Commit Graph

16 Commits

Author SHA1 Message Date
Gerhard ab5d86097b Coding standards, mostly braces 2014-02-26 13:54:16 +02:00
toddlahman 2725527d4a Removed urldecode from $_GET and $_REQUEST
The superglobals $_GET and $_REQUEST are already decoded. Using
urldecode() on an element in $_GET or $_REQUEST could have unexpected
and dangerous results.

See Notes:

http://us1.php.net/manual/en/function.urldecode.php
2014-01-26 01:19:17 -08:00
toddlahman 75c76ff7b9 improved ob_end_clean for download handler 2014-01-02 18:35:17 -08:00
toddlahman 32af9d4440 Revert back to ob_end_clean to fix errors
ob_clean does not turn off output buffering as ob_end_clean does. On
some hosts ob_clean results in an error like: transfer closed with 3
bytes remaining to read. ob_end_clean fixes this.
2013-12-19 01:14:39 -08:00
James Koster dbf1b15001 replace a few missed →'s. closes #4350 2013-12-12 13:42:29 +00:00
Mike Jolley 553b273fc6 Merge pull request #4214 from toddlahman/master
escape download handler URLs
2013-12-03 07:32:47 -08:00
Gregory K cdbe5950f0 PhpDocs and TODO comments 2013-11-28 11:49:30 -05:00
toddlahman 52fd9a0502 esc_url applied to readfile home_url()
This should fix it.

Thank you Mike for the info on esc_html.
2013-11-27 15:51:56 -08:00
toddlahman c6fd37f2df esc_url_raw to readfile home_url() 2013-11-26 13:55:10 -08:00
toddlahman 6bed7bff94 escape download handler URLs 2013-11-26 07:27:46 -08:00
Coen Jacobs 47ae00be28 Page functions woocommerce to wc refactor 2013-11-25 15:07:22 +01:00
Mike Jolley f6786ef6bf Convert back to forward slashes in getcwd closes #4112.
@tivnet, can you confirm? I don't have windows.
2013-11-18 11:20:39 +00:00
Gregory K eba9edb30b Incorrect "Robots: none" tag?
https://developers.google.com/webmasters/control-crawl-index/docs/robots_meta_tag
2013-11-14 07:40:33 -05:00
Illimar Tambek 3c22c486f8 Add download_file capability and security check 2013-09-06 19:38:06 +03:00
Mike Jolley 131f692855 Tweak download handler Closes #3394. 2013-08-13 14:53:55 +01:00
Mike Jolley 57157db9bf Function refactoring. 2013-08-09 17:11:21 +01:00