toddlahman
2725527d4a
Removed urldecode from $_GET and $_REQUEST
...
The superglobals $_GET and $_REQUEST are already decoded. Using
urldecode() on an element in $_GET or $_REQUEST could have unexpected
and dangerous results.
See Notes:
http://us1.php.net/manual/en/function.urldecode.php
2014-01-26 01:19:17 -08:00
toddlahman
75c76ff7b9
improved ob_end_clean for download handler
2014-01-02 18:35:17 -08:00
toddlahman
32af9d4440
Revert back to ob_end_clean to fix errors
...
ob_clean does not turn off output buffering as ob_end_clean does. On
some hosts ob_clean results in an error like: transfer closed with 3
bytes remaining to read. ob_end_clean fixes this.
2013-12-19 01:14:39 -08:00
James Koster
dbf1b15001
replace a few missed →'s. closes #4350
2013-12-12 13:42:29 +00:00
Mike Jolley
553b273fc6
Merge pull request #4214 from toddlahman/master
...
escape download handler URLs
2013-12-03 07:32:47 -08:00
Gregory K
cdbe5950f0
PhpDocs and TODO comments
2013-11-28 11:49:30 -05:00
toddlahman
52fd9a0502
esc_url applied to readfile home_url()
...
This should fix it.
Thank you Mike for the info on esc_html.
2013-11-27 15:51:56 -08:00
toddlahman
c6fd37f2df
esc_url_raw to readfile home_url()
2013-11-26 13:55:10 -08:00
toddlahman
6bed7bff94
escape download handler URLs
2013-11-26 07:27:46 -08:00
Coen Jacobs
47ae00be28
Page functions woocommerce to wc refactor
2013-11-25 15:07:22 +01:00
Mike Jolley
f6786ef6bf
Convert back to forward slashes in getcwd closes #4112 .
...
@tivnet, can you confirm? I don't have windows.
2013-11-18 11:20:39 +00:00
Gregory K
eba9edb30b
Incorrect "Robots: none" tag?
...
https://developers.google.com/webmasters/control-crawl-index/docs/robots_meta_tag
2013-11-14 07:40:33 -05:00
Illimar Tambek
3c22c486f8
Add download_file capability and security check
2013-09-06 19:38:06 +03:00
Mike Jolley
131f692855
Tweak download handler Closes #3394 .
2013-08-13 14:53:55 +01:00
Mike Jolley
57157db9bf
Function refactoring.
2013-08-09 17:11:21 +01:00