rxu 9a9b156a8e [ticket/10035] ACP template edit feature allows to read any files on webserver. ...

... and to upload/execute any script on it. Use preg_replace to filter filename

PHPBB3-10035

2011-03-07 21:22:33 +07:00

..

info

[ticket/9578] ACP Posting tab is missing "Post settings" module.

2010-05-28 13:03:56 +02:00

acp_attachments.php

[ticket/9519] Replace remaining is_writable() calls with phpbb_is_writable().

2010-08-10 16:11:39 +02:00

acp_ban.php

[ticket/9695] Correct the improper display of user input in mcp_ban.php

2010-07-01 17:48:32 -05:00

acp_bbcodes.php

[ticket/7778] BBCode single limit

2011-02-23 21:15:40 -05:00

acp_board.php

[ticket/9613] Slightly update language strings.

2010-08-29 16:50:57 +02:00

acp_bots.php

dumdidum... sorry. ;)

2007-10-05 14:36:34 +00:00

acp_captcha.php

[ticket/9655] Pass E_USER_WARNING, so it doesn't look like a successful action.

2010-06-14 22:27:23 +02:00

acp_database.php

[ticket/9686] Fix mssqlnative database data export

2010-10-25 03:33:37 +02:00

acp_disallow.php

dumdidum... sorry. ;)

2007-10-05 14:36:34 +00:00

acp_email.php

Mass Email works again for users with empty jabber address but notification set to 'both'. (Bug #39755)

2009-03-17 15:50:19 +00:00

acp_forums.php

Merge branch 'ticket/bantu/9167' into develop-olympus

2010-08-19 10:09:32 -05:00

acp_groups.php

[ticket/9478] Validate maximum number of allowed recipients per PM value.

2010-10-25 21:47:13 +02:00

acp_icons.php

Fix Bug #57455 - Fix problems with firebird by no longer using 'count' as a column alias.

2010-02-08 16:43:39 +00:00

acp_inactive.php

Log activation through inactive users ACP. #30145

2009-12-09 22:55:10 +00:00

acp_jabber.php

Add some castings there. Slightly related: Bug #55155

2009-12-08 17:09:48 +00:00

acp_language.php

[ticket/9966] Language download in ACP creates index.html and misses captcha_*

2011-01-29 17:08:20 +01:00

acp_logs.php

- accidentally undid changes introduced in r9979

2009-08-22 02:56:05 +00:00

acp_main.php

[ticket/9874] view_log() performs unneeded count query over all log entries.

2011-02-25 00:04:48 +01:00

acp_modules.php

Add in missing free result on DB query

2008-12-06 18:23:42 +00:00

acp_permission_roles.php

dumdidum... sorry. ;)

2007-10-05 14:36:34 +00:00

acp_permissions.php

Adjustment to r9887: Only use one language variable.

2009-08-18 14:37:49 +00:00

acp_php_info.php

[ticket/9656] Remove @ from phpinfo() to get correct error_reporting value.

2010-06-20 21:43:56 +02:00

acp_profile.php

[ticket/8904] Show default value for numeric custom profile fields when editing

2011-02-13 18:32:11 +01:00

acp_prune.php

[ticket/9623] Proper UTF8 encoding for usernames in pruning section

2010-06-15 13:39:58 +02:00

acp_ranks.php

acp module for submitting statistical information to phpBB

2009-06-27 20:56:49 +00:00

acp_reasons.php

[ticket/9582] Removing a report reason leaves reports with an unknown reason under MSSQL native.

2010-05-03 19:40:33 +02:00

acp_search.php

make search_indexing_state dynamic. This is related to bug #44535 - although i think we only fix the symptoms and not the cause.

2009-05-01 09:59:57 +00:00

acp_send_statistics.php

- links to send statistics after install and update

2009-08-13 14:51:47 +00:00

acp_styles.php

[ticket/10035] ACP template edit feature allows to read any files on webserver.

2011-03-07 21:22:33 +07:00

acp_update.php

[ticket/9850] Display upgrade instructions for feature release in acp

2010-11-02 23:53:14 +01:00

acp_users.php

Merge branch 'ticket/nickvergessen/9519' into develop-olympus

2010-08-28 23:25:05 +02:00

acp_words.php

[ticket/9933] Wrong handling consecutive multiple asterisks in word censor

2011-01-07 20:51:43 +07:00

auth.php

Fix duplicate creation of acl options in acl_add_options() under certain conditions. (Bug #38385, #40225)

2009-03-20 13:22:19 +00:00