PHP8 fix: Array to string conversion for array_diff_key/assoc

translation update

translation update

translation update

translation update

translation update

Update lang.php

translation update

translation update

Final project-wide check of curly brace deprecations.

Fix PHP 7.3 deprecations in lib/ directory.

clarified trustedproxy - empty = trust no proxy

translation update

Update de, de-informal

sort plugins in plugin_list()

Revert "eliminate access to global $plugin_controller"

This reverts commit 2b1bb8ffafe5d72c35b81659b1d96b8dc19f0de3.

Revert "sort plugins in Config Manager"

This reverts commit d2a8ea656a16abfd37fe4ffb58d1cf7e4ddf2e15.

translation update

clarified trustedproxy setting

eliminate access to global $plugin_controller

sort plugins in Config Manager

clientIP: add trustedproxy, return first untrusted IP instead of the last one

This fixes #2828, where malicious clients passed in customized HTTP header to keep its IP address off records.

This is

clientIP: add trustedproxy, return first untrusted IP instead of the last one

This fixes #2828, where malicious clients passed in customized HTTP header to keep its IP address off records.

This is inspired by Sympony's Request::setTrustedProxies, but I don't want to implement everything including IP CIDR matching (IPv4 + IPv6), so I decided to reuse the local IP checker in place powered by regexp. Now admins can customize this "local" (trusted) proxy list using $conf['trustedproxy'], and by default it will allow any local IPs.

If in the future there is a need to implement array-based CIDR matching, $conf['trustedproxies'] can be used for the new config name.

show more ...

ACL Plugin: make item formatter public again

The formatter needs to be public to be called from html_buildlist()

Do config backups with .php extension fixes #2446

translation update