From ac4c0991fea56df834d49e98a53938ed5dc48bb4 Mon Sep 17 00:00:00 2001 From: Graham Eames Date: Sat, 14 Jan 2006 23:09:57 +0000 Subject: [PATCH] A list of the changes to date git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@5462 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/docs/CHANGELOG.html | 62 ++++++++++++++++++++++++--------------- 1 file changed, 38 insertions(+), 24 deletions(-) diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 3d069416f3..b324acb4a9 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -32,6 +32,7 @@ p,ul,td {font-size:10pt;}
  1. Changelog
      2. +
    1. Changes since 2.0.19
    2. Changes since 2.0.18
    3. Changes since 2.0.17
    4. Changes since 2.0.16
      5. @@ -64,7 +65,20 @@ p,ul,td {font-size:10pt;}

      This is a non-exhaustive (but still near complete) changelog for phpBB 2.0.x including beta and release candidate versions. Our thanks to all those people who've contributed bug reports and code fixes.

      -

      l.i. Changes since 2.0.18

      +

      l.i. Changes since 2.0.19

      + +
        +
      • [Fix] Prevent login attempts from incrementing for inactive users
        • +
      • [Fix] Do not check maximum login attempts on re-authentication to the admin panel - tomknight
        • +
      • [Fix] Regenerate session keys on password change
        • +
      • [Fix] Better handling of short usernames within the search (bug #105)
        • +
      • [Fix] Workaround for an issue in either PHP or MSSQL resulting in a space being returned instead of an empty string (bug #830)
        • +
      • [Fix] Correct use of default_style config value (Bug #861)
        • +
      • [Sec] Some changes to HTML handling if enabled
        • +
      + + +

      l.ii. Changes since 2.0.18

      • [Fix] corrected index on session keys table under MS SQL
        • @@ -83,7 +97,7 @@ p,ul,td {font-size:10pt;}
      -

      l.ii. Changes since 2.0.17

      +

      l.iii. Changes since 2.0.17

      • [Fix] incorrect handling of password resets if admin activation is enabled (Bug #88)
        • @@ -133,7 +147,7 @@ p,ul,td {font-size:10pt;}
      • [Sec] compare imagetype on avatar uploading to match the file extension from uploaded file
      -

      l.iii. Changes since 2.0.16

      +

      l.iv. Changes since 2.0.16

      • Added extra checks to the deletion code in privmsg.php - reported by party_fan
        • @@ -149,7 +163,7 @@ p,ul,td {font-size:10pt;}
      • Correctly set username on posts when deleting a user from the admin panel
      -

      l.iv. Changes since 2.0.15

      +

      l.v. Changes since 2.0.15

      • Fixed critical issue with highlighting - Discovered and fix provided by Ron van Daal
        • @@ -161,7 +175,7 @@ p,ul,td {font-size:10pt;}
      • Fixed bug in admin re-authentication redirect for servers not having index.php as one of their default files set
      -

      l.v. Changes since 2.0.14

      +

      l.vi. Changes since 2.0.14

      • Fixed moderator status removal in groupcp.php
        • @@ -183,7 +197,7 @@ p,ul,td {font-size:10pt;}
      • Empty url/img bbcodes no longer get parsed
      -

      l.vi. Changes since 2.0.13

      +

      l.vii. Changes since 2.0.13

      • Hardened author and keyword search a bit to not allow very server intensive searches
        • @@ -200,7 +214,7 @@ p,ul,td {font-size:10pt;}
      • Fixed case-sensitivity issues in postgres7.php - R45
      -

      l.vii. Changes since 2.0.12

      +

      l.viii. Changes since 2.0.12

      • Ommitted preg_replace warning in viewtopic due to improper working of preg_quote in PHP - originally reported by matrix_killer, fix submitted by another party
        • @@ -208,7 +222,7 @@ p,ul,td {font-size:10pt;}
      • Minimum requirements raised to PHP 4.0.3 or above due to fixing vulnerability issues breaking PHP3 compatibility.
      -

      l.viii. Changes since 2.0.11

      +

      l.ix. Changes since 2.0.11

      • Added confirm table to admin_db_utilities.php
        • @@ -223,7 +237,7 @@ p,ul,td {font-size:10pt;}
      • Fixed path disclosure bug in viewtopic.php caused by a PHP 4.3.10 bug - matrix_killer
      -

      l.ix. Changes since 2.0.10

      +

      l.x. Changes since 2.0.10

      • Fixed vulnerability in highlighting code (very high severity, please update your installation as soon as possible)
        • @@ -234,7 +248,7 @@ p,ul,td {font-size:10pt;}
      • Added visual confirmation mod to code base
      -

      l.x. Changes since 2.0.9

      +

      l.xi. Changes since 2.0.9

      • Fixed deleting of styles in admin_styles.php
        • @@ -247,7 +261,7 @@ p,ul,td {font-size:10pt;}
      • Fixed visual confirmation code. The image was not created due to a wrong regular expression.
      -

      l.xi. Changes since 2.0.8

      +

      l.xii. Changes since 2.0.8

      • Fixed one vulnerability in admin_board.php - Xore
        • @@ -266,7 +280,7 @@ p,ul,td {font-size:10pt;}
      • Fixed problem with SID not delivered to next page in groupcp.php
      -

      l.xii. Changes since 2.0.7

      +

      l.xiii. Changes since 2.0.7

      • Fixed several vulnerabilities in admin pages
        • @@ -278,7 +292,7 @@ p,ul,td {font-size:10pt;}
      • Fixed sql injection vulnerability in privmsg - 2.0.8a
      -

      1.xiii. Changes since 2.0.6

      +

      1.xiv. Changes since 2.0.6

      • Fixed several vulnerabilities in modcp - Robert Lavierck
        • @@ -292,7 +306,7 @@ p,ul,td {font-size:10pt;}
      • Fixed potential vulnerability in avatar gallery
      -

      1.xiv. Changes since 2.0.5

      +

      1.xv. Changes since 2.0.5

      • Fixed various email issues
        • @@ -308,7 +322,7 @@ p,ul,td {font-size:10pt;}
      • Fixed sql injection with reset date format field in profile - tendor
      -

      1.xv. Changes since 2.0.4

      +

      1.xvi. Changes since 2.0.4

      • Removed user facing session_id checks
        • @@ -380,7 +394,7 @@ p,ul,td {font-size:10pt;}
      • Default English support for visual confirmation - translators are encouraged to support this
      -

      1.xvi. Changes since 2.0.3

      +

      1.xvii. Changes since 2.0.3

      • Fixed cross-browser scripting issue with highlight param
        • @@ -507,7 +521,7 @@ p,ul,td {font-size:10pt;}
      • Fixed potential SQL vulnerability with marking of private messages - Ulf Harnhammar
      -

      1.xvii. Changes since 2.0.2

      +

      1.xviii. Changes since 2.0.2

      • Fixed potential cross-site scripting vulnerability with avatars - Showscout
        • @@ -516,7 +530,7 @@ p,ul,td {font-size:10pt;}
      • Fixed (hopefully) issue with MS Access and multiple pages
      -

      1.xviii. Changes since 2.0.1

      +

      1.xix. Changes since 2.0.1

      • Fixed missing "username" lang variable in user admin template
        • @@ -551,7 +565,7 @@ p,ul,td {font-size:10pt;}
      • Fix emailer to allow sending emails with language-specific character sets
      -

      1.xix. Changes since 2.0.0

      +

      1.xx. Changes since 2.0.0

      • Fixed delete image bug for normal users
        • @@ -608,7 +622,7 @@ p,ul,td {font-size:10pt;}
      • Added database closure to admin frameset page
      -

      1.xx. Changes since RC-4

      +

      1.xxi. Changes since RC-4

      • Fixed improper report of general error when posting messages containing errors
        • @@ -638,7 +652,7 @@ p,ul,td {font-size:10pt;}
      • Fixed various remaining usergroup display issues
      -

      1.xxi. Changes since RC-3

      +

      1.xxii. Changes since RC-3

      • Addressed serious security issue with included files
        • @@ -669,7 +683,7 @@ p,ul,td {font-size:10pt;}
      • Fix (hopefully) remaining ICQ overlay issue with view profile in subSilver
      -

      1.xxii. Changes since RC-2

      +

      1.xxiii. Changes since RC-2

      • Fixed infamous install parse error
        • @@ -702,7 +716,7 @@ p,ul,td {font-size:10pt;}
      • Hidden usergroups are now completely hidden from view
      -

      1.xxiii. Changes since RC-1

      +

      1.xxiv. Changes since RC-1

      • Fixed numerous PostgreSQL related issues
        • @@ -722,7 +736,7 @@ p,ul,td {font-size:10pt;}
      • Various other fixes and updates
      -

      1.xxiv. Changes since RC-1 (pre)

      +

      1.xxv. Changes since RC-1 (pre)

      • Upgrade script completed for initial fully functional release