WB 2.08.x

! all changes in folder account, Signup with confirmation Mail
! frontend.css now included by account script

+ add methode StripCodeFromText in class.wb to clean injection
! rebranding the admin/settings and security fixes
! a few new styling in backend wb_theme
! beginning aa lot of account changes like correction of $_SESSION indexe, security fixes
+ add head.load.min.js and head.min.js to /include/jquery/ to style HTML5 templates

! account split html and code
+ add signup activation registering
+ add missing icons in themes

update all used files with redirect_url to $_SESSION['HTTP_REFERER']

continue fixing frontend account

found more backlinks to fix
remove not working ftan in frontend
fixed redirect in login procedure (Tks to mr-fan)
update droplet LoginBox, additional parameter $redirect
remove double config call in media (Tks to Testör)

redefined wrong admin backlinks

YGN Ethical Hacker Group (2.8.2 / 2.9.0)

1. various Security fixes, thanks to secunia and others

1. Security fix in account
2. Security fix in admin/media, thanks to hal 9000

update headerinfos

fixed headerinfos

update headerinfos

add ini_set('display_errors', 1) (Tks to Thorn)
update headerinfos

update headertext

update header info

Beginning header information update

Ticket #832: Fix wrong configuration of timezone-handling when saving preferences-form on backend and frontend

Created 2.8.x branch

Copyright notices now includes 2009

Added some missing add_slashes(), get_post_escaped(), and strip_tags() for $_POST, $_GET and $_REQUEST-data. Also for $_SERVER['PHP_SELF'].

Replaced the variable PAGE_EXTENSION with hardcoded .php on all places where the pathes points to WB Corefiles with the page extension .php

Changed all copyright notices to include now 2008

Added 2007 to all copyright notices
Added missing ID Keywords
Removed not Unix conform line endings

Fixed more security issue's related to ticket #237

Updated all copyright notices to include 2006

Added an exit call after every heading("Location:...") redirector to prevent unwanted execution of code.

Replace 'admin' by 'wb' in all account pages. Moved print_success and print_error code to class.wb.php. Added correct parameters to these functions in account pages.

Fixed more inconsistencies regarding line endings and end-of-file newlines

Added direct access redirection in account files.

Added the Id keyword for all files

Initial import from CVS to Subversion of Website Baker 2.5.2