Subject | Hash | Author | Date (UTC) |
---|---|---|---|
Do not allow : char in user name | 460b846752c03368990b60efbbf12f74e229bda5 | Catalin(ux) M. BOIE | 2019-09-22 05:58:37 |
Do not allow : char in repo name | b072ba3cd6c46e2ee7d07dc5890c8671d8462a09 | Catalin(ux) M. BOIE | 2019-09-22 05:56:56 |
Fix an XSS in repo description | ee2d11f0b16b436d9e64a0c5ac57361d25e098e1 | Catalin(ux) M. BOIE | 2019-09-22 05:45:11 |
Do not allow a user name to start with minus; strlen -> mb_strlen | 755f2a47e99dc3a56cee90b424ee8a9bd84236f8 | Catalin(ux) M. BOIE | 2019-09-22 05:07:01 |
Do not allow a repo to start with minus; strlen -> mb_strlen | 8ac45126805015c868ae8054ea328dc5a16cf31c | Catalin(ux) M. BOIE | 2019-09-22 05:06:41 |
Limit the desciption of the project to 100 chars to be able to pack more repos per page | 1d2714726347b1eb9f113bd9c4d65d301d6502bd | Catalin(ux) M. BOIE | 2019-09-22 04:59:11 |
Changed CIF | 47e6a7b3939898729d4344b8e3a01ac0dbd3e3b1 | Catalin(ux) M. BOIE | 2019-09-22 04:42:59 |
Added git_log1_strange.php to generate strange filenames | 66083c9e3e6633c953bd5e77f28d993687ef2b73 | Catalin(ux) M. BOIE | 2019-09-17 20:01:10 |
tests: cosmetic stuff | 7688f7b901e0fe3a94e2fcb62755af159212d053 | Catalin(ux) M. BOIE | 2019-09-17 20:00:04 |
If rg_dir_load returns false, propagate the error | 6c8640b1200ae7859097e66dd73ba75857a845a5 | Catalin(ux) M. BOIE | 2019-09-17 19:48:25 |
rg_exec - do not return if the program closes stderr | c619b6bc77b3a9bd1c4dea8a01ba3422620f4c90 | Catalin(ux) M. BOIE | 2019-09-17 19:47:26 |
rg_git_from_to: if to is empty, ignore it. | 310506eab4b45a96cd75b69cfe72c54c7c5aa0e6 | Catalin(ux) M. BOIE | 2019-09-17 19:30:44 |
TODO changes | 25a5232ed436fe23e7f21c8caa6934d3bfcbd6d7 | Catalin(ux) M. BOIE | 2019-09-17 19:25:33 |
Did some debug changes for git | 25fbc904e16076cc6117a1bb900326344dba9d37 | Catalin(ux) M. BOIE | 2019-09-17 19:24:23 |
Add rg_log_sid value to all push methods, to be able to identify the log from the user reports | 4111a8a6ba1e100b3e01d277b2bc7968df9639b1 | Catalin(ux) M. BOIE | 2019-09-17 19:06:32 |
AUTHORS file update | 69efc5c7617404728506b380a57cf8336a45c2fc | Catalin(ux) M. BOIE | 2019-09-17 19:03:59 |
Added TLS1.3 to the list of protocols for nginx | c9fe2cc833c1a9636eab4baa2c388b2ea073ecbb | Catalin(ux) M. BOIE | 2019-09-17 19:03:23 |
History updates | 3de26500d13dc1eafa00fa4721704c5cfe372fd7 | Catalin(ux) M. BOIE | 2019-09-17 19:01:08 |
Destroy confirmation link after use | 6794a957bf695525b1a171eb6b602d228fd0f725 | Catalin(ux) M. BOIE | 2019-04-01 17:41:47 |
Show rg_log_sid into the user output to help identifying the logs | f272e87bcb5fef0e34459c5025b3d4bc796dab6d | Catalin(ux) M. BOIE | 2018-08-29 21:40:36 |
File | Lines added | Lines deleted |
---|---|---|
inc/user.inc.php | 8 | 2 |
File inc/user.inc.php changed (mode: 100644) (index a65c950..eb9b3ce) | |||
... | ... | function rg_user_ok($user) | |
300 | 300 | global $rg_user_max_len; | global $rg_user_max_len; |
301 | 301 | ||
302 | 302 | if (strcmp(substr($user, 0, 1), '-') == 0) { | if (strcmp(substr($user, 0, 1), '-') == 0) { |
303 | rg_repo_set_error('invalid user name' | ||
303 | rg_user_set_error('invalid user name' | ||
304 | 304 | . ' (cannot start with minus)'); | . ' (cannot start with minus)'); |
305 | 305 | return FALSE; | return FALSE; |
306 | 306 | } | } |
307 | 307 | ||
308 | if (strpos($repo, ':') !== FALSE) { | ||
309 | rg_user_set_error('invalid user name' | ||
310 | . ' (cannot contain :)'); | ||
311 | return FALSE; | ||
312 | } | ||
313 | |||
308 | 314 | if (rg_chars_allow($user, $rg_user_allow, $invalid) !== TRUE) { | if (rg_chars_allow($user, $rg_user_allow, $invalid) !== TRUE) { |
309 | 315 | rg_user_set_error("invalid user name (invalid chars: '$invalid')"); | rg_user_set_error("invalid user name (invalid chars: '$invalid')"); |
310 | 316 | return FALSE; | return FALSE; |
... | ... | function rg_user_rename($db, $ui, $new_name) | |
486 | 492 | ); | ); |
487 | 493 | $r = rg_event_add($db, $event); | $r = rg_event_add($db, $event); |
488 | 494 | if ($r !== TRUE) { | if ($r !== TRUE) { |
489 | rg_repo_set_error("cannot add event" | ||
495 | rg_user_set_error("cannot add event" | ||
490 | 496 | . " (" . rg_event_error() . ")"); | . " (" . rg_event_error() . ")"); |
491 | 497 | break; | break; |
492 | 498 | } | } |