tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity
16,625 Commits 31 Branches 527 Tags 162 MiB
PHP 99.4%
Scheme 0.5%
a86093fee6
Go to file
Serge Latyntcev a86093fee6 [CVE-2019-12203] Session fixation in "change password" form 
A potential account hijacking may happen if an attacker has physical access to
victim's computer to perform session fixation. Also possible if the targeted application contains an XSS vulnerability.
Requires the victim to click the password reset link sent to their email.
If all the above happens, attackers may reset the password before the actual user does that.
2019-09-24 10:57:40 +12:00
_config FIX Allow lowercase and uppercase delcaration of legacy Int class 2017-11-22 16:34:42 +00:00
admin Update some phpdocs that had typos, missing parts or incorrect formats 2018-04-11 20:12:38 +12:00
api More code style fixes 2017-12-05 14:20:13 +00:00
cache FIX Cache IDs grouped by site first 2017-07-19 11:29:01 +01:00
cli Remove all redundant whitespace 2014-08-19 09:17:15 +12:00
conf Merge remote-tracking branch 'origin/3.1' 2014-11-18 12:45:54 +13:00
control FIX: Injector may instantiate prototypes as if they're singletons (fixes #8567) 2019-01-23 11:47:28 +00:00
core FIX: Redirect loop with multiple URL tokens (fixes #8607) 2018-11-15 11:15:41 +00:00
css FIX: Gridfields with dropdowns having lots of overflow 2018-01-30 14:45:08 +00:00
dev Merge remote-tracking branch 'silverstripe-security/3.5' into 3.6 2017-12-06 17:26:45 +13:00
docs Added 3.6.7 changelog 2019-02-12 22:02:19 +13:00
email Merge branch '3.4' into 3.5 2017-01-17 11:58:56 +00:00
filesystem Merge branch 'heads/3.6.6' into 3.6 2018-05-28 17:44:28 +12:00
forms Merge branch '3.5' into 3.6 2018-05-01 20:23:21 +01:00
i18n _t function parameter documentation fix 2017-06-16 07:52:09 +09:30
images Restore deleted file icons 2016-03-20 14:51:19 -07:00
javascript FIX Split HTML manipulation to onadd, so elements are not accidentally duplicated 2018-02-16 23:34:05 +13:00
lang Revert "Update translations" 2017-06-15 14:48:35 +12:00
model BUG Renable the ability to do dynamic assignment with DBField 2019-02-22 12:09:15 +13:00
oembed Add unit tests for oembed autodiscover and thumbnail detection 2016-04-15 14:00:10 +12:00
parsers Update some phpdocs that had typos, missing parts or incorrect formats 2018-04-11 20:12:38 +12:00
scss FIX: Gridfields with dropdowns having lots of overflow 2018-01-30 14:45:08 +00:00
search DOCS: FulltextSearchable code example 2016-03-15 11:49:12 +00:00
security [CVE-2019-12203] Session fixation in "change password" form 2019-09-24 10:57:40 +12:00
src/SilverStripe/Framework/Injector Add missing packages 2015-08-24 16:15:38 +12:00
tasks MINORE: Remove training whitespace. 2016-01-07 10:15:54 +13:00
templates Merge branch '3.5' into 3.6 2017-08-14 12:55:09 +01:00
tests FIX Use a function common to MySQL, SQLite and PostgreSQL to test dynamic DBFIeld assigment 2019-02-26 14:20:14 +13:00
thirdparty Merge branch '3.5' into 3.6 2018-01-09 13:34:56 +00:00
view Merge branch '3.5' into 3.6 2017-08-29 16:46:58 +01:00
_config.php Removing redundant aggregatestore cache config (#3404) 2014-08-21 09:13:28 +12:00
_register_database.php Remove all redundant whitespace 2014-08-19 09:17:15 +12:00
.editorconfig MINOR: Supress whitespace cleanup in thirdparty folders. 2016-01-07 10:09:10 +13:00
.gitattributes Merge branch '3.1' into 3.2 2016-09-14 11:39:00 +01:00
.gitignore ENHANCEMENT Message colours updated 2012-11-06 13:23:20 +13:00
.htaccess API: Remove static main and dev/buildcache 2012-09-21 19:56:56 +12:00
.scrutinizer.yml Added better Scrutinizer support 2015-05-12 23:27:36 +12:00
.travis.yml MINOR: Fix travis. Use trusty (#9256) 2019-09-24 10:56:44 +12:00
cli-script.php More code style fixes 2017-12-05 14:20:13 +00:00
composer.json Merge branch '3.5' into 3.6 2017-11-25 16:17:36 +00:00
config.rb Update compass config 2015-07-09 10:11:00 +12:00
CONTRIBUTING.md Minor: update docs for PR branch guidelines #5345 (#5365) 2016-05-16 12:34:43 +12:00
LICENSE Create licence file so that GitHub (and humans) can more easily find it 2018-02-12 11:21:03 +00:00
main.php [SS-2018-019] Add confirmation token to dev/build 2018-11-07 11:35:31 +13:00
main.php5 MINORE: Remove training whitespace. 2016-01-07 10:15:54 +13:00
README.md README fix contributing-link, add httpS 2018-04-10 17:54:44 +02:00
sake Install sake into /usr/local/bin. /usr is now protected on OSX 2016-01-22 18:48:58 +00:00
silverstripe_version API CHANGE silverstripe_version file now contains the plain version number, rather than an SVN path 2012-02-01 18:42:21 +01:00
SUPPORT.md Support file grammer improvements 2018-03-27 11:49:04 +01:00
web.config Improve IIS security 2015-05-11 12:01:30 +12:00

README.md

SilverStripe Framework

Build Status Latest Stable Version Latest Unstable Version Total Downloads License Dependency Status Reference Status

PHP5 framework forming the base for the SilverStripe CMS (https://silverstripe.org). Requires a silverstripe-installer base project. Typically used alongside the cms module.

Installation

See installation on different platforms, and installation from source.

Bugtracker

Bugs are tracked on github.com. Please read our issue reporting guidelines.

Development and Contribution

If you would like to make changes to the SilverStripe core codebase, we have an extensive guide to contributing code.

Links

Attribution