Commit Graph
145 Commits
Author SHA1 Message Date
tianshujie 0094d12bae * Add $app non-null judgment. 2024-05-14 16:54:50 +08:00
liugang 7eb23e1dad * Fix the vulnerability that induces users to click on links with sessionID to bypass authentication. 2024-05-13 16:58:29 +08:00
dingguodong bfc2f1cae2 * Optimize and fix the issue when zentaopms hides behind the proxy server. 2024-05-09 11:32:12 +08:00
liugang e59a7f23ee * baseHelper: return true if the file exists in cache. 2024-04-26 16:17:38 +08:00
liugang 549cdd55c1 - baseHelper: remove unused empty line. 2024-04-26 16:14:05 +08:00
liugang 7a5791fa62 + baseHelper: cache loaded directories to improve effeciency. 2024-04-23 14:02:57 +08:00
liugang 46f40ac116 + baseHelper: filter the sessionID paramter to fix directory traversal vulnerablity. 2024-04-08 15:01:28 +08:00
tianshujie eb5e2dde89 + Add onlybody to popup links on old pages. 2024-03-07 09:07:12 +08:00
tianshujie 01e97e2301 * Fix bug #46576. 2024-03-05 15:25:15 +08:00
sunhao a5b694a8c4 * framework: remove max height limit of debug info. 2024-02-27 19:46:38 +08:00
sunhao 06b4654b8c * framework: change style for dump block. 2024-02-26 17:09:46 +08:00
tianshujie f71f0a52c0 + Add isonlybody param of the link. 2024-02-26 16:12:23 +08:00
caoyanyi e1fa74ba2a * Adjust web root set for platform. 2024-01-10 09:55:50 +08:00
caoyanyi a6ea2b7c82 * Move end method to base. 2024-01-09 11:09:41 +08:00
liugang db4629560d * baseHelper: convert the variable to string before passing it to the htmlspecialchars function. 2024-01-03 19:53:44 +08:00
朱金勇 54fec63da5 * Fix webroot in cli. 2023-12-28 18:53:42 +08:00
liugang 02038b8c35 * baseHelper: refactor the setcookie method to use cookie in test mode. 2023-12-21 09:47:08 +08:00
caoyanyi d640adb59b * Adjust env get rule for platform. 2023-12-19 13:31:32 +08:00
caoyanyi db2524cc70 + Add env config for devops. 2023-12-04 10:39:11 +08:00
tanghucheng 3d94eac50a Merge branch 'Merge184' into c07e4a71eb 2023-11-30 21:21:55 -05:00
caoyanyi a794a5f8fb + Add env config for devops. 2023-11-24 13:32:33 +08:00
tanghucheng 2382769fac * Merge 18.8 framework into Merge184. 2023-11-22 21:45:49 -05:00
liumengyi 4c6eca5b4d * setCookie can accept the value type of string or int or bool, and then convert it to string. 2023-11-22 10:26:39 +08:00
songchenxuan 673b0920ed * Merge commit 138834b253. 2023-11-10 09:47:27 +08:00
tianshujie 7e71f0f1e5 - Remove isonlybody param of the link. 2023-11-03 10:42:58 +08:00
dingguodong 17840b2909 * Return directly if PHP_SAPI is cli. 2023-10-27 13:11:54 +08:00
wangyidong 40571b3b36 * Adjust for product browse. 2023-10-16 14:30:45 +08:00
zhaoke 7a39c16ec2 * Fix monoco editor error of repo. 2023-10-09 13:51:28 +08:00
dingguodong 794297554a * Fix invalid variable. 2023-10-08 15:15:11 +08:00
dingguodong 5e66ea2097 * Format the code. 2023-09-28 13:01:41 +08:00
dingguodong 0b89e71fdc + Add a helper function to wrap mysql reserved word. 2023-09-28 11:34:57 +08:00
dingguodong 5234f01110 * Use = instead of IN if there is only one item to compare. 2023-09-22 10:44:29 +08:00
caoyanyi 617ad19afc * Change defined check rule. 2023-09-18 15:11:32 +08:00
liugang 78981a4de2 + helper: manually update the global variable $_COOKIE because sometimes its value is not updated after executing the setcookie function. 2023-09-18 14:03:58 +08:00
caoyanyi a2ad8b707a * Move method to base helper. 2023-09-07 14:05:17 +08:00
Lufei cfef831437 * Use mt_rand instead of random_int. 2023-08-31 17:10:48 +08:00
caoyanyi 1f20d8a9d2 * Don't set cookie for RUN_MODE is test. 2023-08-16 15:44:44 +08:00
wangyidong f07d712e48 * Add dev api page. 2023-08-01 16:59:47 +08:00
dingguodong 3ad190e9a8 * Fix typo, rename secend to second. 2023-08-01 16:27:46 +08:00
sunhao 7b3e359a6a * refactor isAjaxRequest helper, support to check fetch request. 2023-07-17 22:00:15 +08:00
zhaoke 81a2b83b9a * Fix issue of sonarqube and add losed function of quickon. 2023-07-13 13:47:33 +08:00
朱金勇 640e8f4482 * Use helper::setcookie. 2023-07-11 07:28:39 +00:00
dingyongliang 826dc15458 * zin: refactor isAjaxRequest. 2023-07-10 11:19:43 +08:00
dingguodong ba62bdc039 + Add uninitialized variable. 2023-07-06 14:44:11 +08:00
朱金勇 2d12aea936 * Wrapper header function for roadrunner. 2023-07-03 08:09:26 +00:00
wangyidong c633e24758 * Add isInModal function and adjust delete story. 2023-06-27 15:08:40 +08:00
dingguodong 95c624ecd3 * Return 0 if any parameter is empty or null. 2023-06-15 15:39:58 +08:00
dingguodong a376bad953 * Transform nullable date to '0000-00-00'; 2023-06-12 16:46:59 +08:00
dingguodong 5ddc7cc630 * Extract this increment or decrement operator into a dedicated statement. 2023-05-31 10:36:01 +08:00
dingguodong 348762a0b1 * Reformat code, move this open curly brace to the beginning of next line. 2023-05-31 10:36:01 +08:00