Andy Staudacher a2e2a2178b Using SafeString in album controller / view

2009-08-29 10:40:34 -07:00

..

admin_advanced_settings.php

Fix a bunch of XSS vulnerabilities turned up by manual inspection

2009-07-01 17:57:39 -07:00

admin_dashboard.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

admin_graphics.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

admin_languages.php

Rename "locale" helper to "locales" to avoid conflicting with PHP 5.3.

2009-07-17 18:35:06 -07:00

admin_maintenance.php

Added a wee bit of phpDoc.

2009-07-07 12:49:21 -07:00

admin_modules.php

Fix for ticket 510: i18n fixes - localize module / theme name in some status messages

2009-07-03 14:58:33 -07:00

admin_theme_options.php

Add a new "show credits" check box in the theme options so that you

2009-06-23 16:05:32 -07:00

admin_themes.php

Fix for ticket 510: i18n fixes - localize module / theme name in some status messages

2009-07-03 14:58:33 -07:00

admin.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

after_install.php

Restructure things so that the application is now just another module.

2009-05-27 15:07:27 -07:00

albums.php

Using SafeString in album controller / view

2009-08-29 10:40:34 -07:00

combined.php

Don't send back the gzipped version if we're using

2009-07-17 16:58:00 -07:00

file_proxy.php

Properly display thumbnails for private movies by backtracking from

2009-07-21 12:26:16 -07:00

items.php

Restructure things so that the application is now just another module.

2009-05-27 15:07:27 -07:00

l10n_client.php

Add option to list *all* l10n messages (that have been indexed) in l10n UI

2009-06-16 20:25:01 -07:00

maintenance.php

Restructure things so that the application is now just another module.

2009-05-27 15:07:27 -07:00

move.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

movies.php

Revert commit 078c77a62b and change the

2009-07-28 21:00:25 +08:00

packager.php

Turn off extended inserts when creating install.sql so that it's

2009-07-11 05:36:31 -07:00

permissions.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

photos.php

Revert commit 078c77a62b and change the

2009-07-28 21:00:25 +08:00

quick.php

Fix a problem in delete() where we were referencing $parent without

2009-07-11 07:45:41 -07:00

rest.php

Security pass over all controller code. Mostly adding CSRF checking

2009-06-01 22:40:22 -07:00

simple_uploader.php

Remove spurious blank line at the top of the file introduced in 09c9b1a755

2009-07-16 10:27:18 -07:00

upgrader.php

Rejigger the way we handle "done" status in the upgrader. Now we

2009-06-30 18:28:55 -07:00