diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html
index 3d069416f3..b324acb4a9 100644
--- a/phpBB/docs/CHANGELOG.html
+++ b/phpBB/docs/CHANGELOG.html
@@ -32,6 +32,7 @@ p,ul,td {font-size:10pt;}
- Changelog
+ - Changes since 2.0.19
- Changes since 2.0.18
- Changes since 2.0.17
- Changes since 2.0.16
@@ -64,7 +65,20 @@ p,ul,td {font-size:10pt;}
This is a non-exhaustive (but still near complete) changelog for phpBB 2.0.x including beta and release candidate versions. Our thanks to all those people who've contributed bug reports and code fixes.
-l.i. Changes since 2.0.18
+l.i. Changes since 2.0.19
+
+
+- [Fix] Prevent login attempts from incrementing for inactive users
+- [Fix] Do not check maximum login attempts on re-authentication to the admin panel - tomknight
+- [Fix] Regenerate session keys on password change
+- [Fix] Better handling of short usernames within the search (bug #105)
+- [Fix] Workaround for an issue in either PHP or MSSQL resulting in a space being returned instead of an empty string (bug #830)
+- [Fix] Correct use of default_style config value (Bug #861)
+- [Sec] Some changes to HTML handling if enabled
+
+
+
+l.ii. Changes since 2.0.18
- [Fix] corrected index on session keys table under MS SQL
@@ -83,7 +97,7 @@ p,ul,td {font-size:10pt;}
-l.ii. Changes since 2.0.17
+l.iii. Changes since 2.0.17
- [Fix] incorrect handling of password resets if admin activation is enabled (Bug #88)
@@ -133,7 +147,7 @@ p,ul,td {font-size:10pt;}
- [Sec] compare imagetype on avatar uploading to match the file extension from uploaded file
-l.iii. Changes since 2.0.16
+l.iv. Changes since 2.0.16
- Added extra checks to the deletion code in privmsg.php - reported by party_fan
@@ -149,7 +163,7 @@ p,ul,td {font-size:10pt;}
- Correctly set username on posts when deleting a user from the admin panel
-l.iv. Changes since 2.0.15
+l.v. Changes since 2.0.15
- Fixed critical issue with highlighting - Discovered and fix provided by Ron van Daal
@@ -161,7 +175,7 @@ p,ul,td {font-size:10pt;}
- Fixed bug in admin re-authentication redirect for servers not having index.php as one of their default files set
-l.v. Changes since 2.0.14
+l.vi. Changes since 2.0.14
- Fixed moderator status removal in groupcp.php
@@ -183,7 +197,7 @@ p,ul,td {font-size:10pt;}
- Empty url/img bbcodes no longer get parsed
-l.vi. Changes since 2.0.13
+l.vii. Changes since 2.0.13
- Hardened author and keyword search a bit to not allow very server intensive searches
@@ -200,7 +214,7 @@ p,ul,td {font-size:10pt;}
- Fixed case-sensitivity issues in postgres7.php - R45
-l.vii. Changes since 2.0.12
+l.viii. Changes since 2.0.12
- Ommitted preg_replace warning in viewtopic due to improper working of preg_quote in PHP - originally reported by matrix_killer, fix submitted by another party
@@ -208,7 +222,7 @@ p,ul,td {font-size:10pt;}
- Minimum requirements raised to PHP 4.0.3 or above due to fixing vulnerability issues breaking PHP3 compatibility.
-l.viii. Changes since 2.0.11
+l.ix. Changes since 2.0.11
- Added confirm table to admin_db_utilities.php
@@ -223,7 +237,7 @@ p,ul,td {font-size:10pt;}
- Fixed path disclosure bug in viewtopic.php caused by a PHP 4.3.10 bug - matrix_killer
-l.ix. Changes since 2.0.10
+l.x. Changes since 2.0.10
- Fixed vulnerability in highlighting code (very high severity, please update your installation as soon as possible)
@@ -234,7 +248,7 @@ p,ul,td {font-size:10pt;}
- Added visual confirmation mod to code base
-l.x. Changes since 2.0.9
+l.xi. Changes since 2.0.9
- Fixed deleting of styles in admin_styles.php
@@ -247,7 +261,7 @@ p,ul,td {font-size:10pt;}
- Fixed visual confirmation code. The image was not created due to a wrong regular expression.
-l.xi. Changes since 2.0.8
+l.xii. Changes since 2.0.8
- Fixed one vulnerability in admin_board.php - Xore
@@ -266,7 +280,7 @@ p,ul,td {font-size:10pt;}
- Fixed problem with SID not delivered to next page in groupcp.php
-l.xii. Changes since 2.0.7
+l.xiii. Changes since 2.0.7
- Fixed several vulnerabilities in admin pages
@@ -278,7 +292,7 @@ p,ul,td {font-size:10pt;}
- Fixed sql injection vulnerability in privmsg - 2.0.8a
-1.xiii. Changes since 2.0.6
+1.xiv. Changes since 2.0.6
- Fixed several vulnerabilities in modcp - Robert Lavierck
@@ -292,7 +306,7 @@ p,ul,td {font-size:10pt;}
- Fixed potential vulnerability in avatar gallery
-1.xiv. Changes since 2.0.5
+1.xv. Changes since 2.0.5
- Fixed various email issues
@@ -308,7 +322,7 @@ p,ul,td {font-size:10pt;}
- Fixed sql injection with reset date format field in profile - tendor
-1.xv. Changes since 2.0.4
+1.xvi. Changes since 2.0.4
- Removed user facing session_id checks
@@ -380,7 +394,7 @@ p,ul,td {font-size:10pt;}
- Default English support for visual confirmation - translators are encouraged to support this
-1.xvi. Changes since 2.0.3
+1.xvii. Changes since 2.0.3
- Fixed cross-browser scripting issue with highlight param
@@ -507,7 +521,7 @@ p,ul,td {font-size:10pt;}
- Fixed potential SQL vulnerability with marking of private messages - Ulf Harnhammar
-1.xvii. Changes since 2.0.2
+1.xviii. Changes since 2.0.2
- Fixed potential cross-site scripting vulnerability with avatars - Showscout
@@ -516,7 +530,7 @@ p,ul,td {font-size:10pt;}
- Fixed (hopefully) issue with MS Access and multiple pages
-1.xviii. Changes since 2.0.1
+1.xix. Changes since 2.0.1
- Fixed missing "username" lang variable in user admin template
@@ -551,7 +565,7 @@ p,ul,td {font-size:10pt;}
- Fix emailer to allow sending emails with language-specific character sets
-1.xix. Changes since 2.0.0
+1.xx. Changes since 2.0.0
- Fixed delete image bug for normal users
@@ -608,7 +622,7 @@ p,ul,td {font-size:10pt;}
- Added database closure to admin frameset page
-1.xx. Changes since RC-4
+1.xxi. Changes since RC-4
- Fixed improper report of general error when posting messages containing errors
@@ -638,7 +652,7 @@ p,ul,td {font-size:10pt;}
- Fixed various remaining usergroup display issues
-1.xxi. Changes since RC-3
+1.xxii. Changes since RC-3
- Addressed serious security issue with included files
@@ -669,7 +683,7 @@ p,ul,td {font-size:10pt;}
- Fix (hopefully) remaining ICQ overlay issue with view profile in subSilver
-1.xxii. Changes since RC-2
+1.xxiii. Changes since RC-2
- Fixed infamous install parse error
@@ -702,7 +716,7 @@ p,ul,td {font-size:10pt;}
- Hidden usergroups are now completely hidden from view
-1.xxiii. Changes since RC-1
+1.xxiv. Changes since RC-1
- Fixed numerous PostgreSQL related issues
@@ -722,7 +736,7 @@ p,ul,td {font-size:10pt;}
- Various other fixes and updates
-1.xxiv. Changes since RC-1 (pre)
+1.xxv. Changes since RC-1 (pre)
- Upgrade script completed for initial fully functional release