Ingo Schommer b83797de10 BUGFIX Don't delete index.php after successful installation - in ContentController->deleteinstallfiles(). URL routing might rely on it without mod_rewrite. ...

BUGFIX Require ADMIN permissions for ContentController->deleteinstallfiles() - together with retaining index.php this removed a vulnerability where unauthenticated users can disrupt mod_rewrite-less URL routing. (from r101227)

git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.3@101229 467b73ca-7a2a-4603-9d3b-597d59a354a9

2011-02-02 14:27:35 +13:00

..

ContentController.php

BUGFIX Don't delete index.php after successful installation - in ContentController->deleteinstallfiles(). URL routing might rely on it without mod_rewrite.

2011-02-02 14:27:35 +13:00

ContentNegotiator.php

Merging in refactored Translatable architecture from trunk, including related/required changesets like enhancements to Object static handling (see details below)

2011-02-02 14:27:16 +13:00

Controller.php

API CHANGE: Replaced BasicAuth::enable() with BasicAuth::protect_entire_site()

2011-02-02 14:27:33 +13:00

Director.php

BUGFIX: Don't force SSL when running from CLI

2011-02-02 14:27:35 +13:00

FormResponse.php

Better checking of tabstrip stuff

2011-02-02 14:26:39 +13:00

HTTPRequest.php

Reverted r75263 and r75264

2011-02-02 14:27:19 +13:00

HTTPResponse.php

BUGFIX: Interpret 401s and 403s created init() methods as 'finished' requests

2011-02-02 14:27:10 +13:00

ModelAsController.php

MINOR Merged from trunk

2011-02-02 14:27:25 +13:00

NestedController.php

MINOR Unified @package PHPdoc (added where missing, removed duplicates)

2008-06-15 13:33:53 +00:00

RequestHandler.php

BUGFIX: Relax type checking in RequestHandler::checkAccessAction()

2011-02-02 14:27:30 +13:00

RootURLController.php

MINOR Merged from trunk

2011-02-02 14:27:24 +13:00