OSDN Git Service
henoheno [Sat, 24 Jul 2004 14:16:32 +0000 (23:16 +0900)]
Just a cleanup
henoheno [Sat, 24 Jul 2004 12:55:18 +0000 (21:55 +0900)]
Added index.php, encourages data-and-code concealment from direct HTTP access
henoheno [Sat, 24 Jul 2004 12:28:57 +0000 (21:28 +0900)]
pukiwiki.php is just a part of WikiWikiWeb clone...
henoheno [Sat, 24 Jul 2004 10:20:59 +0000 (19:20 +0900)]
Added .cvsignore
henoheno [Sat, 24 Jul 2004 10:08:47 +0000 (19:08 +0900)]
Remove redundant path './'
henoheno [Sat, 24 Jul 2004 10:01:41 +0000 (19:01 +0900)]
Remove redundant './' from directory defines
henoheno [Sat, 24 Jul 2004 09:45:38 +0000 (18:45 +0900)]
Added DATA_HOME
henoheno [Sat, 24 Jul 2004 08:51:26 +0000 (17:51 +0900)]
Moved pukiwiki.png and pukiwiki.gif from root to ./image/
henoheno [Sat, 24 Jul 2004 08:04:23 +0000 (17:04 +0900)]
Added path to DATA_HOME into UA_INI_FILE and SKIN_FILE
henoheno [Sat, 24 Jul 2004 05:10:06 +0000 (14:10 +0900)]
Remove redundat spaces only
henoheno [Sat, 24 Jul 2004 04:55:16 +0000 (13:55 +0900)]
Added spaces only
henoheno [Sat, 24 Jul 2004 04:43:10 +0000 (13:43 +0900)]
Corrected a message only
henoheno [Sat, 24 Jul 2004 04:37:33 +0000 (13:37 +0900)]
Put a space before facemarks
henoheno [Sat, 24 Jul 2004 00:43:28 +0000 (09:43 +0900)]
BugTrack/364 Corrected HTML rendering at ls2 plugin, with link option
henoheno [Sat, 24 Jul 2004 00:38:15 +0000 (09:38 +0900)]
Just cleanup
henoheno [Fri, 23 Jul 2004 14:48:19 +0000 (23:48 +0900)]
Added face/worried.png
henoheno [Fri, 23 Jul 2004 14:38:33 +0000 (23:38 +0900)]
BugTrack/637 mb_convert_variables() for $vars
henoheno [Fri, 23 Jul 2004 14:27:17 +0000 (23:27 +0900)]
BugTrack/637 mb_convert_variables() for $vars
henoheno [Mon, 19 Jul 2004 04:10:52 +0000 (13:10 +0900)]
Please use abstruct method $vars instead of $get or $post
henoheno [Mon, 19 Jul 2004 03:50:32 +0000 (12:50 +0900)]
Please use abstruct method $vars instead of $get or $post
henoheno [Mon, 19 Jul 2004 02:31:58 +0000 (11:31 +0900)]
Please use abstruct method $vars instead of $get or $post
henoheno [Mon, 19 Jul 2004 01:42:35 +0000 (10:42 +0900)]
Please use abstruct method $vars instead of $get or $post
henoheno [Sun, 18 Jul 2004 14:11:37 +0000 (23:11 +0900)]
Added pkwk_login() to check administrator password by system
henoheno [Sun, 18 Jul 2004 13:56:10 +0000 (22:56 +0900)]
Added pkwk_login() to check administrator password by system
henoheno [Sun, 18 Jul 2004 13:46:22 +0000 (22:46 +0900)]
A little cleanup. Added many spaces, remove unused vars and return
henoheno [Sun, 18 Jul 2004 13:09:00 +0000 (22:09 +0900)]
Added pkwk_login() to check administrator password by system
henoheno [Sun, 18 Jul 2004 12:52:21 +0000 (21:52 +0900)]
Added pkwk_login() to check administrator password by system
henoheno [Sun, 18 Jul 2004 10:41:02 +0000 (19:41 +0900)]
Added pkwk_login() to check administrator password by system
henoheno [Sun, 18 Jul 2004 10:38:54 +0000 (19:38 +0900)]
Added pkwk_login() to check administrator password by system
henoheno [Sun, 18 Jul 2004 10:12:40 +0000 (19:12 +0900)]
Blocking brute force attack
henoheno [Sun, 18 Jul 2004 09:53:05 +0000 (18:53 +0900)]
Renamed sanitize() => input_filter(), to avoid misunderstanding
like 'Wow, there's nothing to do about sanitizing'
henoheno [Sun, 18 Jul 2004 09:46:25 +0000 (18:46 +0900)]
Renamed sanitize() => input_filter(), to avoid misunderstanding
like 'Wow, there's nothing to do about sanitizing'
henoheno [Sun, 18 Jul 2004 09:25:13 +0000 (18:25 +0900)]
Renamed sanitize() => input_filter(), to avoid misunderstanding
like 'Wow, there's nothing to do about sanitizing'
henoheno [Sun, 18 Jul 2004 02:58:00 +0000 (11:58 +0900)]
Please use abstruct method $vars instead of $get or $post. Return something suitable if diff data seems not found
henoheno [Sun, 18 Jul 2004 02:39:06 +0000 (11:39 +0900)]
Please use abstruct method $vars instead of $get or $post. Return something suitable if diff data seems not found
henoheno [Sat, 17 Jul 2004 15:17:48 +0000 (00:17 +0900)]
Do not assume server-reply includes a space. Added sending STAT to enforce POP-before-SMTP
henoheno [Sat, 17 Jul 2004 14:56:40 +0000 (23:56 +0900)]
Do not assume server-reply includes a space. Added sending STAT to enforce POP-before-SMTP
henoheno [Sat, 17 Jul 2004 13:24:27 +0000 (22:24 +0900)]
Disconnect softly
henoheno [Sat, 17 Jul 2004 13:10:10 +0000 (22:10 +0900)]
Enable force APOP only, or POP only by $pop_auth_use_apop
henoheno [Sat, 17 Jul 2004 10:37:33 +0000 (19:37 +0900)]
Rewrote APOP/POP login function. APOP now enabled, and will use APOP if possible, by default
henoheno [Sat, 17 Jul 2004 10:16:47 +0000 (19:16 +0900)]
Rewrote APOP/POP login function. APOP now enabled, and will use APOP if possible, by default
henoheno [Fri, 16 Jul 2004 23:56:43 +0000 (08:56 +0900)]
BugTrack/635 Remove redundant, and invalid check for $use_proxy. Added init, and white spaces
henoheno [Thu, 15 Jul 2004 13:51:08 +0000 (22:51 +0900)]
Rewrote $adminpass help message (too long)
henoheno [Thu, 15 Jul 2004 12:44:36 +0000 (21:44 +0900)]
Added 'Other' icons (Compatibility with cell phones)
henoheno [Thu, 15 Jul 2004 12:44:06 +0000 (21:44 +0900)]
Sort only
henoheno [Thu, 15 Jul 2004 12:33:15 +0000 (21:33 +0900)]
Adding / Correcting KDDI cell phone's built-in icons
henoheno [Tue, 13 Jul 2004 13:34:05 +0000 (22:34 +0900)]
Please use abstruct method $vars, instead of $get or $post
henoheno [Tue, 13 Jul 2004 13:12:15 +0000 (22:12 +0900)]
BugTrack/627 Imported contribution from 'miko'.
* Added Japanese well-known face-marks ;)
* Added Japanese cell-phone-device(s)-specific graphic icon characters (that also enabled to show for PC browser via PukiWiki) at keitai.ini.php
* Moved face-mark settings for default profile, from rules.ini.php to default.ini.php
* sweat.png (means 'worried about') for PC browser, is not created yet. Anyone?
henoheno [Sun, 11 Jul 2004 11:11:13 +0000 (20:11 +0900)]
Simplify, reducing memory overheads.
* $get, $post, $vars, $cookie become references of $_GET, $_POST, $_REQUEST, $_COOKIE
* Avoid $_GET['pass'] attack
* Check if 'encoding_hints' is not empty
* Added spaces, Corrected comments
henoheno [Sun, 11 Jul 2004 03:54:36 +0000 (12:54 +0900)]
Renamed dir.txt => index.html, to avoid basic web spidering, that increases server's load-average and your security risk
henoheno [Sun, 11 Jul 2004 03:36:40 +0000 (12:36 +0900)]
Renamed dir.txt => index.html, to avoid basic web spidering, that increases server's load-average and your security risk
henoheno [Sun, 11 Jul 2004 03:06:41 +0000 (12:06 +0900)]
Renamed dir.txt => index.html, to avoid basic web spidering, that increases server's load-average and your security risk
henoheno [Sun, 11 Jul 2004 03:00:59 +0000 (12:00 +0900)]
Renamed dir.txt => index.html, to avoid basic web spidering, that increases server's load-average and your security risk
henoheno [Sat, 10 Jul 2004 14:34:42 +0000 (23:34 +0900)]
Added Opera, dressing up as other embedded browsers
henoheno [Sat, 10 Jul 2004 12:00:25 +0000 (21:00 +0900)]
Call exist_plugin() just once or a few, not everytime
henoheno [Sat, 10 Jul 2004 11:45:23 +0000 (20:45 +0900)]
Call exist_plugin() just once or a few, not everytime
henoheno [Sat, 10 Jul 2004 10:59:38 +0000 (19:59 +0900)]
Remove unused grobal $notify_from
henoheno [Sat, 10 Jul 2004 03:38:06 +0000 (12:38 +0900)]
* Please use abstruct interface $vars, instead of $get and $post.
* Added inits, isset()s, spaces, and blank lines.
henoheno [Fri, 9 Jul 2004 23:47:48 +0000 (08:47 +0900)]
E_ALL says, 'Warning: set_time_limit(): Cannot set time limit in safe mode'
henoheno [Fri, 9 Jul 2004 22:50:57 +0000 (07:50 +0900)]
Added various Game-consoles, PDAs, Set-Top-Box
henoheno [Thu, 8 Jul 2004 12:20:13 +0000 (21:20 +0900)]
Welcome, dear NetFront-embedded devices. Corrected regular expression more better
henoheno [Tue, 6 Jul 2004 12:07:03 +0000 (21:07 +0900)]
BugTrack/577 Fixed rename plugin's XTML parse error
henoheno [Mon, 5 Jul 2004 14:28:34 +0000 (23:28 +0900)]
Simplify. Please use $vars instead of \post. Say 'nothing' if trying to delete nothing backuped
henoheno [Mon, 5 Jul 2004 12:13:56 +0000 (21:13 +0900)]
INI_PRO_FILE is not needed now
henoheno [Mon, 5 Jul 2004 12:13:21 +0000 (21:13 +0900)]
i_mode.ini.php + jphone.ini.php + future phones and PDAs = keitai.ini.php
henoheno [Mon, 5 Jul 2004 11:23:40 +0000 (20:23 +0900)]
Added define DATA_HOME. init.php should be in SUB_DIR
henoheno [Sun, 4 Jul 2004 13:28:16 +0000 (22:28 +0900)]
Remove unused $script. Added array inits. Added many bla nk lines
henoheno [Sun, 4 Jul 2004 12:18:57 +0000 (21:18 +0900)]
Rewrite client's device and/or user-agent handling routines.
Added define INI_PRO_FILE for device/user-agent specific initialization
henoheno [Sun, 4 Jul 2004 11:37:33 +0000 (20:37 +0900)]
Rewrite client's device and/or user-agent handling routines.
Added define INI_PRO_FILE for device/user-agent specific initialization
henoheno [Sat, 3 Jul 2004 14:59:47 +0000 (23:59 +0900)]
Vodafone needs more detail of User-Agent strings. But don't use greedy regex to avoid risk of leakage of device serial number.
henoheno [Sat, 3 Jul 2004 14:50:43 +0000 (23:50 +0900)]
Correct UA_MATCHES. Some UA, like vodafone, needs more strict UA checking
henoheno [Sat, 3 Jul 2004 14:26:29 +0000 (23:26 +0900)]
Vodafone: Please don't use ambiguous pattern here.
Openwave(R) Mobile Browser: Added comment for the future
henoheno [Sat, 3 Jul 2004 12:57:56 +0000 (21:57 +0900)]
Re-define UA_TYPE => UA_NAME. Define UA_MATCHES. Don't unset $user_agent before reading UA_INI_FILE
henoheno [Sat, 3 Jul 2004 09:52:36 +0000 (18:52 +0900)]
Added a define UA_TYPE
henoheno [Sat, 3 Jul 2004 05:28:33 +0000 (14:28 +0900)]
Don't init $user_agent here
henoheno [Sat, 3 Jul 2004 05:02:43 +0000 (14:02 +0900)]
Using defined variables. See init.php (r1.81) for detail
henoheno [Sat, 3 Jul 2004 05:02:06 +0000 (14:02 +0900)]
More defensive. Added defines and unsets
* Added defines SERVER_PORT, SERVER_SOFTWARE
* Removed unused define PHP_SELF
* Unset already-defined variables from memory
* Unset USER AGENT related, after user-agent handling
* Unset GET / POST related more
* Unset QUERY_STRING related except $_SERVER['REQUEST_URI']
* Prohibit $_GET['msg'] attack
* Prefer POST to GET when creating $vars
henoheno [Sat, 3 Jul 2004 03:51:55 +0000 (12:51 +0900)]
BugTrack/581 - (au/TU-KA) EZweb からのアクセス
henoheno [Sat, 3 Jul 2004 01:36:01 +0000 (10:36 +0900)]
BugTrack/581 - (au/TU-KA) EZweb からのアクセス
henoheno [Fri, 2 Jul 2004 13:59:58 +0000 (22:59 +0900)]
Please use abstruct method $vars, instead of $get or $post
henoheno [Fri, 2 Jul 2004 13:34:36 +0000 (22:34 +0900)]
Please use abstruct method $vars, instead of $get or $post
henoheno [Fri, 2 Jul 2004 13:07:31 +0000 (22:07 +0900)]
Please use abstruct method $vars, instead of $get or $post
henoheno [Fri, 2 Jul 2004 12:47:48 +0000 (21:47 +0900)]
Please use abstruct method $vars, instead of $get or $post
henoheno [Thu, 1 Jul 2004 14:53:59 +0000 (23:53 +0900)]
Please use abstruct method $vars, instead of $get or $post
henoheno [Thu, 1 Jul 2004 14:52:30 +0000 (23:52 +0900)]
Simplify only. Remove unused grobal
henoheno [Thu, 1 Jul 2004 14:38:19 +0000 (23:38 +0900)]
Please use abstruct method $vars, instead of $get or $post
henoheno [Wed, 30 Jun 2004 14:20:29 +0000 (23:20 +0900)]
Simplify. Left your will, before you $die
henoheno [Wed, 30 Jun 2004 13:36:45 +0000 (22:36 +0900)]
Expire risk: unset $_GET, $_POST, $_COOKIE
henoheno [Wed, 30 Jun 2004 13:03:39 +0000 (22:03 +0900)]
BugTrack/622 Undefined index: action in diff.inc.php on line 16
henoheno [Mon, 28 Jun 2004 12:07:21 +0000 (21:07 +0900)]
'cmd=' prohibits nasty 'plugin='
henoheno [Sun, 27 Jun 2004 11:37:00 +0000 (20:37 +0900)]
BugTrack/586, edit_form() seems assuming cmd=edit to show help messages
henoheno [Sun, 27 Jun 2004 11:15:51 +0000 (20:15 +0900)]
Simplify $vars related. Added checking parameter 'cmd' and 'plugin'
henoheno [Sat, 26 Jun 2004 13:27:49 +0000 (22:27 +0900)]
Unified. Added blank lines just before functions
henoheno [Thu, 24 Jun 2004 13:45:52 +0000 (22:45 +0900)]
Don't require if it's not there
henoheno [Thu, 24 Jun 2004 13:05:35 +0000 (22:05 +0900)]
Simplify
* Added comments, blank lines and blank spaces
* define LANG_FILE
* Copyright 2001,2002,2003 => 2001-2004
* Say it cleary when get_script_uri() failed
henoheno [Tue, 22 Jun 2004 13:39:23 +0000 (22:39 +0900)]
コードの簡素化: チェックルーチンの整理 => チェック結果をまとめて報告する
henoheno [Tue, 22 Jun 2004 11:56:25 +0000 (20:56 +0900)]
BugTrack/509 ディレクトリの位置をハードコードしているファイルが多数ある
henoheno [Sun, 20 Jun 2004 06:31:02 +0000 (15:31 +0900)]
Use SUB_DIR, PLUGIN_DIR, SKIN_DIR
henoheno [Sun, 20 Jun 2004 05:53:15 +0000 (14:53 +0900)]
Use SUB_DIR, PLUGIN_DIR, SKIN_DIR
henoheno [Sun, 20 Jun 2004 04:20:18 +0000 (13:20 +0900)]
Removed redundant comments:
* Use mbstring.php (with jcode.php) if you can't use mbstring extension (See mbsring.php)
* Emphasis who is the creator
* Unfortunately the creator's site seems missing