tim/xxx
1
0
Fork 0
Code Issues Pull Requests Releases Activity
15 Commits 2 Branches 0 Tags
c85f54116c2ff081c86c57e0dd8ef10e908970d5
Commit Graph
4 Commits
Author SHA1 Message Date
tim c85f54116c Use bound parameters for every query that takes user data. 
The queue image query took $id without quotes or a check, which allowed
SQL injection.
 2026-09-25 21:29:09 +02:00
tim cda0602c95 Show the queue and hidden stories to editors only. 
With allow_queue_image in the session, queue=1 showed a visitor the whole
queue and the hidden stories. display.php now shows a visitor only the
image they submitted.
 2026-09-25 21:26:32 +02:00
tim 00829a0c0d Port the code to PHP 8.5. 
Replace the short open tags and the removed functions (mcrypt, mysql_error,
salt-less crypt). Decode the reCAPTCHA reply as JSON, turn off mysqli
exceptions, drop stripslashes(), and default missing input values.
Fix the misplaced continue in prune_images().
 2026-09-25 21:18:58 +02:00
tim 7fc40728f5 Initial commit. 2013-05-17 23:38:44 +02:00