From 41df4d3c4c2d387a5382c132219115891d78ed60 Mon Sep 17 00:00:00 2001 From: Marc Alexander Date: Sun, 18 Jun 2017 17:39:16 +0200 Subject: [ticket/security/208] Add form key to password reset form SECURITY-208 --- phpBB/includes/ucp/ucp_remind.php | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'phpBB/includes') diff --git a/phpBB/includes/ucp/ucp_remind.php b/phpBB/includes/ucp/ucp_remind.php index 29d4199528..497bf6a2c4 100644 --- a/phpBB/includes/ucp/ucp_remind.php +++ b/phpBB/includes/ucp/ucp_remind.php @@ -41,8 +41,15 @@ class ucp_remind $email = strtolower(request_var('email', '')); $submit = (isset($_POST['submit'])) ? true : false; + add_form_key('ucp_remind'); + if ($submit) { + if (!check_form_key('ucp_remind')) + { + trigger_error('FORM_INVALID'); + } + $sql_array = array( 'SELECT' => 'user_id, username, user_permissions, user_email, user_jabber, user_notify_type, user_type, user_lang, user_inactive_reason', 'FROM' => array(USERS_TABLE => 'u'), -- cgit v1.2.1 From 3df3cb87c5066b6913619c18f8f612677c3e6ec4 Mon Sep 17 00:00:00 2001 From: Marc Alexander Date: Sun, 16 Jul 2017 11:54:37 +0200 Subject: [prep-release-3.1.11] Update version numbers to 3.1.11 --- phpBB/includes/constants.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'phpBB/includes') diff --git a/phpBB/includes/constants.php b/phpBB/includes/constants.php index 79f5a6f30f..a24ebaf9de 100644 --- a/phpBB/includes/constants.php +++ b/phpBB/includes/constants.php @@ -28,7 +28,7 @@ if (!defined('IN_PHPBB')) */ // phpBB Version -define('PHPBB_VERSION', '3.1.11-RC1'); +define('PHPBB_VERSION', '3.1.11'); // QA-related // define('PHPBB_QA', 1); -- cgit v1.2.1