Security enhancements: 'user' session cookie no longer contains the username; session cookie is randomised so less 'guessable'; session cookie has 'Secure' flag set (if https); session cookie has 'HTTPOnly' flag set to prevent probing via XSS


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4445 c08608d7-6e46-0410-86ca-f2a6f1370df5
Updates to search.php to urlencode values where required


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4446 c08608d7-6e46-0410-86ca-f2a6f1370df5
Updates to edit.php to urlencode/htmlspecialchars values where required


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4447 c08608d7-6e46-0410-86ca-f2a6f1370df5
More urlencode changes


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4448 c08608d7-6e46-0410-86ca-f2a6f1370df5
More urlencode changes


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4449 c08608d7-6e46-0410-86ca-f2a6f1370df5
More checks on user input


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4450 c08608d7-6e46-0410-86ca-f2a6f1370df5
Added lots of htmlspecialchars() and urlencode() to prevent XSS / HTML injection
Removed 'remember username' function as this will not work now that the session cookie does not contain the username.


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4451 c08608d7-6e46-0410-86ca-f2a6f1370df5
fix for plupload issue after r4445


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4452 c08608d7-6e46-0410-86ca-f2a6f1370df5
More urlencode updates


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4453 c08608d7-6e46-0410-86ca-f2a6f1370df5
Further escaping to remove XSS and HTML injection vulnerabilities
Removed include/upgrade.php as redundant - part of a proposed incomplete config system


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4454 c08608d7-6e46-0410-86ca-f2a6f1370df5
force password change when 'admin'

git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4455 c08608d7-6e46-0410-86ca-f2a6f1370df5
improve css for secureyouradminaccount display

git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4456 c08608d7-6e46-0410-86ca-f2a6f1370df5
remove conditional show_edit_all link in collections_compact_style, unnecessary and not on by default

git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4457 c08608d7-6e46-0410-86ca-f2a6f1370df5
fix for rss2 and api plugins after montala's security commits.

git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4458 c08608d7-6e46-0410-86ca-f2a6f1370df5
More url encoding updates


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4459 c08608d7-6e46-0410-86ca-f2a6f1370df5
More urlencoding updates


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4460 c08608d7-6e46-0410-86ca-f2a6f1370df5
Reinstated Tom's change that was accidentally reverted


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4461 c08608d7-6e46-0410-86ca-f2a6f1370df5
Fix for external shares broken in 4454


git-svn-id: http://svn.resourcespace.org/svn/resourcespace@4462 c08608d7-6e46-0410-86ca-f2a6f1370df5
Initial commit
Merge branch 'master' of github.com:rzamana/resourcespace