Commit graph

3024 commits

Author SHA1 Message Date
Paul S. Owen
dc6ffd411b Redirect to (admin) index if sid not present in URL ... check this, at least it shouldn't allow any nasty misuse while indicating to the admin a possible problem exists. However need to ensure all ACP scripts are behaving correctly and appending sid to all relevant links/actions
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4873 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-24 14:43:31 +00:00
Paul S. Owen
f4b530e065 Restrict [img] back to three standard img formats ... this'll annoy dynamic img users but tough, damn nuisance anyway
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4872 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-24 14:39:50 +00:00
Meik Sievertsen
fc977003fa changelog
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4869 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-18 18:41:44 +00:00
Meik Sievertsen
0ec75e5c4d security fix
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4868 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-18 18:16:45 +00:00
Meik Sievertsen
c1606f686a missing variable
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4867 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-18 18:16:21 +00:00
Meik Sievertsen
b580dca7fc redirect problem fix
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4866 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-18 18:15:51 +00:00
Meik Sievertsen
a32a837b03 this is what you get if you upgrade tortoiseCVS. :/ Wrong line endings.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4864 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-13 15:09:39 +00:00
Meik Sievertsen
989cfb9d8c 2.0.7
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4863 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-13 15:03:58 +00:00
Paul S. Owen
9624bb953f Issue noticed by Pit ... please check before release
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4854 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-01 16:59:06 +00:00
Paul S. Owen
9cb42980ca Issue noticed by Pit ... please check before release
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4853 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-01 16:53:21 +00:00
Paul S. Owen
4ca1e7ec26 oopsie
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4852 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-01 16:49:03 +00:00
Paul S. Owen
bf57720165 Update changelog
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4851 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-01 16:02:48 +00:00
Paul S. Owen
18c9aa79ad Vulnerability + potential Zend fixes
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4850 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-03-01 15:56:52 +00:00
Paul S. Owen
e010274192 Incorrect icons
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4761 89ea8834-ac86-4346-8a33-228a782c2dd0
2004-01-16 13:20:20 +00:00
Paul S. Owen
ad06356c5f Updates for potential XSS vuln ... someone please verify and get back to me
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4706 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-12-30 14:17:49 +00:00
Ludovic Arnaud
f51bf61478 Fixed: better input validation, thanks to Niels Teusink for pointing this one out
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4680 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-11-22 22:36:13 +00:00
Paul S. Owen
05827b8195 These are not being updated and their presence is typically a nuisance ... appologies in advance to those this may affect (grab the relevant language packs from www.phpbb.com/downloads.php)
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4513 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-09-26 23:30:13 +00:00
Paul S. Owen
3f003845d3 Fix bbcode url xss issue
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4494 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-09-10 17:50:14 +00:00
Paul S. Owen
5be808dc97 whoopsie ... IGNORE only valid for MySQL
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4423 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-08-23 01:16:13 +00:00
Paul S. Owen
35948b18b7 Document tags
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4411 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-08-17 12:00:44 +00:00
Meik Sievertsen
b795beb5e1 Changed whois lookup address within admin index
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4339 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-08-03 11:50:52 +00:00
Meik Sievertsen
838a883631 fixed several vulnerabilities in modcp
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4331 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-07-26 11:41:35 +00:00
Paul S. Owen
e8fdeae5a3 achhhoo
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4293 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-07-20 15:39:47 +00:00
Meik Sievertsen
c33f3ef171 2.0.6 updates...
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4284 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-07-20 13:14:28 +00:00
Meik Sievertsen
6e29a5addb as told... the latest changes.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4280 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-07-18 16:34:01 +00:00
Paul S. Owen
1e9c5321c7 Legacy var ... potential XSS
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4221 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-07-11 17:04:31 +00:00
Meik Sievertsen
08da796e8e lessons are made for those gaining experience from them...
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4186 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-30 17:18:38 +00:00
Meik Sievertsen
305eb6c34a To enclose the email address in <> is required for the RCPT TO Field, according to RFC 821. Since we do not use these <>'s within the TO Field while using the mail function (some servers are having problems with this) we need to re-add them within the smtpmail function.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4183 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-28 11:32:48 +00:00
Meik Sievertsen
5a3f9d3bac one more tweak
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4182 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-27 15:01:35 +00:00
Meik Sievertsen
77e8d09aab Set $to_header before we fill it.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4181 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-26 21:13:21 +00:00
Meik Sievertsen
7af3199e0c script to convert 2.0.x usernames to 2.0.5. Existing 2.0.5 usernames will be not affected by this.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4177 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-26 09:59:06 +00:00
Paul S. Owen
5a13b0710d Existing fix won't work correctly ... this should
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4176 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-26 00:08:17 +00:00
Paul S. Owen
9b70911e63 Possible naughty on old versions of PHP
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4174 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-25 16:22:22 +00:00
Meik Sievertsen
c383145485 fix for mass email bug.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4171 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-24 17:23:49 +00:00
Paul S. Owen
0fef715e2b post/topic_id were already set by default ... no need for "else" statements
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4159 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-20 16:34:58 +00:00
Paul S. Owen
94b40f5e1e Fix possible SQL injection option ... oh and big thanks to the person that notified us and gave us a whole,ooohh,hour to act on it, cheers ... sigh
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4158 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-20 13:16:55 +00:00
Meik Sievertsen
692030f51f some bugfixes... cvs does not work very well at the moment. hope the change within the mssql schema do the job, i will test this tonight (i have to be at work in a few minutes).
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4157 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-20 07:40:27 +00:00
Bart van Bragt
5177807da1 Removed extraneous 2 joins to posts table on next/prev topic links
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4153 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-19 19:21:10 +00:00
Meik Sievertsen
85adedd96d new patchfile format. the -l switch (-cl) is required, without this switch the patch will not work correctly.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4134 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-15 17:40:55 +00:00
Meik Sievertsen
bb908c9eae ok, last commit. Please, now everything should work as expected.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4133 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-15 12:08:20 +00:00
Meik Sievertsen
190eec0f57 "Go ahead, make my day."
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4123 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-13 21:35:22 +00:00
Meik Sievertsen
1c3ee5f2a4 fixed bug with smtp mailing and additional headers assigned.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4119 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-12 19:20:20 +00:00
Meik Sievertsen
0f411e1523 changed patch file section to reflect the patch file changes.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4117 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-12 16:25:58 +00:00
Paul S. Owen
803b3d89eb entity fix
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4116 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-12 12:49:01 +00:00
Paul S. Owen
666fd34a83 minor indent thing
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4114 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-11 10:05:15 +00:00
Meik Sievertsen
ae6b2b7e89 hrm, different storage of config value and user timezone value. ;)
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4113 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-10 20:48:19 +00:00
Meik Sievertsen
11d8fdd299 hit me hard... hit me harder. did not see these two sections the first time.
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4112 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-10 17:18:15 +00:00
Paul S. Owen
1634fbc1c6 Forgot enable_confirm
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4111 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-10 13:26:50 +00:00
Paul S. Owen
d2b59cf3e7 Removed confirm code time, updated ms access schema
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4110 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-10 12:43:16 +00:00
Paul S. Owen
846fa80df1 Remove additional Template parameters
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4109 89ea8834-ac86-4346-8a33-228a782c2dd0
2003-06-10 01:38:08 +00:00