1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
4 <meta http-equiv="Content-Type" content="text/html">
5 <meta http-equiv="Content-Style-Type" content="text/css">
6 <title>phpBB 2.0.11 :: Changelog</title>
7 <link rel="stylesheet" href="../templates/subSilver/subSilver.css" type="text/css" />
8 <style type="text/css">
10 p,ul,td {font-size:10pt;}
11 .h2 {font-size:15pt;font-weight:bold;color:red}
12 .h3 {font-size:12pt;color:blue}
16 <body bgcolor="#E5E5E5" text="#000000" link="#006699" vlink="#006699">
18 <table width="100%" border="0" cellspacing="0" cellpadding="10" align="center">
20 <td class="bodyline"><table width="100%" border="0" cellspacing="0" cellpadding="0">
24 <table width="100%" border="0" cellspacing="0" cellpadding="0">
26 <td><img src="../templates/subSilver/images/logo_phpBB.gif" border="0" alt="phpBB 2 : Creating Communities" vspace="1" /></a></td>
27 <td align="center" width="100%" valign="middle"><span class="maintitle">phpBB 2.0.11 CHANGELOG</span></td>
31 <!-- BEGIN DOCUMENT -->
33 <li><a href="#changelog">Changelog</a></li>
35 <li><a href="#2010">Changes since 2.0.10</a></li>
36 <li><a href="#209">Changes since 2.0.9</a></li>
37 <li><a href="#208">Changes since 2.0.8</a></li>
38 <li><a href="#207">Changes since 2.0.7</a></li>
39 <li><a href="#206">Changes since 2.0.6</a></li>
40 <li><a href="#205">Changes since 2.0.5</a></li>
41 <li><a href="#204">Changes since 2.0.4</a></li>
42 <li><a href="#203">Changes since 2.0.3</a></li>
43 <li><a href="#202">Changes since 2.0.2</a></li>
44 <li><a href="#201">Changes since 2.0.1</a></li>
45 <li><a href="#200">Changes since 2.0.0</a></li>
46 <li><a href="#final">Changes since RC-4</a></li>
47 <li><a href="#rc4">Changes since RC-3</a></li>
48 <li><a href="#rc3">Changes since RC-2</a></li>
49 <li><a href="#rc2">Changes since RC-1</a></li>
50 <li><a href="#rc1">Changes since RC-1 (pre)</a></li>
52 <li><a href="#disclaimer">Disclaimer</a></li>
55 <a name="changelog"></a><h2 class="h2"><u>1. Changelog</u></h2>
57 <p>This is a non-exhaustive (but still near complete) changelog for phpBB 2.0.x including beta and release candidate versions. Our thanks to all those people who've contributed bug reports and code fixes.</p>
59 <a name="2010"></a><h3 class="h3">l.i. Changes since 2.0.10</h3>
62 <li>Fixed vulnerability in highlighting code (<b>very high severity, please update your installation as soon as possible</b>)</li>
63 <li>Fixed unsetting global vars - <b>Matt Kavanagh</b></li>
64 <li>Fixed XSS vulnerability in username handling - <b>AnthraX101</b></li>
65 <li>Fixed not confirmed sql injection in username handling - <b>warmth</b></li>
66 <li>Added check for empty topic id in topic_review function</li>
67 <li>Added visual confirmation mod to code base</li>
70 <a name="209"></a><h3 class="h3">l.ii. Changes since 2.0.9</h3>
73 <li>Fixed deleting of styles in admin_styles.php</li>
74 <li>Fixed wrong unsetting of variables introduced in phpBB 2.0.9, making the board non-functional for users with specific php.ini settings</li>
75 <li>Added code to let phpBB work with PHP5 for those having register_long_arrays set to off (default settings) - running phpBB 2.0.x with PHP5 is not supported at http://www.phpbb.com.</li>
76 <li>Fixed bug in admin_board.php for board settings having single quotes in it</li>
77 <li>Fixed "search by author" in search.php. Now it is possible to search for users with special chars in their name too</li>
78 <li>Fixed forum jumpbox propagating session id in moderator control pages</li>
79 <li>Added check for newlines at redirecting pages, to prevent http response splitting attacks - <b>Ory Segal and Amit Klein</b></li>
80 <li>Fixed visual confirmation code. The image was not created due to a wrong regular expression.</li>
83 <a name="208"></a><h3 class="h3">l.iii. Changes since 2.0.8</h3>
86 <li>Fixed one vulnerability in admin_board.php - <b>Xore</b></li>
87 <li>Added checking for proper session id characters to sessions and viewtopic to prevent injections - <b>Bartlomiej Korupczynski</b></li>
88 <li>Fixed injection vulnerabilities possible with linked avatars</li>
89 <li>Implemented unsetting globalised variables</li>
90 <li>Limited confirm switch to POST variable in posting</li>
91 <li>Changed IP code in common.php to prevent IP spoofing, which might introduce some problems with private IP Ranges showing up. - <b>Wang Products</b></li>
92 <li>Updated visual confirmation mod [pre-edited files]</li>
93 <li>Moved obtaining word censors in modcp out of topic generation loop [increased performance/lower query count] - spotted by <b>R45</b></li>
94 <li>Added the ability to link to https/ftps sites using the img bbcode tag</li>
95 <li>Fixed user online information in admin/index.php</li>
96 <li>Fixed getting group moderator in groupcp.php if running oracle backend - spotted by <b>pakman</b></li>
97 <li>Fixed use of non-existing result variable in modcp (poster_id instead of user_id)</li>
98 <li>Fixed several vulnerabilities (XSS, SQL Injection and path disclosure) only possible with register_globals enabled - <b>Matthew C. Kavanagh, Janek Vind</b></li>
99 <li>Fixed problem with SID not delivered to next page in groupcp.php</li>
102 <a name="207"></a><h3 class="h3">l.iv. Changes since 2.0.7</h3>
105 <li>Fixed several vulnerabilities in admin pages</li>
106 <li>Fixed sid checking code in admin/pagestart.php</li>
107 <li>Fixed injection vulnerabilities possible with the img bbcode tag</li>
108 <li>Limited allowed images in img bbcode tag to jpg, jpeg, gif and png</li>
109 <li>Fixed redirect problems - 2.0.7a</li>
110 <li>Fixed sql injection vulnerability in search - 2.0.7a</li>
111 <li>Fixed sql injection vulnerability in privmsg - 2.0.8a</li>
114 <a name="206"></a><h3 class="h3">1.v. Changes since 2.0.6</h3>
117 <li>Fixed several vulnerabilities in modcp - <b>Robert Lavierck</b></li>
118 <li>Changed whois lookup address within admin index</li>
119 <li>Fixed potential vulnerability in viewtopic postorder - 2.0.6d</li>
120 <li>Updates to cope with Zend Optimizer 2.5 problems - 2.0.6d - <b>jetset</b></li>
121 <li>Force specialcharing of redirect variable in login - <b>Pit</b></li>
122 <li>Fixed potential vulnerability in viewtopic postdays - <b>GulfTech Security Research</b></li>
123 <li>Fixed potential vulnerability in viewforum topicdays - <b>GulfTech Security Research</b></li>
124 <li>Fixed potential vulnerability in modcp</li>
125 <li>Fixed potential vulnerability in avatar gallery</li>
128 <a name="205"></a><h3 class="h3">1.vi. Changes since 2.0.5</h3>
131 <li>Fixed various email issues</li>
132 <li>Fixed registration email bug with Administrator Confirmation used</li>
133 <li>Fixed mass emailer</li>
134 <li>Fixed long post time issue</li>
135 <li>Fixed bug with usernames containing single quotes</li>
136 <li>Fixed word list bug - Word boundaries were not considered</li>
137 <li>Fixed vulnerability in style admin</li>
138 <li>Fixed sql injection vulnerability in viewtopic</li>
139 <li>Fixed vulnerability allowing server side variable access in search - <b>tendor</b></li>
140 <li>Fixed potential vulnerability in 2.0.5 login username entry - <b>throw away/eomer</b></li>
141 <li>Fixed sql injection with reset date format field in profile - <b>tendor</b></li>
144 <a name="204"></a><h3 class="h3">1.vii. Changes since 2.0.4</h3>
147 <li>Removed user facing session_id checks</li>
148 <li>Fixed user self-activation after deactivation</li>
149 <li>Fixed incorrect functioning of phpbb_realpath</li>
150 <li>Fixed wrong path to database schema files within the upgrade script</li>
151 <li>Fixed double quote problem with username validation</li>
152 <li>Allow & within email addresses</li>
153 <li>Fixed email validation for banned email addresses</li>
154 <li>Removed underline from email domain validation</li>
155 <li>Fixed redirection for sentbox folder, installation and email</li>
156 <li>Fixed poll deletion</li>
157 <li>Fixed Mozilla navigation bar</li>
158 <li>Fixed URL bbcode parsing</li>
159 <li>Fixed database timeouts while searching the forums</li>
160 <li>Fixed wrong email return path in admin mass mailing - <b>netclectic</b></li>
161 <li>Fixed MS-SQL failures within the update script</li>
162 <li>Fixed memberlist sort order</li>
163 <li>Fixed not showing leading spaces within Code BBCode</li>
164 <li>Fixed problem with adding double quotes to subject titles</li>
165 <li>Remove username input field from profile when user cannot change name</li>
166 <li>Fixed pagination error with highlighting</li>
167 <li>Fixed errors if no smilies are installed</li>
168 <li>Fixed CSS issues with IE 5.2 on MacOS X</li>
169 <li>Fixed missing sid propagation problem within the Moderator Control Panel</li>
170 <li>Fixed language variables within Authentication error output</li>
171 <li>Removed doubled CSS class definitions within input fields</li>
172 <li>Fixed username change within the Administration Panel</li>
173 <li>Added missing <tr> tags to index_body.tpl</li>
174 <li>Added missing username language variable to admin index page</li>
175 <li>Fixed moderator status update if a usergroup got deleted</li>
176 <li>Fixed poll handling upon post edit</li>
177 <li>Fixed remove common words from search table if post get pruned - <b>Nuttzy99</b></li>
178 <li>Fixed behaviour on splitting topics if no checkbox is selected</li>
179 <li>Anonymous is no longer displayed within Username dropdown boxes</li>
180 <li>Fixed viewprofile redirection if an invalid mode was specified</li>
181 <li>Fixed fraction settings within determining common words - <b>Novan</b></li>
182 <li>Prevent admin change usernames to his own within the ACP</li>
183 <li>Activation email is sent to all admins</li>
184 <li>Fixed conversion of & to &amp; in appropriate cases</li>
185 <li>Fixed display of "greater than topics per page" announcements preventing display of normal posts</li>
186 <li>Added variable checks to database backup and restore screen</li>
187 <li>Prevented pm popup window from resetting after visiting avatar gallery</li>
188 <li>Fixed special character handling with word censor</li>
189 <li>Added SID to jumpbox</li>
190 <li>Fixed problems with usernames using html special chars</li>
191 <li>Added GMT + 13 to English lang_main, all translators are encouraged to do likewise</li>
192 <li>Deleted doubled 'U_MEMBERLIST' assignment from page_header.php</li>
193 <li>Fixed wrong display of Signature Checkbox while editing Private Message</li>
194 <li>Fixed disappearing post text if emoticon was inserted directly after pressing a BBCode button</li>
195 <li>Display correct alt-tag for smilies within postings</li>
196 <li>Prevented the ability to apply BBCode to website contents</li>
197 <li>Fixed maxlength issue with password field in login_body.tpl</li>
198 <li>Fixed possible username duplication issue with validation and username length</li>
199 <li>Fixed split words function to handle additional foreign characters</li>
200 <li>Changed empty email To Field to use a non-disclosure delimiter</li>
201 <li>Fixed wrong language var in install.php - FTP Config screen</li>
202 <li>Fixed alt tag for locked topic images in viewforum_body.tpl</li>
203 <li>Fixed typo in groupcp.php - $lang['Unsub_success'] instead of $lang['Usub_success']</li>
204 <li>Fixed timezone display</li>
205 <li>Fixed wrong display of author quote tag within profile - <b>Cl1mh4224rd</b></li>
206 <li>Added deletion of sessions of users whose account is deactivated</li>
207 <li>Added mail header X-MimeOLE to the emailer class</li>
208 <li>Prevent registration if user is logged in or user trying to register again</li>
209 <li>Prevent usage of char(255) in usernames</li>
210 <li>Added check for additional FORWARDED_FOR IP's - <b>cosmos</b></li>
211 <li>Fixed handling of non-selection of option when voting</li>
212 <li>Fixed potential xss issue with memberslist mode</li>
213 <li>Default English support for visual confirmation - translators are encouraged to support this</li>
216 <a name="203"></a><h3 class="h3">1.viii. Changes since 2.0.3</h3>
219 <li>Fixed cross-browser scripting issue with highlight param</li>
220 <li>Back-ported highlighting code from phpBB 2.2</li>
221 <li>Add session id validation to posting, profile, email, voting - <b>Edwin van Vliet</b></li>
222 <li>Added {S_HIDDEN_FIELDS} template var to profile_send_email.tpl</li>
223 <li>Added "intval" fix for flood check, may resolve some issues</li>
224 <li>Added missing index to post_id for search_wordmatch</li>
225 <li>Fixed spelling error in search add words preventing use of stopword list</li>
226 <li>Fixed issue with search common words not being run</li>
227 <li>Introduce viewtopic resync patch by Ashe</li>
228 <li>Replace a for n in templating code</li>
229 <li>Fixed ordering in memberslist</li>
230 <li>Fixed group_id sequence issues with pgsql and msaccess</li>
231 <li>Fixed assumption of word censors in user notification</li>
232 <li>Fixed incorrect display of quotes in user management fields</li>
233 <li>Fixed entry of special chars in all profile fields - note this may cause temporary issues</li>
234 <li>Fixed incorrect display of quotes when using avatar gallery</li>
235 <li>Fixed missing username in email sent to users when admin activated</li>
236 <li>Added check for non-empty smiley code and url in smiley admin</li>
237 <li>Prevent display of -- sig seperator in emails when no board sig exists</li>
238 <li>Fixed URL propagated sid issues with jumpbox</li>
239 <li>Fixed wrong mode name check (polldelete) in functions_post</li>
240 <li>Added missing root path to l10n image path check</li>
241 <li>Remove validation of fields when deleting a user</li>
242 <li>Fixed sort mode select box in memberslist to default to current mode</li>
243 <li>Deny inline topic review listing to users without auth_read permissions</li>
244 <li>Prevent display of topic notification checkbox if user cannot read forum</li>
245 <li>Remove incorrect pre-pending of IP to uploaded avatars</li>
246 <li>Fixed deletion of uploaded avatars when changing to remote/gallery</li>
247 <li>Added check for non-blank line during install schema/basic sql ops</li>
248 <li>Added sort ordering to Top Ten poster listing by request</li>
249 <li>Fixed incorrect error report when altering case of username</li>
250 <li>Added jumpbox output to modcp {JUMPBOX} will now work</li>
251 <li>Fixed non-updating of users with MOD levels when deleting a forum</li>
252 <li>Remove email to group moderator when approving new members</li>
253 <li>Fixed non-handling of HTML in poll options</li>
254 <li>Fixed non-deletion of polls when deleting forum and its posts</li>
255 <li>Fixed moved shadow topic from being bumped upon reply</li>
256 <li>Changed field size of timezone to decimal(5,2) where applicable</li>
257 <li>Fixed missing sid append to URL when redirecting to newest reply</li>
258 <li>Fixed missing slashes in private IP preg check</li>
259 <li>Fixed session not setting userdata['user_id'] to ANON as appropriate</li>
260 <li>Added check for non-empty name in disallow admin</li>
261 <li>Fixed validation of SSL website addresses in profile</li>
262 <li>Fixed inability of admins to upload avatars via user admin panel</li>
263 <li>Fixed non-deletion of private message text upon full box overwrite</li>
264 <li>Fixed incorrect error message in smiley admin</li>
265 <li>Fixed incorrect alt-text for "Stop Watching Topic" image</li>
266 <li>Temporary fix for missing lang strings in forum admin - translators should update their packages if not done already</li>
267 <li>Use selected localisation during later stages of installation</li>
268 <li>Fixed non-check of permissions when deleting a topic via Moderator Control Panel</li>
269 <li>Fixed non-update of banlist upon user deletion</li>
270 <li>Check approved users boxes by default in usergroup approve form</li>
271 <li>Fixed non-appending of sid to backup meta refresh</li>
272 <li>Fixed non-notification of no support for certain databases in backup/restore</li>
273 <li>Added $images var to message die global declaration</li>
274 <li>Fixed wrong string, Private_message in Private Messaging</li>
275 <li>Add mail send result to error output</li>
276 <li>Fixed non-appending of sid to Mozilla nav bar menu items</li>
277 <li>Fixed incorrect profile linking from MSNM url in private messaging</li>
278 <li>Grammatical errors in English lang_main fixed - <b>Cluster</b></li>
279 <li>Allow deletion of avatar and simultaneous upload/linking/gallery selection</li>
280 <li>Fixed non-updating of user rank when changing from special to normal rank in rank admin</li>
281 <li>Changed user topic notification default in schemas to 0 (off)</li>
282 <li>Fixed non-XHTML compliant img tags in privmsg.php</li>
283 <li>Fixed non-deletion of announcements and polls when removing forum contents in forum admin</li>
284 <li>Fixed non-pruning of watched topics table when pruning related topics</li>
285 <li>Enable GET redirect on logout</li>
286 <li>Added check for IE6.x to viewtopic ICQ indicator javascript</li>
287 <li>Fixed empty username quoting with MS-SQL</li>
288 <li>Fixed BBCode url, magic url and img tags to allow most chars beyond domain names</li>
289 <li>Prevent parsing of -ve size values in BBCode size tag</li>
290 <li>Back ported HTML handler from 2.2, this may impact some boards which allow complex HTML - existing parser remains but commented out</li>
291 <li>Fixed parsing of word censors to not censor words within < and > tag delimiters</li>
292 <li>Fixed database utilities failing to backup data with MySQL</li>
293 <li>Fixed signature parsing in User Admin</li>
294 <li>Fixed missing class="post" tags in subSilver Admin templates</li>
295 <li>Fixes for paths under Apache2</li>
296 <li>Added wrap text with tag support for posting in Mozilla 1.1+</li>
297 <li>Fixed use of missing CSS classes in modcp_split, group_info_body, error_body and agreement</li>
298 <li>Fixed ability of users to edit polls even after they have received votes</li>
299 <li>Fixed header Location to be absolute URL as per HTTP 1.1 spec - noted by <b>PhilippK</b></li>
300 <li>Added additional session_id checks to MCP, topic subscription, PM and similar items</li>
301 <li>Fixed colour select box in posting_body to reset to Default colour after selection</li>
302 <li>Altered PM icon to show new image until messages have been read</li>
303 <li>Fixed incomplete deletion of PMs when removing the associated user</li>
304 <li>Fixed unread and new PM user counters to decrement appropriately in all situations</li>
305 <li>Fixed possible cross-site scripting issue with username search</li>
306 <li>Fixed some problems with gzip in combination with newer PHP versions and Mozilla</li>
307 <li>Fixed wrong maxlength in modcp_split.tpl subject field</li>
308 <li>Fixed inability to edit username of guest poster - <b>vHiker</b></li>
309 <li>Fixed ability for guests to post with certain registered usernames</li>
310 <li>Fixed various HTML issues to improve XHTML compliance - <b>Daz</b></li>
311 <li>Fixed missing template var {L_PM} for memberslist - <b>Daz</b></li>
312 <li>Fixed wrong key name for $images['Topic_un_watch'] - <b>Daz</b></li>
313 <li>Fixed missing template var {S_WATCH_TOPIC_IMG} for viewtopic - <b>Daz</b></li>
314 <li>Fixed missing default constraints for post table under MSSQL</li>
315 <li>Fixed incorrect field size for forum pruning - preventing days > 256</li>
316 <li>Fixed continuing redirect issues for broken web servers, e.g. IIS+CGI PHP</li>
317 <li>Fixed inability to use ftp as a protocol for the [img] tag</li>
318 <li>Fixed incorrect handling of [img] tags containing %20 encoded spaces</li>
319 <li>Added check for . within cookie_name, change to _ if present</li>
320 <li>Added SHOW_ONLINE constant to limit "users online" code operation to index and viewforum</li>
321 <li>Added "temporary" workaround for Apache2 + PHP module ignoring "private" cache header</li>
322 <li>Added workaround for modcp IP lookup and links to Anonymous user profile</li>
323 <li>Fixed broken bbcode parsing of quotes containing bbcode in the "username"</li>
324 <li>Fixed excess slashes in [quote=""] first pass encoding</li>
325 <li>Fixed rendering issue with quote button under Mozilla - <b>Daz</b></li>
326 <li>Grammatical errors in remaining core lang files fixed - <b>Cluster</b></li>
327 <li>Fixed bbcode quote breaking when username contained ] before [</li>
328 <li>Fixed duplicate group_id error during upgrade of users from phpBB 1.x</li>
329 <li>Fixed stripslashes() problem with the conversion of the config table from phpBB 1.x</li>
330 <li>Rejiggled validation code, may eliminate "Username disallowed" issues</li>
331 <li>Fixed differing initial "public" setting of forum permissions between different files</li>
332 <li>Added check for invalid (non-compliant) email addresses to upgrade script</li>
333 <li>Further redirect workarounds for broken servers, please direct further issues to the vendors</li>
334 <li>Added GMT + 13 to English lang_main, all translators are encouraged to do likewise</li>
335 <li>Added switch to default_lang email template if user lang template no longer exists</li>
336 <li>Fixed javascript error when selecting smiley containing a single quote</li>
337 <li>Update users watched topic if a post they made is split into a new topic</li>
338 <li>Fixed situations where email templates contain incorrect or missing subject lines</li>
339 <li>Fixed error when searching for posts and no forums exist</li>
340 <li>Fixed potential SQL vulnerability with marking of private messages - <b>Ulf Harnhammar</b></li>
343 <a name="202"></a><h3 class="h3">1.ix. Changes since 2.0.2</h3>
346 <li>Fixed potential cross-site scripting vulnerability with avatars - <b>Showscout</b></li>
347 <li>Fixed potential SQL rewrite issue in page header - <b>missing contrib</b></li>
348 <li>Fixed potential CSS/HTML rewrite on viewing in login - <b>Marc Rees</b></li>
349 <li>Fixed (hopefully) issue with MS Access and multiple pages</li>
352 <a name="201"></a><h3 class="h3">1.x. Changes since 2.0.1</h3>
355 <li>Fixed missing "username" lang variable in user admin template</li>
356 <li>Session work around for users behind rotating IPs - <b>vHiker</b></li>
357 <li>Fixed potential session user_id re-write - <b>Ashe</b></li>
358 <li>Fixed potential cross-browser scripting issue with BBCode URLs</li>
359 <li>Fixed potential gallery avatar exploit - <b>Ashe</b></li>
360 <li>Fix sorting of smileys on each function call - <b>Ashe/psoTFX</b></li>
361 <li>Clear topic_mod text output in viewtopic - <b>Lars</b></li>
362 <li>Fix regex for avatar remote urls</li>
363 <li>Fix non-updating of user post counts when deleting whole topics</li>
364 <li>Increase time limit when sending topic reply notifications</li>
365 <li>Set default forum when splitting topics</li>
366 <li>Fix non-deletion of uploaded avatars when switching to gallery</li>
367 <li>Removed various closing newlines from included files</li>
368 <li>Add MAX_ROWS to HEAP table alter in install/upgrade - <b>Ashe</b></li>
369 <li>Update username maxlength for subSilver templates</li>
370 <li>Allow <b>(</b> and <b>)</b> in BBCode [url] tags</li>
371 <li>Fix non-quoting of <b>#</b> in username validation regexs</li>
372 <li>Fix overlooked global var in private messaging</li>
373 <li>Possible fix for \r\n email templates issues</li>
374 <li>Fix missing str_replace for category title forum admin SQL</li>
375 <li>Fix trailing <b>,</b> when sending emails via smtp</li>
376 <li>Fix avatar issues in user admin</li>
377 <li>Fix improper checking of email address ban in sessions</li>
378 <li>Fix use of hard coded language strings in forum admin</li>
379 <li>Fix missing closing <b>)</b> in smilies admin</li>
380 <li>Fix missing Username label in user admin</li>
381 <li>Fix upgrade.php bug where conversion would not complete (and updated other scripts to match the changes)</li>
382 <li>Fix problem with redirect and login.php</li>
383 <li>Fix typo that could cause problems with sorting in the memberlist</li>
384 <li>Fix emailer to allow sending emails with language-specific character sets</li>
387 <a name="200"></a><h3 class="h3">1.xi. Changes since 2.0.0</h3>
390 <li>Fixed delete image bug for normal users</li>
391 <li>Fixed group control panel image links</li>
392 <li>Fixed missing L_POST variable in group control panel</li>
393 <li>Fixed missing user id when redirecting to email form after login</li>
394 <li>Fixed (a)ppend_sid function name error in group control panel</li>
395 <li>Fixed reset of post type when previewing a post</li>
396 <li>Fixed mass emailer include path error</li>
397 <li>Fixed potential SQL exploit</li>
398 <li>Fixed several minor subSilver issues</li>
399 <li>Fixed [quote] breaking HTML problem</li>
400 <li>Fixed problem with unclosed nested quotes</li>
401 <li>Fixed bad handling of automagic links at end of quotes</li>
402 <li>Fixed potential BBCode and avatar remote exploit</li>
403 <li>Altered email validation check to allow + in username as per RFC</li>
404 <li>Fixed incorrect behaviour with wildcards in disallowed usernames</li>
405 <li>Added missing append_sid for search view results as posts</li>
406 <li>Fixed incorrect clearing of current sessions for logged in users</li>
407 <li>Fixed user_timezone (cannot update user profile) problem</li>
408 <li>Added correct setting of moderator status for users during upgrade</li>
409 <li>Fixed handling of uploaded avatars if gallery avatar currently used</li>
410 <li>Fixed use of existing username for uploaded avatars</li>
411 <li>Fixed updating of topic reply stats when post is deleted</li>
412 <li>Fixed irrelevant error message when activating already active account</li>
413 <li>Fixed gzip compression problems with Netscape and some PHP versions</li>
414 <li>Fixed MS Access layer errors when using latest PHP versions</li>
415 <li>Fixed styles admin editing problems with MSSQL Server</li>
416 <li>Fixed logout issue when cancelling certain actions</li>
417 <li>Fixed missing text in certain admin links</li>
418 <li>Fixed opening of frame within frame when logging into admin</li>
419 <li>Fixed incorrect ordering of search results by time</li>
420 <li>Fixed fulltext searching failure with MS Access</li>
421 <li>Hopefully fixed fulltext search with non-latin single byte charsets</li>
422 <li>Enabled work-around support for some multi-byte charsets - <b>OOHOO</b></li>
423 <li>Re-enabled search indexing of all-numeric character sequences</li>
424 <li>Updated email banning to properly implement wildcards</li>
425 <li>Fixed missing extension in links from groupcp</li>
426 <li>Fixed lack of re-validation when changing email address</li>
427 <li>Added additional IP check when using HTTP_X_FORWARDED_FOR</li>
428 <li>Fixed non-display of delete icon when on second or greater topic page</li>
429 <li>Fixed problems with users/groups assigned multiple permissions</li>
430 <li>Fixed problem with - and + in search words - <b>Matthijs</b></li>
431 <li>Fixed improper handling for deletion of words from search table</li>
432 <li>Fixed support for <b>,</b> in automagic URLs as per RFC</li>
433 <li>Fixed circular reference SQL errors when deleting posts under MS Access</li>
434 <li>Fixed nested [code] problems</li>
435 <li>Added charset encoding headers for emails - <b>romutis</b></li>
436 <li>Fixed "Copy to self" emails to use correct language</li>
437 <li>Fixed pagination error when limiting previous days for viewforum</li>
438 <li>Decreased minimum search word size to 3 chars</li>
439 <li>Fixed deletion of one or more options from all polls when editing just one</li>
440 <li>Fixed checking of group memberships when promoting/demoting group moderators</li>
441 <li>Added database closure to admin frameset page</li>
444 <a name="final"></a><h3 class="h3">1.xii. Changes since RC-4</h3>
447 <li>Fixed improper report of general error when posting messages containing errors</li>
448 <li>Fixed post text being doubled up if it contained one or more < without closing ></li>
449 <li>Fixed pruning errors due to search function name change</li>
450 <li>Hopefully fixed various issues which led to incorrect reply and excess page counts</li>
451 <li>Fixed groupcp not displaying all email buttons to group moderator or admin</li>
452 <li>Fixed failure to display error notice when uploading oversized avatars</li>
453 <li>Hopefully corrected problem with viewonline displaying too few/many users online</li>
454 <li>Partially addressed issue with activation URLs >76 chars</li>
455 <li>Fixed additional search facilities failing to work or working incorrectly</li>
456 <li>Fixed search syntax highlighting</li>
457 <li>Addressed various webservers handling of page redirects</li>
458 <li>Fixed word censor not replacing first or last words</li>
459 <li>Fixed avatar height and width check for locally uploaded images</li>
460 <li>Hopefully fixed cache control header</li>
461 <li>Added check for PM box size limit of 0 to prevent div0 error</li>
462 <li>Fixed failure to fully delete PMs in outbox</li>
463 <li>Fixed display problem with polls</li>
464 <li>Fixed problem with guest username not being displayed for topic results in search</li>
465 <li>Fixed problem with quotes in various profile fields</li>
466 <li>Fixed schema problem with user_timezone</li>
467 <li>Fixed page display issue with MS Access</li>
468 <li>Fixed user level issue when altering user from user to admin and vice versa</li>
469 <li>Fixed incorrect parseing of some email templates</li>
470 <li>Reduced size of MS Access primer</li>
471 <li>Fixed various remaining usergroup display issues</li>
474 <a name="rc4"></a><h3 class="h3">1.xiii. Changes since RC-3</h3>
477 <li>Addressed serious security issue with included files</li>
478 <li>Fixed non-use of database table prefix name during upgrade</li>
479 <li>Split functions and profile into separate modules</li>
480 <li>Fixed (hopefully) remaining issues with colourisation of moderator usernames</li>
481 <li>Updated install to include entry of additional, required, information</li>
482 <li>Fixed (hopefully) AOL incompatibilities</li>
483 <li>Fixed non-display of moderators in index/viewforum</li>
484 <li>Fixed group control panel 'no groups exist' problems</li>
485 <li>Fix HTTP_X_FORWARDED_FOR spoofing possibility</li>
486 <li>Fix ignoring of private range IP's in HTTP_X_FORWARDED_FOR</li>
487 <li>Enable multiple wildcard email banning, eg. *name*@somewhere.tld</li>
488 <li>Fix problems with posts being truncated if containing < and > characters</li>
489 <li>Prevent URL, BBCode and most smiley parseing in [code][/code]</li>
490 <li>Fix problems with use of certain reserved chars in word censor list</li>
491 <li>Fix default search useage to be as described (was doing AND by default)</li>
492 <li>Fix various avatar issues with profile, gallery and viewtopic</li>
493 <li>Enable safe mode support for uploading avatars</li>
494 <li>Fix broken modcp IP view issue</li>
495 <li>Fix potential session_id re-write vulnerability</li>
496 <li>Finish localisation of days and months (AM/PM are not and will not be localised in 2.0)</li>
497 <li>Remove link to external subSilver stylesheet from default subSilver templates</li>
498 <li>Handle TRANSACTIONS correctly in MySQL 3.x (by returning correct responses)</li>
499 <li>Fix checkbox resetting problem while previewing posts</li>
500 <li>Fix a login redirect issue</li>
501 <li>Remove some additional unused fields during upgrade</li>
502 <li>Fix (hopefully) remaining ICQ overlay issue with view profile in subSilver</li>
505 <a name="rc3"></a><h3 class="h3">1.xiv. Changes since RC-2</h3>
508 <li>Fixed infamous install parse error</li>
509 <li>Major update of posting and related search functions (fixing various issues and increasing speed)</li>
510 <li>Fixed display of author and last poster names when both are different guest users</li>
511 <li>Fixed upgrade stall issues (hopefully!) and improved output</li>
512 <li>Fixed highlighting code for viewtopic and search</li>
513 <li>Reduced size of several files and functions</li>
514 <li>Moved localised images to sub-directories</li>
515 <li>Improved user feedback of disallowed usernames</li>
516 <li>Fixed various MSSQL bugs</li>
517 <li>Fixed installation of MSSQL/MSSQL-ODBC</li>
518 <li>Fixed security issue with upgrade.php</li>
519 <li>Finished implemention of various additional features</li>
520 <li>Fixed various user, group and forum permissions problems</li>
521 <li>Fixed issues with BBCode [ and ] (hopefully!)</li>
522 <li>Fixed autologin problems with MS IIS</li>
523 <li>Hopefully fixed problems with URIs in emails on some server configs</li>
524 <li>Fixed 'blank' profile and DB utilities problems on submit</li>
525 <li>Fixed incorrect language being used in email subjects</li>
526 <li>Fixed issues with incorrect private message new/unread counts</li>
527 <li>Fixed various PostgreSQL related errors</li>
528 <li>Automatically forward users to login screen in more situations</li>
529 <li>AEnabled (coloured) online indication of moderators and admins</li>
530 <li>Enabled maximum online user count</li>
531 <li>Altered online user count to ignore duplicate IPs (will now underestimate rather than overestimate)</li>
532 <li>Enabled viewing of users browsing each forum</li>
533 <li>Fixed (hopefully) display of overlayed ICQ icon in Netscape using subSilver</li>
534 <li>Fixed display of guest usernames for last post and author</li>
535 <li>Hidden usergroups are now completely hidden from view</li>
538 <a name="rc2"></a><h3 class="h3">1.xv. Changes since RC-1</h3>
541 <li>Fixed numerous PostgreSQL related issues</li>
542 <li>Significant updates and additions to the upgrade script</li>
543 <li>Various (missed) hard coded language strings fixed</li>
544 <li>Fixed viewforum error when no forum id specified</li>
545 <li>Fixed old constant name useage in search system</li>
546 <li>Fixed display of moved posts when viewing unanswered posts</li>
547 <li>Fixed failure of search for user and keyword when displaying as posts</li>
548 <li>Fixed PM popup notification</li>
549 <li>Fixed view more emoticon session page problem</li>
550 <li>Fixed view profile email links</li>
551 <li>Fixed display of websites in profile</li>
552 <li>Fixed backup database failure</li>
553 <li>Fixed MS Access schema error when posting topics</li>
554 <li>Fixed problem with hypenated/dotted DB names in MySQL 3.23.6+</li>
555 <li>Various other fixes and updates</li>
558 <a name="rc1"></a><h3 class="h3">1.xvi. Changes since RC-1 (pre)</h3>
561 <li>Upgrade script completed for initial fully functional release</li>
562 <li>Sessions code updated</li>
563 <li>Mark read code updated and hopefully fixed</li>
564 <li>Significant changes to properly deal with \' for non-MySQL boards</li>
565 <li>mssql, msaccess and mssql-odbc DB classes re-written</li>
566 <li>Avatar issues addressed and fixed</li>
567 <li>Search (INSERT) bug using MySQL fixed</li>
568 <li>Search highlighting issues addressed</li>
569 <li>Search own/other users posts fixed</li>
570 <li>BBCode fixes for magic URIs and other issues</li>
571 <li>Template updates for subSilver</li>
572 <li>User and group permissions problems fixed</li>
573 <li>Forum management problems (deletion of forum causing category not to display) fixed</li>
574 <li>Pagination problem with groupcp fixed</li>
575 <li>Backslash issues with posting and profile fixed</li>
576 <li>Backslash issues with emails fixed</li>
577 <li>preg_quote problems fixed</li>
578 <li>User management updated with full avatar control and missing fields</li>
579 <li>Private messaging box limits fixed</li>
580 <li>Private messaging ?folder= strangeness fixed</li>
581 <li>Forum pruning code updated to cope with search system</li>
582 <li>Emoticon system in posting updated</li>
583 <li>BBCode FAQ link added to posting form</li>
584 <li>Language file updates to address concerns of translators</li>
585 <li>Various other bug fixes and updates</li>
588 <p>Note that a full list of fixed bugs can be found at the bug tracker (see section on bug reporting <a href="README.html#bugs">here</a>)</p>
590 <a name="disclaimer"></a><h2 class="h2"><u>2. Copyright and disclaimer</u></h2>
592 <p>This application is opensource software released under the <a href="http://www.gnu.org/licenses/gpl.html" target="_new">GPL</a>. Please see source code and the Docs directory for more details. This package and its contents are Copyright © 2002 <a href="http://www.phpbb.com/" target="_new">phpBB Group</a>, All Rights Reserved.</p>
594 <!-- END DOCUMENT -->