Aidan Woods 85c7a3b437 Use hash_equals when comparing to pwhash from cookie ...

This should prevent a timing attack against this parameter to
disclose the stored passsword hash.

Signed-off-by: Aidan Woods <aidantwoods@gmail.com>

2020-12-06 13:26:02 +00:00

..

api_token.php

Wrap API token in code

2019-12-07 09:56:50 +02:00

auth.php

Add support for international domain names. Note that this relies on php-intl to be installed

2020-01-12 13:53:12 +01:00

customcname.php

Incorporate upstream changes

2020-06-21 13:55:50 +02:00

customdns.php

Incorporate upstream changes

2020-06-21 13:55:50 +02:00

database.php

make use of utils.escapeHtml on the JS side of things, and html_entity_decode/htmlentities in PHP

2020-06-13 18:50:36 +01:00

debug.php

Sanitize debug text before sending

2018-01-19 17:08:05 -05:00

footer.php

give the two radio buttons in custom select each an ID, and exclude them when theming radio buttons

2020-09-18 09:24:33 +01:00

FTL.php

While I'm in here.. prevent another error being constantly output to the error log

2020-05-18 18:09:23 +01:00

func.php

Merge branch 'devel' into devel

2020-06-21 12:20:33 +02:00

gravity.php

Re-implement api.php?list actions for add, sub and get.

2020-05-26 18:40:33 +02:00

gravity.sh.php

Detect ${OVER} and mirror its effect properly on the web interface

2017-09-21 20:23:38 +02:00

groups.php

Merge pull request #1625 from pi-hole/tweak/replace_domains

2020-11-28 16:25:38 +00:00

header.php

Merge pull request #1489 from pi-hole/XhmikosR-patch-1

2020-10-14 04:13:59 -07:00

loginpage.php

Address some of @dl6er's comments

2020-09-12 11:32:41 +01:00

password.php

Use hash_equals when comparing to pwhash from cookie

2020-12-06 13:26:02 +00:00

queryads.php

Fix a PHP error generated by "Query Lists".

2019-01-18 01:25:59 -03:00

savesettings.php

Merge branch 'release/v5.2' into new/mac_clients

2020-07-30 21:56:21 +02:00

tailLog.php

[Staging] 3.1 (#514)

2017-06-20 22:17:37 +01:00

teleporter.php

Merge pull request #1558 from pi-hole/master

2020-08-14 22:04:06 +01:00

theme.php

Remove saving backend for settings moved into local storage.

2020-06-02 16:20:51 +01:00

update_checker.php

Decide whether FTL is on any custom branch by looking for "vDev" in the beginning of the version string

2018-01-05 23:19:02 +01:00