tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity
21,397 Commits 31 Branches 527 Tags 162 MiB
PHP 99.4%
Scheme 0.5%
eccfa9b10d
Go to file
Serge Latyntcev eccfa9b10d [CVE-2019-12203] Session fixation in "change password" form 
A potential account hijacking may happen if an attacker has physical access to
victim's computer to perform session fixation. Also possible if the targeted application contains an XSS vulnerability.
Requires the victim to click the password reset link sent to their email.
If all the above happens, attackers may reset the password before the actual user does that.
2019-09-24 16:03:48 +12:00
_config Merge branch '4.3' into 4.4 2019-06-10 17:32:07 +12:00
.github Fix the GitHub issue template 2018-10-29 15:49:05 +13:00
.tx remove js transifex 2017-04-28 14:59:42 +12:00
client NEW add web accessible colours to web view dev/build 2017-07-18 22:00:35 +12:00
docs DOCS: Add FileShortcodeProvider change to changelog 2019-09-24 16:03:48 +12:00
lang Update translations 2019-08-19 15:10:41 +12:00
src [CVE-2019-12203] Session fixation in "change password" form 2019-09-24 16:03:48 +12:00
templates FIX: Show RightTitle on CheckboxField 2019-04-04 15:50:19 +13:00
tests FIX Add 'legal empty attributes' to allow empty alt values on imgs 2019-09-24 11:44:12 +12:00
thirdparty Fix missing braces 2018-06-01 10:14:42 +12:00
_config.php Bump deprecation to 4.0 in preparation for rc and stable tags 2017-08-29 15:02:36 +12:00
_register_database.php Setting default db adapter in installation as PDO MySQL with MySQLi as fail safe. 2016-11-02 19:51:13 +13:00
.codecov.yml Turn off codecov commenting on PRs 2016-10-12 16:31:22 +01:00
.editorconfig Update composer.json 2017-10-12 11:53:12 +13:00
.gitattributes FIX Amend rules to ignore test files only 2017-12-20 11:13:07 +13:00
.gitignore Ignore assets dir that can be created on dev/build 2018-09-29 22:52:08 +01:00
.scrutinizer.yml Merge branch '4.0' into 4 2017-12-05 12:14:22 +00:00
.travis.yml Merge branch '4.3' into 4 2019-01-08 12:27:48 +01:00
.upgrade.yml Add missing upgrade rules for Email class 2019-08-29 09:10:03 +12:00
behat.yml add behat.yml back, pathed to admin 2019-02-01 15:56:29 +13:00
cli-script.php API Refactor bootstrap, request handling 2017-06-22 22:50:45 +12:00
composer.json NEW Clearer file migration output with colours 2019-06-05 11:41:06 +12:00
CONTRIBUTING.md Add copyright note to contributing.md 2016-05-30 14:32:19 +12:00
LICENSE Create licence file so that GitHub (and humans) can more easily find it 2018-02-12 11:21:03 +00:00
phpcs.xml.dist CS Force spaces around string concat operators 2018-01-16 18:39:24 +00:00
phpunit.xml.dist Actually run CMS tests 2018-02-08 10:32:56 +00:00
README.md Update README to fix issue reporting guidelines link 2019-01-07 13:06:59 +13:00
sake BUG Ensure sake works when called from any directory 2017-10-17 13:52:39 +13:00
silverstripe_version API CHANGE silverstripe_version file now contains the plain version number, rather than an SVN path 2012-02-01 18:42:21 +01:00
SUPPORT.md Support file grammer improvements 2018-03-27 11:49:04 +01:00

README.md

SilverStripe Framework

Build Status Latest Stable Version Latest Unstable Version codecov SilverStripe supported module Total Downloads License

PHP framework forming the base for the SilverStripe CMS (https://silverstripe.org). Requires a silverstripe-installer base project. Typically used alongside the cms module.

Installation

See installation on different platforms, and installation from source.

Bugtracker

Bugs are tracked on github.com. Please read our issue reporting guidelines.

Development and Contribution

If you would like to make changes to the SilverStripe core codebase, we have an extensive guide to contributing code.

Links

Attribution