Tony Murray
03c4da62c8
Fix another addcslashes incorrect escape in eventlog ( #15313 )
...
and many more
reported by: https://huntr.dev/users/hainguyen0207
2023-09-14 00:07:08 -05:00
Jellyfrog
20b4215204
Swich links to https ( #12511 )
...
* Switch librenms links to https
* Convert librenms links in comments
* Switch gnu.org url to https
* switch php urls to https
2021-02-09 00:29:04 +01:00
Jellyfrog
82f43cb98d
Apply fixes from StyleCI ( #12120 )
2020-09-21 15:40:17 +02:00
Tony Murray
217969e140
Update php-codesniffer ( #11368 )
...
* PHPCS 3.5+
* Fix newly detected style issues
2020-04-03 08:41:24 -05:00
Tony Murray
3ead462549
Enable CSRF protection ( #10447 )
...
* Enable CSRF protection
* fix style issues
2019-07-17 07:20:26 -05:00
Tony Murray
e9ae08d5db
Use Laravel url helpers to improve functionality without dns name ( #10227 )
...
* Use Laravel url helpers to improve functionality without dns name
Not exhaustive...
* Fix Url generated urls
* Bump js version
2019-05-20 11:47:34 -05:00
Tony Murray
36431dd296
Security fix: unauthorized access ( #10091 )
...
* Security fix: unauthorized access
Affects nginx users:
Moved php files outside of public html directory (Apache was protected by .htaccess)
Affects all users:
Some files did not check for authentication and could disclose some info.
Better checks before including files from user input
* git mv html/includes/ includes/html
git mv html/pages/ includes/html/
2019-04-11 23:26:42 -05:00