summaryrefslogtreecommitdiff
path: root/suhosin.c (follow)
AgeCommit message (Collapse)Author
2016-07-30introduced suhosin.log.max_error_length to limit log length (#105)loglengthBen Fuhrmannek
2016-05-02default hints for the documentation generatorBen Fuhrmannek
2016-01-29changed perdir permissionsBen Fuhrmannek
2015-05-20Fix high CPU consumption DOS through many newlines in RFC1867 MIME headersStefan Esser
2015-02-13(c) 2015Ben Fuhrmannek
2015-01-22removed even more #ifdef ZEND_ENGINE_2Ben Fuhrmannek
2015-01-15removed <5.4 compatibility codeBen Fuhrmannek
2014-12-18removed compatibility to PHP version < 5.4 (by ifdef)Ben Fuhrmannek
2014-12-12prep for 0.9.37.10.9.37.10.9.37Ben Fuhrmannek
2014-11-24extra null check for old startup handler. (#70)Ben Fuhrmannek
2014-11-24safeguard for display_errors=failBen Fuhrmannek
2014-11-22TSRM related speed optimization - thanks to patch from NewEraCrackerBen Fuhrmannek
2014-11-21no session support warning on startupBen Fuhrmannek
2014-11-18Set default array index blacklist to '"+-<>;()Ben Fuhrmannek
2014-11-15removed old PHP4 related codeBen Fuhrmannek
2014-11-15Merge branch 'sesrec'Ben Fuhrmannek
2014-11-15fixed crash with PHP 5.3 and disable_display_errors=failBen Fuhrmannek
2014-11-12removed session structs + split crypt funcsBen Fuhrmannek
2014-11-06Merge branch 'constants'Ben Fuhrmannek
2014-10-16Merge branch 'ifilter'Ben Fuhrmannek
2014-10-14Merge branch 'buf2' (closes #52 and #54)Ben Fuhrmannek
Conflicts: tests/filter/suhosin_upload_disallow_binary_utf8.phpt tests/filter/suhosin_upload_disallow_binary_utf8fail.phpt tests/filter/suhosin_upload_remove_binary_utf8.phpt tests/filter/suhosin_upload_remove_binary_utf8fail.phpt
2014-10-11fixed utf8 detection + made feature experimentalBen Fuhrmannek
2014-10-06suppress date/time logging with suhosin.log.file.time=0Ben Fuhrmannek
2014-09-25array index whitelist/blacklistBen Fuhrmannek
2014-09-22warn if ini contstants are not availableBen Fuhrmannek
2014-08-21suhosin.executor.max_depth -> 750 (resolves #56)Ben Fuhrmannek
2014-08-01fixed potential segfault/hashtable inconsistency for disable_display_errors=failBen Fuhrmannek
2014-07-17suhosin_get_raw_cookies() parses cookies in reverse order to give first ↵Ben Fuhrmannek
occurrence precedence
2014-07-15replaced suhosin_register_cookie_variable + ↵Ben Fuhrmannek
suhosin_register_cookie_variable_safe
2014-07-14Merge branch 'filter'Ben Fuhrmannek
2014-07-12introduced suhosin.upload.allow_utf8Ben Fuhrmannek
2014-07-09added sql.user_match + username character checkBen Fuhrmannek
2014-06-09Added various improvements to rand()/mt_rand() protectionStefan Esser
2014-02-15Add ini_set() fail mode to suhosin.disable.display_errorsStefan Esser
2014-02-12Added suhosin.log.stdout to log to stdout (dor debugging purposes)Stefan Esser
2014-02-11Fix Logo handlingStefan Esser
2014-02-11Fix year in copyrightStefan Esser
2012-04-13Initial PHP 5.4.0 compatibilityStefan Esser
2012-02-12Add some variable drop statistics as requested by usersStefan Esser
2012-02-12Fix ZTS compile problemStefan Esser
2012-02-12Make clear that not calling the session unhook is intentionalStefan Esser
2012-01-14Use new suhosin_getenv() function in all placesStefan Esser
Add protection against mbstring Add detection of incompatible extensions that change POST handlers
2012-01-14Fix commentStefan Esser
2012-01-14Fix typoStefan Esser
2012-01-14detect runtime modification of post handlersStefan Esser
2012-01-12Another copyright year fixedStefan Esser
2012-01-11Long overdue update of copyright yearStefan Esser
2012-01-11Removed crypt() supportStefan Esser
2012-01-11Of course we also do not support PHP 5.0 and 5.1 anymoreStefan Esser
2012-01-11CleanupStefan Esser