WB 2.08.x

1. security fix CRLF injection/HTTP response splitting

! all changes in folder account, Signup with confirmation Mail
! frontend.css now included by account script

! Now you can style account login with your frontend Template CSS
this change is in work for the whole account

! change redirect logic for registered pages

! beginning update frontend account
! remove html markup from code

little designfix in forgot_form.php
fix media if uploading zip files with folder, than create FolderProtectFiles

update all used files with redirect_url to $_SESSION['HTTP_REFERER']

fix class.login, when name and pass are both empty, no longer call increase_attemps
some redirect updates in frontend account files

1. bugfix in forgot_form.php

+ add languages vars in languages files
+ add upload error mesages moduleinstall
+ add index.php if not exists in function createFolderProtectFile
! corrected changed coding between login_form and forgot_form

continue fixing frontend account

YGN Ethical Hacker Group (2.8.2 / 2.9.0)

fixed headerinfos

update headerinfos

add ini_set('display_errors', 1) (Tks to Thorn)
update headerinfos

Ticket #985 With #1318 no login in backend possible
Ticket #986 Typo inside the german language file
Ticket #982 Unnessesary heredoc causes on errors while installation!
Ticket #926/Ticket #928 Mail Notification on new user registration

update headertext

update header info

Beginning header information update

fix some PHP 5.3 deprecated functions

Created 2.8.x branch

replaced all remaining mktime() with time(), except from third party scripts

Mail text for register, signup and forgot mail now taken from WB language file (ticket #684)

Copyright notices now includes 2009

applied additional mail check to forgot login form

Fixed possible XSS in account/login.php and forgot-form.php

Replaced the variable PAGE_EXTENSION with hardcoded .php on all places where the pathes points to WB Corefiles with the page extension .php

Changed all copyright notices to include now 2008

Added 2007 to all copyright notices
Added missing ID Keywords
Removed not Unix conform line endings

Fixed tickets 190 and 207

Removed "From:" from calls to internal mail function. Ticket 189

Ticket #137 - Last Reset timer not reset in frontend forgotten password process

Updated all copyright notices to include 2006

Changed mail calls to $wb->mail (thanks to John!).

Forgotten password: if sending of e-mail fails, restore old password. Ticket #110

Added an exit call after every heading("Location:...") redirector to prevent unwanted execution of code.

Fixed more inconsistencies regarding line endings and end-of-file newlines

Fixed bug #65 (last_reset check in account/forgot_form.php)

Fixed spelling mistakes

Renamed compatibility.php to frontend.functions.php.
Moved frontend functions from class frontend to frontend.functions.php.
Removed instances of strip_slashes_dummy. Replaced $this by $wb in a couple of places.
Created file initialize.php, where all initializations now take place (moved from class wb constructor).

Change addslashes,stripslashes to (wb class) method calls add_slashes,strip_slashes

Added direct access redirection in account files.

Added the Id keyword for all files

Initial import from CVS to Subversion of Website Baker 2.5.2