phpBB3 • Changelog

-- cgit v1.2.1 From b017f54ac9c923e74325f8cca96b11c6b684f115 Mon Sep 17 00:00:00 2001 From: Ingo Migliarina Date: Wed, 1 Dec 2010 18:33:53 +0100 Subject: [ticket/9921] Adding sample configuration file for the lighttpd webserver. PHPBB3-9921 --- phpBB/docs/lighttpd.sample.conf | 60 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 60 insertions(+) create mode 100644 phpBB/docs/lighttpd.sample.conf (limited to 'phpBB/docs') diff --git a/phpBB/docs/lighttpd.sample.conf b/phpBB/docs/lighttpd.sample.conf new file mode 100644 index 0000000000..5873d1c945 --- /dev/null +++ b/phpBB/docs/lighttpd.sample.conf @@ -0,0 +1,60 @@ +# Sample lighttpd configuration file for phpBB. +# Global settings have been removed, copy them +# from your system's lighttpd.conf. +# Tested with lighttpd 1.4.26 + +# Load moules +server.modules += ( + "mod_access", + "mod_fastcgi", + "mod_accesslog" +) + +# If you have domains with and without www prefix, +# redirect one to the other. +$HTTP["host"] =~ "^(myforums\.com)$" { + url.redirect = ( + ".*" => "http://www.%1$0" + ) +} + +$HTTP["host"] == "www.myforums.com" { + server.name = "www.myforums.com" + server.document-root = "/path/to/phpbb" + server.dir-listing = "disable" + + index-file.names = ( "index.php", "index.htm", "index.html" ) + accesslog.filename = "/var/log/lighttpd/access-www.myforums.com.log" + + # Deny access to internal phpbb files. + $HTTP["url"] =~ "^/(config\.php|common\.php|includes|cache|files|store|images/avatars/upload)" { + url.access-deny = ( "" ) + } + + # Deny access to version control system directories. + $HTTP["url"] =~ "/\.svn|/\.git" { + url.access-deny = ( "" ) + } + + # Deny access to apache configuration files. + $HTTP["url"] =~ "/\.htaccess|/\.htpasswd|/\.htgroups" { + url.access-deny = ( "" ) + } + + fastcgi.server = ( ".php" => + (( + "bin-path" => "/usr/bin/php-cgi", + "socket" => "/tmp/php.socket", + "max-procs" => 4, + "idle-timeout" => 30, + "bin-environment" => ( + "PHP_FCGI_CHILDREN" => "10", + "PHP_FCGI_MAX_REQUESTS" => "10000" + ), + "bin-copy-environment" => ( + "PATH", "SHELL", "USER" + ), + "broken-scriptfilename" => "enable" + )) + ) +} -- cgit v1.2.1 From cdeffdd59f79310e68d8931e54877359ba58c8e1 Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Wed, 5 Jan 2011 00:40:07 +0100 Subject: [ticket/9589] nginx.conf.sample -> nginx.sample.conf PHPBB3-9589 --- phpBB/docs/nginx.conf.sample | 70 -------------------------------------------- phpBB/docs/nginx.sample.conf | 70 ++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 70 insertions(+), 70 deletions(-) delete mode 100644 phpBB/docs/nginx.conf.sample create mode 100644 phpBB/docs/nginx.sample.conf (limited to 'phpBB/docs') diff --git a/phpBB/docs/nginx.conf.sample b/phpBB/docs/nginx.conf.sample deleted file mode 100644 index a22a126ff4..0000000000 --- a/phpBB/docs/nginx.conf.sample +++ /dev/null @@ -1,70 +0,0 @@ -# Sample nginx configuration file for phpBB. -# Global settings have been removed, copy them -# from your system's nginx.conf. -# Tested with nginx 0.8.35. - -http { - # Compression - requires gzip and gzip static modules. - gzip on; - gzip_static on; - gzip_vary on; - gzip_http_version 1.1; - gzip_min_length 700; - gzip_comp_level 6; - gzip_disable "MSIE [1-6]\."; - - # Catch-all server for requests to invalid hosts. - # Also catches vulnerability scanners probing IP addresses. - # Should be first. - server { - listen 80; - server_name bogus; - return 444; - root /var/empty; - } - - # If you have domains with and without www prefix, - # redirect one to the other. - server { - listen 80; - server_name myforums.com; - rewrite ^(.*)$ http://www.myforums.com$1 permanent; - } - - # The actual board domain. - server { - listen 80; - server_name www.myforums.com; - - root /path/to/phpbb; - - location / { - # phpbb uses index.htm - index index.php index.html index.htm; - } - - # Deny access to internal phpbb files. - location ~ /(config\.php|common\.php|includes|cache|files|store|images/avatars/upload) { - deny all; - } - - # Pass the php scripts to fastcgi server specified in upstream declaration. - location ~ \.php$ { - fastcgi_pass php; - # Necessary for php. - fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; - # Unmodified fastcgi_params from nginx distribution. - include fastcgi_params; - } - - # Deny access to version control system directories. - location ~ /\.svn|/\.git { - deny all; - } - } - - # If running php as fastcgi, specify php upstream. - upstream php { - server unix:/tmp/php.sock; - } -} diff --git a/phpBB/docs/nginx.sample.conf b/phpBB/docs/nginx.sample.conf new file mode 100644 index 0000000000..a22a126ff4 --- /dev/null +++ b/phpBB/docs/nginx.sample.conf @@ -0,0 +1,70 @@ +# Sample nginx configuration file for phpBB. +# Global settings have been removed, copy them +# from your system's nginx.conf. +# Tested with nginx 0.8.35. + +http { + # Compression - requires gzip and gzip static modules. + gzip on; + gzip_static on; + gzip_vary on; + gzip_http_version 1.1; + gzip_min_length 700; + gzip_comp_level 6; + gzip_disable "MSIE [1-6]\."; + + # Catch-all server for requests to invalid hosts. + # Also catches vulnerability scanners probing IP addresses. + # Should be first. + server { + listen 80; + server_name bogus; + return 444; + root /var/empty; + } + + # If you have domains with and without www prefix, + # redirect one to the other. + server { + listen 80; + server_name myforums.com; + rewrite ^(.*)$ http://www.myforums.com$1 permanent; + } + + # The actual board domain. + server { + listen 80; + server_name www.myforums.com; + + root /path/to/phpbb; + + location / { + # phpbb uses index.htm + index index.php index.html index.htm; + } + + # Deny access to internal phpbb files. + location ~ /(config\.php|common\.php|includes|cache|files|store|images/avatars/upload) { + deny all; + } + + # Pass the php scripts to fastcgi server specified in upstream declaration. + location ~ \.php$ { + fastcgi_pass php; + # Necessary for php. + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + # Unmodified fastcgi_params from nginx distribution. + include fastcgi_params; + } + + # Deny access to version control system directories. + location ~ /\.svn|/\.git { + deny all; + } + } + + # If running php as fastcgi, specify php upstream. + upstream php { + server unix:/tmp/php.sock; + } +} -- cgit v1.2.1 From 180e97abdccf0ebb0075b46f1edfdc8a48e92676 Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Sun, 16 Jan 2011 17:51:12 +0100 Subject: [ticket/9859] Remove the year from the copyright meta tag in docs/*.html PHPBB3-9859 --- phpBB/docs/CHANGELOG.html | 2 +- phpBB/docs/FAQ.html | 2 +- phpBB/docs/INSTALL.html | 2 +- phpBB/docs/README.html | 2 +- phpBB/docs/auth_api.html | 2 +- phpBB/docs/coding-guidelines.html | 2 +- phpBB/docs/hook_system.html | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) (limited to 'phpBB/docs') diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 66915b18fa..811c7201d5 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -8,7 +8,7 @@ - + phpBB3 • Changelog diff --git a/phpBB/docs/FAQ.html b/phpBB/docs/FAQ.html index f91d4bc223..f9a1888ad2 100644 --- a/phpBB/docs/FAQ.html +++ b/phpBB/docs/FAQ.html @@ -8,7 +8,7 @@ - + phpBB3 • FAQ diff --git a/phpBB/docs/INSTALL.html b/phpBB/docs/INSTALL.html index 5857163759..f33e7346a8 100644 --- a/phpBB/docs/INSTALL.html +++ b/phpBB/docs/INSTALL.html @@ -8,7 +8,7 @@ - + phpBB3 • Install diff --git a/phpBB/docs/README.html b/phpBB/docs/README.html index bb88fdc01f..c9197292ac 100644 --- a/phpBB/docs/README.html +++ b/phpBB/docs/README.html @@ -8,7 +8,7 @@ - + phpBB3 • Readme diff --git a/phpBB/docs/auth_api.html b/phpBB/docs/auth_api.html index 8973582bdb..b19cd52222 100644 --- a/phpBB/docs/auth_api.html +++ b/phpBB/docs/auth_api.html @@ -8,7 +8,7 @@ - + phpBB3 • Auth API diff --git a/phpBB/docs/coding-guidelines.html b/phpBB/docs/coding-guidelines.html index 5a73554741..99c192180c 100644 --- a/phpBB/docs/coding-guidelines.html +++ b/phpBB/docs/coding-guidelines.html @@ -8,7 +8,7 @@ - + phpBB3 • Coding Guidelines diff --git a/phpBB/docs/hook_system.html b/phpBB/docs/hook_system.html index 34055c4661..fd4096c9fc 100644 --- a/phpBB/docs/hook_system.html +++ b/phpBB/docs/hook_system.html @@ -8,7 +8,7 @@ - + phpBB3 • Hook System -- cgit v1.2.1 From 60eff4e59a529e389c03c54085530dce5fbd99db Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Sun, 16 Jan 2011 17:52:36 +0100 Subject: [ticket/9859] Remove the years from the copyright statements in docs files. PHPBB3-9859 --- phpBB/docs/AUTHORS | 2 +- phpBB/docs/CHANGELOG.html | 2 +- phpBB/docs/FAQ.html | 2 +- phpBB/docs/INSTALL.html | 2 +- phpBB/docs/README.html | 2 +- phpBB/docs/auth_api.html | 2 +- phpBB/docs/coding-guidelines.html | 2 +- phpBB/docs/hook_system.html | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) (limited to 'phpBB/docs') diff --git a/phpBB/docs/AUTHORS b/phpBB/docs/AUTHORS index b3166313c3..1dfb80141c 100644 --- a/phpBB/docs/AUTHORS +++ b/phpBB/docs/AUTHORS @@ -1,6 +1,6 @@ /** * -* phpBB3 © Copyright 2000, 2002, 2005, 2007 phpBB Group +* phpBB3 © Copyright phpBB Group * http://www.phpbb.com * * This program is free software: you can redistribute it and/or modify diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 811c7201d5..253df4ac56 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -1676,7 +1676,7 @@

This application is opensource software released under the GPL. Please see source code and the docs directory for more details. This package and its contents are Copyright (c) 2000, 2002, 2005, 2007 phpBB Group, All Rights Reserved.

This application is opensource software released under the GPL. Please see source code and the docs directory for more details. This package and its contents are Copyright (c) phpBB Group, All Rights Reserved.

diff --git a/phpBB/docs/FAQ.html b/phpBB/docs/FAQ.html index f9a1888ad2..83d7a342e0 100644 --- a/phpBB/docs/FAQ.html +++ b/phpBB/docs/FAQ.html @@ -328,7 +328,7 @@ I want to sue you because i think you host an illegal board!

diff --git a/phpBB/docs/INSTALL.html b/phpBB/docs/INSTALL.html index f33e7346a8..4af185beb3 100644 --- a/phpBB/docs/INSTALL.html +++ b/phpBB/docs/INSTALL.html @@ -424,7 +424,7 @@

diff --git a/phpBB/docs/README.html b/phpBB/docs/README.html index c9197292ac..7a0a42b34f 100644 --- a/phpBB/docs/README.html +++ b/phpBB/docs/README.html @@ -339,7 +339,7 @@

diff --git a/phpBB/docs/auth_api.html b/phpBB/docs/auth_api.html index b19cd52222..88618fa640 100644 --- a/phpBB/docs/auth_api.html +++ b/phpBB/docs/auth_api.html @@ -275,7 +275,7 @@ $auth_admin = new auth_admin();

diff --git a/phpBB/docs/coding-guidelines.html b/phpBB/docs/coding-guidelines.html index 99c192180c..7434fa4870 100644 --- a/phpBB/docs/coding-guidelines.html +++ b/phpBB/docs/coding-guidelines.html @@ -2369,7 +2369,7 @@ if (utf8_case_fold_nfc($string1) == utf8_case_fold_nfc($string2))

diff --git a/phpBB/docs/hook_system.html b/phpBB/docs/hook_system.html index fd4096c9fc..a5fad0d530 100644 --- a/phpBB/docs/hook_system.html +++ b/phpBB/docs/hook_system.html @@ -867,7 +867,7 @@ function phpbb_hook_register(&$hook)

-- cgit v1.2.1 From a970219d61204b2e8e5d937d448ac25c44ce5fd0 Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Mon, 24 Jan 2011 17:35:10 +0100 Subject: [ticket/10007] Add directive 'internal' to blocked folders in nginx config. The "deny" and "access" directives are IP-based in general. Both directives only support IPv6 from nginx 0.8.22 onwards, on older versions of nginx those directives have no effect on IPv6 requests. Thus they do not block access for IPv6 requests. Adding the "internal" directive blocks external access in general (both IPv4 and IPv6) and makes the web server return a status code 404 (Not Found) response. See: http://nginx.org/en/CHANGES http://wiki.nginx.org/HttpCoreModule#internal PHPBB3-10007 --- phpBB/docs/nginx.sample.conf | 2 ++ 1 file changed, 2 insertions(+) (limited to 'phpBB/docs') diff --git a/phpBB/docs/nginx.sample.conf b/phpBB/docs/nginx.sample.conf index a22a126ff4..2a11e057c5 100644 --- a/phpBB/docs/nginx.sample.conf +++ b/phpBB/docs/nginx.sample.conf @@ -45,6 +45,7 @@ http { # Deny access to internal phpbb files. location ~ /(config\.php|common\.php|includes|cache|files|store|images/avatars/upload) { + internal; deny all; } @@ -59,6 +60,7 @@ http { # Deny access to version control system directories. location ~ /\.svn|/\.git { + internal; deny all; } } -- cgit v1.2.1 From 36e96bbc6a540e0910e2881c4ba3a629b0e00d9b Mon Sep 17 00:00:00 2001 From: Oleg Pudeyev Date: Tue, 1 Mar 2011 19:53:12 -0500 Subject: [ticket/10059] Fix two misspellings of consistent. PHPBB3-10059 --- phpBB/docs/coding-guidelines.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'phpBB/docs') diff --git a/phpBB/docs/coding-guidelines.html b/phpBB/docs/coding-guidelines.html index 7434fa4870..bce65335d6 100644 --- a/phpBB/docs/coding-guidelines.html +++ b/phpBB/docs/coding-guidelines.html @@ -1018,7 +1018,7 @@ append_sid("{$phpbb_root_path}memberlist.$phpEx", 'mode=group&

General function usage:

Some of these functions are only chosen over others because of personal preference and having no other benefit than to be consistant over the code.

Some of these functions are only chosen over others because of personal preference and having no other benefit than to be consistent over the code.

-- cgit v1.2.1 From 32af9e8865d2d59d9116fb38b94b268ed1213675 Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Fri, 4 Mar 2011 16:54:24 +0100 Subject: [ticket/10075] Update docs/AUTHORS for 3.0.9-RC1 release. Remove: - A_Jelly_Doughnut - dhn - TerraFrost Add: - nn- Move: - Brainy Rename: - Brainy -> ckwalsh PHPBB3-10075 --- phpBB/docs/AUTHORS | 23 ++++++++++++----------- 1 file changed, 12 insertions(+), 11 deletions(-) (limited to 'phpBB/docs') diff --git a/phpBB/docs/AUTHORS b/phpBB/docs/AUTHORS index 1dfb80141c..83feca009b 100644 --- a/phpBB/docs/AUTHORS +++ b/phpBB/docs/AUTHORS @@ -22,20 +22,18 @@ involved in phpBB. phpBB Lead Developer: naderman (Nils Adermann) -phpBB Developers: A_Jelly_Doughnut (Josh Woody) - Acyd Burn (Meik Sievertsen) [Lead 09/2005 - 01/2010] +phpBB Developers: Acyd Burn (Meik Sievertsen) [Lead 09/2005 - 01/2010] APTX (Marek A. R.) bantu (Andreas Fischer) - dhn (Dominik Dröscher) + ckwalsh (Cullen Walsh) igorw (Igor Wiedler) kellanved (Henry Sudhof) nickvergessen (Joas Schilling) + nn- (Oleg Pudeyev) rxu (Ruslan Uzdenov) - Terrafrost (Jim Wigginton) ToonArmy (Chris Smith) -Contributions by: Brainy (Cullen Walsh) - leviatan21 (Gabriel Vazquez) +Contributions by: leviatan21 (Gabriel Vazquez) Raimon (Raimon Meuldijk) Xore (Robert Hetzler) @@ -47,11 +45,14 @@ phpBB Project Manager: theFinn (James Atkinson) [Founder - 04/2007] phpBB Lead Developer: psoTFX (Paul S. Owen) [2001 - 09/2005] -phpBB Developers: Ashe (Ludovic Arnaud) [10/2002 - 11/2003, 06/2006 - 10/2006] - BartVB (Bart van Bragt) [11/2000 - 03/2006] - DavidMJ (David M.) [12/2005 - 08/2009] - GrahamJE (Graham Eames) [09/2005 - 11/2006] - Vic D'Elfant (Vic D'Elfant) [04/2007 - 04/2009] +phpBB Developers: A_Jelly_Doughnut (Josh Woody) [01/2010 - 11/2010] + Ashe (Ludovic Arnaud) [10/2002 - 11/2003, 06/2006 - 10/2006] + BartVB (Bart van Bragt) [11/2000 - 03/2006] + DavidMJ (David M.) [12/2005 - 08/2009] + dhn (Dominik Dröscher) [05/2007 - 01/2011] + GrahamJE (Graham Eames) [09/2005 - 11/2006] + TerraFrost (Jim Wigginton) [04/2009 - 01/2011] + Vic D'Elfant (Vic D'Elfant) [04/2007 - 04/2009] -- Copyrights -- -- cgit v1.2.1 From b343920071cdef03ae421c67ea5b72ca1863cdcf Mon Sep 17 00:00:00 2001 From: Oleg Pudeyev Date: Thu, 24 Feb 2011 15:26:06 -0500 Subject: [ticket/10069] Improvements to sample nginx configuration. Most of these were contributed by burningbunny: https://github.com/burningbunny PHPBB3-10069 --- phpBB/docs/nginx.sample.conf | 33 +++++++++++++++++++++++++-------- 1 file changed, 25 insertions(+), 8 deletions(-) (limited to 'phpBB/docs') diff --git a/phpBB/docs/nginx.sample.conf b/phpBB/docs/nginx.sample.conf index 2a11e057c5..40b6ee76da 100644 --- a/phpBB/docs/nginx.sample.conf +++ b/phpBB/docs/nginx.sample.conf @@ -10,14 +10,23 @@ http { gzip_vary on; gzip_http_version 1.1; gzip_min_length 700; + + # Compression levels over 6 do not give an appreciable improvement + # in compression ratio, but take more resources. gzip_comp_level 6; - gzip_disable "MSIE [1-6]\."; + + # IE 6 and lower do not support gzip with Vary correctly. + gzip_disable "msie6"; + # Before nginx 0.7.63: + #gzip_disable "MSIE [1-6]\."; # Catch-all server for requests to invalid hosts. # Also catches vulnerability scanners probing IP addresses. - # Should be first. server { - listen 80; + # default specifies that this block is to be used when + # no other block matches. + listen 80 default; + server_name bogus; return 444; root /var/empty; @@ -26,14 +35,20 @@ http { # If you have domains with and without www prefix, # redirect one to the other. server { - listen 80; + # Default port is 80. + #listen 80; + server_name myforums.com; - rewrite ^(.*)$ http://www.myforums.com$1 permanent; + + # A trick from http://wiki.nginx.org/Pitfalls#Taxing_Rewrites: + rewrite ^ http://www.myforums.com$request_uri permanent; + # Equivalent to: + #rewrite ^(.*)$ http://www.myforums.com$1 permanent; } # The actual board domain. server { - listen 80; + #listen 80; server_name www.myforums.com; root /path/to/phpbb; @@ -45,8 +60,10 @@ http { # Deny access to internal phpbb files. location ~ /(config\.php|common\.php|includes|cache|files|store|images/avatars/upload) { - internal; deny all; + # deny was ignored before 0.8.40 for connections over IPv6. + # Use internal directive to prohibit access on older versions. + internal; } # Pass the php scripts to fastcgi server specified in upstream declaration. @@ -60,8 +77,8 @@ http { # Deny access to version control system directories. location ~ /\.svn|/\.git { - internal; deny all; + internal; } } -- cgit v1.2.1 From ae8131077ef8a4c75c0582b47c871ca0c81ef2ef Mon Sep 17 00:00:00 2001 From: Igor Wiedler Date: Wed, 23 Mar 2011 23:06:55 +0100 Subject: [ticket/10107] Add a webserver section to docs/INSTALL.html Explain what to do with lighttpd and nginx after installing phpBB on one of those webservers. PHPBB3-10107 --- phpBB/docs/INSTALL.html | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'phpBB/docs') diff --git a/phpBB/docs/INSTALL.html b/phpBB/docs/INSTALL.html index 4af185beb3..3cd0e215c3 100644 --- a/phpBB/docs/INSTALL.html +++ b/phpBB/docs/INSTALL.html @@ -79,6 +79,7 @@
Important (security related) post-Install tasks for all installation methods
1. Uploadable avatars
2. Webserver configuration
Disclaimer

Please be aware that setting a directories permissions to global write access is a potential security issue. While it is unlikely that anything nasty will occur (such as all the avatars being deleted) there are always people out there to cause trouble. Therefore you should monitor this directory and if possible make regular backups.

6.ii. Webserver configuration

Depending on your web server you may have to configure your server to deny web access to the files/ and store/ directories. This is to prevent users from accessing private attachments and database backups.

For apache there are .htaccess files already in place to do this for you. For other webservers you will have to adjust the configuration yourself. There are sample configuration files for lighttpd and nginx in the docs/ directory.

1.i. Changes since 3.0.7-PL1

1.i. Changes since 3.0.8

+ +

Bug +

[PHPBB3-217] - Multiline [url] not Converted +
[PHPBB3-6712] - Topic bumping does not create new topic icon on index +
[PHPBB3-7057] - Quicksearch uses POST, thus the page expires! +
[PHPBB3-7778] - Increase limit of custom BBcodes +
[PHPBB3-7834] - Correctly update topic_time when deleting first post in topic +
[PHPBB3-7888] - URL of search results page does not always contain all keywords of the search query +
[PHPBB3-7941] - mistake in description of function generate_board_url +
[PHPBB3-8138] - Browser autocompleton fills wrong fields in ACP +
[PHPBB3-8736] - Honour ACP settings for min/max username length when posting as a guest. +
[PHPBB3-8802] - Wrong confirmation text when clicking "mark forums read" in a category +
[PHPBB3-8904] - Show numeric CPF default value when editing +
[PHPBB3-9166] - Subsilver and prosilver CSS elements out of order. +
[PHPBB3-9348] - Correctly encode default_dateformat when converting from phpBB2 +
[PHPBB3-9575] - The word "administrate" is not correct. +
[PHPBB3-9630] - Naming inconsistency of Merging Posts / Topics in MCP +
[PHPBB3-9675] - Add option to delete template/theme/imageset when deleting style. +
[PHPBB3-9685] - Unable to create "Fulltext native" search index using the mssqlnative DBAL +
[PHPBB3-9751] - Password requirement "Must contain letters and numbers" is not working properly +
[PHPBB3-9764] - Empty value for CONFIG_TABLE config_name= 'mime_triggers' causes functions_fileupload.php->fileupload->check_content() to be too restrictive +
[PHPBB3-9851] - "Search new posts" should require login +
[PHPBB3-9872] - Total topics isn't correct after I deleted a user +
[PHPBB3-9874] - view_log() performs unneeded count query over all log entries. +
[PHPBB3-9892] - Firebird index name length limit is not taken into account +
[PHPBB3-9905] - DSN field should include SQLite +
[PHPBB3-9908] - Send "Moved Permanently" before stripping off session ids for Bots. +
[PHPBB3-9910] - Javascript bug in Subsilver2 PMs +
[PHPBB3-9911] - Incorrect open/close field in Manage ranks ACP +
[PHPBB3-9913] - currunt should be current +
[PHPBB3-9915] - "Length of ban:" is not displayed in ACP +
[PHPBB3-9924] - $template->display hook does not pass $template instance +
[PHPBB3-9925] - prosilver logo margin bug in IE 6-7-8 +
[PHPBB3-9928] - Do not link "login to your board" to the "send statistics" page after completed update. +
[PHPBB3-9930] - Redirect fails with open_basedir enabled +
[PHPBB3-9932] - The Bing bot is not added when converting. +
[PHPBB3-9933] - Wrong handling of consecutive multiple asterisks in word censor +
[PHPBB3-9934] - Mass Mail missing under the system tab on a fresh install +
[PHPBB3-9939] - JavaScript error in recaptcha ACP template +
[PHPBB3-9944] - Extension groups naming don't use users' language in ACP +
[PHPBB3-9946] - $inserts empty in sql_query() for oracle +
[PHPBB3-9948] - Inline quicktime files won't display +
[PHPBB3-9949] - $user->lang() is not handling arguments as per documentation +
[PHPBB3-9950] - Problem with localized button images after uprading from 3.0.7-PL1 to 3.0.8 +
[PHPBB3-9953] - Set focus to password on re-authentication +
[PHPBB3-9954] - u_masspm* permissions are forced to never for certain groups +
[PHPBB3-9961] - Inconsistent activation logs +
[PHPBB3-9966] - Language download in ACP creates index.html and misses captcha_* +
[PHPBB3-9970] - user_lang input not checked during registration +
[PHPBB3-9981] - Fix unit test dependencies on phpBB files +
[PHPBB3-9985] - 3D Wave CAPTCHA mt_rand() does not check order of min/max values +
[PHPBB3-9997] - Inconsistent approve/disapprove button order in modcp +
[PHPBB3-9999] - {forumrow.L_FORUM_FOLDER_ALT} and {SEARCH_IMG} only return a language key. +
[PHPBB3-10005] - users can register without custom profile field correctly entered +
[PHPBB3-10011] - __DIR__ in test suite renders it unusable on php < 5.3 +
[PHPBB3-10016] - set_config_count() fails on PostreSQL 7 +
[PHPBB3-10020] - ACP function validate_range() fails partially on non-32-bit systems +
[PHPBB3-10021] - "Find a member" generates SQL error when large dates are entered +
[PHPBB3-10033] - "Disallow usernames" does not check already disallowed names +
[PHPBB3-10035] - ACP template edit feature allows to read any files on webserver and to upload/execute any script on it +
[PHPBB3-10036] - Use image from configuration file for displaying online-status. +
[PHPBB3-10038] - download/file.php uses $_GET value instead of function request_var() +
[PHPBB3-10039] - 2.x to 3.x conversion fails when using mssqlnative to connect to destination database +
[PHPBB3-10042] - GD captcha has invalid mt_rand calls +
[PHPBB3-10047] - Session ID always included in URL on posting.php +
[PHPBB3-10049] - Session test files are misnamed, session tests are not run +
[PHPBB3-10052] - Session tests are broken +
[PHPBB3-10056] - Firebird misspelled in database updater +
[PHPBB3-10058] - Root path is undefined in MySQL upgrader +
[PHPBB3-10059] - Consistent is misspelled twice +
[PHPBB3-10060] - Typo in tests database connection manager +
[PHPBB3-10068] - Firefox4 restrictions to :visited +
[PHPBB3-10078] - commit-msg hook prints \n on freebsd +
[PHPBB3-10081] - Cleanup Template Tests +
[PHPBB3-10084] - Add smilie errors out when image is missing +
[PHPBB3-10088] - Cache mock does not unset database versions other than mysqli +
[PHPBB3-10090] - cache/queue.php.lock isn't covered by .gitignore +
[PHPBB3-10092] - commit-msg hook aborts on overlength comment lines +
[PHPBB3-10096] - Wrong whitespace in functions.php +
[PHPBB3-10100] - Race condition in unique_id() on heavily busy database. +
[PHPBB3-10102] - member.S_PENDING_SET in styles/prosilver/template/ucp_groups_manage.html +
[PHPBB3-10104] - missing one intval() along with others already being there +
[PHPBB3-10109] - Errors while copying a topic +
[PHPBB3-10112] - Use of count() in captcha_gd.php and mssqlnative.php +
[PHPBB3-10115] - BBcodes not working if post contains about or more 55000 non-english symbols +
[PHPBB3-10117] - Big posts becomes empty if they have smilies on specified places. +
[PHPBB3-10121] - ICQ profile link leads to a webservice that is no longer active +
[PHPBB3-10123] - Inconsistent use of smilie/smiley +
[PHPBB3-10128] - Error message is on green background when trying to ban a nonexistent user +
[PHPBB3-10137] - Deleting an unintended space at the end of PHP_URL_FOPEN_SUPPORT_EXPLAIN +
[PHPBB3-10146] - Firebird cannot handle DECIMAL(255, 0) +
[PHPBB3-10147] - Typo in code comment in functions_template.php +
[PHPBB3-10149] - deregister_globals causes error when cookie called GLOBALS is set to scalar value +
[PHPBB3-10170] - reCAPTCHA address has changed +
[PHPBB3-10171] - Firefox4 displays grey pixels at PM message rows when message is neither marked nor replied +
[PHPBB3-10177] - phpBB package cannot be built with bsdtar +
[PHPBB3-10178] - build.xml does not specify path to find - breaks on FreeBSD +
[PHPBB3-10188] - Wrong handling of output_buffering value in message handler +
[PHPBB3-10192] - Missing semicolon in MySQL Upgrader +
[PHPBB3-10195] - Do not check DNS Blacklists if IPv6 address is passed to session::check_dnsbl(). +
[PHPBB3-10198] - Function validate_config_vars() improperly validates multibyte strings +
[PHPBB3-10203] - Fix quotations and hyphen in language strings for PHPBB3-10067 +
[PHPBB3-10204] - Package build tool does not detect binary file changes +
[PHPBB3-10206] - Normalization tests fail when unicode.org is not reachable +
[PHPBB3-10211] - Missing space on the recent PHPBB3-9992 changes +

+ +

Improvement +

[PHPBB3-9581] - Banned users get mass emails. +
[PHPBB3-9802] - Optimize session_begin REMOTE_ADDR validation +
[PHPBB3-9878] - Get rid of Internet Explorer 7 emulation +
[PHPBB3-9897] - Language typos in language/en/acp/board.php +
[PHPBB3-9922] - Posting URL in subsilver 2 +
[PHPBB3-9937] - Feed Icon displays on Forum links +
[PHPBB3-9980] - URLs to javascript should be T_SUPER_TEMPLATE_PATH instead of T_TEMPLATE_PATH +
[PHPBB3-9989] - Skip PM popup in overall_header.html, if there are no new PMs. +
[PHPBB3-10007] - Add directive 'internal' to blocked folders in nginx example configuration. +
[PHPBB3-10009] - Differentiate published/updated dates in Atom feed +
[PHPBB3-10014] - Make the error message when cache is not writable clearer +
[PHPBB3-10024] - Allow a Style to present Unread PM in different way than read PM +
[PHPBB3-10040] - Continuous integration on PHP 5.2 +
[PHPBB3-10041] - download/file.php needs more use of send_status_line +
[PHPBB3-10044] - Setup github network improvements +
[PHPBB3-10057] - More informative reporting of errors when database connection fails for Firebird and PostgreSQL. +
[PHPBB3-10067] - ACP options for account activation are confusing when emails are turned off board-wide +
[PHPBB3-10069] - Improvements in sample nginx config file +
[PHPBB3-10072] - Send the post number to the template as it relates to it's position in the topic +
[PHPBB3-10101] - Compatibility with native phpass hashes +
[PHPBB3-10126] - Replace ^ with &~ in error_reporting calls +
[PHPBB3-10141] - Performance improvement for $auth->_fill_acl() +
[PHPBB3-10145] - Ability to force recompilation of all templates on every page load +
[PHPBB3-10154] - Move "copy permissions from" to below "parent" in forum creation form +
[PHPBB3-10158] - Return link not really useful after sending a Private Message +
[PHPBB3-10186] - UCP signature panel displays when not authed for signatures +

+ +

New Feature +

[PHPBB3-9942] - WinCache Caching Module +
[PHPBB3-9992] - Limit amount of failed login attempts per IP +
[PHPBB3-10110] - Redis caching module +

+ +

Task +

[PHPBB3-9788] - Add README for GitHub +
[PHPBB3-9805] - Add a script for setting up git remotes for a github network +
[PHPBB3-9806] - Script for easy merging +
[PHPBB3-9824] - Git hook quirks +
[PHPBB3-9859] - Remove the years from visible copyright in the footer. +
[PHPBB3-9921] - Add sample configuration for lighttpd webserver +
[PHPBB3-9943] - Setup phpDocumentor API documentation generation +
[PHPBB3-9967] - Use phpunit.xml for test suite +
[PHPBB3-9987] - Enforce _test.php suffix for test files +
[PHPBB3-9990] - Integrate utf normalizer tests into test suite +
[PHPBB3-10043] - Refactor phpbb_database_test_case +
[PHPBB3-10046] - Getting rid of register_shutdown_function() in cron.php to prevent path disclosure (reported by lacton) +
[PHPBB3-10075] - Update docs/AUTHORS for 3.0.9-RC1 release +
[PHPBB3-10079] - Add gallery avatars to .gitignore. +
[PHPBB3-10082] - Fix Session Test Issues with CHAR vs. VARCHAR. +
[PHPBB3-10105] - Update AIM express link and "Download Application" links +
[PHPBB3-10107] - Improve docs for non-apache webserver configuration +

+ +

Sub-task +

[PHPBB3-9732] - Cover session code extensively in tests +
[PHPBB3-9968] - Create unit test for word censor regular expression +
[PHPBB3-9969] - Move word censor regular expression creation into separate function definition in functions.php +

+ + +

1.ii. Changes since 3.0.7-PL1

Security

@@ -547,13 +880,13 @@ -

1.ii. Changes since 3.0.7

1.iii. Changes since 3.0.7

[Sec] Do not expose forum content of forums with ACL entries but no actual permission in ATOM Feeds. (Bug #58595)

1.iii. Changes since 3.0.6

1.iv. Changes since 3.0.6

[Fix] Allow ban reason and length to be selected and copied in ACP and subsilver2 MCP. (Bug #51095)

1.iv. Changes since 3.0.5

1.v. Changes since 3.0.5

[Fix] Allow whitespaces in avatar gallery names. (Bug #44955)
[Feature] Send anonymous statistical information to phpBB on installation and update (optional).

1.v. Changes since 3.0.4

1.vi. Changes since 3.0.4

[Fix] Delete user entry from ban list table upon user deletion (Bug #40015 - Patch by TerraFrost)
[Sec] Only use forum id supplied for posting if global announcement detected. (Reported by nickvergessen)

1.vi. Changes since 3.0.3

1.vii. Changes since 3.0.3

[Fix] Allow mixed-case template directories to be inherited (Bug #36725)
[Sec] Ask for forum password if post within passworded forum quoted in private message. (Reported by nickvergessen)

1.vii. Changes since 3.0.2

1.viii. Changes since 3.0.2

[Fix] Correctly set topic starter if first post in topic removed (Bug #30575 - Patch by blueray2048)
[Sec Precaution] Stricter validation of the HTTP_HOST header (Thanks to Techie-Micheal et al for pointing out possible issues in derived code)

1.viii. Changes since 3.0.1

1.ix. Changes since 3.0.1

[Fix] Ability to set permissions on non-mysql dbms (Bug #24955)
[Sec] Only allow urls gone through redirect() being used within login_box(). (thanks nookieman)

1.ix Changes since 3.0.0

1.x Changes since 3.0.0

[Change] Validate birthdays (Bug #15004)
[Fix] Find and display colliding usernames correctly when converting from one database to another (Bug #23925)

1.x. Changes since 3.0.RC8

1.xi. Changes since 3.0.RC8

[Fix] Cleaned usernames contain only single spaces, so "a_name" and "a__name" are treated as the same name (Bug #15634)
[Fix] Call garbage_collection() within database updater to correctly close connections (affects Oracle for example)

1.xi. Changes since 3.0.RC7

1.xii. Changes since 3.0.RC7

[Fix] Fixed MSSQL related bug in the update system
[Fix] No duplication of active topics (Bug #15474)

1.xii. Changes since 3.0.RC6

1.xiii. Changes since 3.0.RC6

[Fix] Submitting language changes using acp_language (Bug #14736)
[Fix] Able to request new password (Bug #14743)

1.xiii. Changes since 3.0.RC5

1.xiv. Changes since 3.0.RC5

[Feature] Removing constant PHPBB_EMBEDDED in favor of using an exit_handler(); the constant was meant to achive this more or less.
[Sec] New password hashing mechanism for storing passwords (#i42)

1.xiv. Changes since 3.0.RC4

1.xv. Changes since 3.0.RC4

[Fix] MySQL, PostgreSQL and SQLite related database fixes (Bug #13862)
[Fix] odbc_autocommit causing existing result sets to be dropped (Bug #14182)

1.xv. Changes since 3.0.RC3

1.xvi. Changes since 3.0.RC3

[Fix] Fixing some subsilver2 and prosilver style issues

1.xvi. Changes since 3.0.RC2

1.xvii. Changes since 3.0.RC2

[Fix] Re-allow searching within the memberlist

1.xvii. Changes since 3.0.RC1

1.xviii. Changes since 3.0.RC1

[Fix] (X)HTML issues within the templates (Bug #11255, #11255)

Date: Thu, 16 Jun 2011 16:16:55 +0200 Subject: [prep-release-3.0.9] Update Changelog for 3.0.9-RC2 release. --- phpBB/docs/CHANGELOG.html | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'phpBB/docs') diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 915f7e6a71..499afb43bd 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -301,6 +301,14 @@

[PHPBB3-10211] - Missing space on the recent PHPBB3-9992 changes

[PHPBB3-10218] - STRIP is not defined in style.php causing a notice to be thrown +

[PHPBB3-10219] - Inappropriate character in web.config file +

[PHPBB3-10220] - Logging in with Mobile Device triggers SQL error on *_login_attempts. +

[PHPBB3-10221] - Inconsistent usage of "Seconds" in ACP Settings +

Improvement -- cgit v1.2.1 From 172e3c07d6eac211aaa8302f3802182fa7b1d0d9 Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Sun, 26 Jun 2011 20:52:54 +0200 Subject: [prep-release-3.0.9] Update Changelog for 3.0.9-RC3 release. --- phpBB/docs/CHANGELOG.html | 26 +++++++++++++++++++++++++- 1 file changed, 25 insertions(+), 1 deletion(-) (limited to 'phpBB/docs') diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 499afb43bd..6b12cb81bf 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -207,6 +207,8 @@
[PHPBB3-10021] - "Find a member" generates SQL error when large dates are entered
+
[PHPBB3-10029] - No such thing as $_SERVER['HTTP_VERSION'] +

[PHPBB3-10033] - "Disallow usernames" does not check already disallowed names

[PHPBB3-10035] - ACP template edit feature allows to read any files on webserver and to upload/execute any script on it @@ -285,7 +287,9 @@

[PHPBB3-10178] - build.xml does not specify path to find - breaks on FreeBSD
-
[PHPBB3-10188] - Wrong handling of output_buffering value in message handler +
[PHPBB3-10188] - Broken compressed output when errors/warnings are handled by phpbb and output_buffering is set to 4096 and phpbb gzip is enabled +
+
[PHPBB3-10191] - Duplicate output when output_handler is set in php.ini

[PHPBB3-10192] - Missing semicolon in MySQL Upgrader
@@ -301,6 +305,10 @@
[PHPBB3-10211] - Missing space on the recent PHPBB3-9992 changes
+
[PHPBB3-10213] - IP limit index name too long on Oracle +
+
[PHPBB3-10214] - Cannot configure Q&A on Oracle +

[PHPBB3-10218] - STRIP is not defined in style.php causing a notice to be thrown

[PHPBB3-10219] - Inappropriate character in web.config file @@ -309,6 +317,22 @@

[PHPBB3-10221] - Inconsistent usage of "Seconds" in ACP Settings
+
[PHPBB3-7729] - Prevent date/time functions from throwing E_WARNING on PHP 5.3 by setting a default timezone +
+
[PHPBB3-10188] - Broken compressed output when errors/warnings are handled by phpbb and output_buffering is set to 4096 and phpbb gzip is enabled +
+
[PHPBB3-10223] - Updater references startup.php from board path +
+
[PHPBB3-10228] - Typo in 3.0.9-RC1 user registration settings +
+
[PHPBB3-10229] - On languge/acp/styles.php "%s" should be "%s" +
+
[PHPBB3-10232] - Search within topic/forum searches all posts +
+
[PHPBB3-10233] - IE Emulation fix breaks posting layout when PMing +
+
[PHPBB3-10234] - msg_handler() reports E_WARNING as "PHP Notice: " +

Improvement -- cgit v1.2.1 From 7ca9c33157ad360750df8bf025a1155e14c6b2bb Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Tue, 5 Jul 2011 00:43:09 +0200 Subject: [prep-release-3.0.9] Update Changelog for 3.0.9 release. --- phpBB/docs/CHANGELOG.html | 2 ++ 1 file changed, 2 insertions(+) (limited to 'phpBB/docs') diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index 6b12cb81bf..c0ec93cafb 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -333,6 +333,8 @@
[PHPBB3-10234] - msg_handler() reports E_WARNING as "PHP Notice: "
+
[PHPBB3-10247] - mediumint(8) too small for phpbb_login_attempts.attempt_id +

Improvement -- cgit v1.2.1 From 1fa77c2fd5f6a17dc2b99d15063e0a9d9f689211 Mon Sep 17 00:00:00 2001 From: Andreas Fischer Date: Thu, 7 Jul 2011 20:20:52 +0200 Subject: [prep-release-3.0.9] Update Changelog for 3.0.9-RC4 release. --- phpBB/docs/CHANGELOG.html | 2 ++ 1 file changed, 2 insertions(+) (limited to 'phpBB/docs') diff --git a/phpBB/docs/CHANGELOG.html b/phpBB/docs/CHANGELOG.html index c0ec93cafb..6437fef1d5 100644 --- a/phpBB/docs/CHANGELOG.html +++ b/phpBB/docs/CHANGELOG.html @@ -335,6 +335,8 @@
[PHPBB3-10247] - mediumint(8) too small for phpbb_login_attempts.attempt_id
+
[PHPBB3-10250] - phpBB Logo needs the Registered Trademark Symbol +

Improvement -- cgit v1.2.1