| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-05-06 | Silence a compiler warning | jvoisin | |
| 2022-02-05 | introduced sp_regexp / store original regex | Ben Fuhrmannek | |
| 2021-12-14 | fix: include class name in eval whitelist matching | Ben Fuhrmannek | |
| 2021-11-30 | clarify control flow | Ben Fuhrmannek | |
| 2021-10-21 | added some array initialization, just in case. | Ben Fuhrmannek | |
| 2021-09-23 | config is stack allocated now + some code improvements (see details) | Ben Fuhrmannek | |
| * for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable | |||
| 2021-08-17 | removed unused variables | Ben Fuhrmannek | |
| 2021-08-16 | fincy new scanner/parser for config rules + fixed a few bugs along the way + ↵ | Ben Fuhrmannek | |
| fixed related unittests | |||
| 2021-08-12 | missing efree in sp_log_msgf | Ben Fuhrmannek | |
| 2021-08-07 | fixed doulbe hook | Ben Fuhrmannek | |
| 2021-08-06 | restructured function hooks, implemented unhook | Ben Fuhrmannek | |
| 2021-08-03 | fixed incorrect use of free()/efree() | Ben Fuhrmannek | |
| 2021-08-02 | Merge branch 'master' of https://github.com/jvoisin/snuffleupagus | Ben Fuhrmannek | |
| 2021-04-28 | A pass of clang-format | jvoisin | |
| 2021-04-28 | Simplify a bit get_ip() | jvoisin | |
| 2021-02-18 | log forging protection | Ben Fuhrmannek | |
| 2021-01-30 | Improve a bit type diversity | jvoisin | |
| 2021-01-02 | Do a clang-format pass | jvoisin | |
| 2021-01-02 | Add stacktraces to dumps | jvoisin | |
| 2021-01-01 | Simplify a loop condition | jvoisin | |
| 2021-01-01 | Simplify sp_match_array_value | jvoisin | |
| 2021-01-01 | Constify a function | jvoisin | |
| 2020-12-19 | docs: fix simple typo, migitate -> mitigate | Tim Gates | |
| There is a small typo in src/sp_utils.c. Should read `mitigate` rather than `migitate`. | |||
| 2020-08-12 | Allow empty configuration (#342) | jvoisin | |
| This commit allows php to run (with a warning) if there is no specified snuffleupagus configuration, instead of refusing to start. | |||
| 2020-07-22 | refactoring sp_log_* (#340) | Giovanni | |
| Co-authored-by: Giovanni Dante Grazioli <giovanni.dantegrazioli@nbs-system.com> | |||
| 2020-07-21 | Fixed issue on impossible bailout. | Giovanni Dante Grazioli | |
| 2020-07-21 | Fix #338 - added log type if type is simulation, drop or log. (#339) | Giovanni | |
| Co-authored-by: Giovanni Dante Grazioli <giovanni.dantegrazioli@nbs-system.com> | |||
| 2020-07-12 | More constification | jvoisin | |
| 2020-07-12 | Use $_SERVER['REMOTE_ADDR'] in last resort to get the client's ip addr | jvoisin | |
| 2020-07-08 | Add a couple of `restrict` | jvoisin | |
| 2020-07-04 | Fix a small typo | jvoisin | |
| 2020-07-04 | Reorder some declaration | jvoisin | |
| So that the syslog part is tight as possible | |||
| 2020-07-04 | Run clang-format on the codebase | jvoisin | |
| 2020-07-04 | Factorize how snuffleupagus gets client's ip addr | jvoisin | |
| 2020-07-04 | Fix a syslog-related issue | jvoisin | |
| Previously, the syslog logging would always go to LOG_ERR no matter the severity. | |||
| 2019-11-03 | Log ip addresses | kkadosh | |
| 2019-08-31 | Support direct syslog logging | Thibault "bui" Koechlin | |
| Add the possibility to log directly into the syslog, instead of using php's log system. | |||
| 2019-06-20 | Fix snufflepagus_globals linking issues and one mac compatibility issue | bef | |
| 2019-05-14 | Fix the cookie's handling for PHP7.3+ | jvoisin | |
| PHP 7.3+ added a new prototype for the cookie setting mechanism, breaking our ghetto samesite-injection, this commit takes care of it. | |||
| 2019-02-23 | Try to unify the includes | jvoisin | |
| 2019-02-23 | Add php8 to travis and fix php7.4 | jvoisin | |
| - Use clang-format on the code - Improve portability wrt. php8 - Fix php7.4 compatibility. See https://dustri.org/b/fixing-snuffleupagus-sloppy-comparison-on-array_keys-for-php74.html for a detailed writeup | |||
| 2018-10-25 | Minor formatting issue | jvoisin | |
| 2018-10-09 | Improve mb_string hooking logic | jvoisin | |
| 2018-10-06 | Bump coverage again | jvoisin | |
| 2018-10-06 | Bump coverage again | jvoisin | |
| 2018-10-06 | Bump a bit the coverage | jvoisin | |
| * `setcookie` doesn't always return `true` anymore * clang-format * Cookies with invalid decryption are dropped, but the request isn't anymore * faulty unserialize are now dumpable | |||
| 2018-10-06 | Remove sp_terminate and bump a bit the coverage | jvoisin | |
| 2018-09-10 | Minor code simplification | jvoisin | |
| 2018-09-03 | Fix #241 segfault on 32-bit related to bad protype (#242) | Remi Collet | |
| This should close #241 | |||
| 2018-08-30 | Minor code cleanup | xXx-caillou-xXx | |
 |
index : snuffleupagus | |
| Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! |
| summaryrefslogtreecommitdiff |