rxu 9a9b156a8e [ticket/10035] ACP template edit feature allows to read any files on webserver. ...

... and to upload/execute any script on it. Use preg_replace to filter filename

PHPBB3-10035

2011-03-07 21:22:33 +07:00

..

adm

Merge branch 'ticket/nickvergessen/9911' into develop-olympus

2011-03-02 22:07:56 -05:00

cache

[ticket/9520] Removed per directory web.config files.

2010-05-03 19:31:40 +02:00

develop

[ticket/10058] Initialize $phpbb_root_path in mysql_upgrader.php.

2011-02-24 17:31:44 -05:00

docs

Merge branch 'ticket/bantu/10075' into develop-olympus

2011-03-06 14:53:47 -05:00

download

[ticket/10041] Use send_status_line more in download/file.php

2011-02-23 20:16:16 -05:00

files

[ticket/9520] Removed per directory web.config files.

2010-05-03 19:31:40 +02:00

images

[ticket/9520] Removed per directory web.config files.

2010-05-03 19:31:40 +02:00

includes

[ticket/10035] ACP template edit feature allows to read any files on webserver.

2011-03-07 21:22:33 +07:00

install

[ticket/10059] Fix two misspellings of consistent.

2011-03-01 19:53:12 -05:00

language

[ticket/9675] Put the code into methods to avoid code duplication.

2011-02-08 14:57:42 +01:00

store

[ticket/9520] Removed per directory web.config files.

2010-05-03 19:31:40 +02:00

styles

Merge branch 'ticket/raimon/9980' into develop-olympus

2011-02-27 23:18:10 +01:00

.htaccess

…

common.php

[ticket/9830] Redirect to install directly when config.php does not exist.

2010-09-16 22:00:17 +02:00

cron.php

…

faq.php

…

feed.php

[ticket/10009] Entries are always posts, update fields accordingly.

2011-02-21 20:24:04 +01:00

index.php

[ticket/7720] Fix alternative image-description for unread posts.

2010-07-14 20:55:07 +02:00

mcp.php

…

memberlist.php

[ticket/9772] Unify permissions for sending email when board_email_form is off

2010-08-28 15:49:47 -05:00

posting.php

[ticket/10047] Do not put session id in URL on posting.php when cookies are on.

2011-02-19 14:30:39 +01:00

report.php

…

search.php

[ticket/9851] "Search new posts" should require login.

2010-12-13 14:58:43 +01:00

style.php

[ticket/9629] Allow style.php to retrieve its session ID from cookies

2010-07-11 01:35:01 +02:00

ucp.php

[ticket/9785] Allow users to request new passwords when board is disabled.

2010-08-22 20:26:18 +02:00

viewforum.php

Merge branch 'ticket/nickvergessen/7720' into develop-olympus

2010-07-14 20:55:49 +02:00

viewonline.php

…

viewtopic.php

[ticket/10072] Added the POST_NUMBER template var

2011-03-02 23:41:11 +01:00

web.config

[ticket/9520] Additionally filter requests for {common,config}.php

2010-05-03 19:32:29 +02:00