eliseuamaro/gnu-social
1
0
Fork 0
forked from GNUsocial/gnu-social
Code Issues Pull Requests Releases Wiki Activity
3fb2c06cba
gnu-social/classes
History
Joshua Wise 3fb2c06cba Potential SQL injection in Local_group::setNickname() 
This change escapes a parameter in Local_group::setNickname(). Review
of the code paths that call this function sanitize the parameter
higher up the stack, but it's escaped here to prevent mistakes later.

Note that nickname parameters are normally alphanum strings, so
there's not much danger in double-escaping them.
2013-07-16 10:11:26 -07:00
..
Avatar.php move core schema to class files 2011-08-22 17:52:02 -04:00
Config.php Quietly skip trying to load config if there's an error in DB 2011-09-08 12:01:06 -04:00
Confirm_address.php Remove sequenceKey() since we now use Managed_DataObject 2011-08-22 18:05:37 -04:00
Consumer.php move core schema to class files 2011-08-22 17:52:02 -04:00
Conversation.php move core schema to class files 2011-08-22 17:52:02 -04:00
Deleted_notice.php move core schema to class files 2011-08-22 17:52:02 -04:00
Fave.php Throw an exception converting fave to activity for non-existent notice or profile 2013-05-24 09:26:58 -04:00
File_oembed.php Remove sequenceKey() since we now use Managed_DataObject 2011-08-22 18:05:37 -04:00
File_redirection.php move core schema to class files 2011-08-22 17:52:02 -04:00
File_thumbnail.php Remove unique key on file_thumbnail.url 2011-09-28 15:48:20 -04:00
File_to_post.php move core schema to class files 2011-08-22 17:52:02 -04:00
File.php Crazy gettext way to support two plurals in one string. 2011-12-28 12:44:42 +01:00
Foreign_link.php move core schema to class files 2011-08-22 17:52:02 -04:00
Foreign_service.php move core schema to class files 2011-08-22 17:52:02 -04:00
Foreign_subscription.php move core schema to class files 2011-08-22 17:52:02 -04:00
Foreign_user.php Facebook bridge back in business with new JS-SDK and OAuth 2.0 flow. 2011-09-27 04:09:47 +00:00
Group_alias.php move core schema to class files 2011-08-22 17:52:02 -04:00
Group_block.php move core schema to class files 2011-08-22 17:52:02 -04:00
Group_inbox.php Squashed commit of the following: 2011-10-20 12:50:39 -04:00
Group_join_queue.php fix regression in group join approval due to refactoring (forgot to remove a param) 2011-03-29 16:18:51 -07:00
Group_member.php Squashed commit of the following: 2011-10-20 12:50:39 -04:00
Inbox.php Remove sequenceKey() since we now use Managed_DataObject 2011-08-22 18:05:37 -04:00
Invitation.php move core schema to class files 2011-08-22 17:52:02 -04:00
Local_group.php Potential SQL injection in Local_group::setNickname() 2013-07-16 10:11:26 -07:00
Location_namespace.php move core schema to class files 2011-08-22 17:52:02 -04:00
Login_token.php Remove sequenceKey() since we now use Managed_DataObject 2011-08-22 18:05:37 -04:00
Managed_DataObject.php Further fixes to Managed_DataObject::_allCacheKeys(): now uses self::multicacheKey() to generate the (possibly compound) keys, which makes it match the order of the keys used when calling pkeyGet(). 2011-09-29 15:21:52 -07:00
Memcached_DataObject.php Update translator documentation and i18n. 2011-08-30 11:43:27 +02:00
Message.php Bad variable in Message::asActivity() 2013-06-08 21:04:51 -04:00
Nonce.php move core schema to class files 2011-08-22 17:52:02 -04:00
Notice_inbox.php move core schema to class files 2011-08-22 17:52:02 -04:00
Notice_source.php move core schema to class files 2011-08-22 17:52:02 -04:00
Notice_tag.php Squashed commit of the following: 2011-10-20 12:50:39 -04:00
Notice.php Better ID for notice activity 2013-06-15 12:07:34 -04:00
Oauth_application_user.php move core schema to class files 2011-08-22 17:52:02 -04:00
Oauth_application.php move core schema to class files 2011-08-22 17:52:02 -04:00
Oauth_token_association.php move core schema to class files 2011-08-22 17:52:02 -04:00
Old_school_prefs.php New table for all old-school UI prefs 2011-09-24 07:12:34 -04:00
Profile_block.php move core schema to class files 2011-08-22 17:52:02 -04:00
Profile_list.php Merge commit 'refs/merge-requests/158' of git://gitorious.org/statusnet/mainline into merge-requests/158 2011-09-26 17:11:49 -04:00
Profile_role.php Squashed commit of the following: 2011-10-20 12:50:39 -04:00
Profile_tag_subscription.php move core schema to class files 2011-08-22 17:52:02 -04:00
Profile_tag.php Add missing space between two sentences. 2011-12-28 12:35:03 +01:00
Profile.php Add spam-training, spam-reviewing rights 2012-03-25 13:18:16 -04:00
Queue_item.php move core schema to class files 2011-08-22 17:52:02 -04:00
Related_group.php move core schema to class files 2011-08-22 17:52:02 -04:00
Remember_me.php Remove sequenceKey() since we now use Managed_DataObject 2011-08-22 18:05:37 -04:00
Remote_profile.php move core schema to class files 2011-08-22 17:52:02 -04:00
Reply.php Squashed commit of the following: 2011-10-20 12:50:39 -04:00
Safe_DataObject.php * i18n/L10n and translator documentation updates. 2010-09-28 23:42:18 +02:00
Schema_version.php move core schema to class files 2011-08-22 17:52:02 -04:00
Session.php move core schema to class files 2011-08-22 17:52:02 -04:00
Sms_carrier.php move core schema to class files 2011-08-22 17:52:02 -04:00
Status_network_tag.php hide errors when deleting cached status_network_tag keys 2011-06-10 18:57:17 -04:00
status_network.ini oops. really embarassing typo (that explains some weird behaviour) 2010-07-29 16:32:41 -04:00
Status_network.php Better handling for combined memcache identifiers 2011-06-10 19:13:33 -04:00
Subscription_queue.php Durr... got items in wrong order :D Fixed email notification for pending subscribes 2011-03-28 17:22:37 -07:00
Subscription.php Merge branch '1.0.x' into activity 2011-08-22 18:13:02 -04:00
Token.php move core schema to class files 2011-08-22 17:52:02 -04:00
Unavailable_status_network.php Class to store unavailable status network names 2011-04-28 15:29:13 -07:00
User_group.php move pending queue to sidebar 2011-08-27 16:05:58 -04:00
User_im_prefs.php Fix for caching with compound keys: add Managed_DataObject::_allCacheKeys() to override the one in Memcached_DataObject. 2011-09-28 18:32:43 -07:00
User_location_prefs.php move core schema to class files 2011-08-22 17:52:02 -04:00
User_urlshortener_prefs.php move core schema to class files 2011-08-22 17:52:02 -04:00
User_username.php move core schema to class files 2011-08-22 17:52:02 -04:00
User.php Use better type, title for service 2013-06-04 16:30:40 -04:00