Commits · 1edb9aad2855d26f0cc8817f4c91d914138f2cc2 · mahara / mahara

09 Jun, 2010 3 commits
- Perform more checks before attempting to delete session record on logout · 1edb9aad
  Richard Mansfield authored Jun 09, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  1edb9aad
- Fix for installation (broken by 8108c052) · 18337dcb
  Richard Mansfield authored Jun 09, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  18337dcb
- Move indent settings outside fieldset & hide max indent level when not applicable · b20a4b8a
  Richard Mansfield authored Jun 09, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  b20a4b8a
08 Jun, 2010 4 commits
- Bug fixes on forum indenting · f05f9a6a
  Josh Schmidt authored Jun 08, 2010
```
(cherry picked from commit 4b67fc500857aeb5ff03cb0f4f94fccebd4b9c99)
```
  f05f9a6a
- Make sure recentposts query has a limit for existing blocktypes · 84b1d6b7
  Richard Mansfield authored Jun 08, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  84b1d6b7
- Recent Blog Posts to limit the number of posts to be displayed (Bug #547967) · 334dbbbe
  Lorena Paoletti authored Jun 03, 2010
```
Signed-off-by: Lorena Paoletti <lorena.paoletti@gmail.com>
```
  334dbbbe
- Close login sessions when closing site · ef2bf4d6
  Richard Mansfield authored Jun 08, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  ef2bf4d6
04 Jun, 2010 3 commits

Fixed artefact access permissions check. · a0e7e16f

Ruslan Kabalin authored Jun 04, 2010



Absolutely any institution admin was granted editing permisions to artefacts
that use 'can_edit_artefact' method to check editing permision ("Comments" in
particular).
Signed-off-by: Ruslan Kabalin <ruslan.kabalin@luns.net.uk>

a0e7e16f

Move filetype upgrade into file plugin to avoid failure in upgrade from pre-2008101602 · f9ebcaba
Richard Mansfield authored Jun 04, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
f9ebcaba
Try to remove sessions when suspending a user · 7c497378
Richard Mansfield authored Jun 04, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
7c497378

03 Jun, 2010 6 commits
- Keep track of php session ids of logged in users · 8108c052
  Richard Mansfield authored Jun 03, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  8108c052
- Show more of email subject in email log · 2ba0b65d
  Richard Mansfield authored Jun 03, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  2ba0b65d
- Show number of posts in blog listing · 50f944c3
  Richard Mansfield authored Jun 03, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  50f944c3
- Fix broken dashboard styling in sunset theme · 6272be7c
  Richard Mansfield authored Jun 03, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  6272be7c
- MySQL fix in stats query · d72c6012
  Richard Mansfield authored Jun 03, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  d72c6012
- Fix colours in group info box, aqua theme · 47b8cfb1
  Richard Mansfield authored Jun 03, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  47b8cfb1
02 Jun, 2010 6 commits
- Optional logging of outgoing email · ccc8e39d
  Richard Mansfield authored Jun 02, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  ccc8e39d
- Ignore dashboard in html exports · d17804fe
  Richard Mansfield authored Jun 02, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  d17804fe
- Fix export error due to overzealous quote escaping · b6b53d5d
  Richard Mansfield authored Jun 02, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  b6b53d5d
- Fix positioning of hide home info button in IE · dd569234
  Richard Mansfield authored Jun 02, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  dd569234
- Don't try to call focus() on hidden inputs · 5923a0c9
  Richard Mansfield authored Jun 02, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  5923a0c9
- Allow specification of path to openssl.cnf file - helps those running Mahara... · f4139c26
  Dan Marsden authored Jun 02, 2010
```
Allow specification of path to openssl.cnf file - helps those running Mahara under windows to enable networking. This patch also removes bad array passed into openssl_csr_new (Bug #548233)
Signed-off-by: Dan Marsden <dan@catalyst.net.nz>
```
  f4139c26
01 Jun, 2010 6 commits
- Remove assignment now made obsolete by forum indent changes · 2b0d99b8
  Richard Mansfield authored Jun 02, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  2b0d99b8
- Fixed create group bug that was created from forum indention feature · c80e64ac
  Josh Schmidt authored May 19, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  c80e64ac
- Removed spacing between forum posts · a75629ed
  Josh Schmidt authored May 18, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  a75629ed
- Chrome fixes for other themes · fffdba45
  Josh Schmidt authored May 18, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  fffdba45
- Added feature to control indenting in individual forums · ace143f4
  Josh Schmidt authored May 18, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  ace143f4
- add new function param_signed_integer to allow checking of signed ints (Bug #588085) · ac6268be
  Dan Marsden authored Jun 01, 2010
```
Signed-off-by: Dan Marsden <dan@catalyst.net.nz>
```
  ac6268be
31 May, 2010 2 commits
- fix detection of https (Bug #587823) · 6ce67cd7
  Dan Marsden authored May 31, 2010
```
Signed-off-by: Dan Marsden <dan@catalyst.net.nz>
```
  6ce67cd7
- Fix PHP short tag · 282d7e11
  Dan Marsden authored May 31, 2010
```
Signed-off-by: Dan Marsden <dan@catalyst.net.nz>
```
  282d7e11
27 May, 2010 1 commit
- Fix lang string key in feedback notifications (bug #585613) · b9340235
  Richard Mansfield authored May 27, 2010
```
Signed-off-by: Richard Mansfield <richardm@catalyst.net.nz>
```
  b9340235
26 May, 2010 9 commits

Site option to turn off online users block (Bug #548084) · a6f27423

¨Lorena authored May 25, 2010


Signed-off-by: ¨Lorena <lorena.paoletti@gmail.com>
(cherry picked from commit 3fccdaa6ddb13526084b195e7fcf9b8ec12bf01e)

a6f27423

Merge branch 'sql_hardening' · 1c969d0c
Francois Marier authored May 26, 2010

1c969d0c

Escape the name of an institution in a query · fb4f7a7b

Francois Marier authored May 21, 2010



This is not exploitable because validation of the shortname field
prevents admins from adding quotes to an institution's name.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

fb4f7a7b

Remove the ability for blocktypes to inject straight SQL into a query · 2e2f34ab

Francois Marier authored May 26, 2010



This was not exploitable, but will reduce the risk that a SQL injection
will be accidentally introduced in the future.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

2e2f34ab

Extra validation for search fields · d216a8c0

Francois Marier authored May 25, 2010



This is not a security fix but rather a cleanup to harden this code
and make it harder to accidentally introduce a SQL injection in the
future.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

d216a8c0

Rewrite a function parameter to avoid having to pass SQL · dc04329d

Francois Marier authored May 25, 2010



This is not a security fix but rather a cleanup to harden this code
and make it harder to accidentally introduce a SQL injection in the
future.
Signed-off-by: Francois Marier <francois@catalyst.net.nz>

dc04329d

Extra validation for inline parameters (e.g. intval) · a62cb836
Francois Marier authored May 25, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
a62cb836
Explicit typecasts to harden these queries · 408afd36
Francois Marier authored May 25, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
408afd36
Add a note about MySQL/Postgres-specific code · f34c6279
Francois Marier authored May 20, 2010
```
Signed-off-by: Francois Marier <francois@catalyst.net.nz>
```
f34c6279