WB 2.08.x

fixed function SanitizeHttpReferer() in consideration of subdirectories

little fixes in classs database and add new readonly property DbName

little designfix in forgot_form.php
fix media if uploading zip files with folder, than create FolderProtectFiles

fixed undefined fragment index in initialize.php
add $_SESSION['HTTP_REFERER'] storing active pagelink if page_id != 0

highly critical security-fix
announced on http://www.darksecurity.de/advisories/2012/SSCHADV2012-003.txt

little Typo-fix in database::SqlImport()

little Regex-fix in database::SqlImport()

added new method SqlImport() to class database

fix class.login, when name and pass are both empty, no longer call increase_attemps
some redirect updates in frontend account files

add linebreak in backend message for 'delete install folder...'

secureForm Fix for hosting with load balancing

typofix in function make_dir

! wb_quickSkin_28.php create _skin folders with folder protect file
! add a 3th parameter to function make_dir to allows the creation of nested directories specified in the pathname. Defaults to TRUE

+ add languages vars in languages files
+ add upload error mesages moduleinstall
+ add index.php if not exists in function createFolderProtectFile
! corrected changed coding between login_form and forgot_form

christmas time corrected wrong files

fix wrong background url in "Website Under Construction"

! changes in code modul
+ add function getTableEngine to class.database
+ add Quickskin to include folder
+ add reworkes Droplet SectionPicker to load modules frontend.css

new backend theme handling (Tks to Stefek)
some fixes in install

small changes in INSTALL and UPGRADE (Tks to unawave2)
update upgrade-script showing from Version to Version (Tks to unawave2)
add Servicepack version to header.htt

add new backend theme handling (Tks to Stefek)

account/signup.php, check if user is already logged
fix non object message in framework/functions.php

settings for pwgen updated

fixed strict notice warning in class.wb
change editor for intropage to editarea
add missing slash in themes

added new constant 'DO_NOT_TRACK' set to true if a client sends the DNT-Header

fixed field_remove

new class PasswordHash
new Password-/Hash-generator
(step to fix password-issues)

syntaxfix order::clean()

fixed order::clean()

change sql statements to strict in module droplets
fix vars in compatibility mode for versions before 2.8.1 in frontend.functions.php

fixed c&p mistake

removed stoneaged code from 2.4

little fix in calling globalExceptionHandler from inner core files

fixed secureform

activate globalExceptionHandler in inner core files

fix SQL-statements to SQL-strict

little fix in globalExceptionHandler

global exception handler activated

class.order completely recoded to reduce SQL requests
all other files: fix SQL-statements to SQL-strict

database::field_modify() there was a bug to fix
all other files: fixed SQL-statements to SQL-strict

move fixes 2.8.2 to 2.8.3
fixes will be shown in an extra readme
an package with the fixed files will be created
for all users who downloaded the 2.8.2 before 29 Jul-2011

! update DA language (Tks to Achrist)
! update some languages variables (Tks to Rübenwurzel, Testör)
! move function url_encode from admin/pages to framework/functions.php
! add missing svn properties in some headerinfos
! font-size correction in wb_theme (Tks to Rübenwurzel)

1. change lang variable to remove upgrade-script
   ! reworked add sections in pages
   ! fix set empty href in show_menu2
   ! set show_menu2 version to 4.9.6 ...

for security reasons the 'remember me' functionality is deaktivated in class login
'Get configuration values' is optimized

update jquery-min to version 1.6.2
update jquery-ui-min to version 1.8.14
fix index error in media upload (Tks to DBS)
add missing nopreview.jpg
update media browser not to show forbidden files
remove unused jquery archiv folder

bugfix in initialize including SecureForm
update admintools FTAN handling

fixed little bug in moveCssToHead()

fixed Ticket 1050 Bug in include/phpmailer/class.phpmailer.php with Lotus Notes
fixed Ticket 573, 939 Bad formatting of e-mail received from form submissions
fixed Ticket 1009 cannot change user password without changing Email in preference

class-switcher for SecureForm added

Ticket 833 fixed markup for table cells in view.php
change themes.css to make style more flexible in success.htt and error.htt
backend themes: add js function redirect_to_page(url, timer) to redirect without message

Preparing 2.8.2 stable, last tests

in /framework/functions.php::media_filename - replace whitespaces by _
/upgrade-script.php - some small fixes

remove auto including YUI Framework in backend for modules, enable with >print_footer(true)
>print_error and ->print_success too accept a message as array
auto validate in frontend if style block inside body tag
captcha now XHTML valide

bug fixed in class.database.php methode field_add in call field_exists
update search, pls test, (Tks to Thorn)

1. recoded /modules/admin.php info_banner, now compare with modify in pages
2. security fixes remove defined WB_PATH for backend templates
3. fixed class.admin.php missing $TEXT declaration, add get_section_details

add missing methode is_group_match in class.wb.php

fix entities converting in select languages (Tks to the community)
see http://www.websitebaker2.org/forum/index.php/topic,20547.msg140512.html#msg140512

add page position in get_page_details

update Argostheme to version 1.5 (Tks to Argos)
validation fixes
call edit_full_area on the fly

typo fix and simplify used_octets calculation in SecureForm::getFingerprint()

update SecureForm.php to work behind Proxies

YGN Ethical Hacker Group (2.8.2 / 2.9.0)

fixed wb::password_chars

secure peparing and beginning fix admin/pages

1. Security fix in account
2. Security fix in admin/media, thanks to hal 9000

recoded rediect timer in print_success (tks to Chio)

set construct to FRONTEND class.wb
set 2.8.2 to RC5

fix class.wb

update headerinfos

fix class.admin

fixed inclusion of SecureForm
added IDNA/Punycode to wb::validate_email()

fixed headerinfos

update headerinfos

fixed class.wb.php to add class SecureForm

add jquery-include.js (Tks to Stefek)
update bind jquery in frontend, jquery-include.js and jquery-insrt.js are included

delete class.secureform.php
add newest SecureForm
fixed Call to a member function read() on a non-object in function register_frontend_modfiles

securtiy fix in class.login
see http://www.websitebaker2.org/forum/index.php/topic,20347.msg137554.html#msg137554

added some functions
set status to 2.8.2 RC3

added function 'db_update_key_value()'

Ticket #1053, Ticket #941 show_breadcrumb

additional functions added in class.database

validation fixes in pages backend theme

Security fixes

fix if upgrade module can now overwrite existing newer files in modules folder
same fix for upgrade templates

syntaxfix in initialize.php

add ini_set('display_errors', 1) (Tks to Thorn)
update headerinfos

remove some unneeded code in backend themes templates
see forum: JQuery und Backend-Theme

added IdKey to class secureForm

add an extra class class.secureform.php and extends it to class.wb.php
check for installed modules before loading in content

update class.login.php (tks to Ruud)

update class.login.php

Validation fix in preference

fixed directory_list

litte fix to show GMT value in default view
fixed file_list

Ticket #985 With #1318 no login in backend possible
Ticket #986 Typo inside the german language file
Ticket #982 Unnessesary heredoc causes on errors while installation!
Ticket #926/Ticket #928 Mail Notification on new user registration

Ticket #984 Removing outdated comment-block in class.login.php
Ticket #983 Sorting order of modules and templates inside groups.php

Ticket #976 Using md5 also for the username inside class.login.php

little fixes for backwards compatible PHP4, pls test

show_menu2 remove unneeded code for WB < 2.7
class.wb.php, recoding backend preference
add a language variable $MESSAGE['PREFERENCES']['INVALID_CHARS']
update theme.css & preference.htt in argos_theme & wb_theme
remove classic_theme

Ticket #971 Using $_POST in Admin - account - login.php (tks to Aldus)
update class.wb.php added tokens function