Go to file
Chris Cormack 2dcde08646 Bug 11661: sanitize file names supplied to edithelp.pl
This patch corrects an issue whereby edithelp.pl could
be used to create or modify arbitrary files on the server
with the permissions of the Apache user.

Signed-off-by: Galen Charlton <gmc@esilibrary.com>
Signed-off-by: Jonathan Druart <jonathan.druart@biblibre.com>
Signed-off-by: Galen Charlton <gmc@esilibrary.com>
(cherry picked from commit 7baf02c263)
Signed-off-by: Tomas Cohen Arazi <tomascohen@gmail.com>
(cherry picked from commit 677e9299da)
Signed-off-by: Bernardo Gonzalez Kriegel <bgkriegel@gmail.com>
(cherry picked from commit 677e9299da)
2014-02-06 13:22:44 -03:00
C4 Bug 9531: Make SIP2 message terminator configurable via SIPconfig.xml 2013-11-14 13:32:07 -03:00
Koha Bug 10494: remove spurious warnings from the KohaBranchName plugin 2013-08-02 16:09:39 -03:00
acqui Bug 10557: remove unused branch parameter from GetBooksellersWithLateOrders 2013-10-11 15:38:25 -03:00
admin Bug 8887: only display desired result when doing exact syspref search 2013-09-14 16:37:38 -03:00
authorities Bug 5262: make authority plugin copy indicators to bib record 2013-09-14 15:38:42 -03:00
basket Bug 9073 - Download option from the cart should match the menu button in lists 2012-11-26 19:48:54 +13:00
catalogue Bug 10742: improve converting simple search to Z39.50 search 2013-10-13 16:36:29 -03:00
cataloguing Bug 10331 - Little errors in unimarc_field_4XX.pl (punctuation) 2013-11-14 17:23:50 -03:00
circ Bug 5904: make patron search autocompletion respect IndependentBranches 2013-10-11 16:20:48 -03:00
debian Bug 10574 - mute the "upgrading from 3.2" message 2013-10-11 21:14:16 -03:00
docs Bug 7143: history.txt and about page updates 2013-10-11 16:19:42 -03:00
errors Housekeeping in errors scripts 2010-05-12 07:29:03 -04:00
etc Bug 9531: Make SIP2 message terminator configurable via SIPconfig.xml 2013-11-14 13:32:07 -03:00
install_misc Bug 9267 - Ubuntu 12.04 install docs broken 2013-03-11 22:42:45 +13:00
installer Database update for 3.10.12 release 2013-10-28 16:02:46 -03:00
koha-tmpl Bug 7478: (followup) Branches template plugin not available in 3.10.x 2014-02-06 13:14:06 -03:00
labels Bug 10527: remove disused routine C4::Branch::get_branch_code_from_name 2013-08-04 20:02:23 -03:00
members Bug 10027: (follow-up) tidy members/printinvoice.pl 2013-11-14 13:22:16 -03:00
misc Translation updates for 3.10.12 2013-10-28 15:57:33 -03:00
offline_circ Bug 8006 - Loading offline circulation does not anonymize 2012-06-20 19:40:41 +02:00
opac Bug 10272: make CheckReserves respect ReservesControlBranch 2013-10-13 16:45:08 -03:00
patroncards Bug 10527: remove disused routine C4::Branch::get_branch_code_from_name 2013-08-04 20:02:23 -03:00
reports Bug 10718: fix items with no checkouts report 2013-11-14 17:46:12 -03:00
reserve Bug 766: remove CGI::scrolling_list from request.pl 2013-07-13 14:52:58 -03:00
reviews Bug 1623 - Provide view of approved comments 2011-12-27 18:26:50 +01:00
rotating_collections Bug 6553 : Follow up adding license statements 2011-08-13 19:54:38 +12:00
selenium Adding selenium tests for filterMembers 2009-09-30 11:30:37 +02:00
serials Bug 10609: Use branch name rather than branch code in serials-collection.pl (3.12.x) 2013-10-13 11:47:53 -03:00
services Bug 7178: Acquisition item creation improvement 2012-03-26 11:07:23 +02:00
skel 8268 Followup for creating var spool subdir. 2012-07-23 10:40:43 +02:00
sms Bug 2505 - Add commented use warnings where missing in the sms/ directory 2010-04-21 20:25:08 +12:00
suggestion Bug 9226: Wrong branch filter after suggestion creation 2013-02-16 18:37:08 +13:00
svc Bug 9908 - Fixing OCLC Connexion Client 2013-03-30 20:14:59 +13:00
t Bug 10333: Labels/t_Batch.t needs to create its own data 2013-10-13 16:53:26 -03:00
tags Bug 10022 - Multiple tags moderation doesn't work on translated page 2013-05-08 19:54:00 +12:00
test Bug 5449: JSON malformed in Koha - Blocker with jQuery 1.4.x 2011-03-12 08:53:41 +13:00
tmp/modified_authorities
…
tools Bug 11660: remove disused tools/pdfViewer.pl 2014-02-06 13:20:40 -03:00
virtualshelves Bug 7788: [SIGNED-OFF] Followup: GetShelf call in addbybiblio script corrected 2012-05-22 12:06:26 +02:00
xt Bug 8942 : Adding a test to make sure we don't use single quotes for js 2013-03-30 08:11:59 +13:00
.htaccess Fix file permissions: if it is not a script, it should not be executable. 2010-04-16 00:40:34 -04:00
.mailmap 7439 Mailmap for master 2012-01-27 12:27:58 +01:00
INSTALL Bug 7759, update of install files to use background indexing (and some whitespace tidy) 2012-04-20 16:11:52 +02:00
INSTALL.debian Bug 8092 follow-up: Add optional dependency on CHI 2012-06-09 13:08:18 +02:00
INSTALL.fedora7 Bug 8092 follow-up: Add optional dependency on CHI 2012-06-09 13:08:18 +02:00
INSTALL.opensuse Bug 7759, update of install files to use background indexing (and some whitespace tidy) 2012-04-20 16:11:52 +02:00
INSTALL.ubuntu Bug 8092 follow-up: Add optional dependency on CHI 2012-06-09 13:08:18 +02:00
INSTALL.ubuntu.12.04 Bug 9267 - Ubuntu 12.04 install docs broken 2013-03-11 22:42:45 +13:00
INSTALL.ubuntu.lucid Bug 8092 follow-up: Add optional dependency on CHI 2012-06-09 13:08:18 +02:00
LICENSE Update LICENSE with a fresh copy from upstream. This updates the FSF address, and refers to the LGPL with its current name, and changes a few other minor things of the typographical sort. No semantic changes. 2010-03-16 20:17:48 -04:00
MANIFEST.SKIP Bug 9546 : Updating make manifest tardist 2013-02-09 12:31:39 +13:00
Makefile.PL Bug 8911: make sure history.txt gets installed where history.txt can see it 2013-08-04 16:34:55 -03:00
README updated links in README 2010-05-24 08:14:16 -04:00
README.robots Bug 6411 add another example to README.robots 2011-07-05 14:48:05 +12:00
about.pl Bug 10915: (QA followup) warn if cannot read history.txt 2013-10-13 11:15:46 -03:00
changelanguage.pl Bug 6755 Problems with switching languages 2011-09-23 09:47:09 +12:00
edithelp.pl Bug 11661: sanitize file names supplied to edithelp.pl 2014-02-06 13:22:44 -03:00
fix-perl-path.PL
…
help.pl Bug 8949: Trying to view help on a page without any help results in a nasty error 2012-11-05 08:39:23 -05:00
install-CPAN.pl Bug 5370: Fix all the references to koha.org 2010-11-08 09:41:49 +13:00
koha_perl_deps.pl bug 10548: fix count of missing required dependencies by koha_perl_deps.pl 2013-08-04 10:18:57 -03:00
kohaversion.pl Database update for 3.10.12 release 2013-10-28 16:02:46 -03:00
mainpage.pl Bug 9008: warn if user is logged-in with admin account 2012-11-26 13:35:18 +13:00
rewrite-config.PL Bug 10712: Save missing config variables to install log 2013-09-13 19:20:30 -03:00

README

Koha is a free software integrated library system.

Koha is distributed under the GNU GPL version 2 or later.
Please read the file LICENSE for more details.

To install or upgrade Koha, please see the INSTALL file appropriate
to your platform.

Report bugs at http://bugs.koha-community.org/

Visit the Koha Project website at http://www.koha-community.org/