Laurent Destailleur
b124007c8c
Merge remote-tracking branch 'origin/3.5' into develop
2014-06-09 15:30:41 +02:00
Florian HENRY
77a9d4eb71
Start fix [ bug #1437 ] Securitu Issue
...
Some of them can be fix, because GETPOST even with 'alpha' test do not
warn if input is
"2%2F0%2F1234%3cscript%3ealert%2893275%29%3c%2fscript%3e"
for exemple
I don't have magical solution for this kind of security issue
2014-06-09 12:34:10 +02:00
Laurent Destailleur
9bc1a6b4f5
Fix: favicon must use dol_buildpath and not hardcoded path
...
Conflicts:
htdocs/core/lib/security2.lib.php
2014-05-24 18:29:22 +02:00
Laurent Destailleur
44ebaf45cf
Fix: favicon must use dol_buildpath and not hardcoded path
2014-05-24 18:21:05 +02:00
Raphaël Doursenaud
f8f502d013
Removed closing php tag
...
http://php.net/manual/en/language.basic-syntax.phptags.php
2014-05-03 18:18:44 +02:00
Laurent Destailleur
6f60755426
New: Add option MAIN_FAVICON_URL
2014-03-05 17:26:59 +01:00
Laurent Destailleur
b1f528f4d5
Comment code of a deprecated variable.
2013-08-07 20:56:10 +02:00
Laurent Destailleur
6f5a918373
New: Add option MAIN_MOTD_SETUPPAGE to add a content onto setup page.
...
Also content for MAIN_MOTD_SETUPPAGE, MAIN_MOTD_SETUPPAGE, MAIN_HOME
now accept "|langfile" into translation key to use a specific language
file.
2013-07-02 21:53:34 +02:00
Regis Houssin
c9a71439b2
Fix: EOF
2013-06-05 16:24:32 +02:00
Laurent Destailleur
545ac638b0
Qual: Removed deprecated code for using a specific mobile theme.
...
New: Include terminal variables to optimize any themes.
Qual: First change to allow butAction buttons to wrap on new lines for
small size screens.
2013-04-03 15:20:56 +02:00
Laurent Destailleur
ae322ba17f
Qual: Better init of default lang
2013-02-25 10:17:38 +01:00
Laurent Destailleur
234e171e9d
New: Add option dol_hide_topmenu and dol_hide_leftmenu onto login page.
2013-02-24 18:16:26 +01:00
Laurent Destailleur
0b61c740a9
Fix: To be sure to start onto an selected top menu
2013-02-24 13:57:17 +01:00
Laurent Destailleur
56e11e52fa
New: hookmanager class is used frequently and is a factory object, so we
...
can move it during init of environment and use it globally.
2013-01-25 19:12:54 +01:00
Laurent Destailleur
d11cee399a
Merge remote-tracking branch 'origin/3.3' into develop
...
Conflicts:
COPYRIGHT
htdocs/core/tpl/freeproductline_create.tpl.php
htdocs/core/tpl/predefinedproductline_create.tpl.php
htdocs/install/mysql/tables/llx_c_availability.sql
2013-01-16 15:45:17 +01:00
Laurent Destailleur
8d206fdfb0
Prepare move to other licence. For the moment all answers for licence
...
upgrade were not yet received. So we prepare for GPL by uniformizing
licence text keys to GPL-3+. Will move later to AGPL if all answers are
positive.
2013-01-16 15:36:08 +01:00
Regis Houssin
9812c91aff
Fix: wrong EOL !!!!!!!
2013-01-10 08:27:12 +01:00
Laurent Destailleur
9b6289503c
Fix: Overwriting of login template works with module_parts.
2013-01-08 18:30:49 +01:00
Laurent Destailleur
9d47b812b9
New: Support module_parts['theme']
2013-01-08 15:21:56 +01:00
Regis Houssin
b838895db9
Fix: change for a neutral email
2012-12-30 15:13:49 +01:00
Regis Houssin
5740c7e694
Fix: change for a neutral email
2012-12-30 15:11:07 +01:00
Regis Houssin
1919604089
Fix: more compatible with multicompany transverse mode
...
Fix: strict mode bubbles
2012-09-27 11:57:46 +02:00
Regis Houssin
e19f8c54f1
Fix: strict mode hurricane
2012-09-15 10:01:35 +02:00
Laurent Destailleur
ce64a26875
A different fix to keep username.
2012-09-08 15:18:14 +02:00
Marcos García
9b3c89ac47
Removed parenthesis from all include and include_once and replaced with single quotes
2012-08-23 02:40:41 +02:00
Marcos García
706d79986c
Removed parenthesis from all require_once and replaced with single quotes
2012-08-22 23:11:24 +02:00
Regis Houssin
77b9718473
Fix: strict mode street
2012-07-13 10:15:47 +02:00
Regis Houssin
7e2469618e
Change-Id: I5f8bcf59cf2fc0d902edb4d61f8c20a2880765a2
2012-07-07 12:21:09 +02:00
Regis Houssin
6f1651309e
Fix: global converting lines delimiter
2012-07-02 19:30:37 +02:00
Laurent Destailleur
a1bd60a614
Fix: No call of any login method.
2012-06-14 14:08:29 +02:00
Laurent Destailleur
a23df4f407
Qual: Removed deprecated var
...
New: Can add global js
2012-06-12 18:35:29 +02:00
Laurent Destailleur
658911b8c9
Qual: Move embeded style into css files. Add more styles.
2012-04-18 14:27:31 +02:00
Regis Houssin
0dbef2d784
Try to add hook in main login page
2012-03-03 20:05:32 +01:00
Laurent Destailleur
dd9e150743
Fix: Bad test
2012-02-29 20:58:05 +01:00
Regis Houssin
ffc492ba1f
Fix: security
2012-02-28 19:18:24 +01:00
Regis Houssin
a444fc955d
New: add generic function for module parts
2012-02-23 14:28:50 +01:00
Laurent Destailleur
2647cb72ac
New: Now all features can be provided by a module with all files inside
...
the directory of module.
2012-02-22 16:18:03 +01:00
Laurent Destailleur
b51c167cdc
Minor fix in alignement
2012-02-19 13:55:29 +01:00
Laurent Destailleur
c94c1b7f85
Fix: The login page must use same header than others.
2012-02-18 17:10:29 +01:00
Laurent Destailleur
ca727ca18e
Qual: Move security functions into security2.lib.php
2012-02-12 20:34:40 +01:00
Laurent Destailleur
036e578e0f
Move security function into security.lib.php
...
Split security.lib.php into 2 files: One always loaded, the other for
rare functions.
2012-02-12 17:41:28 +01:00