Colin Vidal c217de557f rpc: addfeed: gets login and pass only if need_auth is checked. ...

Because of browser form auto-completion, the hidden field login and
password can be automatically filled when adding a feed. It would
enable feed authentication even if the user doesn't click on need_auth
button.

2018-01-14 20:55:39 +01:00

..

auth

pluginhost: do not connect via legacy DB api until requested

2017-12-03 14:49:18 +03:00

db

fix some minor issues found by code analyzer

2017-12-03 23:08:04 +03:00

feeditem

Use 'saveHTML' when generating HTML from a DOMDocument.

2017-09-09 13:51:59 -05:00

handler

force strip_tags() on all user input unless explicitly allowed

2017-12-03 23:35:38 +03:00

logger

OPML: use PDO; minor fixes

2017-12-02 01:08:30 +03:00

pref

fix two-factor authenticaton

2017-12-22 12:29:25 +01:00

api.php

force strip_tags() on all user input unless explicitly allowed

2017-12-03 23:35:38 +03:00

article.php

update previous to only affect mysql

2017-12-05 22:46:18 +03:00

backend.php

force strip_tags() on all user input unless explicitly allowed

2017-12-03 23:35:38 +03:00

ccache.php

ccache: properly recalculate counters for uncategorized

2017-12-03 21:34:57 +03:00

counters.php

queryfeedheadlines: there's no need to quote order_by/override_order

2017-12-03 22:49:57 +03:00

db.php

pdo_connect: catch exception on create

2017-12-10 09:27:07 +03:00

dbupdater.php

dbupdater: use PDO

2017-12-02 01:28:30 +03:00

digest.php

binding statement named param instead of positional replacement

2018-01-02 06:30:22 +00:00

dlg.php

add defaultPasswordWarning nag dialog

2017-12-03 20:46:27 +03:00

feedenclosure.php

remove some redundant php closing tags

2017-04-26 20:24:18 +03:00

feeditem.php

remove some redundant php closing tags

2017-04-26 20:24:18 +03:00

feedparser.php

remove some redundant php closing tags

2017-04-26 20:24:18 +03:00

feeds.php

subscribe_to_feed: force-cast login and password to string

2018-01-05 06:50:37 +03:00

handler.php

pluginhost: do not connect via legacy DB api until requested

2017-12-03 14:49:18 +03:00

iauthmodule.php

remove some redundant php closing tags

2017-04-26 20:24:18 +03:00

idb.php

remove some redundant php closing tags

2017-04-26 20:24:18 +03:00

ihandler.php

remove some redundant php closing tags

2017-04-26 20:24:18 +03:00

labels.php

fix label cache being double escaped on save

2017-12-02 15:47:53 +03:00

logger.php

remove some redundant php closing tags

2017-04-26 20:24:18 +03:00

opml.php

treat OPML-imported feeds without a title the same as a batch import

2017-12-29 15:33:01 -08:00

plugin.php

plugin base: add type hint to init(host)

2017-12-03 10:11:32 +03:00

pluginhandler.php

force strip_tags() on all user input unless explicitly allowed

2017-12-03 23:35:38 +03:00

pluginhost.php

pluginhost: always return an array in get_all()

2017-12-17 19:06:18 +03:00

rpc.php

rpc: addfeed: gets login and pass only if need_auth is checked.

2018-01-14 20:55:39 +01:00

rssutils.php

update_rss_feed: don't try to use quoted NOW() in query

2017-12-18 18:27:23 +03:00

ttrssmailer.php

remove some redundant php closing tags

2017-04-26 20:24:18 +03:00