aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB
Commit message (Collapse)AuthorAgeFilesLines
* [prep-release-3.2.1] Update versions for 3.2.1Marc Alexander2017-07-162-2/+2
|
* Merge pull request #39 from phpbb/ticket/security/210-rheaMarc Alexander2017-07-162-2/+15
|\ | | | | | | [ticket/security/210] Prevent using IP addresses or ports for remote avatar -- Rhea
| * Merge branch 'ticket/security/210' into ticket/security/210-rheaMarc Alexander2017-07-102-4/+4
| |\
| | * [ticket/security/210] Adjust regex and add tests for IPv6Marc Alexander2017-07-102-4/+4
| | | | | | | | | | | | SECURITY-210
| * | Merge branch 'ticket/security/210' into ticket/security/210-rheaMarc Alexander2017-07-092-2/+15
| |\ \ | | |/
| | * [ticket/security/210] Prevent using IP addresses or ports for remote avatarMarc Alexander2017-07-092-2/+15
| | | | | | | | | | | | SECURITY-210
* | | Merge pull request #35 from phpbb/ticket/security-203-rheaMarc Alexander2017-07-163-8/+125
|\ \ \ | | | | | | | | | | | | [ticket/security-203] Fully validate version check data in version helper -- Rhea
| * \ \ Merge branch 'ticket/security-203' into ticket/security-203-rheaMarc Alexander2016-12-283-9/+126
| |\ \ \
| | * | | [ticket/security-203] Allow more characters for branch namesMarc Alexander2016-12-271-2/+2
| | | | | | | | | | | | | | | | | | | | SECURITY-203
| | * | | [ticket/security-203] Do not add null values to versions infoMarc Alexander2016-12-271-7/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also stopped using reference for validate_versions() method argument. SECURTIY-203
| | * | | [ticket/security-203] Fully validate version check data in version helperMarc Alexander2016-12-263-5/+120
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will also take care of SECURITY-204 as it's the same underlying issue. Admins still need to ensure they don't visit malicious sites for URLs provided by extensions. SECURITY-203
* | | | | Merge pull request #30 from phpbb/ticket/security-181-rheaMarc Alexander2017-07-169-4/+162
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | [ticket/security-181] Harden protection of migrations files and other directories
| * \ \ \ \ Merge branch 'ticket/security-181' into ticket/security-181-rheaMarc Alexander2017-01-061-3/+3
| |\ \ \ \ \
| | * | | | | [ticket/security-181] Update wording in INSTALL.htmlMarc Alexander2017-01-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
| * | | | | | [ticket/security-181] Add .htaccess to 3.2.x migrationsMarc Alexander2016-11-131-0/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
| * | | | | | Merge branch 'ticket/security-181' into ticket/security-181-rheaMarc Alexander2016-11-138-4/+129
| |\ \ \ \ \ \ | | |/ / / / /
| | * | | | | [ticket/security-181] Update INSTALL.html to ask for more secure apache configMarc Alexander2016-11-132-3/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
| | * | | | | [ticket/security-181] Port .htaccess changes to other webserver typesMarc Alexander2016-11-133-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
| | * | | | | [ticket/security-181] Deny access to migrations foldersMarc Alexander2016-11-133-0/+99
| | | | | | | | | | | | | | | | | | | | | | | | | | | | SECURITY-181
* | | | | | | [prep-release-3.2.1] Add changelog since 3.2.0Marc Alexander2017-06-251-0/+108
| | | | | | |
* | | | | | | [prep-release-3.2.1] Add migration for 3.2.1-RC1Marc Alexander2017-06-251-0/+39
| | | | | | |
* | | | | | | [prep-release-3.2.1] Update version numbers for 3.2.1-RC1Marc Alexander2017-06-255-6/+6
| | | | | | |
* | | | | | | Merge branch 'prep-release-3.1.11' into prep-release-3.2.1Marc Alexander2017-06-252-0/+188
|\ \ \ \ \ \ \ | |_|_|_|_|/ / |/| | | | | |
| * | | | | | [prep-release-3.1.11] Update changelogMarc Alexander2017-06-251-0/+1
| | | | | | |
| * | | | | | Merge branch '3.1.x' into prep-release-3.1.11Marc Alexander2017-06-252-9/+50
| |\ \ \ \ \ \
| * | | | | | | [prep-release-3.1.11] Update changelog for 3.1.11-RC1Marc Alexander2017-06-251-0/+144
| | | | | | | |
| * | | | | | | [prep-release-3.1.11] Add migration for update to 3.1.11-RC1Marc Alexander2017-06-251-0/+43
| | | | | | | |
| * | | | | | | [prep-release-3.1.11] Update version numbers to 3.1.11-RC1Marc Alexander2017-06-255-7/+7
| | | | | | | |
* | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-252-9/+50
|\ \ \ \ \ \ \ \ | | |/ / / / / / | |/| | | | | |
| * | | | | | | Merge pull request #4804 from rxu/ticket/15186Marc Alexander2017-06-252-9/+50
| |\ \ \ \ \ \ \ | | |/ / / / / / | |/| | | | | | | | | | | | | | [ticket/15186] Fully implement the force_delete_allowed feature
| | * | | | | | [ticket/15186] Fully implement the force_delete_allowed featurerxu2017-04-192-9/+50
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15186
* | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-251-17/+30
|\ \ \ \ \ \ \ \ | |/ / / / / / /
| * | | | | | | [ticket/14982] Always do a ban check except on contact me formDavid Colón2017-06-251-17/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-14982
* | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-251-8/+3
|\ \ \ \ \ \ \ \ | |/ / / / / / /
| * | | | | | | Merge pull request #4852 from javiexin/ticket/15248Marc Alexander2017-06-251-8/+3
| |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15248] Make use of event parameters of core.modify_posting_auth
| | * | | | | | | [ticket/15248] Make use of event parameters of core.modify_posting_authjaviexin2017-06-191-8/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes is_authed and error not behaving as expected by extensions. PHPBB-15248
* | | | | | | | | [ticket/15251] Use dispatcher_interface in help managerAgris2017-06-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Allow TraceableEventDispatcher for webprofiler PHPBB3-15251
* | | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-251-1/+15
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / /
| * | | | | | | | Merge pull request #4855 from dsinn/ticket/15250Marc Alexander2017-06-251-1/+15
| |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15250] Add core event to MCP at the end of merge_posts
| | * | | | | | | | [ticket/15250] Add core event to MCP at the end of merge_postsDaniel Sinn2017-06-201-1/+15
| | | |_|_|_|_|_|/ | | |/| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15250
* | | | | | | | | Merge branch '3.1.x' into 3.2.xMarc Alexander2017-06-252-4/+4
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / /
| * | | | | | | | Merge pull request #4850 from rxu/ticket/15246Marc Alexander2017-06-252-4/+4
| |\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15246] Allow use of Unix socket as memcache(d) host
| | * | | | | | | | [ticket/15246] Allow use of Unix socket as memcache(d) hostrxu2017-06-172-4/+4
| | |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15246
| * | | | | | | | [ticket/15238] Add missing protected keywordrxu2017-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238
| * | | | | | | | [ticket/15238] More code cleanuprxu2017-06-181-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238
| * | | | | | | | [ticket/15238] Code cleanup, add docblocksrxu2017-06-181-11/+39
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238
| * | | | | | | | [ticket/15238] Add console command to fix forums/modules left/right IDsrxu2017-06-183-0/+116
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238
* | | | | | | | Merge pull request #4843 from rxu/ticket/15238Marc Alexander2017-06-253-0/+148
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15238] Add console command to fix forums/modules left/right IDs
| * | | | | | | | [ticket/15238] Add missing protected keywordrxu2017-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238
| * | | | | | | | [ticket/15238] More code cleanuprxu2017-06-181-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238