nicandClaude Opus 5.5 2539e6a157 fix: resolve ZM_SERVER_NAME to its server id in config.php (#5171) ...

8c35190b0 moved the Servers lookup into a foreach over $s but kept
define('ZM_SERVER_ID', $Server->Id()), so every request on a node with
ZM_SERVER_NAME in zm.conf died with 'Call to a member function Id() on
null'. Use $s like the ZM_SERVER_HOST branch.

Also make the 'no corresponding entry in Servers table' errors reachable
($thisServer starts as an empty Server object, which is always truthy,
so test its Id) and concatenate the ZM_SERVER_ID error with '.' instead
of '+', which throws a TypeError on PHP 8.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-04 08:53:28 -04:00

..

actions

fix: require edit on each monitor a group change moves

2026-09-29 17:54:25 -04:00

csrf

Until we use "use strict", additional code analysis is required (csrf-magic.js)

2025-08-09 18:54:45 +03:00

auth.php

fix: random per-user salts in zmupdate.pl password migration, rehash migrated passwords on every login (#5167)

2026-10-02 08:30:43 -04:00

config.php.in

fix: resolve ZM_SERVER_NAME to its server id in config.php (#5171)

2026-10-04 08:53:28 -04:00

control_functions.php

feat: add audio playback control capability and an ONVIF IP speaker module

2026-09-11 20:13:02 -05:00

Control.php

feat: add audio playback control capability and an ONVIF IP speaker module

2026-09-11 20:13:02 -05:00

database.php

refactor: connect to the database on first use, not on include

2026-08-17 20:52:10 -04:00

download_functions.php

fix: quote the download filename so Chrome doesn't save the export as index.php

2026-09-03 20:17:16 -04:00

EncoderTemplates.php

feat: encoder parameter templates with editor + REST API closes #4778 closes #4802

2026-05-06 17:24:17 -04:00

Event_Data.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

Event_Tag.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

Event.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

Filter.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

FilterTerm.php

fix: scope the frames list search to its event and match on FrameId refs #5164

2026-10-01 11:48:26 -04:00

Frame.php

feat: key Frames by (EventId, FrameId) and drop the surrogate Id refs #5164

2026-10-01 11:48:26 -04:00

functions.php

fix: authorize event delete, archive and edits on the event's monitor refs GHSA-34x2-mw89-c52f

2026-09-28 19:34:36 -04:00

Group_Monitor.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

Group_Permission.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

Group.php

fix: require edit on each monitor a group change moves

2026-09-29 17:54:25 -04:00

lang.php

Potential fix for pull request finding

2026-05-10 15:25:50 -04:00

logger.php

refactor: connect to the database on first use, not on include

2026-08-17 20:52:10 -04:00

Manufacturer.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

MenuItem.php

feat: customizable menu entries with links, icons and delete on options menu tab

2026-06-27 12:13:49 -04:00

Model.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

Monitor_Permission.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

monitor_probe.php

Now we don't need to return "$monitor->Id()" because we can get Monitor.Id after Id has become public. (monitor_probe.php)

2026-05-29 16:27:15 +03:00

Monitor.php

Update audio-motion element visibility in Monitor.php (#5169)

2026-10-02 08:31:12 -04:00

MonitorAction.php

feat: add per-monitor actions that drive a light or a speaker on alarm

2026-09-11 20:13:02 -05:00

MontageLayout.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

Network.php

fix: only trust X-Forwarded-For from configured proxies for auth hash IPs

2026-09-24 19:51:27 -04:00

Object.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

Report.php

Merge branch 'master' into patch-380634

2026-05-06 10:47:45 +03:00

Role_Group_Permission.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

Role_Monitor_Permission.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

Server.php

fix: match single-server ServerId=0 in Server::ReadStats

2026-07-27 08:12:51 -04:00

session.php

fix: only store sessions for clients that carry them

2026-08-25 17:36:31 -04:00

Snapshot.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

Storage.php

Use the same filter on Storage Name as we use in Monitor Name.

2024-09-30 06:33:09 -04:00

Tag.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

TagOrder.php

fix(db): make User_Preferences unique per (UserId, Name) refs #5021

2026-08-08 11:33:29 -04:00

User_Preference.php

fix: php 8.3 deprecated get_class method call without argument

2023-11-22 10:48:04 +03:30

User_Role.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

User.php

fix: only dispatch set()/changes() keys to field accessors refs GHSA-vvx7-ghpv-jq98

2026-09-28 19:32:25 -04:00

Zone.php

fix: escape Zone, Event and Server names on output

2026-07-19 12:39:35 -04:00