin Sung
0f33fa6539
Version 2.0.7
2021-02-05 21:37:44 +09:00
Kijin Sung
20871055e4
Support either/both username and password for Redis #1602
2021-02-05 21:04:20 +09:00
Kijin Sung
9160b867aa
Fix incorrect relative URLs in other JS libraries #1601
2021-02-05 11:50:13 +09:00
Kijin Sung
5c0c4a3f76
Fix #1601 relative path in ui.colorpicker
2021-02-05 11:45:01 +09:00
Kijin Sung
20e9009b9b
Add more items to reserved word list
2021-02-04 23:40:33 +09:00
Kijin Sung
a4ab4f4b03
Fix misleading error message
2021-02-04 21:09:23 +09:00
Kijin Sung
b9cb5f429a
Use savepoints for nested transactions
...
- XE에서 사용하던 savepoint 방식을 복원
- 트랜잭션 안에서 commit이 무시되더라도 해당 사실을 알리는 로그를 남기도록 함
2021-02-04 16:39:09 +09:00
Kijin Sung
ca5d90fd07
Make rx_ajax forms more customizable
2021-02-02 16:04:53 +09:00
Kijin Sung
9dc8476f5d
Set $output->data to NULL if query returns no rows
2021-01-31 01:43:07 +09:00
Kijin Sung
800f323b9c
Fix count error when searching by extra_vars
...
https://xetown.com/questions/1519425
2021-01-31 01:34:56 +09:00
Kijin Sung
6b0ef1f468
Fix #1589 remove unnecessary build directory
2021-01-30 21:23:30 +09:00
Kijin Sung
f35692ffcf
Version 2.0.6
2021-01-29 23:27:59 +09:00
Kijin Sung
957be16a25
Replace all wildcard columns with '1' in count-only subquery #1575
2021-01-29 14:40:28 +09:00
Kijin Sung
334b1cc277
Fix remainder of unit test warnings in PHP 8.0
2021-01-29 00:36:24 +09:00
Kijin Sung
e368cb2f2a
Fix warnings in Debug class when config is empty
2021-01-28 23:34:15 +09:00
Kijin Sung
8e56fe5912
Fix warning in PHP 8.0 during unit tests
2021-01-28 23:04:27 +09:00
Kijin Sung
ebe28cd884
Fix warning in debug class if config doesn't exist
2021-01-28 22:46:52 +09:00
Kijin Sung
60465fb2db
Fix various warnings in PHP 8.0
2021-01-28 22:32:56 +09:00
Kijin Sung
f46b41f437
Update unit tests for latest codeception
2021-01-28 21:53:44 +09:00
Kijin Sung
1ec6e1ec7a
Change blacklist to 2-dimensional array
...
관리 편의를 위해 블랙리스트를 자료 종류별로 구분합니다.
단, 기존과 같이 Context::isBlacklistedPlugin()을 호출하면
자료 종류 구분 없이 블랙리스트 여부를 알려줍니다.
2021-01-24 11:39:42 +09:00
Kijin Sung
6b32bc6789
Fix #1573 add trackback module to blacklist
2021-01-24 11:03:06 +09:00
Kijin Sung
9bedd75a37
Wrap count query if there is a subquery column #1575
2021-01-24 11:00:09 +09:00
Kijin Sung
d7b9e0aa46
Change === to == because size can be a string
2021-01-22 01:10:23 +09:00
Kijin Sung
09a292440c
Also restrict the charset if a column is defined as char(1)
2021-01-22 01:05:52 +09:00
Kijin Sung
2cec4ea6b4
Clean up utf8mb4 setting in default table schema
2021-01-22 01:01:58 +09:00
Kijin Sung
f751d59708
Use latin1 charset for ASCII-only columns that need to be short for indexing
2021-01-22 00:51:47 +09:00
Kijin Sung
aefa19e850
Fix SCSS imports with relative paths not working
2021-01-21 15:45:58 +09:00
Kijin Sung
2cdf9d0e2d
Adjust loading priority of modules vs. plugins
2021-01-21 00:44:35 +09:00
Kijin Sung
e877b87664
Remove ssl_actions and add rewrite_level to inline JS
2021-01-20 23:55:09 +09:00
Kijin Sung
64baf4e8e3
Remove ssl_actions and add rewrite_level to inline JS
2021-01-20 23:53:58 +09:00
Kijin Sung
1bbd6cdb5f
Force use of latest cacert.pem from Mozilla
2021-01-20 00:56:23 +09:00
Kijin Sung
0079fc7b38
Remove condition not needed in PHP 7
2021-01-20 00:55:57 +09:00
Kijin Sung
6f8a252cd1
Fix smtp security=none not being recognized
2021-01-20 00:34:23 +09:00
Kijin Sung
1e77fcdcf9
Version 2.0.5
2021-01-19 23:29:03 +09:00