| Age | Commit message (Expand) | Author |
|---|
| 2012-02-19 | Escape all output strings in the header and footer | Lukas Fleischer |
| 2012-02-19 | Fix some more XSS vulnerabilities | Lukas Fleischer |
| 2011-10-25 | Escape wildcards in "LIKE" patterns | Lukas Fleischer |
| 2011-10-25 | Wrap mysql_real_escape_string() in a function | Lukas Fleischer |
| 2011-09-05 | web/template/login_form.php: Escape the request URI | Lukas Fleischer |
| 2011-09-05 | web/html/pkgsubmit.php: Deal with unset category ID | Lukas Fleischer |
| 2011-09-05 | Link to current page in the login bar HTTPs link | Lukas Fleischer |
| 2011-08-22 | RPC: Fix info queries when using package IDs | Lukas Fleischer |
| 2011-08-22 | Add missing __() to category info in package details | Lukas Fleischer |
| 2011-08-20 | Release 1.9.0v1.9.0 | Lukas Fleischer |
| 2011-08-20 | Replace "el_GR" translation by "el" | Lukas Fleischer |
| 2011-08-20 | Add Portuguese (Brazilian) translation | Lukas Fleischer |
| 2011-08-13 | Add Finnish and Dutch translations | Lukas Fleischer |
| 2011-08-12 | Use secure and httponly session cookies | Lukas Fleischer |
| 2011-08-11 | Add a configuration setting to disallow HTTP login | Lukas Fleischer |
| 2011-08-11 | Remove unnecessary atype and uid lookup from package_details() | Dan McGee |
| 2011-08-11 | Use 'true' instead of 'True' everywhere | Dan McGee |
| 2011-08-11 | Make package creation and update atomic | Dan McGee |
| 2011-08-11 | pkgfuncs.inc.php: allow all DB funcs to take handle arg | Dan McGee |
| 2011-08-11 | aur.inc.php: allow all functions using DB to take handle as arg | Dan McGee |
| 2011-08-11 | Allow for merging deleted packages into existing ones | Lukas Fleischer |
| 2011-08-11 | Add "mergepkgid" argument to pkg_delete() | Lukas Fleischer |
| 2011-08-11 | Rename package_exists() to pkgid_from_name() | Lukas Fleischer |
| 2011-08-10 | Segment the upload directory by package name prefix | Dan McGee |
| 2011-08-10 | Allow SQL_DEBUG to be undefined | Dan McGee |
| 2011-07-29 | Fix empty depends database insert | Lukas Fleischer |
| 2011-06-28 | Replace split() invocations with explode() | Lukas Fleischer |
| 2011-06-25 | Simplify session ID generation | Lukas Fleischer |
| 2011-06-25 | Stricter email address validation | Lukas Fleischer |
| 2011-06-25 | Honor epoch field in PKGBUILD files. | Slavi Pantaleev |
| 2011-06-25 | fix incompatibility with php short open tags | Florian Pritz |
| 2011-06-25 | README: fix pacman call | Florian Pritz |
| 2011-06-25 | Use sane ORDER BY clauses in package list queries | Dan McGee |
| 2011-06-22 | Do not redirect on single search results | Lukas Fleischer |
| 2011-06-22 | Make cache type selectable based on config value | elij |
| 2011-06-22 | rename *.inc files to *.inc.php and adjust imports and references | elij |
| 2011-06-22 | make rss.php use the apc cache instead of a cache file | elij |
| 2011-06-22 | refactor apc code and move to aur.inc | elij |
| 2011-05-29 | Cleanup RPC usage output a bit | Lukas Fleischer |
| 2011-05-29 | Properly encode ampersands in the RPC usage output | Lukas Fleischer |
| 2011-05-29 | fix two issues (php notice level) with html/rss.php | elij |
| 2011-05-29 | restructure the html/rpc.php endpoint | elij |
| 2011-05-17 | add first submitted and last modified to rpc output | kachelaqa |
| 2011-05-17 | add support for etag and conditional get (if-none-match) | elij |
| 2011-05-17 | fix case where user does not exist | elij |
| 2011-05-17 | test return value from db_query before assuming it is valid | elij |
| 2011-05-09 | Added label tags for login form fields. | Karlis Lauva |
| 2011-04-27 | add SQL_DEBUG variable and database logging | elij |
| 2011-04-27 | create variable before referencing it with .= | elij |
| 2011-04-27 | stats: capitalize FROM in all SQL queries | Dan McGee |
