summaryrefslogtreecommitdiff
path: root/backend.php
AgeCommit message (Collapse)Author
2021-02-05initial WIP for php8; bump php version requirement to 7.0Andrew Dolgov
2020-12-15purge_intervals global: set '1 week old' to mean 7 days instead of 5 (???)Andrew Dolgov
2020-09-22router: only allow functions without required parameters as handler methodsAndrew Dolgov
2020-09-22remove a lot of stuff from global context (functions.php), add a few helper ↵Andrew Dolgov
classes instead
2020-09-15public/logout: require valid CSRF tokenAndrew Dolgov
2020-09-15- backend: require CSRF token to be passed via POSTAndrew Dolgov
- do not leak CSRF token via GET request in feed debugger - rework Article/redirect to use POST
2019-12-20backend: load invoked classes via reflection so object constructor is called ↵Andrew Dolgov
after it has been verified as an IHandler implementation. this should prevent a potential router vulnerability if non-IHandler autoloader-enabled class is requested by malicious authorized user *and* invoked class object does something insecurely in its constructor.
2019-12-06remove testing for get_magic_quotes_gpc: deprecated in php7.4, apparently ↵Andrew Dolgov
not working since php 5.4
2015-07-15update intervals: use less broken english for a changeAndrew Dolgov
2015-03-30add a wrapper for standard error codes returned by backend, also add ↵Andrew Dolgov
explanation to the error object if possible
2013-04-18fix missing DB object when instantiated to import opmlAndrew Dolgov
2013-04-18make pluginhost a singletonAndrew Dolgov
2013-04-17remove db_connect, db_close; CLI fixesAndrew Dolgov
2013-04-17remove $linkAndrew Dolgov
2013-04-17more work on singleton-based DBAndrew Dolgov
2013-04-17db updates, remove init_connection()Andrew Dolgov
2013-04-11backend: add session validation checkAndrew Dolgov
2013-04-01generated feeds: support if-modified-sinceAndrew Dolgov
2013-02-27replace getmicrotime() wrapper with microtime(true) (2)Andrew Dolgov
2013-01-12use text/json content-type in a few more placesAndrew Dolgov
2013-01-05modify includes to init session before translations are appliedAndrew Dolgov
2012-12-25experimental support for per-user plugins (bump schema)Andrew Dolgov
2012-12-24remove magpie, fix article filter pluginsAndrew Dolgov
2012-12-23implement plugin routing masks, add example pluginAndrew Dolgov
2012-12-23experimental new plugin systemAndrew Dolgov
2012-12-09modify include path order (closes #514)Andrew Dolgov
2012-09-10rework login formAndrew Dolgov
2012-09-10login system fixesAndrew Dolgov
remove old-style session checking from backend.php move outside subscription endpoint to public.php, change subscription bookmarklet
2012-09-07remove twitter-specific codeAndrew Dolgov
2012-08-21remove hook-based pluginsAndrew Dolgov
2012-08-17rework class system to use subdirectoriesAndrew Dolgov
add placeholder plugin/hook system
2012-08-16routing: check if created handler is a subclass of HandlerAndrew Dolgov
2012-08-16split authentication to separate modulesAndrew Dolgov
2012-07-10do not perform sanity checks on each backend requestAndrew Dolgov
2012-03-20only enable ob_gzhandler if it existsAndrew Dolgov
2012-01-08do not generate warning on csrf_token being unassignedAndrew Dolgov
2011-12-26disable csrf loggingAndrew Dolgov
2011-12-26experimental CSRF protectionAndrew Dolgov
2011-12-15include path fix for lighttpdAndrew Dolgov
2011-12-13move API to classes/Andrew Dolgov
2011-12-13add Public_HandlerAndrew Dolgov
misc code cleanup
2011-12-13add Pref_FiltersAndrew Dolgov
2011-12-13add Pref_Users classAndrew Dolgov
2011-12-13add pref_labels classAndrew Dolgov
2011-12-13compat fix for old-style backend methodsAndrew Dolgov
2011-12-13move help to backend classAndrew Dolgov
2011-12-13add catchall backend classAndrew Dolgov
2011-12-13add pref_prefs classAndrew Dolgov
2011-12-13add pref_feeds classAndrew Dolgov
2011-12-13implement tiny-OOP routingAndrew Dolgov
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-28 05:58:57 +0000