1
0
mirror of https://github.com/e107inc/e107.git synced 2025-01-18 05:09:05 +01:00

41 Commits

Author SHA1 Message Date
Cameron
025ff07aab Fixes #4737 Removal of type="text/javascript" and type="text/css" 2022-03-31 08:24:34 -07:00
Nick Liu
f6d6d1b185
Deprecate e_parse::toJS()
`e_parse::toJS()`, documented with the description

> Convert text blocks which are to be embedded within JS

, does not protect strings from injections, which appears to be its
primary use.  Additionally, it performs multiple unrelated string
modifications:

* Replace Windows line breaks with a literal `\\n` (which would later be
  parsed as `\n` in JavaScript/JSON)
* Does not modify Unix line breaks (`\n`), which is inconsistent with
  the Windows line break behavior
* Removes HTML tags
* Replaces HTML entities as `htmlentities()` does

This method cannot be fixed because its usages are inconsistent.  Most
notably, some usages surround the method's output in single quotes while
others surround it with double quotes.  Strings cannot be JSON-encoded
without confounding quotation mark styles.

All core usages of `e_parse::toJS()` have been replaced with
alternatives, which are also documented in the method's DocBlock.

Fixes: #4546
2021-08-31 00:11:14 +02:00
Cameron
04bbad449a Test admin scripts are parsing correctly. 2021-01-16 13:32:35 -08:00
Cameron
42f0e902d4 Issue #4283 - Update deprecated sql method usage. Removed old code. 2020-12-17 05:52:54 -08:00
Cameron
44e260b121 Code cleanup and optimization 2020-12-14 16:21:48 -08:00
Cameron
5e4c172c2f Issue #2883 Permission fixes. 2017-12-01 17:00:02 -08:00
Cameron
70df3a3ae6 Issue #2846 LAN vars cleanup 2017-11-06 13:48:29 -08:00
Tijn Kuyper
347c9f9af0 Update methods to load LAN files in Admin Area
(fingers crossed there are no typo's...)
2017-01-17 01:33:03 +01:00
Cameron
796f5fa95c Header location cleanup. From now, please use e107::redirect(); to redirect to the home page, or e107::redirect('admin'); to redirect to the admin start page or e107::redirect($url); 2016-01-13 19:18:12 -08:00
MikeyGMT
6bbf40648d Replaced ADMSLAN_4 with LAN_CONTINUE
First tiny step to contribute to the coding of e107

I have replace ADMSLAN_4 in administrator.php with LAN_CONTINUE from
English.php and commented ADMSLAN_4 out in lan_administrator.php
2015-07-01 22:47:20 +01:00
Cameron
30e806b91d RSS News feeds upgraded and corrected. 2015-04-05 20:24:51 -07:00
Cameron
ac56b5ca10 More $admin_log global removal. 2014-10-23 11:12:13 -07:00
Moc
dc71a8500e #6 - LAN clean-up (HTML removal, double quotes, generic) 2013-03-21 10:40:58 +01:00
Cameron
31e658a2ae Issue #125 The require_once() cleanup. 2013-02-26 21:43:31 -08:00
Tijn Kuyper
5304b4a18b $emessage to $mes and LAN cleanup 2013-02-25 14:38:09 +01:00
Cameron
a877d3cee6 Added Bootstrap tabs to admin->administrator page and styled to match jquery-ui tabs. 2013-02-24 15:46:07 -08:00
Cameron
29f23c05ea Some method naming cleanup. 2012-12-06 20:34:57 -08:00
Cameron
d892fb0a85 Admin GUI refinements 2012-11-26 14:41:32 -08:00
CaMer0n
5f143146a0 Path updates 2012-06-08 09:05:33 +00:00
CaMer0n
48e964aafe More HTML cleanup 2012-05-13 05:56:35 +00:00
CaMer0n
e7968c1cf8 Html Cleanup 2012-05-13 05:26:11 +00:00
secretr
548b585f7e Moving the system to the new URL assembling, fixed call to a non-existent eUrl method system wide. 2011-11-26 18:17:42 +00:00
secretr
4fecfffddd svn keywords added (v0.8) 2010-02-10 18:18:01 +00:00
CaMer0n
1377b23532 Fix copyright info. 2009-11-18 01:06:08 +00:00
CaMer0n
d5ff425a49 Easy editing of administrator perms from admin->users. 2009-11-12 05:11:47 +00:00
CaMer0n
2c9190de6b added "Make Admin" to 'Quick Add User" and cleaned up administrator routines. 2009-11-12 01:53:16 +00:00
CaMer0n
7408442c08 Remove PHP warning when no perms found 2009-09-27 21:24:02 +00:00
marj
201b7e20f1 Add include_lan() to admin pages 2009-08-28 16:11:02 +00:00
CaMer0n
a7e312c388 Split custom-menus and custom-pages into separate sub-pages, and added separate administrator perms for each. 2009-08-05 14:22:15 +00:00
CaMer0n
f48cdb5e39 some 'new db' removal 2009-07-23 15:21:41 +00:00
secretr
67809717cc fixed main admin permission bug 2009-04-27 08:11:04 +00:00
secretr
ab036f7323 Administrators management ready; other admin fixes/improvements 2008-12-20 15:23:48 +00:00
secretr
bac34fa23b eURL improvements & Administration area 2008-12-02 00:32:30 +00:00
CaMer0n
3101674e1c More IMODE removal 2008-11-14 06:01:06 +00:00
e107steved
a9ed724420 Ad admin logging to administrator admin, plus some tidying up 2008-10-20 21:52:38 +00:00
e107steved
b1e54937d0 Bugtracker #4441 - allow constants for multilingual plugin names 2008-06-27 20:16:11 +00:00
e107steved
1197bba53a Bugtracker #4440 - some perms no longer relevant 2008-06-27 19:47:31 +00:00
CaMer0n
8ea8db9f56 Initial commit of e_cron task scheduling. 2008-06-17 05:39:46 +00:00
e107steved
dd187e313a System logging core upgrade - admin section, viewer, user audit functions 2007-12-15 15:06:40 +00:00
sweetas
8cb82b65dc new image pack system imode and admin images updated 2006-12-07 15:41:50 +00:00
mcfly
e149b35fcc new module creation 2006-12-02 04:36:16 +00:00