132 Commits (3acca93ad3b4d1d5340730c19f6e932fbb4549af)

Author SHA1 Message Date
Qiang Xue 3acca93ad3 Enable CSRF validation by default. 11 years ago
Qiang Xue 1aeb86df78 refactored Request::validateCsrfToken(). 11 years ago
Qiang Xue 4f555a5751 Fixed CSRF validation bug. 11 years ago
Qiang Xue f9b957554f Added Controller::enableCsrfValidation to support turning on/off CSRF validation for particular actions. 11 years ago
Carsten Brandt b8ffee6559 moved CacheSession::init() parent call after init of cache component 11 years ago
Carsten Brandt cc09ef56b9 updated @property annotations of web\Request 11 years ago
Qiang Xue 2deff126cf Supports sending CSRF token via HTTP header. 11 years ago
Qiang Xue 1aa836ffc7 use meta tags to pass CSRF token. 11 years ago
Qiang Xue ad479dd7f6 Modified js registration position. 11 years ago
Qiang Xue 51c29e444d renamed Request::csrfTokenName to csrfVar. 11 years ago
Alexander Makarov f34d7064ea Better phpdoc for AccessControl 11 years ago
Qiang Xue 30907b6134 Fixes #826: cleaned up User::getReturnUrl(). 11 years ago
Benjamin Wöster 64d57b397a add checks for HEAD request 11 years ago
Benjamin Wöster d02e7d4004 add checks for GET and OPTIONS requests 11 years ago
Qiang Xue ea10868824 Removed Yii::import(). 11 years ago
Qiang Xue afd0472784 Fixes #837: turn private variables into public ones. 11 years ago
Qiang Xue 947a557240 Reverted changeset 595ac6d0be 11 years ago
Qiang Xue 595ac6d0be Fixes #833: added charset to json response. 11 years ago
Carsten Brandt 4b7f5a728a improved control over and handling of file and dir permissions 11 years ago
Alexander Makarov e1a6aacba8 Fixes #829: loginRequired now responds with HTTP 403 in case of AJAX or loginUrl is not set (reverted from commit c2c12a9049) 11 years ago
Alexander Makarov c2c12a9049 Fixes #829: loginRequired now responds with HTTP 403 in case of AJAX or loginUrl is not set 11 years ago
Carsten Brandt 147558ea19 added some class documentation 11 years ago
Carsten Brandt c582e589d2 added note about differing property types 11 years ago
Carsten Brandt ca69ef09d4 update of @property annotations 11 years ago
Carsten Brandt bdb77f33ba updated @property annotations of many classes 11 years ago
Borro 9f72973b83 Bug in XML format 11 years ago
Qiang Xue a9e71d5565 better handling with exceptions in __toString() 11 years ago
Qiang Xue 27ad7e1fc7 Added Controller::goHome(). 11 years ago
Qiang Xue 89fa7ed3cb Reverted the change to User::loginUrl. 11 years ago
Qiang Xue 21eab82413 Refactored redirect() methods. 11 years ago
Luciano Baraglia 3f8e9b7a84 Login url fix when called from a module 11 years ago
Qiang Xue d1c41fe144 changed to trace from info. 11 years ago
Qiang Xue 8ee92fdb80 Added ErrorAction. 11 years ago
Ryadnov 2409624894 fix typos - `Yii::app()` 11 years ago
Alexander Makarov 9c97e3e38a fixed phpdoc of Request 11 years ago
Qiang Xue 3d5388ff2b Reorganized captcha code. 11 years ago
Qiang Xue 9f4ccb6243 Added status code display to debugger toolbar. 11 years ago
Alexander Makarov 3a2215b833 fixed length constraints check to always result in correct range 11 years ago
Qiang Xue eda171e1be Added more YII_ENV constants. 11 years ago
Qiang Xue f2ceef4c76 Fixes #686 11 years ago
Qiang Xue 3bef7365f1 Fixes #624: renamed www to web. 11 years ago
Qiang Xue d1212bc73b Support relative route in Controller::createUrl() 11 years ago
Qiang Xue e433c98ed4 Fixes #599 11 years ago
Qiang Xue 6f4e2c9b3c Fixes #647 11 years ago
Alexander Makarov dd47668cba added missing return tags to CaptchaAction 11 years ago
Alexander Makarov 02f8062435 fixed code style 11 years ago
Carsten Brandt 6ce60c1666 added support for HTTP verb PATCH 11 years ago
Qiang Xue a6cd7b72bb refactored helper organization. 11 years ago
Paul Klimov bf13f26584 "AssetConverter::convert()" has been updated to use "escapeshellargs" 11 years ago
Qiang Xue a128bffb47 Fix for asset command. 11 years ago