Mcat12 40c6ee9f5a Remove strict flag and change Host check ...

Since the Host header is easily manipulated, we can only check if
it's wrong and can't use it to validate that the client is authorized,
only unauthorized. There's no need for the strict flag anymore
because of this.

2016-12-02 16:06:43 -05:00

..

add.php

Require CORS check on all admin pages

2016-11-07 21:10:36 -05:00

auth.php

Remove strict flag and change Host check

2016-12-02 16:06:43 -05:00

func.php

Check if a domain name is valid

2016-08-17 21:18:17 +02:00

get.php

Merge devel

2016-08-16 16:08:28 -04:00

gravity.sh.php

Extended current password protection to gravity.sh page

2016-11-20 14:52:53 +01:00

password.php

Small fix in password.php: Verify that there is a password hash before trying to access it

2016-11-24 12:54:26 +01:00

queryads.php

Extended password protection to php/queryads.php

2016-11-23 18:05:07 +01:00

sub.php

Require CORS check on all admin pages

2016-11-07 21:10:36 -05:00