Marc Alexander
40354f1f90
Merge pull request #27 from phpbb/ticket/security-196
...
[ticket/security-196] Escapes the exception messages before displaying them
release-3.1.10
2016-10-02 22:25:30 +01:00
Marc Alexander
71e632b9f0
[prep-release-3.1.10] Add 3.1.10 migration
2016-10-02 21:07:18 +01:00
Marc Alexander
cb226f83be
[prep-release-3.1.10] Update version numbers for 3.1.10
2016-10-02 21:06:56 +01:00
Tristan Darricau
cd4190a72d
Merge pull request #4474 from marc1706/ticket/14789
...
[ticket/14789] Move form key checks to where they actually do something
* marc1706/ticket/14789:
[ticket/14789] Remove obsolete check_form_key() and add missing hashes
[ticket/14789] Move form key checks to where they actually do something
2016-10-02 17:18:22 +02:00
Tristan Darricau
cdaed8dabf
Merge pull request #4475 from marc1706/ticket/14805
...
[ticket/14805] Ignore platform requirements while building packages
* marc1706/ticket/14805:
[ticket/14805] Ignore platform requirements while building packages
[ticket/8301] Add log_time index
2016-10-02 17:14:49 +02:00
Marc Alexander
047c7375a5
[ticket/14805] Ignore platform requirements while building packages
...
PHPBB3-14805
2016-10-01 16:46:48 +01:00
Marc Alexander
f1eda6868f
Merge pull request #4465 from Senky/ticket/8301
...
[ticket/8301] Add log_time index
2016-10-01 11:07:40 +01:00
Marc Alexander
4e5f29a21b
[ticket/14789] Remove obsolete check_form_key() and add missing hashes
...
PHPBB3-14789
2016-09-30 23:26:04 +01:00
Marc Alexander
88d7c4fe57
[ticket/14789] Move form key checks to where they actually do something
...
PHPBB3-14789
2016-09-30 22:32:54 +01:00
Tristan Darricau
6972d06f59
Merge branch 'prep-release-3.1.10' into 3.1.x
...
* prep-release-3.1.10:
[ticket/14799] purge_notifications() should not leave open transactions.
2016-09-28 20:53:10 +02:00
Tristan Darricau
2fd2fb94cf
Merge pull request #4468 from markshawtoronto/ticket/14799
...
[ticket/14799] purge_notifications() should not leave open transactions.
* markshawtoronto/ticket/14799:
[ticket/14799] purge_notifications() should not leave open transactions.
[3.1.x] Increase version for 3.1.11 development
2016-09-28 20:50:06 +02:00
markshawtoronto
06c980f1ec
[ticket/14799] purge_notifications() should not leave open transactions.
...
When running purge_notifications(), if a notification type does not exist
then a db transaction is started but never completed.
On an error in get_notification_type_id(), end the transaction.
PHPBB3-14799
2016-09-27 11:45:23 -04:00
Jakub Senko
ec24f739e8
[ticket/8301] Add log_time index
...
PHPBB3-8301
2016-09-25 19:51:37 +02:00
Marc Alexander
51d830a6d3
[3.1.x] Increase version for 3.1.11 development
2016-09-24 21:39:47 +02:00
Marc Alexander
32d9efff47
Merge branch 'prep-release-3.1.10' into 3.1.x
2016-09-24 21:35:42 +02:00
Marc Alexander
7d73d1ff83
[prep-release-3.1.10] Add changelog for 3.1.10-RC1
release-3.1.10-RC1
2016-09-24 14:57:23 +02:00
Marc Alexander
c958ba13e8
[prep-release-3.1.10] Add migration for 3.1.10-RC1
2016-09-24 14:50:46 +02:00
Marc Alexander
2f17757f4e
[prep-release-3.1.10] Update version to 3.1.10-RC1
2016-09-24 14:50:46 +02:00
Marc Alexander
b8bbf9db03
Merge pull request #4461 from marc1706/ticket/14785
...
[ticket/14785] Add template event overall_header_headerbar_after/before
2016-09-24 13:04:21 +02:00
Marc Alexander
4267cc3a43
Merge pull request #4462 from marc1706/ticket/14796
...
[ticket/14796] Use log_table class member instead of table constant
2016-09-24 11:50:15 +02:00
GerB
90e9d5c462
[ticket/14785] Add template event overall_header_headerbar_after/before
...
PHPBB3-14785
2016-09-24 11:04:23 +02:00
Tristan Darricau
cdd56c0505
Merge pull request #4394 from marc1706/ticket/14484
...
[ticket/14484] Add possibility to use extensions in UI tests
* marc1706/ticket/14484:
[ticket/14484] Properly enable extensions in UI tests
[ticket/14484] Move facebook/webdriver back to tests dir composer.json
[ticket/14484] Move facebook webdriver to main composer.json
2016-09-24 10:31:06 +02:00
Marc Alexander
18f9c9f6e2
Merge pull request #3527 from Elsensee/ticket/13709
...
[ticket/13709] Add fallback for email templates used by extensions
2016-09-24 10:28:37 +02:00
Forumhulp.com
97040dc6ff
[ticket/14796] Use log_table class member instead of table constant
...
Was still using the old LOG_TABLE constant in the delete method.
PHPBB3-14796
2016-09-24 10:19:12 +02:00
Marc Alexander
931582aad9
Merge pull request #4432 from Senky/ticket/14762
...
[ticket/14762] Add core event to session.php
2016-09-24 10:02:41 +02:00
Marc Alexander
3910387ee5
Merge pull request #4433 from Senky/ticket/14747
...
[ticket/14747] Add post_data to core.modify_posting_auth
2016-09-24 09:56:25 +02:00
Marc Alexander
d2f95ef875
Merge pull request #4460 from marc1706/ticket/14784
...
[ticket/14784] missing rewrite for lighttpd
2016-09-24 09:39:01 +02:00
Tobi Schäfer
537dca0892
[ticket/14784] missing rewrite for lighttpd
...
PHPBB3-14784
2016-09-24 08:21:27 +02:00
Marc Alexander
2436af94e3
Merge pull request #4392 from ErnadoO/PHPBB3-14592
...
[ticket/14592] [PHP] core.search_backend_search_after
2016-09-22 21:26:31 +02:00
Marc Alexander
75f57fa407
Merge pull request #4454 from rxu/tcket/14787-1
...
[ticket/14787] Add more parameters to the core.search_modify_url_parameters
2016-09-22 21:23:55 +02:00
rxu
a078336cb1
[ticket/14787] Add more parameters to the core.search_modify_url_parameters
...
PHPBB3-14787
2016-09-19 02:48:23 +07:00
Tristan Darricau
4da479d47f
Merge pull request #4450 from rxu/ticket/14787
...
[ticket/14787] Add more parameters to the core.search_modify_url_pameters
* rxu/ticket/14787:
[ticket/14787] Add more parameters to the core.search_modify_url_parameters
2016-09-18 21:25:14 +02:00
Tristan Darricau
bc08813866
Merge pull request #4452 from marc1706/ticket/14789
...
[ticket/14789] Further harden ACP link and form checks
* marc1706/ticket/14789:
[ticket/14789] Add form tokens to tests and uncomment add_form_key
[ticket/14789] Add link hashes and form tokens to all acp links/buttons
2016-09-18 21:12:19 +02:00
Erwan Nader
6b435cbf13
[ticket/14592] Fix variable type
...
PHPBB3-14592
2016-09-18 19:55:00 +02:00
Marc Alexander
72f6241aa2
[ticket/14789] Add form tokens to tests and uncomment add_form_key
...
PHPBB3-14789
2016-09-18 15:30:25 +02:00
Marc Alexander
585a3ed863
[ticket/14789] Add link hashes and form tokens to all acp links/buttons
...
This will further harden the ACP security by adding link hashes to links and
form tokens to forms that did not have these yet and result in modified
settings or write action on the filesystem or database. These few links and
forms were still relying on the global ACP protection, mainly due to them
not posing further risks of compromising data. After this change these will
now also be properly protected against tampering.
PHPBB3-14789
2016-09-18 15:29:50 +02:00
Jakub Senko
abb01946bd
[ticket/14762] Add core event to session.php
...
PHPBB3-14762
2016-09-18 13:32:10 +02:00
Tristan Darricau
27e33f39f7
Merge pull request #4451 from marc1706/ticket/14788
...
[ticket/14788] Update CREDITS.txt
* marc1706/ticket/14788:
[ticket/14788] Update CREDITS.txt
2016-09-18 13:28:36 +02:00
Marc Alexander
c3578bc3e3
Merge pull request #4442 from rxu/ticket/14781
...
[ticket/14781] Add core event to the function group_user_attributes()
2016-09-18 13:07:47 +02:00
Marc Alexander
0d3ca3883e
[ticket/14788] Update CREDITS.txt
...
PHPBB3-14788
2016-09-18 12:16:44 +02:00
rxu
a084b07495
[ticket/14787] Add more parameters to the core.search_modify_url_parameters
...
PHPBB3-14787
2016-09-18 14:02:49 +07:00
Marc Alexander
bf397cb985
Merge pull request #4398 from wesleyfok/ticket/14638-3.1.x
...
Ticket/14638 3.1.x New UCP hooks for subscriptions
2016-09-17 13:04:32 +02:00
Marc Alexander
73b9327631
Merge pull request #4403 from rxu/ticket/14738
...
[ticket/14738] Add core events to improve modifying forum lists
2016-09-17 12:58:18 +02:00
Marc Alexander
bd59241110
Merge pull request #4406 from rmcgirr83/ticket/14581
...
[ticket/14581] Add core events to content_visibility
2016-09-17 08:54:00 +02:00
Marc Alexander
33584f12f0
Merge pull request #4449 from DavidIQ/ticket/14782
...
[ticket/14782] Don't use 'DISTINCT' when using 'SQL_CALC_FOUND_ROWS'
2016-09-17 00:04:59 +02:00
DavidIQ
2ae08dc3ba
[ticket/14782] Don't use 'DISTINCT' when using 'SQL_CALC_FOUND_ROWS'
2016-09-16 17:05:20 -04:00
Andreas Fischer
32ba128ea5
Merge pull request #4444 from DavidIQ/ticket/14782
...
[ticket/14782] Use the $select variable in "Your Posts" search
* DavidIQ/ticket/14782:
[ticket/14782] Use the $select variable in "Your Posts" search
2016-09-15 19:30:29 +02:00
Marc Alexander
70aa4407d3
Merge remote-tracking branch 'VSEphpbb/ticket/14783' into 3.1.x
2016-09-14 20:49:13 +02:00
Matt Friedman
5503c09cd5
[ticket/14783] Add template event before custom BBCodes in ACP
...
PHPBB3-14783
2016-09-14 10:37:27 -07:00
DavidIQ
6d589a8bb9
[ticket/14782] Use the $select variable in "Your Posts" search
2016-09-13 14:10:50 -04:00