WB 2.08.x

! /framework/class.Login.php
! /account/ ~login_form.php ~login.php
! /admin/login/index.php
fixed some possible intruder vectors and complete 2.8.4 adaption

1. typofix of class name in class.login and depending files

! update revision properties for all files
- include/Sensio/Twig remove Version 1.13.2

1. fixed redirect checking in class.login.php

1. security fix CRLF injection/HTTP response splitting

! update group permission,

! update Group Permission, add module_advanced
! upgrade-script will be updating Adminitrator Group

+ add maintance modus in backend

! update folder framework class.login, admin/login, admin/skel/htt

! update correct_theme_source and fixed the call in all files

fix class.login, when name and pass are both empty, no longer call increase_attemps
some redirect updates in frontend account files

add new backend theme handling (Tks to Stefek)

little fix in calling globalExceptionHandler from inner core files

activate globalExceptionHandler in inner core files

database::field_modify() there was a bug to fix
all other files: fixed SQL-statements to SQL-strict

for security reasons the 'remember me' functionality is deaktivated in class login
'Get configuration values' is optimized

Preparing 2.8.2 stable, last tests

YGN Ethical Hacker Group (2.8.2 / 2.9.0)

fixed inclusion of SecureForm
added IDNA/Punycode to wb::validate_email()

fixed headerinfos

update headerinfos

securtiy fix in class.login
see http://www.websitebaker2.org/forum/index.php/topic,20347.msg137554.html#msg137554

add ini_set('display_errors', 1) (Tks to Thorn)
update headerinfos

update class.login.php (tks to Ruud)

update class.login.php

Ticket #985 With #1318 no login in backend possible
Ticket #986 Typo inside the german language file
Ticket #982 Unnessesary heredoc causes on errors while installation!
Ticket #926/Ticket #928 Mail Notification on new user registration

Ticket #984 Removing outdated comment-block in class.login.php
Ticket #983 Sorting order of modules and templates inside groups.php

Ticket #976 Using md5 also for the username inside class.login.php

Ticket 963 Minor XSS issue in admin login
update jquery-ui-min.js from 1.7.2 to 1.8.0
Fixed typo in the english language file

update headertext

set svn keywords

Ticket #869 Droplet-Engine does'nt work in some case
continue update header info

Ticket #903 fix CSS-errors in WB backend
add title class in show_breadcrumbs, now full css styling

fixed parse error ticket #878

fix some PHP 5.3 deprecated functions

Created 2.8.x branch

Added more meta tags to backend themes

changed in class_login.php mktime() to time()

added skinable Admin Interface

Fixed bug with smart login option (remember me) (ticket #689)

Copyright notices now includes 2009

added bugfix from the forum member tavitar to fix an issue with multiple groups (module permission do not add up properly)

added the "users in multiple groups" feature (closes parts of ticket #546)

Changed all copyright notices to include now 2008

Fixed "REMEMBER_KEY" Cookie SQL Injection security issue (#376)

Added 2007 to all copyright notices
Added missing ID Keywords
Removed not Unix conform line endings

Fixed ticket #143. Charset setting is now used in admin login and forgot pages.

Updated all copyright notices to include 2006

Ticket 125 - smart login not working. Thanks to alex.

Added an exit call after every heading("Location:...") redirector to prevent unwanted execution of code.

Fixed some notices and warnings.

Fixed error in patch

Applied patch to class.login.php

Fixed more inconsistencies regarding line endings and end-of-file newlines

Added automatic frontend redirection on login.

Removed direct access path disclosure occurrences.

Added the Id keyword for all files

Restructured frontend code and fixed various bugs

Initial import from CVS to Subversion of Website Baker 2.5.2