From d7fbabba471c398962e40f5d127f0c6d39943d19 Mon Sep 17 00:00:00 2001 From: Meik Sievertsen Date: Sat, 13 Oct 2007 11:47:54 +0000 Subject: RC6 preparation git-svn-id: file:///svn/phpbb/trunk@8173 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/docs/CHANGELOG.html | 17 +++++++++++++++++ phpBB/install/convertors/convert_phpbb20.php | 2 +- phpBB/install/schemas/schema_data.sql | 2 +- 3 files changed, 19 insertions(+), 2 deletions(-) diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 3168ead82c..1d704796c3 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -118,6 +118,23 @@
  • [Fix] Correct quote parsing if opening bracket before opening quote (Bug #14667)
  • [Fix] Clean post message for checking length to prevent posting empty messages
  • [Fix] Display jumpbox if needed for functionality (Bug #14702)
    • +
  • [Sec] Fixing possible XSS through compromised WHOIS server (#i63, #i64)
    • +
  • [Sec] Missing access control on whois in viewonline.php (#i51)
    • +
  • [Sec] Encoding some variables within user::page array correctly (to cope with browser not doing it correctly) to prevent XSS through functions re-using them (#i61)
    • +
  • [Sec] Fixed XSS through memberlist search feature (#i62)
    • +
  • [Sec] Fixed XSS through colour swatch (#i65)
    • +
  • [Sec] Fixed insecure attachment deletion (#i53)
    • +
  • [Sec] Only allow whitelisted protocols in meta_redirect/redirect (#i66)
    • +
  • [Sec] Check file names to be written in language management panel (#i52)
    • +
  • [Sec] Deregister globals if ini_get has been disabled (#i112)
    • +
  • [Sec] Added form tokens to most forms to enforce a lighter variant of CSRF protection (#i91 - #i96)
    • +
  • [Sec] Use new password hash method for forum passwords (#i43)
    • +
  • [Sec] Changed download file location to prevent flash crossdomain policies taking effect (#i8)
    • +
  • [Sec] Do not allow autocompletion for password on admin re-authentication (#i41)
    • +
  • [Sec] Made sure users are not completely locked out if they have a GLOBALS cookie (#i101)
    • +
  • [Sec] Use the secure hash to generate BBCODE_UIDs (#i71)
    • +
  • [Sec] Increase the length of BBCODE_UIDs (#i72)
    • +
  • [Sec] New password hashing mechanism for storing passwords (#i42)

    • 1.ii. Changes since 3.0.RC4

    diff --git a/phpBB/install/convertors/convert_phpbb20.php b/phpBB/install/convertors/convert_phpbb20.php index 9992b94aa7..0c060a83dd 100644 --- a/phpBB/install/convertors/convert_phpbb20.php +++ b/phpBB/install/convertors/convert_phpbb20.php @@ -31,7 +31,7 @@ unset($dbpasswd); */ $convertor_data = array( 'forum_name' => 'phpBB 2.0.x', - 'version' => '1.0.RC5', + 'version' => '1.0.RC6', 'phpbb_version' => '3.0.0', 'author' => 'phpBB Group', 'dbms' => $dbms, diff --git a/phpBB/install/schemas/schema_data.sql b/phpBB/install/schemas/schema_data.sql index 96e91f9883..64f947783c 100644 --- a/phpBB/install/schemas/schema_data.sql +++ b/phpBB/install/schemas/schema_data.sql @@ -213,7 +213,7 @@ INSERT INTO phpbb_config (config_name, config_value) VALUES ('topics_per_page', INSERT INTO phpbb_config (config_name, config_value) VALUES ('tpl_allow_php', '0'); INSERT INTO phpbb_config (config_name, config_value) VALUES ('upload_icons_path', 'images/upload_icons'); INSERT INTO phpbb_config (config_name, config_value) VALUES ('upload_path', 'files'); -INSERT INTO phpbb_config (config_name, config_value) VALUES ('version', '3.0.RC6-dev'); +INSERT INTO phpbb_config (config_name, config_value) VALUES ('version', '3.0.RC6'); INSERT INTO phpbb_config (config_name, config_value) VALUES ('warnings_expire_days', '90'); INSERT INTO phpbb_config (config_name, config_value) VALUES ('warnings_gc', '14400'); -- cgit v1.2.1