tim dfa6d71198 Hash editor passwords with Argon2id and upgrade old hashes. ...

Old hashes are replaced at login. Widen the column before deploying:

  ALTER TABLE editors MODIFY password VARCHAR(255) NOT NULL;

2026-09-25 21:41:36 +02:00

..

addeditor.php

Hash editor passwords with Argon2id and upgrade old hashes.

2026-09-25 21:41:36 +02:00

choose.inc.php

Escape request and database values in forms and links.

2026-09-25 21:36:27 +02:00

edit.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

index.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

login.php

Hash editor passwords with Argon2id and upgrade old hashes.

2026-09-25 21:41:36 +02:00

logout.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00

modify.inc.php

Port the code to PHP 8.5.

2026-09-25 21:18:58 +02:00

post.lib.php

Escape story fields and clean story HTML with HTML Purifier.

2026-09-25 21:34:10 +02:00

preview.inc.php

Escape request and database values in forms and links.

2026-09-25 21:36:27 +02:00

style.css

Lay out the forms on a grid.

2026-09-25 23:32:08 +02:00

tinymce_init.inc.php

A number of changes to the CSS, page layout (moved to HTML5), and updated the editor.

2015-11-21 21:54:02 +02:00

utilities.js

Initial commit.

2013-05-17 23:38:44 +02:00

write.inc.php

Add CSRF protection to every form that changes data.

2026-09-25 21:38:22 +02:00