Bharat Mediratta 9588e8604d Use %27 instead of ' (the latter is the wrong form of escaping for urls).

2009-07-12 20:08:02 -07:00

..

admin_advanced_settings.php

Fix a bunch of XSS vulnerabilities turned up by manual inspection

2009-07-01 17:57:39 -07:00

admin_dashboard.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

admin_graphics.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

admin_languages.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

admin_maintenance.php

Added a wee bit of phpDoc.

2009-07-07 12:49:21 -07:00

admin_modules.php

Fix for ticket 510: i18n fixes - localize module / theme name in some status messages

2009-07-03 14:58:33 -07:00

admin_theme_options.php

Add a new "show credits" check box in the theme options so that you

2009-06-23 16:05:32 -07:00

admin_themes.php

Fix for ticket 510: i18n fixes - localize module / theme name in some status messages

2009-07-03 14:58:33 -07:00

admin.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

after_install.php

Restructure things so that the application is now just another module.

2009-05-27 15:07:27 -07:00

albums.php

Fix a bunch of XSS vulnerabilities turned up by manual inspection

2009-07-01 17:57:39 -07:00

combined.php

Use the appropriate content-type for javascript (application/javascript).

2009-06-29 21:59:00 -07:00

file_proxy.php

Use %27 instead of ' (the latter is the wrong form of escaping for urls).

2009-07-12 20:08:02 -07:00

items.php

Restructure things so that the application is now just another module.

2009-05-27 15:07:27 -07:00

l10n_client.php

Add option to list *all* l10n messages (that have been indexed) in l10n UI

2009-06-16 20:25:01 -07:00

maintenance.php

Restructure things so that the application is now just another module.

2009-05-27 15:07:27 -07:00

move.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

movies.php

Fix a bunch of XSS vulnerabilities turned up by manual inspection

2009-07-01 17:57:39 -07:00

packager.php

Turn off extended inserts when creating install.sql so that it's

2009-07-11 05:36:31 -07:00

permissions.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

photos.php

Fix a bunch of XSS vulnerabilities turned up by manual inspection

2009-07-01 17:57:39 -07:00

quick.php

Fix a problem in delete() where we were referencing $parent without

2009-07-11 07:45:41 -07:00

rest.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

simple_uploader.php

Fix a bug where we're referring to $photo when we just uploaded a

2009-07-11 06:24:10 -07:00

upgrader.php

Rejigger the way we handle "done" status in the upgrader. Now we

2009-06-30 18:28:55 -07:00