Commit graph

18188 commits

Author SHA1 Message Date
Kijin Sung
e423cba24d Use Origin header before Referer to check CSRF
OWASP에서는 Referer 헤더보다 Origin 헤더를 먼저 체크하는 것을 권장합니다.
Referer가 비어 있는 경우에도 Origin 헤더에는 유용한 정보가 들어 있을 수 있기 때문입니다.

https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html
2021-02-23 16:51:46 +09:00
Kijin Sung
6a568e8e79 Fix #1635 uninitialized variables in procLayoutAdminCopyLayout() 2021-02-23 15:37:52 +09:00
Kijin Sung
d0916abf7f Fix unnecessary cast to array after executeQuery() 2021-02-23 15:33:56 +09:00
Kijin Sung
80afa6720c
Merge pull request #1624 from shydah/pr/manage-document-popup
Resolve #1595 - 게시물 관리 사용 시 게시판이 기본 선택되도록 개선
2021-02-22 22:32:58 +09:00
Kijin Sung
e8c5ee02d2 Fix error in PHP 8.0 if $INPUT_ERROR has more than one dimension 2021-02-22 22:32:36 +09:00
Kijin Sung
b2af6eeed7 #1624 보완 2021-02-22 22:25:19 +09:00
Kijin Sung
4fe083b3c7 Fix #1625 failure to preserve comment with children when parent is moved to trash 2021-02-22 22:00:41 +09:00
Kijin Sung
0188bb817b Fix #1629 error when more than one menu is named '__ADMINMENU_V17__' 2021-02-22 21:27:20 +09:00
Kijin Sung
9412cc4a22 Fix #1628 error in PHP 8.0 in editor component setup screen 2021-02-22 21:11:39 +09:00
Kijin Sung
82398be24a Fix #1633 mobile list_count and page_count not being recognized 2021-02-22 21:06:52 +09:00
Kijin Sung
73c35e2f31 Call Debug::isEnabledForCurrentUser() in Context::init() after session start 2021-02-22 21:03:51 +09:00
Kijin Sung
7e30c7b02e Fix #1626 incorrect relative URL in advanced mailer module 2021-02-19 01:07:44 +09:00
Kijin Sung
05cef078f2 Fix #1627 suspected errors in PHP 8.0 2021-02-19 01:05:28 +09:00
Chanyoung Oh
7d22aad8d1 Remove duplicate declared function
* Remove duplicate `insertSelectedModule` function declaration
2021-02-18 11:14:38 +09:00
BJRambo
bc4abef975 레이아웃 메뉴 설정 항목의 초기화를 반복문 밖에서 하도록 고침 2021-02-18 01:25:55 +09:00
BJRambo
a6e52f9f4f b0a72bb222 에서 잘못 선언한 변수들 고침 2021-02-18 00:37:40 +09:00
BJRambo
b0a72bb222 #1627 레이아웃 버전이 0.1 일경우 PHP8.0에서 발생하는 오류 고침 2021-02-17 23:59:18 +09:00
Chanyoung Oh
b483992c83 Fix bug with non-existent mid
* Use is_null instead of is_bool to check module
2021-02-16 14:33:10 +00:00
Chanyoung Oh
400bbeeb6a Update skins to use mid instead of module_srl
* Update XEDITION, XE Default skin to use mid instead of module_srl
when opening document management popup
2021-02-16 14:11:25 +00:00
Chanyoung Oh
6c51f3234e Set target module based on article list when managing documents 2021-02-15 14:59:41 +00:00
Chanyoung Oh
a75f0b1c3b Update skins to provide module_srl - Issue #1595
* Update default skins (XEDITION, default) to provide `module_srl` to
document management popup
2021-02-13 13:49:07 +00:00
Chanyoung Oh
4fac931f28 Initialize category list if module_srl is provied - Issue #1595 2021-02-13 13:40:22 +00:00
Kijin Sung
acda40eba9 Fix #1616 error in PHP 8.0 2021-02-12 16:30:46 +09:00
Kijin Sung
1a1af16a3a Fix #1615 remove unnessary $friend_count variable 2021-02-11 21:42:42 +09:00
Kijin Sung
00519cce5d Fix #1612 error in PHP 8.0 2021-02-11 20:25:05 +09:00
Kijin Sung
7df902a282 Add mid to declare popup URL 2021-02-11 20:22:16 +09:00
Kijin Sung
68829a3427 Fix #1614 return numerical array by default in getModuleSrlByMid() 2021-02-11 20:18:26 +09:00
Kijin Sung
906b20e17e Load updated lang code cache immediately after calling makeCacheDefinedLangCode() 2021-02-11 20:14:57 +09:00
Kijin Sung
fb374a36ca Fix double escape of lang code in index module title 2021-02-11 20:03:25 +09:00
Kijin Sung
8c2bfd8297 Fix #1611 query error in declared document/comment list page 2021-02-10 15:57:13 +09:00
Kijin Sung
6b956d2e5b Allow admin to report (declare) even if it's the same IP 2021-02-10 15:56:47 +09:00
Kijin Sung
e8e6546067 Fix #1608 leave copy of notice in board manager's message box 2021-02-10 00:49:52 +09:00
Kijin Sung
f4758b7570 Fix #1610 memory leak in initial debug status check 2021-02-10 00:27:04 +09:00
Kijin Sung
9c77f9593d Fix warning in PHP 8.0 2021-02-09 23:53:00 +09:00
Kijin Sung
9b714acb55 Show memory usage in debug panel 2021-02-09 23:52:35 +09:00
Kijin Sung
08f8e0ccd4 Increase codeception timeout to 180s 2021-02-09 22:11:09 +09:00
Kijin Sung
958c7a7ce0 Don't join document_extra_vars again if not sorting by extra_vars 2021-02-09 22:00:40 +09:00
Kijin Sung
6b7486e74f Add 'ifvar' attribute to most query elements
XML 쿼리에서 'ifvar' 속성을 사용하여, 특정 변수가 있을 때만 유효한 테이블이나
컬럼, 인덱스 힌트 등을 지정할 수 있도록 합니다. 어떤 변수를 넣는지에 따라
<condition> 뿐 아니라 <table>, <column>, <index_hint? 등의 적용 여부도
XML 쿼리 수정 없이 자유롭게 컨트롤할 수 있게 됩니다.
2021-02-09 21:58:07 +09:00
Kijin Sung
1289776c97 Remove debug data from previous request (causes memory overage in PHP 8.0) 2021-02-09 19:33:47 +09:00
Kijin Sung
ae163b95d4 Fix error in video thumbnail command (#1552 regression) 2021-02-09 19:29:15 +09:00
Kijin Sung
c6f728cec6 Fix warnings in PHP 8.0 related to editor components 2021-02-09 01:21:53 +09:00
Kijin Sung
c5ceafc841 Fix debug disabled if first error or warning occurs before session start 2021-02-09 01:21:33 +09:00
Kijin Sung
b2933b7ae2 Fix #1605 incorrect lang reference in spamfilter module 2021-02-08 21:42:32 +09:00
Kijin Sung
0986ddf87d Fix #1607 denied/limited reason not being saved as extra vars 2021-02-08 21:40:39 +09:00
Kijin Sung
588520ff4b Fix warnings in PHP 8.0 2021-02-08 21:27:06 +09:00
Kijin Sung
686699c2ee Fix warning in PHP 8.0 2021-02-08 21:16:49 +09:00
Kijin Sung
ebe806f7a5 Fix warnings in PHP 8.0 2021-02-07 15:29:28 +09:00
Kijin Sung
2cf2ce2d67 Fix #1604 warnings and errors in PHP 8.0 in dispFileAdminList 2021-02-07 15:29:05 +09:00
Kijin Sung
c97edded9d Always load is_notice column 2021-02-06 22:10:54 +09:00
BJRambo
9cac59095b 모바일 문서 페이지 접속시 PC와 동일한 스킨 사용시 템플릿 문서를 찾지 못하는 문제 고침 2021-02-06 12:32:29 +09:00