Meik Sievertsen a765165cd1 do not use parse_str because it could lead to "unexpected" output which could lead to XSS ...

git-svn-id: file:///svn/phpbb/trunk@6476 89ea8834-ac86-4346-8a33-228a782c2dd0

2006-10-11 07:02:29 +00:00

..

acm

he braces style is deprecated as of PHP 6

2006-10-07 17:40:07 +00:00

acp

#4622

2006-10-10 02:04:55 +00:00

auth

…

captcha

…

db

for some things we do not need the utf8 function. :)

2006-10-07 15:47:55 +00:00

diff

…

mcp

- forum image being an additional image instead of replacing forum indicators

2006-10-08 19:04:49 +00:00

search

tried to begin adjusting all string functions where applicable - still a *lot* to do.

2006-10-07 12:36:31 +00:00

ucp

- forum image being an additional image instead of replacing forum indicators

2006-10-08 19:04:49 +00:00

utf

hopefully no bugs...

2006-10-09 17:44:06 +00:00

auth.php

tried to begin adjusting all string functions where applicable - still a *lot* to do.

2006-10-07 12:36:31 +00:00

bbcode.php

he braces style is deprecated as of PHP 6

2006-10-07 17:40:07 +00:00

cache.php

- forgot to make the same change to the ODBC driver

2006-10-01 08:48:32 +00:00

constants.php

- extend config checking to include check for writeable path

2006-10-03 18:35:59 +00:00

functions_admin.php

he braces style is deprecated as of PHP 6

2006-10-07 17:40:07 +00:00

functions_compress.php

…

functions_display.php

- forum image being an additional image instead of replacing forum indicators

2006-10-08 19:04:49 +00:00

functions_jabber.php

- extend config checking to include check for writeable path

2006-10-03 18:35:59 +00:00

functions_messenger.php

- extend config checking to include check for writeable path

2006-10-03 18:35:59 +00:00

functions_module.php

…

functions_posting.php

- extend config checking to include check for writeable path

2006-10-03 18:35:59 +00:00

functions_privmsgs.php

- added confirmation to removing bbcodes

2006-09-28 15:04:59 +00:00

functions_profile_fields.php

tried to begin adjusting all string functions where applicable - still a *lot* to do.

2006-10-07 12:36:31 +00:00

functions_template.php

- fixing a bug i am unsure about when it occurs (but it occurs). The symptoms are broken template cache files if after removing unnecessary php opening/closing tags result in statements being syntactially incorrect.

2006-09-30 14:58:05 +00:00

functions_transfer.php

he braces style is deprecated as of PHP 6

2006-10-07 17:40:07 +00:00

functions_upload.php

he braces style is deprecated as of PHP 6

2006-10-07 17:40:07 +00:00

functions_user.php

he braces style is deprecated as of PHP 6

2006-10-07 17:40:07 +00:00

functions.php

do not use parse_str because it could lead to "unexpected" output which could lead to XSS

2006-10-11 07:02:29 +00:00

index.htm

…

message_parser.php

he braces style is deprecated as of PHP 6

2006-10-07 17:40:07 +00:00

session.php

ok, i do not why the db is setting the type for user id to string - but with this change bots should no longer "spawn" sessions. ;)

2006-10-10 13:59:02 +00:00

template.php

…