Pliable Pixels 62678b24f8 fix: address Copilot review — path traversal, temp leak, double undo, help text ...

- Fix path traversal via directory prefix matching: append
  DIRECTORY_SEPARATOR to base path before strpos containment check
  (2 locations in training.php)
- Fix temp file leak: rename tempnam() base file to .jpg instead of
  creating a second file, leaving the original orphaned
- Remove raw_output from detect response (information disclosure)
- Fix double _pushUndo on Delete key (keydown handler + deleteAnnotation)
- Fix help text: "alongside events storage" → "inside the ZoneMinder
  cache directory" to match actual ZM_DIR_CACHE default (2 locations)
- Add missing .frame-total span element in event.php

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-01 11:25:07 -05:00

..

ZoneMinder

fix: address Copilot review — path traversal, temp leak, double undo, help text

2026-03-01 11:25:07 -05:00

CMakeLists.txt

Rough in zmeventtool with command deleteanalysisjpegs

2022-05-17 12:26:33 -04:00

zm.in

fix sftp xfers in zmfilter (#1677)

2016-11-07 16:08:43 -05:00

zmalarm-server.py

fix: messages

2023-07-05 01:03:48 +02:00

zmaudit.pl.in

Handle when there are no frame records

2025-12-02 13:58:00 -05:00

zmcamtool.pl.in

feat: detect MariaDB-native command names with fallback to MySQL legacy names

2026-02-08 13:19:32 -06:00

zmcontrol.pl.in

Remove impossible code for sending a command after server startup

2026-01-06 14:59:08 -05:00

zmdbbackup.in

remake this branch off master instead of off mysql2PDO.

2013-11-01 09:47:28 -04:00

zmdbrestore.in

Migrate svn to git

2013-03-17 00:45:21 +01:00

zmdc.pl.in

return early if daemon is invalid

2026-01-26 17:22:14 -05:00

zmeventdump.in

remake this branch off master instead of off mysql2PDO.

2013-11-01 09:47:28 -04:00

zmeventtool.pl.in

Add more debugging and event deleting when renumbering

2023-09-22 16:28:35 -04:00

zmfilter.pl.in

Only require mail sending modules if we are actually sending mail

2024-08-18 12:18:44 -04:00

zmlogrotate.conf.in

Migrate svn to git

2013-03-17 00:45:21 +01:00

zmonvif-probe.pl.in

feat: add events command to zmonvif-probe.pl

2026-02-09 09:29:36 -05:00

zmonvif-trigger.pl.in

fixes bug with zmonvif-trigger.pl (Perl) :

2023-07-02 10:32:28 +02:00

zmpkg.pl.in

Remove support for old single zmfilter process mode which won't work anyways as it only happens when there are no Background Filters

2024-11-22 10:05:12 -05:00

zmrecover.pl.in

Rename Event to event, and use new fix_DefaultVideo and guess_EndDateTime to make the recovered video more useuful by fixing DefaultVideo and EndDateTime

2025-08-14 18:07:55 -04:00

zmstats.pl.in

DO select, then delete by primary key when cleaning up summary tables. Prevents deadlocks in mysql

2026-01-31 16:54:30 -05:00

zmsystemctl.pl.in

Don't hard code perl path. Use PERL_EXECUTABLE cmake var

2019-09-23 12:54:27 -04:00

zmtelemetry.pl.in

Add Deleted=false for Monitors count

2026-02-01 14:42:38 -05:00

zmtrack.pl.in

remove debug in zmtrack.pl.in

2020-06-30 18:58:46 -04:00

zmtrigger.pl.in

fix: messages

2023-07-05 01:03:48 +02:00

zmupdate.pl.in

feat: detect MariaDB-native command names with fallback to MySQL legacy names

2026-02-08 13:19:32 -06:00

zmvideo.pl.in

Add -t option to zmvideo.pl to add transforms like hue=s=0 support

2022-09-06 13:45:16 -04:00

zmwatch.pl.in

In order to reboot, we need to be able to open the control. So don't bothwe with ping.

2025-10-24 16:59:13 -04:00

zmx10.pl.in

Add start to list of commands

2024-11-05 13:12:12 -05:00