Russia
|
#1140
Fix msapplication-task meta field in the header (already fixed before)
#1141
!436 Fix bug: any file in UCenter can disclose information
New function detectescape() added. Descriptioe infon: Determine whether the second parameter will escape the directory defined by the first parameter (must end with DIRECTORY_SEPARATOR). Returning TRUE means that it is safe and does not need to be escaped. In all other cases, FALSE is returned to avoid giving the attacker more information.
#1142
Translate comments in detectescape() function
#1143
!435 Fixed the security risks caused by trusting HTTP_HOST in some email sending scenarios
The cache must be rebuilt after applying this fix!
#1144
Fix a bug in function.inc.php
#1145
Remove GBK comments from wechat.lib.class.php
#1146
!442 Fix the bug in wechat: QR code is not displayed under HTTPS
#1147
!217 Fix a problem of concurrent rating and magics after swipe points.
Thanks to @zhaisoul for continually optimizing the solution, the current solution is relatively perfect. After this PR, the backend adds a configuration item "Enable Form Anti-Concurrency Function" in Global Settings -> Site Functions -> Others. When enabled, it can prevent the concurrency of rating and magics.
Note that this function is implemented through the memory table process without the configuration of the cache, and there may be performance problems in a high concurrency environment. If you have high concurrency requirements, please configure memcached or redis cache.
Task concurrency issues are tracked and handled in !443 PR.
#1148
Sync SC/TC languages
#1149
Sync SC/TC languages
#1150
UCenter: change the language variable in template.lang.php
|
|