#
369ff201 |
| 02-Apr-2021 |
Nikita Popov |
Try adding Reply-To header to commit mails Not sure whether this will get stripped by the mailing list, but let's try it. I don't want to specify the author/committer email in From,
Try adding Reply-To header to commit mails Not sure whether this will get stripped by the mailing list, but let's try it. I don't want to specify the author/committer email in From, as it'll likely run afoul of DMARC.
show more ...
|
#
2163871e |
| 01-Apr-2021 |
Nikita Popov |
Use db_query_safe() in forgot.php
|
#
6cc0deb4 |
| 01-Apr-2021 |
Nikita Popov |
Use db_connect() in some places
|
#
c8506579 |
| 31-Mar-2021 |
Nikita Popov |
Remove get_magic_quotes_gpc() checks master.php.net runs PHP 5.4, where magic quotes no longer exist. Add a sanity check that they're really disable, and drop code handling them. The
Remove get_magic_quotes_gpc() checks master.php.net runs PHP 5.4, where magic quotes no longer exist. Add a sanity check that they're really disable, and drop code handling them. There was at least one use of escape() that wouldn't do the right thing if this code was run with magic quotes.
show more ...
|
#
f417e150 |
| 30-Mar-2021 |
Rasmus Lerdorf |
Switch forgot.php to PHPMailer
|
#
0e511803 |
| 10-Dec-2018 |
Peter Kokot |
Refactor long array() syntax to short [] Since app is using PHP 5.4+ already, the longer `array()` syntax can be refactored to shorter `[]`.
|
#
9404bdc8 |
| 11-Jun-2014 |
kovacs.ferenc |
escape the $user variable coming from $_REQUEST magic_quote_gpc makes this not exploitable, but we should move away from that sooner or later
|
#
3b8fa228 |
| 03-Apr-2014 |
Johannes Schlüter |
Improve escaping
|
#
ada579ee |
| 11-Dec-2013 |
Hannes Magnusson |
Kill md5 and CVS fallbacks.. People that have never logged in since the move to SVN Are effectively blocked out by this change and they'll have to reset their passwords.
|
#
f4e4f1ea |
| 11-Dec-2013 |
Hannes Magnusson |
Kill a tiny svn-auth.inc
|
#
3d00fb0b |
| 29-Oct-2012 |
Rasmus Lerdorf |
Test commit
|
#
995de91d |
| 22-Jan-2012 |
Rasmus Lerdorf |
clean up
|
#
aaea42a2 |
| 22-Jan-2012 |
Rasmus Lerdorf |
Remove transitional master2 name
|
#
a99a7f01 |
| 21-Jan-2012 |
Rasmus Lerdorf |
Get rid of some time() calls - they bug me
|
#
42888ee6 |
| 20-Jan-2012 |
Rasmus Lerdorf |
switch these to master2
|
#
1937aa34 |
| 25-Mar-2011 |
Rasmus Lerdorf |
No need to show PHP_SELF here
|
#
974db140 |
| 24-Mar-2011 |
Felipe Pena |
- Fixed bug #54376 (XSS vulnerability in master...)
|
#
91b2b579 |
| 23-Mar-2011 |
Hannes Magnusson |
link to https
|
#
9eea3aa6 |
| 17-Aug-2010 |
Hannes Magnusson |
cvs => svn/vcs
|
#
9d3d6b6b |
| 16-Dec-2008 |
Hannes Magnusson |
Update to generate the svn pass too
|
#
d5d7d4d6 |
| 17-Jun-2007 |
Wez Furlong |
let the mx do the expansion
|
#
4bbbd464 |
| 17-Jun-2007 |
Hannes Magnusson |
Set the envelope sender to noreply@php.net
|
Revision tags: BEFORE_CONTENT_LAYOUT_SEP, BEFORE_SOC06, PHPGCOVWEB_1_0, RELEASE_1_0_4 |
|
#
8bb7d990 |
| 06-Aug-2004 |
Wez Furlong |
Rename php3 -> phpmasterdb
|
#
f0726310 |
| 15-Feb-2004 |
Stig Bakken |
* typo
|
#
c6a22c21 |
| 06-Sep-2003 |
James Cox |
's/pconnect/connect/g'
|