WB 2.08.x

! /framework/class.Login.php
! /account/ ~login_form.php ~login.php
! /admin/login/index.php
fixed some possible intruder vectors and complete 2.8.4 adaption

1. typofix of class name in class.login and depending files

1. security fix CRLF injection/HTTP response splitting

! all changes in folder account, Signup with confirmation Mail
! frontend.css now included by account script

! change redirect logic for registered pages

! beginning update frontend account
! remove html markup from code

login.php fallback to revision 1602

fixed parse error in login.php

fix local module reload and module manuell install
forgot to upload login.php

fix class.login, when name and pass are both empty, no longer call increase_attemps
some redirect updates in frontend account files

add new backend theme handling (Tks to Stefek)

fixed print_error exit in frontend account

found more backlinks to fix
remove not working ftan in frontend
fixed redirect in login procedure (Tks to mr-fan)
update droplet LoginBox, additional parameter $redirect
remove double config call in media (Tks to Testör)

fixed headerinfos

update headerinfos

add ini_set('display_errors', 1) (Tks to Thorn)
update headerinfos

Ticket #971 Using $_POST in Admin - account - login.php (tks to Aldus)
update class.wb.php added tokens function

update headertext

update header info

Beginning header information update

Created 2.8.x branch

removed unneeded icons from wb_theme

removed unneeded stylesheet.css from account dir

renamed warning.htt to warning.html to fix display of sourcecode after invalid login attemps

added fixed error.htt also to classic theme

added skinable Admin Interface

Copyright notices now includes 2009

Fixed possible XSS in account/login.php and forgot-form.php

removed the PAGE_EXTENSION added with changeset 549

fixed bug in frontend login and multiple groups (in conjunction with error_reporting = E_ALL)

Replaced the variable PAGE_EXTENSION with hardcoded .php on all places where the pathes points to WB Corefiles with the page extension .php

Replaced hardcoded text in login.php with language variables (fixes #386)

Changed all copyright notices to include now 2008

Security enhancement (reduced number of login trials from 50 to 3).

Added 2007 to all copyright notices
Added missing ID Keywords
Removed not Unix conform line endings

Updated all copyright notices to include 2006

Added an exit call after every heading("Location:...") redirector to prevent unwanted execution of code.

Fixed more inconsistencies regarding line endings and end-of-file newlines

Added automatic frontend redirection on login.

Added direct access redirection in account files.

Added the Id keyword for all files

Initial import from CVS to Subversion of Website Baker 2.5.2