aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB
Commit message (Collapse)AuthorAgeFilesLines
...
| | * | | | | | | | | | Merge pull request #36 from phpbb/ticket/security/124Marc Alexander2017-07-161-0/+21
| | |\ \ \ \ \ \ \ \ \ \ | | | |_|_|_|_|_|_|_|/ / | | |/| | | | | | | | | | | | | | | | | | | | | [ticket/security/124] Filter out disallowed search query items
| | | * | | | | | | | | [ticket/security/124] Filter out disallowed search query itemsMarc Alexander2017-06-181-0/+21
| | | |/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-124
| * | | | | | | | | | Merge pull request #4864 from lavigor/ticket/15259Marc Alexander2017-07-161-22/+14
| |\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15259] Fatal error on SQLite/Oracle database update
| | * | | | | | | | | | [ticket/15259] Fatal error on SQLite/Oracle database updatelavigor2017-07-011-22/+14
| | | |_|_|_|_|/ / / / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15259
| * | | | | | | | | | Merge pull request #4865 from JoshyPHP/ticket/15261Marc Alexander2017-07-163-15/+11
| |\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15261] Fix censoring HTML tags
| | * | | | | | | | | | [ticket/15261] Fix censoring HTML tagsJoshyPHP2017-07-033-15/+11
| | |/ / / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15261
| * | | | | | | | | | [prep-release-3.2.1] Add migration for 3.2.1Marc Alexander2017-07-161-0/+37
| | | | | | | | | | |
| * | | | | | | | | | [prep-release-3.2.1] Update versions for 3.2.1Marc Alexander2017-07-162-2/+2
| | | | | | | | | | |
| * | | | | | | | | | Merge pull request #39 from phpbb/ticket/security/210-rheaMarc Alexander2017-07-162-2/+15
| |\ \ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/security/210] Prevent using IP addresses or ports for remote avatar -- Rhea
| | * \ \ \ \ \ \ \ \ \ Merge branch 'ticket/security/210' into ticket/security/210-rheaMarc Alexander2017-07-102-4/+4
| | |\ \ \ \ \ \ \ \ \ \ | | | | |_|_|_|_|/ / / / | | | |/| | | | | | | |
| | | * | | | | | | | | [ticket/security/210] Adjust regex and add tests for IPv6Marc Alexander2017-07-102-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-210
| | * | | | | | | | | | Merge branch 'ticket/security/210' into ticket/security/210-rheaMarc Alexander2017-07-092-2/+15
| | |\ \ \ \ \ \ \ \ \ \ | | | |/ / / / / / / / / | | | | / / / / / / / / | | | |/ / / / / / / / | | |/| | | | | | | |
| | | * | | | | | | | [ticket/security/210] Prevent using IP addresses or ports for remote avatarMarc Alexander2017-07-092-2/+15
| | | | |/ / / / / / | | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-210
| * | | | | | | | | Merge pull request #35 from phpbb/ticket/security-203-rheaMarc Alexander2017-07-163-8/+125
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/security-203] Fully validate version check data in version helper -- Rhea
| | * \ \ \ \ \ \ \ \ Merge branch 'ticket/security-203' into ticket/security-203-rheaMarc Alexander2016-12-283-9/+126
| | |\ \ \ \ \ \ \ \ \ | | | | |_|_|_|/ / / / | | | |/| | | | | / / | | | |_|_|_|_|_|/ / | | |/| | | | | | |
| | | * | | | | | | [ticket/security-203] Allow more characters for branch namesMarc Alexander2016-12-271-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-203
| | | * | | | | | | [ticket/security-203] Do not add null values to versions infoMarc Alexander2016-12-271-7/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also stopped using reference for validate_versions() method argument. SECURTIY-203
| | | * | | | | | | [ticket/security-203] Fully validate version check data in version helperMarc Alexander2016-12-263-5/+120
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will also take care of SECURITY-204 as it's the same underlying issue. Admins still need to ensure they don't visit malicious sites for URLs provided by extensions. SECURITY-203
| * | | | | | | | | Merge pull request #30 from phpbb/ticket/security-181-rheaMarc Alexander2017-07-169-4/+162
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/security-181] Harden protection of migrations files and other directories
| | * \ \ \ \ \ \ \ \ Merge branch 'ticket/security-181' into ticket/security-181-rheaMarc Alexander2017-01-061-3/+3
| | |\ \ \ \ \ \ \ \ \ | | | | |_|_|_|_|/ / / | | | |/| | | | | | |
| | | * | | | | | | | [ticket/security-181] Update wording in INSTALL.htmlMarc Alexander2017-01-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
| | * | | | | | | | | [ticket/security-181] Add .htaccess to 3.2.x migrationsMarc Alexander2016-11-131-0/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
| | * | | | | | | | | Merge branch 'ticket/security-181' into ticket/security-181-rheaMarc Alexander2016-11-138-4/+129
| | |\ \ \ \ \ \ \ \ \ | | | |/ / / / / / / /
| | | * | | | | | | | [ticket/security-181] Update INSTALL.html to ask for more secure apache configMarc Alexander2016-11-132-3/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
| | | * | | | | | | | [ticket/security-181] Port .htaccess changes to other webserver typesMarc Alexander2016-11-133-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
| | | * | | | | | | | [ticket/security-181] Deny access to migrations foldersMarc Alexander2016-11-133-0/+99
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
* | | | | | | | | | | [3.2.x] Update version numbers for 3.2.2-devMarc Alexander2017-07-112-2/+2
|/ / / / / / / / / /
* | | | | | | | | | [prep-release-3.2.1] Add changelog since 3.2.0Marc Alexander2017-06-251-0/+108
| | | | | | | | | |
* | | | | | | | | | [prep-release-3.2.1] Add migration for 3.2.1-RC1Marc Alexander2017-06-251-0/+39
| | | | | | | | | |
* | | | | | | | | | [prep-release-3.2.1] Update version numbers for 3.2.1-RC1Marc Alexander2017-06-255-6/+6
| | | | | | | | | |
* | | | | | | | | | Merge branch 'prep-release-3.1.11' into prep-release-3.2.1Marc Alexander2017-06-252-0/+188
|\ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / |/| | | | | | / / / | | |_|_|_|_|/ / / | |/| | | | | | |
| * | | | | | | | [prep-release-3.1.11] Update changelogMarc Alexander2017-06-251-0/+1
| | | | | | | | |
| * | | | | | | | Merge branch '3.1.x' into prep-release-3.1.11Marc Alexander2017-06-252-9/+50
| |\ \ \ \ \ \ \ \
| * | | | | | | | | [prep-release-3.1.11] Update changelog for 3.1.11-RC1Marc Alexander2017-06-251-0/+144
| | | | | | | | | |
| * | | | | | | | | [prep-release-3.1.11] Add migration for update to 3.1.11-RC1Marc Alexander2017-06-251-0/+43
| | | | | | | | | |
| * | | | | | | | | [prep-release-3.1.11] Update version numbers to 3.1.11-RC1Marc Alexander2017-06-255-7/+7
| | | | | | | | | |
* | | | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-252-9/+50
|\ \ \ \ \ \ \ \ \ \ | | |/ / / / / / / / | |/| | | | | | | |
| * | | | | | | | | Merge pull request #4804 from rxu/ticket/15186Marc Alexander2017-06-252-9/+50
| |\ \ \ \ \ \ \ \ \ | | |/ / / / / / / / | |/| | | | | | | | | | | | | | | | | | [ticket/15186] Fully implement the force_delete_allowed feature
| | * | | | | | | | [ticket/15186] Fully implement the force_delete_allowed featurerxu2017-04-192-9/+50
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15186
* | | | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-251-17/+30
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / /
| * | | | | | | | | [ticket/14982] Always do a ban check except on contact me formDavid Colón2017-06-251-17/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-14982
* | | | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-251-8/+3
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / /
| * | | | | | | | | Merge pull request #4852 from javiexin/ticket/15248Marc Alexander2017-06-251-8/+3
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15248] Make use of event parameters of core.modify_posting_auth
| | * | | | | | | | | [ticket/15248] Make use of event parameters of core.modify_posting_authjaviexin2017-06-191-8/+3
| | | |_|_|_|_|_|_|/ | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes is_authed and error not behaving as expected by extensions. PHPBB-15248
* | | | | | | | | | [ticket/15251] Use dispatcher_interface in help managerAgris2017-06-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow TraceableEventDispatcher for webprofiler PHPBB3-15251
* | | | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-251-1/+15
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / /
| * | | | | | | | | Merge pull request #4855 from dsinn/ticket/15250Marc Alexander2017-06-251-1/+15
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15250] Add core event to MCP at the end of merge_posts
| | * | | | | | | | | [ticket/15250] Add core event to MCP at the end of merge_postsDaniel Sinn2017-06-201-1/+15
| | | |_|_|_|_|_|/ / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15250
* | | | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-252-4/+4
|\ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / /
| * | | | | | | | | Merge pull request #4850 from rxu/ticket/15246Marc Alexander2017-06-252-4/+4
| |\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15246] Allow use of Unix socket as memcache(d) host