Meik Sievertsen 234b1f13de several security fixes in admin pages ...

changed bbcode to only allow jpg, jpeg, gif and png


git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4876 89ea8834-ac86-4346-8a33-228a782c2dd0

2004-03-25 15:57:20 +00:00

..

auth.php

oopsie

2004-03-01 16:49:03 +00:00

bbcode.php

several security fixes in admin pages

2004-03-25 15:57:20 +00:00

constants.php

Remove visual confirm stuff from default install

2003-06-10 00:39:51 +00:00

db.php

Updates to overcome security issue + updates of various functions, initial version of profile registration include ... not completed but should be functional for obvious reasons(!)

2002-03-18 13:35:23 +00:00

emailer.php

fixed several vulnerabilities in modcp

2003-07-26 11:41:35 +00:00

functions_admin.php

Default forum for make_forum_select

2002-07-19 17:03:50 +00:00

functions_post.php

Fixed & handling with HTML enabled and no tags

2003-06-09 19:35:56 +00:00

functions_search.php

several security fixes in admin pages

2004-03-25 15:57:20 +00:00

functions_selects.php

Path updates for language file select list generation

2002-12-22 12:20:35 +00:00

functions_validate.php

minor error in email preg

2003-06-09 19:13:05 +00:00

functions.php

2.0.6 updates...

2003-07-20 13:14:28 +00:00

index.htm

Add blank indexes to stop nosey people being, erm, nosey

2001-11-21 13:06:56 +00:00

page_header.php

oopsie

2004-03-01 16:49:03 +00:00

page_tail.php

More updates, append sid to admin browsing

2002-11-26 11:42:12 +00:00

prune.php

fixed some small bugs... added the updater (this one needs some testing, i have moved some things around)

2003-03-18 23:24:02 +00:00

sessions.php

fixed two small flaws.

2003-04-05 12:04:34 +00:00

smtp.php

as told... the latest changes.

2003-07-18 16:34:01 +00:00

sql_parse.php

Stop being too paranoid about hacking of includes containing only fully inclusive functions

2002-03-18 23:53:12 +00:00

template.php

"Fix" for realpath and Lycos?

2002-12-21 19:09:57 +00:00

topic_review.php

Vulnerability + potential Zend fixes

2004-03-01 15:56:52 +00:00

usercp_activate.php

changed email class to the approach paul did with the class in 2.2 (the delimiter used as a 'fix' has not really solved the initial problem). fixed timezone display.

2003-05-03 23:24:04 +00:00

usercp_avatar.php

fixed problems with updating default values within mssql (update_to_xxx), fixed html-entities match (no longer needed since the html validation changed... -> Related to bug #1267), bug #1374, #1341 - scoot and #1430 fixed too. Some updates related to 2.0.5.

2003-03-04 21:02:48 +00:00

usercp_email.php

some small bugs fixed...

2003-06-06 18:02:15 +00:00

usercp_register.php

several security fixes in admin pages

2004-03-25 15:57:20 +00:00

usercp_sendpasswd.php

changed email class to the approach paul did with the class in 2.2 (the delimiter used as a 'fix' has not really solved the initial problem). fixed timezone display.

2003-05-03 23:24:04 +00:00

usercp_viewprofile.php

fixed get_userdata to be now really compatible with id and username (note: used intval check against 0 because of php3 compatibility)

2003-02-25 23:28:30 +00:00