Commit Graph

165 Commits

Author SHA1 Message Date
Laurent Destailleur
b750e98d40 Fix: Pb of file upload and download. 2014-02-08 02:02:01 +01:00
Laurent Destailleur
85436f871c Sec: Missing permission tests 2014-01-30 11:48:14 +01:00
Laurent Destailleur
696ad07871 LF 2013-06-26 16:45:42 +02:00
Laurent Destailleur
9b235f6879 Fix: Remove space at end of binary files 2013-06-26 02:05:18 +02:00
Laurent Destailleur
1d8b9949d6 Merge remote-tracking branch 'origin/3.4' into develop
Conflicts:
	htdocs/compta/bank/annuel.php
	htdocs/compta/bank/categ.php
	htdocs/compta/bank/releve.php
	htdocs/core/class/hookmanager.class.php
	htdocs/core/class/html.formfile.class.php
	htdocs/core/modules/livraison/pdf/pdf_typhon.modules.php
	htdocs/core/tpl/contacts.tpl.php
	htdocs/cron/list.php
	htdocs/main.inc.php
	htdocs/public/paybox/paymentko.php
	htdocs/public/paybox/paymentok.php
	htdocs/public/paypal/paymentko.php
	htdocs/public/paypal/paymentok.php
	htdocs/theme/bureau2crea/style.css.php
	htdocs/theme/eldy/style.css.php
	htdocs/user/class/user.class.php
	htdocs/viewimage.php
2013-06-24 20:02:02 +02:00
Regis Houssin
05bd035488 Fix: convert line delimiters 2013-06-24 17:34:22 +02:00
Laurent Destailleur
7b0897a669 fix: LF 2013-06-04 22:03:11 +02:00
Laurent Destailleur
d3cf8479e3 Try to commit a file with a line with CRLF and see... 2013-06-04 19:36:41 +02:00
Laurent Destailleur
393ad1447a Qual: Uniformize permission code between viewimage.php and document.php 2013-05-16 15:46:54 +02:00
Laurent Destailleur
670d01e14e Fix: Remove space char at end of document and viewimage. 2013-04-28 18:46:34 +02:00
Laurent Destailleur
023b6f2e8b Fix: Use entity 2013-04-25 10:22:08 +02:00
Laurent Destailleur
86ea79c860 Fix: dol_check_secure_access_document is also used by viewimage. This
also solve bug of not found supplier doc and solve some security holes.
2013-04-25 10:06:54 +02:00
jfefe
b5e66cc492 Mutualize code for security check when accessing a document by document.php and bywebservice 2013-04-22 15:00:29 +02:00
Laurent Destailleur
a4073dddd4 Doxygen llxHeader and llxFooter. 2013-04-15 15:43:25 +02:00
Laurent Destailleur
9f44161e55 New: Can attach file for trip and expenses module 2013-01-24 12:47:06 +01:00
Laurent Destailleur
8d206fdfb0 Prepare move to other licence. For the moment all answers for licence
upgrade were not yet received. So we prepare for GPL by uniformizing
licence text keys to GPL-3+. Will move later to AGPL if all answers are
positive.
2013-01-16 15:36:08 +01:00
Regis Houssin
b838895db9 Fix: change for a neutral email 2012-12-30 15:13:49 +01:00
Regis Houssin
e19f8c54f1 Fix: strict mode hurricane 2012-09-15 10:01:35 +02:00
Regis Houssin
ee1cf819f7 Fix: mass convert line delimiters 2012-09-07 17:23:16 +02:00
Regis Houssin
3823e5d374 New: add possibility to add or force default directories 2012-09-05 17:37:58 +02:00
Laurent Destailleur
841586b050 Removed dead code. Allow to use attachment=0. 2012-09-03 18:17:19 +02:00
Laurent Destailleur
ac02450200 New: Can also use attachment=0 as parameter (for test purpose) 2012-09-03 18:01:07 +02:00
Regis Houssin
fc29e7c432 Fix: $attachement is already true by default
Fix: remove deprecated code
2012-09-03 17:01:03 +02:00
Marcos García
37c4898720 Removed "./" in require statements
It does not make any sense to do that
2012-08-23 01:43:44 +02:00
Marcos García
f3674317ec Removed parenthesis from all require and replaced with single quotes 2012-08-22 23:24:21 +02:00
Marcos García
706d79986c Removed parenthesis from all require_once and replaced with single quotes 2012-08-22 23:11:24 +02:00
Regis Houssin
e44fd4885d Fix: change the last $DB to $db 2012-07-30 18:43:49 +02:00
Regis Houssin
0aa6694c95 Fix: broken event message 2012-07-29 15:47:24 +02:00
Laurent Destailleur
ebf77e8c92 A better fix to remove files from document list 2012-05-30 04:11:00 +02:00
Laurent Destailleur
3fc3292142 Fix: delete of documents is done by page of element, not by the view
wrapper.
2012-05-29 23:50:13 +02:00
Laurent Destailleur
d906d8af16 Fix: Restore broken feature 2012-04-18 01:01:46 +02:00
Regis Houssin
921c8607d7 Fix: multicompany sharings and uniformize code 2012-04-07 10:19:33 +02:00
Regis Houssin
13624eeb86 Fix: multicompany sharings compatibility 2012-04-07 09:20:03 +02:00
Regis Houssin
98f7a189d1 Fix: add backward compatibility 2012-04-06 23:26:04 +02:00
Regis Houssin
94788e2ccb Fix: compatibility with multicompany sharings
use new $conf->product->dir_output[$object->entity] instead
$conf->product->dir_output
2012-04-06 22:41:33 +02:00
Regis Houssin
5d2da2c884 Fix: uniformize code 2012-03-22 08:33:44 +01:00
Regis Houssin
8f9b9987ff Fix: Multiple directory traversal vulnerabilities with document.php 2012-02-27 17:02:56 +01:00
Laurent Destailleur
5974cde154 New: Automtic list of documents in ECM module is ok for customers,
suppliers invoice, orders, customers orders, proposals and social
contributions.
2012-02-06 14:34:58 +01:00
Laurent Destailleur
700c83125e New: Add file size and description into download wrapper 2011-12-31 02:50:37 +01:00
Laurent Destailleur
c00b67209f New: Clear code 2011-11-01 18:32:48 +01:00
Regis Houssin
56d6cbe56f [task #216] Move lib in core directory 2011-10-24 12:59:44 +02:00
Regis Houssin
726d9581dd Fix: remove obsolete tags (in progress) 2011-08-27 14:24:16 +00:00
Laurent Destailleur
37ead2f97e Fix: Avoid errors into rpm packages 2011-07-31 23:19:04 +00:00
Laurent Destailleur
47ca3f9d14 Qual: Removed errors and warnings reported by codesniffer 2011-07-09 00:15:16 +00:00
Regis Houssin
a3d63b9628 Test: commit to cvs for sync in git 2011-06-28 13:42:06 +00:00
Laurent Destailleur
a82262a7e0 Qual: Uniformize code 2011-06-15 11:35:33 +00:00
Laurent Destailleur
db62101b78 Fix: A local file inclusion vulnerability can be exploited to include arbitrary files. 2011-04-27 17:10:29 +00:00
Regis Houssin
19dc20c512 Fix: A reflected cross-site scripting vulnerability can be exploited to execute arbitrary JavaScript 2011-04-26 21:06:45 +00:00
Laurent Destailleur
cbe899690b New: Work on automatic ecm. 2011-04-17 19:27:19 +00:00
Laurent Destailleur
9a49264cb5 Fix: Generated doc in wrong dir 2011-03-07 00:16:02 +00:00