Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [ticket/security/211] Only run make_clickable() on URL type profile fields | Marc Alexander | 2017-07-23 | 2 | -1/+15 |
| | | | | SECURITY-211 | ||||
* | [ticket/security/211] Make sure website URL only uses http & https schemes | Marc Alexander | 2017-07-22 | 3 | -2/+7 |
| | | | | SECURITY-211 | ||||
* | Merge branch 'prep-release-3.1.11' into 3.1.x | Marc Alexander | 2017-07-16 | 16 | -12/+330 |
|\ | |||||
| * | [prep-release-3.1.11] Add migration for 3.1.11 | Marc Alexander | 2017-07-16 | 1 | -0/+36 |
| | | |||||
| * | [prep-release-3.1.11] Update version numbers to 3.1.11 | Marc Alexander | 2017-07-16 | 2 | -2/+2 |
| | | |||||
| * | Merge pull request #38 from phpbb/ticket/security/210 | Marc Alexander | 2017-07-16 | 2 | -2/+15 |
| |\ | | | | | | | | | | [ticket/security/210] Prevent using IP addresses or ports for remote avatar | ||||
| | * | [ticket/security/210] Adjust regex and add tests for IPv6 | Marc Alexander | 2017-07-10 | 2 | -4/+4 |
| | | | | | | | | | | | | SECURITY-210 | ||||
| | * | [ticket/security/210] Prevent using IP addresses or ports for remote avatar | Marc Alexander | 2017-07-09 | 2 | -2/+15 |
| | | | | | | | | | | | | SECURITY-210 | ||||
| * | | Merge pull request #32 from phpbb/ticket/security-203 | Marc Alexander | 2017-07-16 | 3 | -5/+121 |
| |\ \ | | | | | | | | | | | | | [ticket/security-203] Fully validate version check data in version helper | ||||
| | * | | [ticket/security-203] Allow more characters for branch names | Marc Alexander | 2016-12-27 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | SECURITY-203 | ||||
| | * | | [ticket/security-203] Do not add null values to versions info | Marc Alexander | 2016-12-27 | 1 | -7/+8 |
| | | | | | | | | | | | | | | | | | | | | | | | | Also stopped using reference for validate_versions() method argument. SECURTIY-203 | ||||
| | * | | [ticket/security-203] Fully validate version check data in version helper | Marc Alexander | 2016-12-26 | 3 | -5/+120 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will also take care of SECURITY-204 as it's the same underlying issue. Admins still need to ensure they don't visit malicious sites for URLs provided by extensions. SECURITY-203 | ||||
| * | | | Merge pull request #29 from phpbb/ticket/security-181 | Marc Alexander | 2017-07-16 | 8 | -5/+130 |
| |\ \ \ | | | | | | | | | | | | | | | | [ticket/security-181] Harden protection of migrations files and other directories | ||||
| | * | | | [ticket/security-181] Update wording in INSTALL.html | Marc Alexander | 2017-01-06 | 1 | -3/+3 |
| | | | | | | | | | | | | | | | | | | | | SECURITY-181 | ||||
| | * | | | [ticket/security-181] Update INSTALL.html to ask for more secure apache config | Marc Alexander | 2016-11-13 | 2 | -3/+26 |
| | | | | | | | | | | | | | | | | | | | | SECURITY-181 | ||||
| | * | | | [ticket/security-181] Port .htaccess changes to other webserver types | Marc Alexander | 2016-11-13 | 3 | -2/+5 |
| | | | | | | | | | | | | | | | | | | | | SECURITY-181 | ||||
| | * | | | [ticket/security-181] Deny access to migrations folders | Marc Alexander | 2016-11-13 | 3 | -0/+99 |
| | | | | | | | | | | | | | | | | | | | | SECURITY-181 | ||||
| * | | | | Merge pull request #37 from phpbb/ticket/security/208 | Marc Alexander | 2017-07-16 | 1 | -0/+7 |
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | [ticket/security/208] Add form key to password reset form | ||||
| | * | | | | [ticket/security/208] Add form key to password reset form | Marc Alexander | 2017-06-18 | 1 | -0/+7 |
| | | |_|/ | | |/| | | | | | | | | | | | | SECURITY-208 | ||||
| * | | | | Merge pull request #36 from phpbb/ticket/security/124 | Marc Alexander | 2017-07-16 | 1 | -0/+21 |
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | [ticket/security/124] Filter out disallowed search query items | ||||
| | * | | | | [ticket/security/124] Filter out disallowed search query items | Marc Alexander | 2017-06-18 | 1 | -0/+21 |
| | |/ / / | | | | | | | | | | | | | | | | SECURITY-124 | ||||
* | | | | | [3.1.x] Update version number to 3.1.12-dev | Marc Alexander | 2017-07-11 | 2 | -2/+2 |
|/ / / / | |||||
* | | | | [prep-release-3.1.11] Update changelog | Marc Alexander | 2017-06-25 | 1 | -0/+1 |
| | | | | |||||
* | | | | Merge branch '3.1.x' into prep-release-3.1.11 | Marc Alexander | 2017-06-25 | 2 | -9/+50 |
|\ \ \ \ | |||||
| * \ \ \ | Merge pull request #4804 from rxu/ticket/15186 | Marc Alexander | 2017-06-25 | 2 | -9/+50 |
| |\ \ \ \ | | | | | | | | | | | | | | | | | | | [ticket/15186] Fully implement the force_delete_allowed feature | ||||
| | * | | | | [ticket/15186] Fully implement the force_delete_allowed feature | rxu | 2017-04-19 | 2 | -9/+50 |
| | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15186 | ||||
* | | | | | | [prep-release-3.1.11] Update changelog for 3.1.11-RC1 | Marc Alexander | 2017-06-25 | 1 | -0/+144 |
| | | | | | | |||||
* | | | | | | [prep-release-3.1.11] Add migration for update to 3.1.11-RC1 | Marc Alexander | 2017-06-25 | 1 | -0/+43 |
| | | | | | | |||||
* | | | | | | [prep-release-3.1.11] Update version numbers to 3.1.11-RC1 | Marc Alexander | 2017-06-25 | 5 | -7/+7 |
|/ / / / / | |||||
* | | | | | [ticket/14982] Always do a ban check except on contact me form | David Colón | 2017-06-25 | 1 | -17/+30 |
| | | | | | | | | | | | | | | | | | | | | PHPBB3-14982 | ||||
* | | | | | Merge pull request #4852 from javiexin/ticket/15248 | Marc Alexander | 2017-06-25 | 1 | -8/+3 |
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | [ticket/15248] Make use of event parameters of core.modify_posting_auth | ||||
| * | | | | | [ticket/15248] Make use of event parameters of core.modify_posting_auth | javiexin | 2017-06-19 | 1 | -8/+3 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes is_authed and error not behaving as expected by extensions. PHPBB-15248 | ||||
* | | | | | | Merge pull request #4855 from dsinn/ticket/15250 | Marc Alexander | 2017-06-25 | 1 | -1/+15 |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | [ticket/15250] Add core event to MCP at the end of merge_posts | ||||
| * | | | | | | [ticket/15250] Add core event to MCP at the end of merge_posts | Daniel Sinn | 2017-06-20 | 1 | -1/+15 |
| | |_|/ / / | |/| | | | | | | | | | | | | | | | | PHPBB3-15250 | ||||
* | | | | | | Merge pull request #4850 from rxu/ticket/15246 | Marc Alexander | 2017-06-25 | 2 | -4/+4 |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | [ticket/15246] Allow use of Unix socket as memcache(d) host | ||||
| * | | | | | | [ticket/15246] Allow use of Unix socket as memcache(d) host | rxu | 2017-06-17 | 2 | -4/+4 |
| |/ / / / / | | | | | | | | | | | | | | | | | | | PHPBB3-15246 | ||||
* | | | | | | [ticket/15238] Add missing protected keyword | rxu | 2017-06-20 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238 | ||||
* | | | | | | [ticket/15238] More code cleanup | rxu | 2017-06-18 | 1 | -1/+2 |
| | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238 | ||||
* | | | | | | [ticket/15238] Code cleanup, add docblocks | rxu | 2017-06-18 | 1 | -11/+39 |
| | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238 | ||||
* | | | | | | [ticket/15238] Add console command to fix forums/modules left/right IDs | rxu | 2017-06-18 | 3 | -0/+116 |
|/ / / / / | | | | | | | | | | | | | | | | PHPBB3-15238 | ||||
* | | | | | Merge pull request #4845 from javiexin/ticket/15241 | Marc Alexander | 2017-06-16 | 2 | -0/+8 |
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | [ticket/15241] Add ACP template event acp_profile_contact_last | ||||
| * | | | | | [ticket/15241] Add ACP template event acp_profile_contact_last | javiexin | 2017-06-05 | 2 | -0/+8 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Event to place code in Profile Field configuration screen, as additional information for Contact Profile Fields. PHPBB-15241 | ||||
* | | | | | | Merge pull request #4797 from marc1706/ticket/15178 | Marc Alexander | 2017-06-11 | 2 | -68/+82 |
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | [ticket/15178] Update dependencies for 3.1.x | ||||
| * | | | | | | [ticket/15178] Run update again | Marc Alexander | 2017-05-31 | 1 | -13/+15 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15178 | ||||
| * | | | | | | [ticket/15178] Update dependencies for 3.1.x | Marc Alexander | 2017-04-17 | 2 | -64/+76 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15178 | ||||
* | | | | | | | Merge pull request #4825 from marc1706/ticket/15219 | Tristan Darricau | 2017-06-06 | 7 | -0/+315 |
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15219] Update hashes to bcrypt with cron * github.com:phpbb/phpbb: [ticket/15219] Add console command for updating hashes to bcrypt [ticket/15219] Add missing space [ticket/15219] Update hashes to bcrypt with cron | ||||
| * | | | | | | | [ticket/15219] Add console command for updating hashes to bcrypt | Marc Alexander | 2017-06-03 | 3 | -0/+131 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15219 | ||||
| * | | | | | | | [ticket/15219] Add missing space | Marc Alexander | 2017-05-05 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15219 | ||||
| * | | | | | | | [ticket/15219] Update hashes to bcrypt with cron | Marc Alexander | 2017-05-05 | 4 | -0/+184 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15219 | ||||
* | | | | | | | | Merge pull request #4840 from rmcgirr83/ticket_15237 | Marc Alexander | 2017-06-05 | 5 | -5/+20 |
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15237] Fix unguarded includes to functions_user |