Paul S. Owen 3f003845d3 Fix bbcode url xss issue ...

git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4494 89ea8834-ac86-4346-8a33-228a782c2dd0

2003-09-10 17:50:14 +00:00

..

admin

Changed whois lookup address within admin index

2003-08-03 11:50:52 +00:00

db

Yep, more fixes

2002-12-21 18:31:54 +00:00

develop

script to convert 2.0.x usernames to 2.0.5. Existing 2.0.5 usernames will be not affected by this.

2003-06-26 09:59:06 +00:00

docs

Document tags

2003-08-17 12:00:44 +00:00

images

This commit was manufactured by cvs2svn to create branch 'phpBB-2_0_0'.

2003-01-30 15:32:30 +00:00

includes

Fix bbcode url xss issue

2003-09-10 17:50:14 +00:00

install

2.0.6 updates...

2003-07-20 13:14:28 +00:00

language

Add confirmation stuff here ... save time elsehwere ... MSAccess note yet updated

2003-06-10 00:32:03 +00:00

templates

Remove visual confirm stuff from default install

2003-06-10 00:39:51 +00:00

common.php

Include 172.16/12 as private address space instead of 172.16/16.

2003-06-04 17:41:40 +00:00

config.php

Why did I have to do that???

2002-08-07 17:21:09 +00:00

extension.inc

…

faq.php

…

groupcp.php

hit me hard... hit me harder. did not see these two sections the first time.

2003-06-10 17:18:15 +00:00

index.php

Various fixes, see CHANGELOG

2002-12-19 17:17:40 +00:00

login.php

some bugfixes... cvs does not work very well at the moment. hope the change within the mssql schema do the job, i will test this tonight (i have to be at work in a few minutes).

2003-06-20 07:40:27 +00:00

memberlist.php

Poss (minor) xss issue

2003-06-09 13:01:47 +00:00

modcp.php

fixed several vulnerabilities in modcp

2003-07-26 11:41:35 +00:00

posting.php

see changelog entry

2003-06-07 17:52:31 +00:00

privmsg.php

entity fix

2003-06-12 12:49:01 +00:00

profile.php

- fixed bugs #1395, #1177, fixed floating point assignment bug within older php versions ($fraction), adjusted search a little bit by implementing a workaround for database timeouts (hopefully Paul will not slap me for this. :D) - should be tested within high-traffic boards or those affected by the database timeout.

2003-03-02 23:16:19 +00:00

search.php

Legacy var ... potential XSS

2003-07-11 17:04:31 +00:00

viewforum.php

fixed problems with updating default values within mssql (update_to_xxx), fixed html-entities match (no longer needed since the html validation changed... -> Related to bug #1267), bug #1374, #1341 - scoot and #1430 fixed too. Some updates related to 2.0.5.

2003-03-04 21:02:48 +00:00

viewonline.php

Fixed bug #1060, title for viewonline.php

2002-12-02 10:53:42 +00:00

viewtopic.php

post/topic_id were already set by default ... no need for "else" statements

2003-06-20 16:34:58 +00:00