| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-08-19 | Bump the changelogv0.12.0 | jvoisin | |
| 2025-05-13 | Remove the useless show_old_php_warning feature | jvoisin | |
| People are usually well-aware of the outdatedness of the PHP version they're running, which is likely why they're running Snuffleupagus in the first place. This feature shouldn't have been enabled by default, and I fail to see any case where anyone would want to enable it. Moreover, it doesn't take LTS versions from vendors/distributions into account, thus breaking on RHEL/Debian (old)stable. | |||
| 2024-09-06 | Fix a licensing typo | jvoisin | |
| Spotted by @kpcyrd | |||
| 2024-09-06 | Bump the changelogv0.11.0 | jvoisin | |
| 2024-07-09 | Fix compilation for PHP84+ | jvoisin | |
| PHP changed some includes for PHP8.4. This commit also adds php8.4-rc to the CI This fixes #497 and #496 Reported-by: rainerjung | |||
| 2023-12-13 | print key and value on INI violations | Christian Göttsche | |
| On violations of INI settings include the key and if appropriate the value in the log message. This helps to locate offenders and fine tune the configuration itself. | |||
| 2023-09-20 | Bump the changelogv0.10.0 | jvoisin | |
| 2023-01-31 | Add sp.log_max_len | jvoisin | |
| 2023-01-03 | Bump the changelogv0.9.0 | jvoisin | |
| 2022-12-08 | Add unserialize_noclass | jvoisin | |
| 2022-08-27 | Bump the changelogv0.8.3 | jvoisin | |
| 2022-07-12 | Refactoring of the previous commit | jvoisin | |
| 2022-07-12 | Minor refactorisation | jvoisin | |
| 2022-06-27 | Dump the eval'ed code | jvoisin | |
| 2022-05-20 | Bump the changelogv0.8.2 | jvoisin | |
| 2022-05-16 | Bump the changelogv0.8.1 | jvoisin | |
| 2022-05-15 | Bump the changelogv0.8.0 | jvoisin | |
| 2022-03-20 | Merge remote-tracking branch 'sektioneins/master' | jvoisin | |
| 2021-11-19 | added old php version check | Ben Fuhrmannek | |
| 2021-11-11 | inverted logic. set xxe_protection.enable() instead of disable_xxe.disable() | Ben Fuhrmannek | |
| 2021-09-23 | config is stack allocated now + some code improvements (see details) | Ben Fuhrmannek | |
| * for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable | |||
| 2021-09-16 | ported server.strip and server.encode features from suhosin | Ben Fuhrmannek | |
| 2021-09-15 | implemented execution depth limit | Ben Fuhrmannek | |
| 2021-09-15 | changed version and version output in phpinfo | Ben Fuhrmannek | |
| 2021-08-16 | fincy new scanner/parser for config rules + fixed a few bugs along the way + ↵ | Ben Fuhrmannek | |
| fixed related unittests | |||
| 2021-08-07 | PHP7 compatibility | Ben Fuhrmannek | |
| 2021-08-06 | implemented ini settings protection | Ben Fuhrmannek | |
| 2021-08-02 | Bump the changelogv0.7.1 | jvoisin | |
| 2021-04-28 | A pass of clang-format | jvoisin | |
| 2021-01-03 | Don't check for bundled pcre in php8 | jvoisin | |
| Patch coming from https://gitlab.alpinelinux.org/alpine/aports/-/merge_requests/16372/diffs#diff-content-c2549fd272f686fb013e5c74164615ca073560bb | |||
| 2021-01-02 | Bump the changelogv0.7.0 | jvoisin | |
| 2020-12-24 | Add PHP8 support | Julien Voisin | |
| 2020-12-13 | Remove a duplicate include | jvoisin | |
| 2020-11-12 | Snuffleupagus now uses pcre2 by default | jvoisin | |
| 2020-11-06 | Bump the changelogv0.6.0 | jvoisin | |
| 2020-08-12 | Allow empty configuration (#342) | jvoisin | |
| This commit allows php to run (with a warning) if there is no specified snuffleupagus configuration, instead of refusing to start. | |||
| 2020-08-07 | Move an include | jvoisin | |
| 2020-06-20 | Bump the changelogv0.5.1 | jvoisin | |
| 2020-03-04 | %s/nbs-system/jvoisin | jvoisin | |
| Since I'm the only one to maintain Snuffleupagus, let's adjust the links and contact addresses of my fork, to point to well… my fork. | |||
| 2019-10-24 | Improve a bit the compatibility with php8 | jvoisin | |
| - Apparently, TSRMLS_C and TSRMLS_FETCH aren't defined anymore, so we have to manually define them to nothing - PHP8 constified a bit some strings, which is great, so we should do the same to avoid warnings | |||
| 2019-08-31 | Support direct syslog logging | Thibault "bui" Koechlin | |
| Add the possibility to log directly into the syslog, instead of using php's log system. | |||
| 2019-06-20 | Fix snufflepagus_globals linking issues and one mac compatibility issue | bef | |
| 2019-06-12 | update snuffleupagus.h with new version | kka | |
| 2019-02-23 | Try to unify the includes | jvoisin | |
| 2019-01-12 | Make compilation stop gracefully in the absence of PCRE | jvoisin | |
| 2018-12-26 | Add a PHP5 guard | jvoisin | |
| 2018-12-21 | bump the changelogv0.4.1 | kka | |
| 2018-10-06 | Remove sp_terminate and bump a bit the coverage | jvoisin | |
| 2018-09-03 | Fix #241 segfault on 32-bit related to bad protype (#242) | Remi Collet | |
| This should close #241 | |||
| 2018-08-31 | Bump the changelogv0.4.0 | jvoisin | |
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |