Commit Graph

415 Commits

Author SHA1 Message Date
monte.ohrt
443e36f1a8 revert super global access changes, and instead use ALLOW_SUPER_GLOBALS for security measures 2009-06-17 14:39:24 +00:00
monte.ohrt
2172df777a fix E_NOTICE Errors 2009-05-23 20:59:25 +00:00
monte.ohrt
e11b8c6d7a rename supers to _supers 2009-05-16 23:27:22 +00:00
monte.ohrt
2919f9a608 fix problem with super globals and isset() 2009-05-16 23:23:49 +00:00
monte.ohrt
5220455ae5 update NEWS file and dev version numbers 2009-05-14 13:18:50 +00:00
monte.ohrt
34cadb491c disallow writing to super globals from within the template. also add ability to disable super global access with security enabled 2009-04-30 21:51:19 +00:00
monte.ohrt
0bde5c5477 revert method chaining code in compiler 2009-03-28 20:28:17 +00:00
monte.ohrt
a2db07cb46 update version numbers in svn 2008-12-17 20:08:17 +00:00
monte.ohrt
835fd9e69d back out method chaining, some verions of PCRE throw errors 2008-12-08 15:10:03 +00:00
monte.ohrt
1fe6ad061c patch for security, php executed in templates 2008-09-22 19:26:32 +00:00
monte.ohrt
2e61902cdf revert patch for secuity hole, update site url 2008-09-22 15:29:16 +00:00
Uwe.Tews
d195b96411 - fix function injection security hole closed (U.Tews) 2008-09-18 21:03:32 +00:00
Uwe.Tews
ece447453f 2008-09-09 15:37:20 +00:00
Uwe.Tews
a21446a764 Updated to allow method chaining for PHP4 and PHP5 (U.Tews) 2008-09-08 22:31:19 +00:00
monte.ohrt
e4a5b1f8fc update version numbers (again) 2008-08-15 21:14:45 +00:00
monte.ohrt
54a6a542dd update version numbers 2008-08-15 21:12:56 +00:00
Uwe.Tews
1dd680df13 fix that function results can be used together with conditions like "is even" at the {if} tag (U.Tews) 2008-08-12 18:17:51 +00:00
mohrt
06acedfc20 fix typo 2007-09-16 14:47:53 +00:00
mohrt
3cb64d6a44 add append feature to capture 2007-08-01 13:34:39 +00:00
messju
2aae91c920 fixed calling registered objects' methods with an empty argument list.
thanks marcello
2007-05-11 13:45:36 +00:00
mohrt
87dec363dc update version numbers 2007-03-08 19:11:22 +00:00
messju
1f2852d1da bumped version number 2007-03-06 10:40:06 +00:00
danilo
edf49d5570 Applied boots clean up patch and removed commented out code.
Updated NEWS file
2007-03-01 18:18:56 +00:00
danilo
a9c19850bb Modified _(push|pop)_cacheable_state() to embedd alternate syntax. See this bug report: http://www.phpinsider.com/smarty-forum/viewtopic.php?t=10502 2007-02-27 11:14:10 +00:00
mohrt
b90563045e escape creating of language=php from interleaving 2007-02-23 19:40:01 +00:00
mohrt
2c90488fd2 add removed line back in 2007-02-23 16:28:34 +00:00
mohrt
5a1db056c7 fix up last patch, remove unnecessary lines 2007-02-23 16:18:02 +00:00
mohrt
6afa5118b4 fix situation when no compiled tags are present 2007-02-23 15:41:56 +00:00
mohrt
7d334255b7 fix problem with php open tags generated from tag interleaving 2007-02-23 14:24:10 +00:00
mohrt
5c14c2c053 update dev version numbers 2006-12-01 15:40:05 +00:00
mohrt
07683a4a9c update dev version numbers, fix manual typo 2006-11-30 17:01:28 +00:00
messju
c5f0dad3e2 fixed wrong handling of name attribute in {insert}
thanks to Ivan Kravets for reporting this
2006-08-25 19:21:27 +00:00
messju
117173df93 fixed typo 2006-08-25 19:12:16 +00:00
messju
bf3f34cab1 fix false replacement of "$t" inside double quotes
thanks to checat for reporting this
2006-08-03 20:03:20 +00:00
mohrt
c67fdfc756 update version numbers 2006-05-28 17:35:05 +00:00
boots
4ed5b5acab un-hide hidden xml open tags 2006-05-25 14:46:18 +00:00
boots
acd33fed3f separate handling of comment blocks from "special blocks" 2006-05-09 19:57:30 +00:00
messju
694d6ddcc2 fix handling of block-methods of registered objects
thanks to El Hombre Gris
2006-04-22 08:16:57 +00:00
messju
2fc1fd958f removed possiblity for E_NOTICE on an undefined variable in
Smarty_Compiler::_compile_if_tag() - thanks to sbeh
2006-01-29 18:11:22 +00:00
mohrt
f4934fdcf0 update version numbers 2006-01-18 19:02:52 +00:00
messju
05ec80e72f fixed use of references $cache_attrs and $repeat in Smarty_Compiler.
php does not allow to pass an assigned by reference to a function. since php-5.1.2
the reference to the lval gets lost when passing an assignment.
2006-01-15 19:29:45 +00:00
boots
e009be5640 Fix improper tokenization of certain inline math expressions.
Thanks to gerard at forums for reporting this.
2005-12-21 18:09:23 +00:00
mohrt
4f33ed7229 update version numbers 2005-12-14 14:53:55 +00:00
messju
1f838f15e7 fixed code generation of non-cacheable blocks to play well with php's
"Alternative syntax" used for example in compiled {if}..{else}..{/if}
blocks.

(see: http://php.net/manual/en/control-structures.alternative-syntax.php
on "Alternative syntax")

thanks to kihara from the forum.
2005-11-29 12:22:54 +00:00
boots
fdb25e363f replace {} string access with equivalent substr() to avoid E_STRICT warnings in PHP 5.1 2005-11-23 20:36:05 +00:00
mohrt
159eb19d33 update version numbers 2005-08-05 20:53:04 +00:00
messju
986640555a fixed proper escaping for literal strings passed to
Smarty_Compiler::_expand_quoted_text() by
Smarty_Compiler::_parse_var_props()
2005-08-04 19:43:21 +00:00
mohrt
bd60de4b42 add error message for empty if/elseif statements 2005-05-02 14:03:18 +00:00
mohrt
d13087a591 update version numbers 2005-03-31 14:57:19 +00:00
mohrt
741ffd0e92 disable variable func calls completely 2005-03-30 16:48:41 +00:00