WB 2.08.x

1. fixed double content

1. fixed language uninstall, change mysql to strict
   ! secure fix for search update in settings, search_footer now can be empty
   ! change ->fetchRow() to ->fetchRow(MYSQL_ASSOC) in frontend.functions.php

1. fixed maintenance frontend

+ add maintance modus in backend

! change help mouseover to onclick in page settings only on help icon
+ add help to input filename
! /framework/initialize.php now accept _GET and _POST to set user language

+ add methode StripCodeFromText in class.wb to clean injection
! rebranding the admin/settings and security fixes
! a few new styling in backend wb_theme
! beginning aa lot of account changes like correction of $_SESSION indexe, security fixes
+ add head.load.min.js and head.min.js to /include/jquery/ to style HTML5 templates

1. fixed issues with database names
   WbDatabase::getTableEngine() changed SQL statement to strikt.
   ! remove empty warning box if you aren't sysadmin
   ! change order errorhandling in installation save.php
2. typofix in news/upgrade.php $MESSAGE
   ! Framework/frontend.functions.php change file_exists to is_readable

! recoded module news,form,wysiwyg upgrade to work with upgrade-script

1. fixed methode index_add in WbDatabase, always faild

! during Reformat/rebuild all existing access files in upgrade-script
root_parent will be set to page_id
! change multi-dimensional arrays (variables) to similar arrays in framework/functions.php

1. fixed Duplicate entry for key 'PRIMARY' if adding a new pageX
   search for ->page['root_parent'] == 0 in module and shoe_menu2 calls
   page['root_parent'] has always the page_id from the first adding new page in level

1. fixed issues with older table strucure for earlier WB installations

1. add prefix wb_ to class name for content container
   if module has the same name as a html markup e.g code

! add div container in page_content for each sections,
! update droplets SectionPicker, ShowWysiwyg and ShowRandomWysiwyg
! put sec_anchor in this div, sec_anchor fixed in all found files
sec_anchor default now set to "section_",
sec_anchor can't be empty for future developement

1. /form/view.php fixed wrong compare syntax

! replace more invalid char in secureform.mtab to work with settings_page

1. fixed missing $admin-print_header() by security warning
2. fixed secureform.mtab because settings_page failed

! change redirect logic for registered pages

! update folder framework class.login, admin/login, admin/skel/htt

! update headerinfo
! change os_version request if os is not windows

! /framework/class.frontend.php
! set $_SESSION['HTTP_REFERER'] to WB_URL if menu url is a registered page
! set some header("Location:.. to new method send_header(

! /framework/frontend.functions
! change multi-dimensional arrays (variables) to similar arrays
! method page_content, add parameter $echo true to print $content, false return $content

! change multi-dimensional arrays (variables) to similar arrays
+ add variables for backend-menu, header.htt and footer.htt

! Fixed IDKEY in Secureform.mtab to solve issues whith Security warnings
! on pages that used a lot of IDKEYS. (fixed by NorHei)

! optimize some methods
+ add method send_header, replace header('Location:... with new method
+ if header send failed you get a manuell redirected link, so script don't break

+ add var $iPhpDeclaredClasses = sizeof(get_declared_classes() set by PHP in initialize.php

ModLanguages:: fixed the order of loading languages

ModLanguage modified for auto fallback to DEFAULT_LANGUAGE
globalExceptionHandler added AppException, SecurityException, SecDirectoryTraversalException
Errormessage for old class.database modified

fixed Errorhandling for old class.database

Drop tables in installer fixed
Twig_Autoloader activated

some modifications concerning the new autoloader
Twig Template engine v.1.7.0
some droplets actualisized
unfinished changes in installer

last fixes for use of page_icon s.o.

! update upgrade-script, now don't overwrite existings values in settings
+ add field tooltip to table pages in installer
! change some module tool_icon.png (Tks to Stefek)
! add date_time string to backup_droplets.zip
- search and comment out founded require_once(WB_PATH."/framework/class.database.php"); ...

changed class Database into a Singleton-Class
added forgotten 'static' keyword in ModLanguage
removed version control from sm2 - include.php

some little corrections ModLanguage/Database/initialize.php

renamed file class.database.php to Database.php
renamed class database into Database
classes SecurityException and SecDirectoryTraversalException added in globalExceptionHandler.php
CoreAutoloader() added in initialize.php
new Constants 'WB_REL' and 'DOCUMENT_ROOT' in initialize.php...

1. validation fix in print_footer, class.database
   ! replace settings and default header

1. fixed backup_droplets working with php as Apache Module (Tks to Ruebenwurzel)
   ! update function rm_full_dir in /framework/functions.php
   ! To disable Run-time notices and receive warnings

1. fixed /framework/functions.php missing global $MESSAGE in function rebuildFolderProtectFile
   1

1. fixed add-ons upload error (tks to DBS)
   + add tool_icon.png to core module
   ! update outpu_filter success an error messages
   ! small redesign wb_themes
2. fixed old.format.inc.php fileformat to unix

added new global exceptionhandler (class AppException)

! settigs.php add fields dev_infos and page_icon_dir
+ add developer info to footer
! update class.admin.php, footer.htt

added new getter 'getQueryCount' in class database

add replyto to form module (see DEVINFOS)

fixed change_mode() against a very old problem with invalid calling arguments

fixed a little problem with chmod()

add argument 'replyTo' into class.wb::mail()

add additional exeptionhandling in globalExceptionHandler

+ move admin/themes/templates/ to admin/skel/themes/htt/
! and update class.wb.php, upgrade-script.php

+ Installer add const DEBUG to config.php
! move const DEBUG and var $starttime from index.php to initialize.php

config.php added define to set admin-directory

made handling of config.php a little bit more easy

! update correct_theme_source and fixed the call in all files

fixed function SanitizeHttpReferer() in consideration of subdirectories

little fixes in classs database and add new readonly property DbName

little designfix in forgot_form.php
fix media if uploading zip files with folder, than create FolderProtectFiles

fixed undefined fragment index in initialize.php
add $_SESSION['HTTP_REFERER'] storing active pagelink if page_id != 0

highly critical security-fix
announced on http://www.darksecurity.de/advisories/2012/SSCHADV2012-003.txt

little Typo-fix in database::SqlImport()

little Regex-fix in database::SqlImport()

added new method SqlImport() to class database

fix class.login, when name and pass are both empty, no longer call increase_attemps
some redirect updates in frontend account files

add linebreak in backend message for 'delete install folder...'

secureForm Fix for hosting with load balancing

typofix in function make_dir

! wb_quickSkin_28.php create _skin folders with folder protect file
! add a 3th parameter to function make_dir to allows the creation of nested directories specified in the pathname. Defaults to TRUE

+ add languages vars in languages files
+ add upload error mesages moduleinstall
+ add index.php if not exists in function createFolderProtectFile
! corrected changed coding between login_form and forgot_form

christmas time corrected wrong files

fix wrong background url in "Website Under Construction"

! changes in code modul
+ add function getTableEngine to class.database
+ add Quickskin to include folder
+ add reworkes Droplet SectionPicker to load modules frontend.css

new backend theme handling (Tks to Stefek)
some fixes in install

small changes in INSTALL and UPGRADE (Tks to unawave2)
update upgrade-script showing from Version to Version (Tks to unawave2)
add Servicepack version to header.htt

add new backend theme handling (Tks to Stefek)

account/signup.php, check if user is already logged
fix non object message in framework/functions.php

settings for pwgen updated

fixed strict notice warning in class.wb
change editor for intropage to editarea
add missing slash in themes

added new constant 'DO_NOT_TRACK' set to true if a client sends the DNT-Header

fixed field_remove

new class PasswordHash
new Password-/Hash-generator
(step to fix password-issues)

syntaxfix order::clean()

fixed order::clean()

change sql statements to strict in module droplets
fix vars in compatibility mode for versions before 2.8.1 in frontend.functions.php

fixed c&p mistake

removed stoneaged code from 2.4

little fix in calling globalExceptionHandler from inner core files

fixed secureform

activate globalExceptionHandler in inner core files

fix SQL-statements to SQL-strict

little fix in globalExceptionHandler

global exception handler activated

class.order completely recoded to reduce SQL requests
all other files: fix SQL-statements to SQL-strict

database::field_modify() there was a bug to fix
all other files: fixed SQL-statements to SQL-strict

move fixes 2.8.2 to 2.8.3
fixes will be shown in an extra readme
an package with the fixed files will be created
for all users who downloaded the 2.8.2 before 29 Jul-2011

! update DA language (Tks to Achrist)
! update some languages variables (Tks to Rübenwurzel, Testör)
! move function url_encode from admin/pages to framework/functions.php
! add missing svn properties in some headerinfos
! font-size correction in wb_theme (Tks to Rübenwurzel)

1. change lang variable to remove upgrade-script
   ! reworked add sections in pages
   ! fix set empty href in show_menu2
   ! set show_menu2 version to 4.9.6 ...

for security reasons the 'remember me' functionality is deaktivated in class login
'Get configuration values' is optimized

update jquery-min to version 1.6.2
update jquery-ui-min to version 1.8.14
fix index error in media upload (Tks to DBS)
add missing nopreview.jpg
update media browser not to show forbidden files
remove unused jquery archiv folder

bugfix in initialize including SecureForm
update admintools FTAN handling