WB 2.08.x

! update headerinfo
! change os_version request if os is not windows

! /framework/class.frontend.php
! set $_SESSION['HTTP_REFERER'] to WB_URL if menu url is a registered page
! set some header("Location:.. to new method send_header(

! /framework/frontend.functions
! change multi-dimensional arrays (variables) to similar arrays
! method page_content, add parameter $echo true to print $content, false return $content

! change multi-dimensional arrays (variables) to similar arrays
+ add variables for backend-menu, header.htt and footer.htt

! Fixed IDKEY in Secureform.mtab to solve issues whith Security warnings
! on pages that used a lot of IDKEYS. (fixed by NorHei)

! optimize some methods
+ add method send_header, replace header('Location:... with new method
+ if header send failed you get a manuell redirected link, so script don't break

+ add var $iPhpDeclaredClasses = sizeof(get_declared_classes() set by PHP in initialize.php

ModLanguages:: fixed the order of loading languages

ModLanguage modified for auto fallback to DEFAULT_LANGUAGE
globalExceptionHandler added AppException, SecurityException, SecDirectoryTraversalException
Errormessage for old class.database modified

fixed Errorhandling for old class.database

Drop tables in installer fixed
Twig_Autoloader activated

some modifications concerning the new autoloader
Twig Template engine v.1.7.0
some droplets actualisized
unfinished changes in installer

last fixes for use of page_icon s.o.

! update upgrade-script, now don't overwrite existings values in settings
+ add field tooltip to table pages in installer
! change some module tool_icon.png (Tks to Stefek)
! add date_time string to backup_droplets.zip
- search and comment out founded require_once(WB_PATH."/framework/class.database.php"); ...

changed class Database into a Singleton-Class
added forgotten 'static' keyword in ModLanguage
removed version control from sm2 - include.php

some little corrections ModLanguage/Database/initialize.php

renamed file class.database.php to Database.php
renamed class database into Database
classes SecurityException and SecDirectoryTraversalException added in globalExceptionHandler.php
CoreAutoloader() added in initialize.php
new Constants 'WB_REL' and 'DOCUMENT_ROOT' in initialize.php...

1. validation fix in print_footer, class.database
   ! replace settings and default header

1. fixed backup_droplets working with php as Apache Module (Tks to Ruebenwurzel)
   ! update function rm_full_dir in /framework/functions.php
   ! To disable Run-time notices and receive warnings

1. fixed /framework/functions.php missing global $MESSAGE in function rebuildFolderProtectFile
   1

1. fixed add-ons upload error (tks to DBS)
   + add tool_icon.png to core module
   ! update outpu_filter success an error messages
   ! small redesign wb_themes
2. fixed old.format.inc.php fileformat to unix

added new global exceptionhandler (class AppException)

! settigs.php add fields dev_infos and page_icon_dir
+ add developer info to footer
! update class.admin.php, footer.htt

added new getter 'getQueryCount' in class database

add replyto to form module (see DEVINFOS)

fixed change_mode() against a very old problem with invalid calling arguments

fixed a little problem with chmod()

add argument 'replyTo' into class.wb::mail()

add additional exeptionhandling in globalExceptionHandler

+ move admin/themes/templates/ to admin/skel/themes/htt/
! and update class.wb.php, upgrade-script.php

+ Installer add const DEBUG to config.php
! move const DEBUG and var $starttime from index.php to initialize.php

config.php added define to set admin-directory

made handling of config.php a little bit more easy

! update correct_theme_source and fixed the call in all files

fixed function SanitizeHttpReferer() in consideration of subdirectories

little fixes in classs database and add new readonly property DbName

little designfix in forgot_form.php
fix media if uploading zip files with folder, than create FolderProtectFiles

fixed undefined fragment index in initialize.php
add $_SESSION['HTTP_REFERER'] storing active pagelink if page_id != 0

highly critical security-fix
announced on http://www.darksecurity.de/advisories/2012/SSCHADV2012-003.txt

little Typo-fix in database::SqlImport()

little Regex-fix in database::SqlImport()

added new method SqlImport() to class database

fix class.login, when name and pass are both empty, no longer call increase_attemps
some redirect updates in frontend account files

add linebreak in backend message for 'delete install folder...'

secureForm Fix for hosting with load balancing

typofix in function make_dir

! wb_quickSkin_28.php create _skin folders with folder protect file
! add a 3th parameter to function make_dir to allows the creation of nested directories specified in the pathname. Defaults to TRUE

+ add languages vars in languages files
+ add upload error mesages moduleinstall
+ add index.php if not exists in function createFolderProtectFile
! corrected changed coding between login_form and forgot_form

christmas time corrected wrong files

fix wrong background url in "Website Under Construction"

! changes in code modul
+ add function getTableEngine to class.database
+ add Quickskin to include folder
+ add reworkes Droplet SectionPicker to load modules frontend.css

new backend theme handling (Tks to Stefek)
some fixes in install

small changes in INSTALL and UPGRADE (Tks to unawave2)
update upgrade-script showing from Version to Version (Tks to unawave2)
add Servicepack version to header.htt

add new backend theme handling (Tks to Stefek)

account/signup.php, check if user is already logged
fix non object message in framework/functions.php

settings for pwgen updated

fixed strict notice warning in class.wb
change editor for intropage to editarea
add missing slash in themes

added new constant 'DO_NOT_TRACK' set to true if a client sends the DNT-Header

fixed field_remove

new class PasswordHash
new Password-/Hash-generator
(step to fix password-issues)

syntaxfix order::clean()

fixed order::clean()

change sql statements to strict in module droplets
fix vars in compatibility mode for versions before 2.8.1 in frontend.functions.php

fixed c&p mistake

removed stoneaged code from 2.4

little fix in calling globalExceptionHandler from inner core files

fixed secureform

activate globalExceptionHandler in inner core files

fix SQL-statements to SQL-strict

little fix in globalExceptionHandler

global exception handler activated

class.order completely recoded to reduce SQL requests
all other files: fix SQL-statements to SQL-strict

database::field_modify() there was a bug to fix
all other files: fixed SQL-statements to SQL-strict

move fixes 2.8.2 to 2.8.3
fixes will be shown in an extra readme
an package with the fixed files will be created
for all users who downloaded the 2.8.2 before 29 Jul-2011

! update DA language (Tks to Achrist)
! update some languages variables (Tks to Rübenwurzel, Testör)
! move function url_encode from admin/pages to framework/functions.php
! add missing svn properties in some headerinfos
! font-size correction in wb_theme (Tks to Rübenwurzel)

1. change lang variable to remove upgrade-script
   ! reworked add sections in pages
   ! fix set empty href in show_menu2
   ! set show_menu2 version to 4.9.6 ...

for security reasons the 'remember me' functionality is deaktivated in class login
'Get configuration values' is optimized

update jquery-min to version 1.6.2
update jquery-ui-min to version 1.8.14
fix index error in media upload (Tks to DBS)
add missing nopreview.jpg
update media browser not to show forbidden files
remove unused jquery archiv folder

bugfix in initialize including SecureForm
update admintools FTAN handling

fixed little bug in moveCssToHead()

fixed Ticket 1050 Bug in include/phpmailer/class.phpmailer.php with Lotus Notes
fixed Ticket 573, 939 Bad formatting of e-mail received from form submissions
fixed Ticket 1009 cannot change user password without changing Email in preference

class-switcher for SecureForm added

Ticket 833 fixed markup for table cells in view.php
change themes.css to make style more flexible in success.htt and error.htt
backend themes: add js function redirect_to_page(url, timer) to redirect without message

Preparing 2.8.2 stable, last tests

in /framework/functions.php::media_filename - replace whitespaces by _
/upgrade-script.php - some small fixes

remove auto including YUI Framework in backend for modules, enable with >print_footer(true)
>print_error and ->print_success too accept a message as array
auto validate in frontend if style block inside body tag
captcha now XHTML valide

bug fixed in class.database.php methode field_add in call field_exists
update search, pls test, (Tks to Thorn)

1. recoded /modules/admin.php info_banner, now compare with modify in pages
2. security fixes remove defined WB_PATH for backend templates
3. fixed class.admin.php missing $TEXT declaration, add get_section_details

add missing methode is_group_match in class.wb.php

fix entities converting in select languages (Tks to the community)
see http://www.websitebaker2.org/forum/index.php/topic,20547.msg140512.html#msg140512

add page position in get_page_details

update Argostheme to version 1.5 (Tks to Argos)
validation fixes
call edit_full_area on the fly

typo fix and simplify used_octets calculation in SecureForm::getFingerprint()

update SecureForm.php to work behind Proxies

YGN Ethical Hacker Group (2.8.2 / 2.9.0)

fixed wb::password_chars

secure peparing and beginning fix admin/pages

1. Security fix in account
2. Security fix in admin/media, thanks to hal 9000

recoded rediect timer in print_success (tks to Chio)