tim 15ad07423a Match usernames and session keys with = instead of LIKE. ...

A username of "%" matched the first editor.

2026-09-25 21:39:25 +02:00

..

addeditor.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

choose.inc.php

Escape request and database values in forms and links.

2026-09-25 21:36:27 +02:00

edit.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

index.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

login.php

Match usernames and session keys with = instead of LIKE.

2026-09-25 21:39:25 +02:00

logout.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

modify.inc.php

Port the code to PHP 8.5.

2026-09-25 21:18:58 +02:00

post.lib.php

Escape story fields and clean story HTML with HTML Purifier.

2026-09-25 21:34:10 +02:00

preview.inc.php

Escape request and database values in forms and links.

2026-09-25 21:36:27 +02:00

style.css

Lay out the forms on a grid.

2026-09-25 23:32:08 +02:00

tinymce_init.inc.php

A number of changes to the CSS, page layout (moved to HTML5), and updated the editor.

2015-11-21 21:54:02 +02:00

utilities.js

Initial commit.

2013-05-17 23:38:44 +02:00

write.inc.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00