1580 commits

Author	SHA1	Message	Date
Kijin Sung	e17c4b9c38	Update CKEditor to 4.6.2	2017-02-16 01:17:15 +09:00
Kijin Sung	6b0dd6c192	Standardize password hashing work factor to 10 by default	2017-02-15 11:34:39 +09:00
Kijin Sung	45bde4d1f0	Set session.use_keys to false by default	2017-02-15 11:30:49 +09:00
Kijin Sung	b43c653186	Add options to control session keys and SSL-only attribute	2017-02-14 13:37:30 +09:00
Kijin Sung	dea757cfb7	Do not refresh session keys over POST	2017-02-13 17:49:27 +09:00
Kijin Sung	a6fee16b68	Extend detection of buggy user agents that cannot handle session keys	2017-02-13 17:28:04 +09:00
Kijin Sung	9c96dc04bc	Remove debugging code	2017-02-13 16:54:25 +09:00
Kijin Sung	aeb42891b0	Do not check security keys if session was started on Android webview	2017-02-13 16:53:30 +09:00
Kijin Sung	ba925150a3	Quash www subdomain to prevent duplicate sessions	2017-02-13 13:55:47 +09:00
Kijin Sung	4a4612938a	Show warning when a session is discarded due to invalid keys	2017-02-12 23:12:53 +09:00
Kijin Sung	1a0e49dcfb	Change method for storing and caching session validity information	2017-02-12 23:00:53 +09:00
Kijin Sung	9884bbb3b8	Fix inconsistent whitespace	2017-02-11 21:55:01 +09:00
Kijin Sung	31623842ba	Fix logout bug in admin module	2017-02-11 21:41:21 +09:00
Kijin Sung	1e532c51a4	Restore member_srl if it was changed by a third-party program	2017-02-11 21:13:18 +09:00
Kijin Sung	fd02fa968c	Fix #702 Punycode error on attempting to handle long URLs	2017-02-11 17:48:52 +09:00
Kijin Sung	0a5042ec6e	Fix potential fatal error when migrating from previous session	2017-02-11 14:21:21 +09:00
Kijin Sung	b32ae03396	Fix session variables being reset to an empty string	2017-02-11 14:15:38 +09:00
Kijin Sung	99cb67b5db	Merge pull request #567 from kijin/pr/session-class ... 세션 처리 관련 기능 정리 및 개선	2017-02-10 21:30:06 +09:00
Kijin Sung	5f7b4837dc	Add more safeguards for the possibility of an empty member_srl	2017-02-10 20:59:17 +09:00
Kijin Sung	57ab94187e	Remove static keyword	2017-02-10 20:53:38 +09:00
Kijin Sung	dfdbc1db85	Add session helper class and move remainder of session validation logic to Session class	2017-02-10 20:50:38 +09:00
Kijin Sung	eea7518e98	Add auto_login module to blacklist	2017-02-10 19:28:26 +09:00
Kijin Sung	4b26db9932	Fix unit tests, and add tests for Session::isValid()	2017-02-09 00:42:34 +09:00
Kijin Sung	3be0e79abb	Improve session invalidation routines	2017-02-09 00:34:01 +09:00
Kijin Sung	c7d8d84500	Add option to invalidate other sessions on password change ... Feature request in https://www.xetown.com/lakepark/345786	2017-02-09 00:06:32 +09:00
Kijin Sung	bdb10d57c5	Miscellaneous fixes to session handling	2017-02-08 21:35:00 +09:00
Kijin Sung	59c3fa1381	Fix unexpected cast to int	2017-02-08 18:06:26 +09:00
Kijin Sung	2af90c8e1d	Implement autologin in the Session class	2017-02-08 17:08:31 +09:00
Kijin Sung	1a8dcd6a34	Do not cause fatal error when query cache file failed to load	2017-02-08 14:12:44 +09:00
Kijin Sung	af41f36bf7	Move checkSSO() from Context class to Session class	2017-02-07 23:26:43 +09:00
Kijin Sung	483ac84796	Merge branch 'develop' into pr/session-class	2017-02-07 22:13:08 +09:00
Kijin Sung	e1ffe39a2e	Use Rhymix Framework to decide whether a file can be directly downloaded ... xpressengine/xe-core#1997	2017-02-06 15:58:10 +09:00
Kijin Sung	607e9357c2	Merge pull request #686 from kijin/pr/delete-empty-folders ... 빈 폴더 자동 삭제 및 일괄 삭제	2017-02-05 22:57:02 +09:00
Kijin Sung	b54171f8bf	Display error when Rhymix cannot update system configuration file ... Possible cause of https://www.xetown.com/qna/491349	2017-02-02 19:59:22 +09:00
Kijin Sung	2cb5c460f9	Merge branch 'develop' into pr/delete-empty-folders	2017-01-31 13:54:38 +09:00
Kijin Sung	0f9b8cc3d6	Allow controlling allowed classes in HTMLPurifier	2017-01-31 11:45:46 +09:00
Kijin Sung	c724d72781	Break early if there are no more garbage files to clean	2017-01-27 15:16:46 +09:00
Kijin Sung	b767ff7a94	Add shell script to delete garbage files and discarded chunks	2017-01-27 15:15:32 +09:00
Kijin Sung	054191a69d	Add some PHP-CLI scripts to be run as cronjobs	2017-01-26 21:29:22 +09:00
Kijin Sung	30cdf63b77	Refactor Storage::recommendUmask() into Storage::getServerUID()	2017-01-26 21:29:01 +09:00
Kijin Sung	5b017affa1	Update String.prototype.trim and add String.prototype.escape	2017-01-26 19:12:18 +09:00
Kijin Sung	5f83192e5d	Remove slashes before trying to delete empty directories	2017-01-26 18:30:09 +09:00
Kijin Sung	3dc736817d	Add Storage::deleteEmptyDirectory() to recursively clear empty directories	2017-01-26 18:01:27 +09:00
Kijin Sung	91ff3c6323	Add array_escape() function to escape all keys and values of an array or object	2017-01-26 14:41:03 +09:00
conory	699937a09e	action 없이 실행 할 수 있도록	2017-01-21 21:33:58 +09:00
Kijin Sung	61a6c01d26	Do not remove @, #, & from attached file names	2017-01-18 00:01:49 +09:00
Kijin Sung	fe5a4221ea	Patch 1.8.29	2017-01-12 20:21:57 +09:00
Kijin Sung	caaada6a71	Version 1.8.28	2017-01-12 15:10:32 +09:00
Kijin Sung	f9c26e19fc	Add common constants for status	2016-12-20 14:10:44 +09:00
Kijin Sung	65cde17d7e	Fix #351 automatically remove image from editor if attachment is deleted	2016-12-18 10:58:30 +09:00