| RADICORE 2.36.0 released [message #7953] |
Tue, 01 September 2026 12:00 |
AJM
Messages: 2396
Registered: April 2006
Location: Surrey, UK
|
Senior Member |
|
|
Update CSRF processing to include GET as well as POST requests, and use a single csrf_id in all URLs. Rename 'reset' to 'resetBtn' in $act_buttons.
This version contains the following changes:
Database changes:
- none
Other changes:
- updated include.library.inc and std.table.class.inc to change function ‘isPkeyComplete’ to ‘is_Pkey_Complete’.
- updated function adjustQueryString() in include.libraray.inc to add $csrf_id to every URL.
- updated include.session.inc to check CSRF_ID on GET requests as well as POST requests.
- updated include.xml.php5.inc to use a single CSRF_ID instead of an array of ids.
- updated numerous controllers in INCLUDES directory to rename ‘reset’ to ‘resetBtn’ in $act_buttons.
- fixed bug in std.list3.inc which tried to read $dbinner when $dbmiddle was empty.
- fixed bug in mnu_user_s05.class.inc which failed to use correct algorithm when decrypting user passwords.
- updated menu/text/en/language_text.inc to includes message ‘e0049’.
- updated menu/text/en/sys_language_text.inc to includes message ‘sys0229’.
- updated xsl/logon.xsl to rename ‘taskid’ to ‘task_id’ to align with name within the database.
- updated xsl/std.buttons.xsl to include single CSRF_ID on all URLs.
- updated xsl/std.pagination.xsl to include single CSRF_ID on all URLs.
Tony Marston
http://www.tonymarston.net
http://www.radicore.org
|
|
|
|
Radicore Forum
Search
Help
Members
Register
Login
Home
