index
:
suhosin
0.9.37
0.9.38
loglength
master
secureconfig
sesrec
SUHOSIN [수호신] for PHP 5.x - The PHP security extension.
summary
refs
log
tree
commit
diff
log msg
author
committer
range
Age
Commit message (
Collapse
)
Author
2014-10-06
suppress date/time logging with suhosin.log.file.time=0
Ben Fuhrmannek
2014-10-01
added script to build binary debian package
Ben Fuhrmannek
2014-09-25
array index whitelist/blacklist for multipart formdata
Ben Fuhrmannek
2014-09-25
array index whitelist/blacklist
Ben Fuhrmannek
2014-09-22
disallow_nul does not assume the input value to be nul terminated anymore
Ben Fuhrmannek
2014-09-22
test case for suhosin.cookie.max_vars
Ben Fuhrmannek
2014-09-22
commented out duplicate function (resolves #59)
Ben Fuhrmannek
2014-09-22
warn if ini contstants are not available
Ben Fuhrmannek
2014-09-19
test case for issue #62
Ben Fuhrmannek
2014-09-05
Filters are allowed to change the content of a value. Always allocate a copy ↵
Stefan Esser
before giving it to the filters.
2014-08-31
Fix compilation problem with old suhosin patch installed
Stefan Esser
2014-08-21
updated documentation + new ini entries
Ben Fuhrmannek
2014-08-21
suhosin.executor.max_depth -> 750 (resolves #56)
Ben Fuhrmannek
2014-08-19
updated changelog after merge
Ben Fuhrmannek
2014-08-19
Merge branch 'cleanup'
Ben Fuhrmannek
2014-08-18
use localtime instead of gmttime for logging (fixes #55)
Ben Fuhrmannek
2014-08-18
extra null checks
Ben Fuhrmannek
2014-08-01
fixed potential segfault/hashtable inconsistency for disable_display_errors=fail
Ben Fuhrmannek
2014-07-27
reintroduced loop-free check for invalid varnames in ↵
Ben Fuhrmannek
suhosin_register_server_variables
2014-07-24
re-introduced suhosin_is_protected_varname as extra varname check
Ben Fuhrmannek
2014-07-17
suhosin_get_raw_cookies() parses cookies in reverse order to give first ↵
Ben Fuhrmannek
occurrence precedence
2014-07-17
minor changes / no more compiler warnings
Ben Fuhrmannek
2014-07-17
some php_varname_check()s may be silent as we produce custom errors
Ben Fuhrmannek
2014-07-17
more redundancy removed / varname checks
Ben Fuhrmannek
2014-07-17
import_request_variables() will only be replaced with PHP < 5.4.0
Ben Fuhrmannek
2014-07-17
removed redundant implementations of protected varname check
Ben Fuhrmannek
2014-07-16
rewrite of register_server_variables - less redundancy (may be slower though)
Ben Fuhrmannek
2014-07-16
updated suhosin version
Ben Fuhrmannek
2014-07-16
fixed duplicate char* declaration. (closes #51)
Ben Fuhrmannek
2014-07-15
replaced suhosin_register_cookie_variable + ↵
Ben Fuhrmannek
suhosin_register_cookie_variable_safe
2014-07-15
simplified else/break
Ben Fuhrmannek
2014-07-14
updated changelog after merge
Ben Fuhrmannek
2014-07-14
Merge branch 'filter'
Ben Fuhrmannek
2014-07-14
Merge branch 'sql'
Ben Fuhrmannek
2014-07-14
updated changelog
Ben Fuhrmannek
2014-07-14
*ignore*
Ben Fuhrmannek
2014-07-12
introduced suhosin.upload.allow_utf8
Ben Fuhrmannek
2014-07-11
remove_binary and disallow_binary allow utf-8. +testcases
Ben Fuhrmannek
2014-07-11
disallow_ws now matches all single-byte whitespace characters
Ben Fuhrmannek
2014-07-09
untested features must be enabled: configure --enable-suhosin-experimental
Ben Fuhrmannek
2014-07-09
experimental PDO support
Ben Fuhrmannek
2014-07-09
test cases for user_prefix + user_postfix
Ben Fuhrmannek
2014-07-09
SQL username check in sim. mode checks only for the first occ. of inv. chars
Ben Fuhrmannek
2014-07-09
enforce SQL username check + return FALSE instead of bailout
Ben Fuhrmannek
2014-07-09
more files to be ignored by git
Ben Fuhrmannek
2014-07-09
added sql.user_match + username character check
Ben Fuhrmannek
2014-07-07
brand new default suhosin.ini with documentation and correct default values
Ben Fuhrmannek
2014-06-24
Added SQL injection protection for Mysqli and several test cases
Ben Fuhrmannek
2014-06-10
Prepare release of suhosin-0.9.36
suhosin-0.9.36
Stefan Esser
2014-06-09
Improve SessionHandler() recursion protection
Stefan Esser
[prev]
[next]