419 Commits
Author SHA1 Message Date
liugang 3be3a632f8 * Fix the vulnerability that induces users to click on links with sessionID to bypass authentication. 2024-05-13 16:56:38 +08:00
hufangzhou 6c4c84ea43 * Fix bug #47682. 2024-04-11 09:38:21 +08:00
宋辰轩 695055c6b1 * Fix bug for api priv check. 2024-04-10 15:07:20 +08:00
liugang f9834936df + helper: filter the sessionID paramter to fix directory traversal vulnerablity. 2024-04-08 14:59:46 +08:00
王怡栋 0dafb6591e * Fix bug #46104. 2024-03-19 13:23:18 +08:00
hufangzhou 43cf123289 * Fix bug #46213. 2024-03-18 17:03:11 +08:00
qixinzhi 45b352e301 Merge branch '18.x+bi' into 18.x 2024-02-05 09:24:26 +08:00
qixinzhi 10372a0faf * Add sqlite for metric calculate. 2024-01-18 13:43:39 +08:00
hufangzhou e5f64c83fd * Check account first, then add single quotes. 2024-01-04 16:54:55 +08:00
hufangzhou a6607c9c0a * Finish story #52015. 2024-01-04 16:21:13 +08:00
dingguodong a57aaed716 * Add codes to control if it can be upgraded automatically or has a valid safe file. 2023-12-26 08:48:31 +08:00
caoyanyi b151a07fa8 * Adjust env get rule for platform. 2023-12-19 13:30:30 +08:00
caoyanyi cf5a8cda83 + Add env config for devops. 2023-12-04 10:32:41 +08:00
caoyanyi e62d68b8f2 * Adjust webroot get type. 2023-11-30 14:38:44 +08:00
caoyanyi ef80dfebe1 + Add env config for devops. 2023-11-24 13:09:09 +08:00
qixinzhi eb37d9b851 * Add throw error variable of app. 2023-11-23 13:07:18 +08:00
sunhao 316d41e624 * zin: update zin lib from master. 2023-11-21 10:21:19 +08:00
zhujinyong b57c30f87d * Fix warning for hook. 2023-11-20 10:42:28 +08:00
zhujinyong 358a19f6ec * Split sql log. 2023-11-17 13:27:00 +08:00
zhujinyong 4bfbf17845 * Clear cron queue. 2023-11-16 10:03:11 +08:00
zhujinyong 76e6253ffa * Split tmp files for cli. 2023-11-15 13:51:24 +08:00
zhujinyong 087998eb8e + Run cron by RoadRunner. 2023-11-14 14:16:43 +08:00
chaideqing 0b6c8f3330 * Fix show error when user not login in or vision. 2023-09-20 01:58:16 +00:00
caoyanyi 23e65c0662 * Fix error for defined param. 2023-09-18 15:27:40 +08:00
zhaoke 921eb82be6 * Fix bug #38526. 2023-09-12 09:56:52 +08:00
zhaoke d620591dbc * Fix bug #38526. 2023-09-12 08:32:04 +08:00
zhaoke f6374bf0b8 * Fix bug #38510. 2023-09-11 14:52:50 +08:00
zhujinyong 1376e7667c - Reset commit. 2023-09-11 14:10:27 +08:00
zhujinyong fdc9ffa298 * Fix HTTP_REFERER. 2023-09-11 13:59:51 +08:00
zhaoke 08522225c2 * Remove unused code. 2023-09-11 11:26:09 +08:00
zhaoke bd6a59a523 * Add version prefix of devops version. 2023-09-09 14:15:56 +08:00
zhujinyong 3eff615806 * Check dbh. 2023-09-08 08:23:22 +08:00
zhujinyong 19170148fe * Use dbQuery() instead of dbh->query(). 2023-09-05 14:16:12 +08:00
caoyanyi 3ea5fc3d4e * Move methed to base. 2023-09-05 12:20:43 +08:00
zhujinyong a7b2e57464 * Fix params error. 2023-09-01 16:07:52 +08:00
Lufei addb08042c * Use mt_rand instead of random_int. 2023-08-31 17:07:21 +08:00
zhujinyong 41d7d88f57 * Modify config of slave db. 2023-08-31 13:50:02 +08:00
zhaoke 1875e27887 * Set use zui3 as default. 2023-08-31 09:41:38 +08:00
zhujinyong 1e8616c812 + Add slave dbs and bi db. 2023-08-30 18:06:32 +08:00
zhujinyong 75f80be864 * Use mb_strpos instead of str_contains. 2023-08-30 16:09:28 +08:00
tanghucheng 02bb25d203 * Fix bug #37770. 2023-08-30 11:00:09 +08:00
caoyanyi 1b3c611e02 * Fix var is empty error for app checkModuleName. 2023-08-30 10:38:57 +08:00
wangyidong 7d274eb644 * Adjust null to string from pdo. 2023-08-30 08:53:52 +08:00
wangyidong abbbc8d984 * Fix bug #37584. 2023-08-30 08:53:52 +08:00
zenggang 29f2f5187b * Merge 18.x 2023-08-28 10:27:22 +00:00
wangyidong 5789c25d12 * Fix bug #37592. 2023-08-25 15:25:39 +08:00
wangyidong d47d27767d * Fix bug #37595. 2023-08-25 15:19:12 +08:00
wangyidong 2c4fac09b8 * Adjust for php8.1. 2023-08-25 13:23:25 +08:00
leiyong ec5ae13520 * Get account from cookie. 2023-08-23 06:25:00 +00:00
wangyidong dd38ccd156 * Fix security vulnerabilities. 2023-08-21 09:15:09 +08:00