Commit Graph

16922 Commits

Author SHA1 Message Date
Maxime Rainville
52f9e28131
Merge pull request #10043 from creative-commoners/pull/3/php74-deprecation
DOC Surpress deprecation warnings on php7.4
2021-08-17 17:18:08 +12:00
Steve Boyd
5018f448a9 DOC Surpress deprecation warnings on php7.4 2021-08-13 11:55:30 +12:00
Ingo Schommer
f7f8f0b4e1
Merge pull request #9924 from chillu/pulls/3/docs-php74
DOCS Updated PHP compat statement
2021-05-24 15:32:44 +12:00
Ingo Schommer
d566299326 DOCS Updated PHP compat statement
We've made 3.7 compat with PHP 7.4, see https://docs.silverstripe.org/en/4/changelogs/3.7.4/.
We're no longer testing any PHP 5.x on this release line via Travis, and all of those are EOL. So we shouldn't claim support either.
2021-05-24 15:31:01 +12:00
Robbie Averill
39c73e5286 Merge branch '3.7' into 3 2020-08-26 12:15:15 -07:00
Robbie Averill
c877954eef
Merge pull request #9653 from baikho/patch-1
Update 05_Coding_Conventions.md
2020-08-26 12:14:32 -07:00
Sang Lostrie
28a81bb97d
Update 05_Coding_Conventions.md
Fixed typo
2020-08-26 19:44:11 +01:00
Robbie Averill
9567a9e768
Merge pull request #9642 from samoser/patch-1
PATCH: Prevents calling strpos with empty needle
2020-08-18 10:29:38 -07:00
Samuel Amoser
69a8836910
PATCH: Prevents calling strpos with empty needle
We happen to run into this warning:
```
[Warning] strpos(): Empty needle
Line 2618 in ./framework/i18n/i18n.php

2618    strpos($theme, (string)Config::inst()->get('SSViewer', 'theme')) === 0
```
I suggest to test the needle against emptyness before invoking strpos.
2020-08-18 15:16:07 +02:00
Robbie Averill
38306217ba
Merge pull request #9598 from Zauberfisch/patch-5
Fixed php7.4 deprecation notice for magic quotes
2020-07-29 14:41:47 -07:00
Zauberfisch
e3dd84caef Fixed php7.4 deprecation notice for magic quotes 2020-07-17 05:09:54 +02:00
Maxime Rainville
bc9e384fe1 Merge branch '3.7' into 3 2020-07-15 10:37:23 +12:00
Maxime Rainville
f2b8946407 Added 3.7.5 changelog 2020-07-14 13:39:39 +12:00
Maxime Rainville
c96e9d2fe5 [CVE-2020-9311] Add public disclosure statement to changelog 2020-07-14 13:26:54 +12:00
Maxime Rainville
074b28cf93 [CVE-2019-19326] Add changelog for CVE-2019-19326 2020-07-14 13:26:46 +12:00
Maxime Rainville
98926e4e6c [CVE-2019-19326] Stop honouring X-HTTP-Method-Override header, X-Original-Url header and _method POST variable. Add SS_HTTPRequest::setHttpMethod(). 2020-07-14 13:25:55 +12:00
Maxime Rainville
d3b23e7024 [CVE-2020-9311] Escape First Name when displaying re-login screen 2020-07-14 13:24:12 +12:00
Robbie Averill
f8311c912c
Merge pull request #9577 from creative-commoners/changelog-typo
DOCS update typo
2020-07-07 09:23:24 -07:00
brynwhyman
27da476072 DOCS update typo
According to packagist, 3.7.4 is already released! https://packagist.org/packages/silverstripe/framework#3.7.4
2020-07-07 17:34:01 +12:00
Serge Latyntcev
8f9bb9d03a Merge tag '3.7.4' into 3.7
Release 3.7.4
2020-06-30 11:14:16 +12:00
Robbie Averill
b1adf2190b
Merge pull request #9535 from td204/3.7
array_key_exists() on objects is deprecated
2020-06-03 10:36:11 -07:00
terry
b175798fab array_key_exists() on objects is deprecated 2020-06-03 15:24:30 +02:00
Daniel Hensby
78afc6ebb2
Merge pull request #9518 from wernerkrauss/patch-3
Docs: leftandmain.com is not working any more
2020-05-19 07:48:03 +01:00
wernerkrauss
4679c30c7c
Docs: leftandmain.com is not working any more
But that article was really useful. Luckily wayback machine still has the content.
2020-05-15 14:06:41 +02:00
Dan Hensby
bf797a1a88
Merge branch '3.7' into 3 2020-04-05 21:16:43 +01:00
Loz Calver
5fbfd4f84c
Merge pull request #9449 from dhensby/pulls/php74-support
Fix deprecated php syntax
2020-04-01 14:24:15 +01:00
Dan Hensby
6c8dc0fd99
Fix deprecated php syntax 2020-04-01 14:03:03 +01:00
Robbie Averill
3f3f6854fe
Merge pull request #9437 from indygriffiths/patch-1
DOCS Fix formatting and syntax of YAML configuration page
2020-03-19 19:25:25 -07:00
Indy Griffiths
fdefa50a19
DOCS Fix formatting and syntax of YAML configuration page 2020-03-20 14:54:17 +13:00
Maxime Rainville
a381c787b8
Merge pull request #9343 from creative-commoners/v3.7.3-is-php7.3-compatible
DOCS include mention of PHP 7.3 compatibility for v3.7.3+
2019-12-06 17:52:26 +13:00
brynwhyman
efd68473f8 DOCS include mention of 7.3 compatibility
Version 3.7.3 is compatible with <=7.3
2019-12-02 11:44:54 +13:00
Robbie Averill
c61a9e3f26
DOCS Fix "Configure Nginx" page title, was Lighttpd 2019-11-29 10:42:03 -08:00
Aaron Carlino
42ab512306 Fix broken callout tags 2019-11-20 10:45:27 +13:00
Aaron Carlino
54e7223d98 NEW: Docs rebuild for compliance with Gatsby (#9316)
* Rewrite callout blocks

* Rewrite frontmatter

* Replace missing frontmatter

* Replace note callouts

* Fix icons

* Hide children

* Tidy up code blocks

* Replace legacy code blocks with fenced
2019-11-20 10:44:53 +13:00
Aaron Carlino
9ae617932e Fix broken callout tags 2019-11-19 13:54:19 +13:00
Aaron Carlino
2facc7c80d
NEW: Docs rebuild for compliance with Gatsby (#9316)
* Rewrite callout blocks

* Rewrite frontmatter

* Replace missing frontmatter

* Replace note callouts

* Fix icons

* Hide children

* Tidy up code blocks

* Replace legacy code blocks with fenced
2019-11-18 17:54:24 +13:00
Loz Calver
1d63cf50da
Merge pull request #9286 from jonom/patch-2
DOCS Note inability to filter on null
2019-10-15 09:39:01 +01:00
Jono Menz
48d3d9ca49
DOCS Note inability to filter on null 2019-10-14 12:58:52 -07:00
Serge Latyntcev
837507e63b Merge branch '3.7' into 3 2019-10-01 14:29:56 +13:00
Serge Latyntcev
90645d7e24 Merge branch '3.6' into 3.7 2019-10-01 14:28:41 +13:00
Serge Latyntcev
9e16c3dbd3 Added 3.6.8 changelog 2019-09-24 17:13:46 +12:00
Aaron Carlino
b1dc89ef8a Added 3.7.4 changelog 2019-09-24 16:51:42 +12:00
Serge Latyntcev
e7469dadb0 Merge branch '3.6' into 3.7 2019-09-24 14:26:53 +12:00
Aaron Carlino
a6763298fe
Merge pull request #92 from silverstripe-security/pulls/3.6/cve-2019-12203
[CVE-2019-12203] Session fixation in "change password" form
2019-09-24 11:00:22 +12:00
Serge Latyntcev
a86093fee6 [CVE-2019-12203] Session fixation in "change password" form
A potential account hijacking may happen if an attacker has physical access to
victim's computer to perform session fixation. Also possible if the targeted application contains an XSS vulnerability.
Requires the victim to click the password reset link sent to their email.
If all the above happens, attackers may reset the password before the actual user does that.
2019-09-24 10:57:40 +12:00
Aaron Carlino
afcd966740
MINOR: Fix travis. Use trusty (#9256) 2019-09-24 10:56:44 +12:00
Serge Latyntcev
014c99a128 Merge branch '3.6' into 3.7 2019-09-23 13:54:16 +12:00
Garion Herman
53f5c3d0e5
Merge pull request #9196 from creative-commoners/pulls/3.7/pass-member-to-access
FIX Member argument is now passed to LeftAndMain::alternateAccessCheck()
2019-08-27 14:35:39 +12:00
Robbie Averill
7d901a6d9b FIX Member argument is now passed to LeftAndMain::alternateAccessCheck() 2019-08-27 11:23:02 +12:00
Robbie Averill
8c41dbb8b4
Merge pull request #9110 from open-sausages/pulls/3.7/boldy-into-the-php74-futur-goes-silverstripe-iii
BUG Require a PHP7.4 compatible fork of phpunit-mock-objects
2019-07-19 14:38:41 +02:00