diff options
| author | jlam <jlam@pkgsrc.org> | 2001-05-22 21:12:20 +0000 |
|---|---|---|
| committer | jlam <jlam@pkgsrc.org> | 2001-05-22 21:12:20 +0000 |
| commit | 49f7bf5a5ca78093fb8ab887092abc737dea52e4 (patch) | |
| tree | d37af9100e2a064cf27eca630ba6f24c99f1cd44 /cross | |
| parent | 3f48ef46099a295c08a689233568f25fc0a0d542 (diff) | |
| download | pkgsrc-49f7bf5a5ca78093fb8ab887092abc737dea52e4.tar.gz | |
Update imp to 2.2.5. Changes from version 2.2.4:
[bjn] SECURITY: Use is_uploaded_file() function to validate all attachment
uploads (prevent spoofing).
[bjn] SECURITY: Fix attachment upload to use tempnam(). (Jarno Huuskonen
<Jarno.Huuskonen@uku.fi>)
[cjh] SECURITY: Fix attachment viewers to use tempnam().
[cjh] Fix mysql warning with php 4.0.7.
[max] Move all JavaScript URLs to the onclick event handler to prevent
breaking IE SSL in certain circumstances.
[cjh] Add addslashes() to mysql db library.
[bjn] Bug 577: umask fixes to prevent world-writable /tmp files.
(<andreas@conectiva.com.br>)
[bjn] Bug 517: Fixes for LDAP searching--bogus LDAP filters when some
drop-downs were switched away from default values. (Robert Marchand
<robert.marchand@UMontreal.CA>)
[cjh] Allow '+' to terminate URLs.
Diffstat (limited to 'cross')
0 files changed, 0 insertions, 0 deletions