tim 41c46a43c6 Add CSRF protection to every form that changes data. ...

The logout link carries the token too, and the cookies get SameSite=Lax.

2026-09-25 21:38:22 +02:00

..

addeditor.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

choose.inc.php

Escape request and database values in forms and links.

2026-09-25 21:36:27 +02:00

edit.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

index.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

login.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

logout.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

modify.inc.php

Port the code to PHP 8.5.

2026-09-25 21:18:58 +02:00

post.lib.php

Escape story fields and clean story HTML with HTML Purifier.

2026-09-25 21:34:10 +02:00

preview.inc.php

Escape request and database values in forms and links.

2026-09-25 21:36:27 +02:00

style.css

Lay out the forms on a grid.

2026-09-25 23:32:08 +02:00

tinymce_init.inc.php

A number of changes to the CSS, page layout (moved to HTML5), and updated the editor.

2015-11-21 21:54:02 +02:00

utilities.js

Initial commit.

2013-05-17 23:38:44 +02:00

write.inc.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00