Paul S. Owen ca2a956b6c Alter way variables are substituted ... was causing problems when a [] followed a {VAR} in the email ... ...

git-svn-id: file:///svn/phpbb/trunk@2407 89ea8834-ac86-4346-8a33-228a782c2dd0

2002-03-22 19:33:28 +00:00

..

auth.php

Stop being too paranoid about hacking of includes containing only fully inclusive functions

2002-03-18 23:53:12 +00:00

bbcode.php

…

constants.php

…

db.php

…

emailer.php

Alter way variables are substituted ... was causing problems when a [] followed a {VAR} in the email ...

2002-03-22 19:33:28 +00:00

functions_admin.php

Stop being too paranoid about hacking of includes containing only fully inclusive functions

2002-03-18 23:53:12 +00:00

functions_post.php

Fix missing global var causing failure of include for username validation

2002-03-21 13:29:53 +00:00

functions_search.php

preg_quote stopwords

2002-03-22 17:53:28 +00:00

functions_selects.php

Stop being too paranoid about hacking of includes containing only fully inclusive functions

2002-03-18 23:53:12 +00:00

functions_validate.php

Wasn't checking for wildcards in disallowed usernames during validation ... how we missed this for months is beyond me ... thanks to the anonymous bug track adder ...

2002-03-21 14:29:42 +00:00

functions.php

bah

2002-03-19 01:00:37 +00:00

index.htm

…

page_header.php

Suggested alteration of cache control header by Nathan

2002-03-22 18:46:31 +00:00

page_tail.php

…

prune.php

Change a few quotes

2002-03-22 17:54:33 +00:00

sessions.php

Remove stripslashes from pagestart and begin session_id ...

2002-03-19 11:59:36 +00:00

smtp.php

Stop being too paranoid about hacking of includes containing only fully inclusive functions

2002-03-18 23:53:12 +00:00

sql_parse.php

Stop being too paranoid about hacking of includes containing only fully inclusive functions

2002-03-18 23:53:12 +00:00

template.php

Stop being too paranoid about hacking of includes containing only fully inclusive functions

2002-03-18 23:53:12 +00:00

topic_review.php

Non-authed user could potentially utilise topic_review to read denied forums .... thanks Ashe

2002-03-18 23:56:36 +00:00

usercp_activate.php

Just me nitpicking... Thought the file header name should match the filename...

2002-03-19 21:54:47 +00:00

usercp_avatar.php

Missed a width/height check for uploaded avatars

2002-03-20 14:38:51 +00:00

usercp_email.php

Minor change ... don't strip_tags ... I don't think this is a security issue but it could use checking ... everyone be aware of my being unsure before using this!

2002-03-22 19:32:35 +00:00

usercp_register.php

damn it damn it ... engage brain before commiting the thing you were going to change but didn't ... again, thanks acydburn

2002-03-21 15:45:13 +00:00

usercp_sendpasswd.php

Well.... I hope this is right... It works at least. Can't seem to reach Paul currently, and I don't want this to slip through for RC-4, so for now I copied the old stuff from a previous revision of profile, and pasted it in here... Tested to work on my local machine... (if you had something else in mind Paul feel free to overwrite my version)

2002-03-19 20:47:59 +00:00

usercp_viewprofile.php

Stop being too paranoid about hacking of includes containing only fully inclusive functions

2002-03-18 23:53:12 +00:00