aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB
Commit message (Collapse)AuthorAgeFilesLines
* [ticket/security/211] Only run make_clickable() on URL type profile fieldsMarc Alexander2017-07-232-1/+15
| | | | SECURITY-211
* [ticket/security/211] Make sure website URL only uses http & https schemesMarc Alexander2017-07-223-2/+7
| | | | SECURITY-211
* Merge branch 'prep-release-3.1.11' into 3.1.xMarc Alexander2017-07-1616-12/+330
|\
| * [prep-release-3.1.11] Add migration for 3.1.11Marc Alexander2017-07-161-0/+36
| |
| * [prep-release-3.1.11] Update version numbers to 3.1.11Marc Alexander2017-07-162-2/+2
| |
| * Merge pull request #38 from phpbb/ticket/security/210Marc Alexander2017-07-162-2/+15
| |\ | | | | | | | | | [ticket/security/210] Prevent using IP addresses or ports for remote avatar
| | * [ticket/security/210] Adjust regex and add tests for IPv6Marc Alexander2017-07-102-4/+4
| | | | | | | | | | | | SECURITY-210
| | * [ticket/security/210] Prevent using IP addresses or ports for remote avatarMarc Alexander2017-07-092-2/+15
| | | | | | | | | | | | SECURITY-210
| * | Merge pull request #32 from phpbb/ticket/security-203Marc Alexander2017-07-163-5/+121
| |\ \ | | | | | | | | | | | | [ticket/security-203] Fully validate version check data in version helper
| | * | [ticket/security-203] Allow more characters for branch namesMarc Alexander2016-12-271-2/+2
| | | | | | | | | | | | | | | | SECURITY-203
| | * | [ticket/security-203] Do not add null values to versions infoMarc Alexander2016-12-271-7/+8
| | | | | | | | | | | | | | | | | | | | | | | | Also stopped using reference for validate_versions() method argument. SECURTIY-203
| | * | [ticket/security-203] Fully validate version check data in version helperMarc Alexander2016-12-263-5/+120
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will also take care of SECURITY-204 as it's the same underlying issue. Admins still need to ensure they don't visit malicious sites for URLs provided by extensions. SECURITY-203
| * | | Merge pull request #29 from phpbb/ticket/security-181Marc Alexander2017-07-168-5/+130
| |\ \ \ | | | | | | | | | | | | | | | [ticket/security-181] Harden protection of migrations files and other directories
| | * | | [ticket/security-181] Update wording in INSTALL.htmlMarc Alexander2017-01-061-3/+3
| | | | | | | | | | | | | | | | | | | | SECURITY-181
| | * | | [ticket/security-181] Update INSTALL.html to ask for more secure apache configMarc Alexander2016-11-132-3/+26
| | | | | | | | | | | | | | | | | | | | SECURITY-181
| | * | | [ticket/security-181] Port .htaccess changes to other webserver typesMarc Alexander2016-11-133-2/+5
| | | | | | | | | | | | | | | | | | | | SECURITY-181
| | * | | [ticket/security-181] Deny access to migrations foldersMarc Alexander2016-11-133-0/+99
| | | | | | | | | | | | | | | | | | | | SECURITY-181
| * | | | Merge pull request #37 from phpbb/ticket/security/208Marc Alexander2017-07-161-0/+7
| |\ \ \ \ | | | | | | | | | | | | | | | | | | [ticket/security/208] Add form key to password reset form
| | * | | | [ticket/security/208] Add form key to password reset formMarc Alexander2017-06-181-0/+7
| | | |_|/ | | |/| | | | | | | | | | | | SECURITY-208
| * | | | Merge pull request #36 from phpbb/ticket/security/124Marc Alexander2017-07-161-0/+21
| |\ \ \ \ | | | | | | | | | | | | | | | | | | [ticket/security/124] Filter out disallowed search query items
| | * | | | [ticket/security/124] Filter out disallowed search query itemsMarc Alexander2017-06-181-0/+21
| | |/ / / | | | | | | | | | | | | | | | SECURITY-124
* | | | | [3.1.x] Update version number to 3.1.12-devMarc Alexander2017-07-112-2/+2
|/ / / /
* | | | [prep-release-3.1.11] Update changelogMarc Alexander2017-06-251-0/+1
| | | |
* | | | Merge branch '3.1.x' into prep-release-3.1.11Marc Alexander2017-06-252-9/+50
|\ \ \ \
| * \ \ \ Merge pull request #4804 from rxu/ticket/15186Marc Alexander2017-06-252-9/+50
| |\ \ \ \ | | | | | | | | | | | | | | | | | | [ticket/15186] Fully implement the force_delete_allowed feature
| | * | | | [ticket/15186] Fully implement the force_delete_allowed featurerxu2017-04-192-9/+50
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15186
* | | | | | [prep-release-3.1.11] Update changelog for 3.1.11-RC1Marc Alexander2017-06-251-0/+144
| | | | | |
* | | | | | [prep-release-3.1.11] Add migration for update to 3.1.11-RC1Marc Alexander2017-06-251-0/+43
| | | | | |
* | | | | | [prep-release-3.1.11] Update version numbers to 3.1.11-RC1Marc Alexander2017-06-255-7/+7
|/ / / / /
* | | | | [ticket/14982] Always do a ban check except on contact me formDavid Colón2017-06-251-17/+30
| | | | | | | | | | | | | | | | | | | | PHPBB3-14982
* | | | | Merge pull request #4852 from javiexin/ticket/15248Marc Alexander2017-06-251-8/+3
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | [ticket/15248] Make use of event parameters of core.modify_posting_auth
| * | | | | [ticket/15248] Make use of event parameters of core.modify_posting_authjaviexin2017-06-191-8/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes is_authed and error not behaving as expected by extensions. PHPBB-15248
* | | | | | Merge pull request #4855 from dsinn/ticket/15250Marc Alexander2017-06-251-1/+15
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | [ticket/15250] Add core event to MCP at the end of merge_posts
| * | | | | | [ticket/15250] Add core event to MCP at the end of merge_postsDaniel Sinn2017-06-201-1/+15
| | |_|/ / / | |/| | | | | | | | | | | | | | | | PHPBB3-15250
* | | | | | Merge pull request #4850 from rxu/ticket/15246Marc Alexander2017-06-252-4/+4
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | [ticket/15246] Allow use of Unix socket as memcache(d) host
| * | | | | | [ticket/15246] Allow use of Unix socket as memcache(d) hostrxu2017-06-172-4/+4
| |/ / / / / | | | | | | | | | | | | | | | | | | PHPBB3-15246
* | | | | | [ticket/15238] Add missing protected keywordrxu2017-06-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238
* | | | | | [ticket/15238] More code cleanuprxu2017-06-181-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238
* | | | | | [ticket/15238] Code cleanup, add docblocksrxu2017-06-181-11/+39
| | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15238
* | | | | | [ticket/15238] Add console command to fix forums/modules left/right IDsrxu2017-06-183-0/+116
|/ / / / / | | | | | | | | | | | | | | | PHPBB3-15238
* | | | | Merge pull request #4845 from javiexin/ticket/15241Marc Alexander2017-06-162-0/+8
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | [ticket/15241] Add ACP template event acp_profile_contact_last
| * | | | | [ticket/15241] Add ACP template event acp_profile_contact_lastjaviexin2017-06-052-0/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Event to place code in Profile Field configuration screen, as additional information for Contact Profile Fields. PHPBB-15241
* | | | | | Merge pull request #4797 from marc1706/ticket/15178Marc Alexander2017-06-112-68/+82
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | [ticket/15178] Update dependencies for 3.1.x
| * | | | | | [ticket/15178] Run update againMarc Alexander2017-05-311-13/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15178
| * | | | | | [ticket/15178] Update dependencies for 3.1.xMarc Alexander2017-04-172-64/+76
| | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15178
* | | | | | | Merge pull request #4825 from marc1706/ticket/15219Tristan Darricau2017-06-067-0/+315
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15219] Update hashes to bcrypt with cron * github.com:phpbb/phpbb: [ticket/15219] Add console command for updating hashes to bcrypt [ticket/15219] Add missing space [ticket/15219] Update hashes to bcrypt with cron
| * | | | | | | [ticket/15219] Add console command for updating hashes to bcryptMarc Alexander2017-06-033-0/+131
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15219
| * | | | | | | [ticket/15219] Add missing spaceMarc Alexander2017-05-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15219
| * | | | | | | [ticket/15219] Update hashes to bcrypt with cronMarc Alexander2017-05-054-0/+184
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PHPBB3-15219
* | | | | | | | Merge pull request #4840 from rmcgirr83/ticket_15237Marc Alexander2017-06-055-5/+20
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | [ticket/15237] Fix unguarded includes to functions_user