Commit Graph

1069 Commits (545337174a480893eaec179af7b8b06d700ccc3f)
 

Author SHA1 Message Date
Eric Marguin 545337174a [svn r11172] insert a doctype when creating a full document with fckeditor (not a great solution, but i didn't find a better one) 18 years ago
Eric Marguin 8d2813ce41 [svn r11171] fix a bug with italian in fckeditor 18 years ago
Yannick Warnier 545077bf3a [svn r11170] Added XSS filtering (see http://projects.dokeos.com/?do=details&id=1200) 18 years ago
Yannick Warnier d052b26f17 [svn r11169] Added XSS filtering (see http://projects.dokeos.com/?do=details&id=1199) 18 years ago
Yannick Warnier a2e09679e9 [svn r11168] Improved filtering of coursePath, as extension of previous work (http://projects.dokeos.com/?do=details&id=1163). However, coursePath doesn't really seem to be used in this context (out of a course), so it should probably be removed in the long run 18 years ago
Yannick Warnier 08926b864b [svn r11167] Fixed security bug http://projects.dokeos.com/?do=details&id=1156 18 years ago
Yannick Warnier e978c8b7c3 [svn r11166] Fixed several security bugs pointed out by http://projects.dokeos.com/?do=details&id=1214 18 years ago
Yannick Warnier fc07894aac [svn r11165] Fixed security bug http://projects.dokeos.com/?do=details&id=1213 18 years ago
Yannick Warnier ebf8b08af2 [svn r11164] Changed an include() into a require() 18 years ago
Yannick Warnier c8d21d8dda [svn r11163] Escaped ID's to avoid SQL injections 18 years ago
Yannick Warnier 6bd59e76c0 [svn r11162] Fixed security bug http://projects.dokeos.com/?do=details&id=1211 by casting ID's as int 18 years ago
Yannick Warnier af659f16f5 [svn r11161] Removed potential SQL injection (http://projects.dokeos.com/?do=details&id=1202) 18 years ago
Yannick Warnier bd5bb44a23 [svn r11160] Added empty path to GetQuizName() call (prevent errors later on) 18 years ago
Yannick Warnier 7f2c907fc7 [svn r11159] Removed potential SQL injection (http://projects.dokeos.com/?do=details&id=1202) 18 years ago
Yannick Warnier 09f1b7fdd6 [svn r11158] Added explicit int cast, fixing security bug http://projects.dokeos.com/?do=details&id=1201 18 years ago
Yannick Warnier 734b185fe4 [svn r11157] Added non-filtering param to the Display::display_error_message() calls to avoid link translation 18 years ago
Yannick Warnier 7004b39655 [svn r11156] Added possibility of given token in check_token() 18 years ago
Yannick Warnier b22d273c37 [svn r11155] Split get_token() in get_token() and get_HTML_token() 18 years ago
Yannick Warnier a278f1e7a8 [svn r11154] Added filtering option (can opt-out) to the display_*_message() methods 18 years ago
Yannick Warnier 1ce945eadf [svn r11153] Escaping message for XSS attacks (using htmlentities()) - Fixes http://projects.dokeos.com/?do=details&id=1194 18 years ago
Yannick Warnier 3876ce53e0 [svn r11152] Updated directories filtering (using Security class) 18 years ago
Yannick Warnier cccbb88021 [svn r11151] Added comment for is_subdir_off() (deprecated) 18 years ago
Yannick Warnier bddbfd2fa1 [svn r11150] Fixed buggy strpos() call (using strlen rather than offset) 18 years ago
Yannick Warnier 6133fb050a [svn r11149] Fixed substr call for trailing slash 18 years ago
Yannick Warnier 862e87598f [svn r11148] Improvements to check_rel_path() and check_abs_path() in case the check_path is missing 18 years ago
Yannick Warnier ab5c4774bb [svn r11147] Added filter on downloaded file (closing bug #1150) http://projects.dokeos.com/?do=details&id=1150 18 years ago
Yannick Warnier 37b6a6c6ea [svn r11146] New security library. To be included in global.inc.php 18 years ago
Eric Marguin 434e230853 [svn r11145] session management upgrade (mainly to fix the bugs in session import) 18 years ago
Julian Prud'homme 6fefdc0fae [svn r11144] quick update of the chat 18 years ago
Julian Prud'homme 0eb7eefa7a [svn r11143] Update old iamges by nuvola images 18 years ago
Julian Prud'homme d5abac5108 [svn r11142] add language vars (scorm step status) and remove '[' and ']' 18 years ago
Julian Prud'homme 5c6e5aff75 [svn r11141] Change a bit the chat display 18 years ago
Julian Prud'homme 8ab064f4be [svn r11140] remove the double group name and clean up the code 18 years ago
Yannick Warnier 032c9a26ae [svn r11139] Renaming profile.conf.inc.php to profile.conf.php to follow other names in conf directory. Updated in install and update scripts as well as in auth/ directory where it is included 18 years ago
Yannick Warnier 33f1077c30 [svn r11138] Added links to PHP manual for recomendations 18 years ago
Yannick Warnier cbd1d4ab24 [svn r11137] Uppercasing first letter of categories 18 years ago
Yannick Warnier 21dc9790d4 [svn r11136] Added check for differenciation between course and no-course context while uploading images in FCKEditor 18 years ago
Yannick Warnier c7087732bc [svn r11135] Fixed CSS path in FCKEditor 18 years ago
Patrick Cool 54ae126b8f [svn r11134] delete unused files and update survey 18 years ago
Julian Prud'homme 3f8c05d30d [svn r11133] increase the width of select elements 18 years ago
Julian Prud'homme 164c682571 [svn r11132] Remove the XLS export and change an icon 18 years ago
Julian Prud'homme 6166e98d78 [svn r11131] 18 years ago
Julian Prud'homme 9438fbf27c [svn r11130] change the height of new forum description field 18 years ago
Julian Prud'homme f815e23e5d [svn r11129] New example document with new CSS 18 years ago
Julian Prud'homme d24c030296 [svn r11128] Add Mr dokeos in tests description 18 years ago
Julian Prud'homme 9e065df844 [svn r11127] Groups have now all tools activated by default 18 years ago
Patrick Cool 76ef11c5e8 [svn r11126] GPL license no longer appears in install procedure 18 years ago
Julian Prud'homme 6f1bf6ae34 [svn r11125] Fix multiple bugs : 18 years ago
Julian Prud'homme 425481fe66 [svn r11124] Fix display bug : missing pictures 18 years ago
Julian Prud'homme 063f87b8bc [svn r11123] fix a bug with session deleting 18 years ago