diff options
Diffstat (limited to 'phpBB')
| -rw-r--r-- | phpBB/docs/CHANGELOG.html | 6 | ||||
| -rw-r--r-- | phpBB/posting.php | 4 |
2 files changed, 8 insertions, 2 deletions
diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 9ec9144bb4..c762718e33 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -187,9 +187,11 @@ p a { <ul class="menu"> <li>[Fix] Re-allow searching within the memberlist</li> <li>[Fix] Force prune related values to integers during conversions</li> - <li>[Fix] Updater now detects successfully merged files having conflicts and user chose to merge with modifications [Bug #12685]</li> - <li>[Fix] Updater is no longer listing missing language entries and styles if these had been removed [Bug #12655]</li> + <li>[Fix] Updater now detects successfully merged files having conflicts and user chose to merge with modifications (Bug #12685)</li> + <li>[Fix] Updater is no longer listing missing language entries and styles if these had been removed (Bug #12655)</li> <li>[Fix] Correct approval of posts in global announcements (Bug #12699)</li> + <li>[Sec] Do not allow setup spiders/robots to post, even if permissions are given. We see no reason why this should be possible. (Thanks to Frank Rizzo for convincing us regarding this)</li> + </ul> </div> diff --git a/phpBB/posting.php b/phpBB/posting.php index 675b390672..f3e6c008c4 100644 --- a/phpBB/posting.php +++ b/phpBB/posting.php @@ -164,6 +164,10 @@ if ($post_data['forum_password']) } // Check permissions +if ($user->data['is_bot']) +{ + redirect(append_sid("{$phpbb_root_path}index.$phpEx")); +} // Is the user able to read within this forum? if (!$auth->acl_get('f_read', $forum_id)) |