WB 2.08.x

Change Log

Please note: This change log may not be accurate

$Id$

Legend:

+ = Added

- = Removed

# = Bugfix

! = Update/Change

# fixed admin/settings, remove unknown variables

! FCKEditor remove som php endtags in connector

29 Aug-2012 Build 1719 Dietmar Woellbrink (Luisehahne)

! beginning update frontend account

! remove html markup from code

! update headerinfo

! change multi-dimensional arrays (variables) to similar arrays

! update droplets uninstall, upgrade

! add $database=WbDatabase::getInstance();

! update /examples/

29 Aug-2012 Build 1716 Dietmar Woellbrink (Luisehahne)

! update folder admin/settings admin/skel/htt

! change Template to div container

! forgot some files in folder admin

! update module form

! not auth users get no confirmation mail, but can print message

! add replyto to received messages, so answer is possible by e-mail client

! add pagination to submissionlist

! remove html markup from code to a template

! update folder admin/addons admin/skel/htt

! update folder admin/start, admin/admintools, admin/skel/htt

! update folder admin/groups, admin/users, admin/skel/htt

! update folder framework class.login, admin/login, admin/skel/htt

! update folder templates/wb_theme, templates/argos_theme,admin/skel/htt

! add new icons, recoded css

! update folder admin/pages, admin/skel/htt

! change multi-dimensional arrays (variables) to similar arrays

! change default templates, change code to new templates

# fixed save page option

! update headerinfo

! change os_version request if os is not windows

+ add overlib_mini.js to include/jquery/ will be needed for help

27 Aug-2012 Build 1703 Dietmar Woellbrink (Luisehahne)

! update headerinfo

! change multi-dimensional arrays (variables) to similar arrays

! /framework/class.frontend.php

! set $_SESSION['HTTP_REFERER'] to WB_URL if menu url is a registered page

! set some header("Location:.. to new method send_header(

! /framework/frontend.functions

! change multi-dimensional arrays (variables) to similar arrays

! method page_content, add parameter $echo true to print $content, false return $content

! change multi-dimensional arrays (variables) to similar arrays

+ add variables for backend-menu, header.htt and footer.htt

! Fixed IDKEY in Secureform.mtab to solve issues whith Security warnings

! on pages that used a lot of IDKEYS. (fixed by NorHei)

! optimize some methods

+ add method send_header, replace header('Location:...  with new method

+ if header send failed you get a manuell redirected link, so script don't break

# Bugfixed issues whith storing text for Search function on WYSIWYG module.

# Html tags where not filtered out.

27 Aug-2012 Build 1696 Dietmar Woellbrink (Luisehahne)

! move extra handling of menu links in index.php to the view.php of module menu links {Tks to NorHei)

# fixed $install_tables in install/save.php

+ add var $iPhpDeclaredClasses = sizeof(get_declared_classes() set by PHP in initialize.php

# fixed deprecated erigi in captcha

# corrected pageID in forwarding links

! changed request of permission to ami_group_member() and is_group_match()

# fixed the order of loading languages

! ModLanguage modified for auto fallback to DEFAULT_LANGUAGE

! globalExceptionHandler added AppException, SecurityException, SecDirectoryTraversalException

! Errormessage for old class.database modified

# fixed Errorhandling for old class.database

! update upgrade-script first remove access files in an existing pages folder

  before rebuilding them

! for security upgrade don't remove access files in root

# Drop tables in installer fixed

+ Twig_Autoloader activated

! some modifications concerning the new autoloader

+ Twig Template engine v.1.7.0

! unfinished change in installer

! some droplets actualisized

! last fixes for use of page_icon s.o.

06 May-2012 Build 1684 Dietmar Woellbrink (Luisehahne)

+ add field tooltip to table pages in installer

! change some module tool_icon.png (Tks to Stefek)

! add date_time string to backup_droplets.zip

- search and comment out founded require_once(WB_PATH."/framework/class.database.php");

- this will be never needed anymore and produce errors

! rename class.msg_queue.php in msgQueue.php to work with autokoader

+ add function format_message to class.wb.php

03 May-2012 Build 1683 Werner v.d.Decken(DarkViper)

# added forgotten 'static' keyword in ModLanguage

# removed version control from sm2 - include.php

03 May-2012 Build 1682 Werner v.d.Decken(DarkViper)

! reorganisation of default theme of oage-settings

+ added menu_icon_0 and menu_icon_1

! update show_menu2 to handle the new icon fields (see README.de|en.txt)

+ add new droplet 'iParentIcon' for use with the new icons

+ added new module-depending language files (not complete yet) in admin/pages

! renamed file class.database.php to Database.php

! renamed class database into Database

+ classes SecurityException and SecDirectoryTraversalException added in globalExceptionHandler.php

+ CoreAutoloader() added in initialize.php

+ new Constants 'WB_REL' and 'DOCUMENT_ROOT' in initialize.php

! class Database is able now to create multiple connections at same time

+ class ModLanguage added for easy handle of languages from modules

+ add tool_icon.png to admintools

# validation fix in print_footer, class.database

! replace settings and default header

27 Apr-2012 Build 1677 Dietmar Woellbrink (Luisehahne)

! upgrade-script insert or update page access files

# fixed backup_droplets working with php as Apache Module (Tks to Ruebenwurzel)

! update function rm_full_dir in /framework/functions.php

! To disable Run-time notices and receive warnings

# fixed /framework/functions.php missing global $MESSAGE in function rebuildFolderProtectFile

# fixed add-ons upload error (tks to DBS)

+ add tool_icon.png to core module

! update outpu_filter success an error messages

! small redesign wb_themes

# fixed old.format.inc.php fileformat to unix

18 Apr-2012 Build 1673 Dietmar Woellbrink (Luisehahne)

+ add send registation mail to systemadministartor

+ added new global exceptionhandler (class AppException)

17 Apr-2012 Build 1669 Werner v.d.Decken(DarkViper)

! settigs.php add fields dev_infos and page_icon_dir

+ add developer info to footer

! update class.admin.php, footer.htt

+ add folder /templates/round/title_images to work with page_icon

! update of installer and upgradescript for Revision 1664/1665

+ add fields page_icon, menu_icon_0, menu_icon_1 to pages

+ add settings values dev_infos and page_icon_dir

! update languages files

! update page_settings - CSS for wb_theme and argos_theme (for Rev.1664)

+ added additional rights for AdminUsers/ViewerUsers in /pages/page_settings

! /pages/settings2.php renamed into /pages/settings_save.php

! update round print.css for better output

+ added new getter 'getQueryCount' in class database

+ add new language vars

! add group_id to news group overview

# fixed Fatal error: Cannot redeclare show_wysiwyg_editor()

! more validation fixes in backend (Tks to Ruebenwurzel)

# fixed alternating row styles in droplet listing

! some validation fixes in backend

# fixed filter to serve malformed/nested HTML also.

+ add replyto to form module (see DEVINFOS)

# Fixed SERVER_EMAIL in languages, needs double brackets

! Installer redesign Step 2

# fixed change_mode() against a very old problem with

invalid calling arguments

! fixed path to globalExceptionHandler.php in wysiwyg

# fixed a little problem with chmod()

+ add argument 'replyTo' into class.wb::mail()

! rebranding banner.jpg and powered.jpg round template

# a litte fix in /admin/addons/index.php.

+ added unregister_Theme to CopyTheme::_doRollback()

+ added CopyTheme::_activateTheme()

+ add additional exeptionhandling in globalExceptionHandler

23 Mar-2012 Build 1646 Dietmar Woellbrink (Luisehahne)

# prevent from empty theme-name in CopyTheme::_SanitizeNewName()

+ added backend functions to copy themes and import htt-template files

  according to the the new theme fallback functionality

! update header info.php wb_themes

+ move admin/themes/templates/ to admin/skel/themes/htt/

! and update class.wb.php, upgrade-script.php

! optimize modules WYSIWYG for editors

+ config.php added define to set admin-directory

! made handling of config.php a little bit more easy

+ add missing language variables for the theme handling

! fallback signuo2.php revision 1633

! update language files and rework some core files (read DEVINFOS)

! compress mdcr.js

+ add DEVINFOS Instructions/Informations for modulecoder

08 Mar-2012 Build 1633 Werner v.d.Decken(DarkViper)

! small design update for wb theme, login und login_forgot

! FCKeditor Fallback not working with IE9

01 Mar-2012 Build 1630 Dietmar Woellbrink (Luisehahne)

01 Mar-2012 Build 1628 Dietmar Woellbrink (Luisehahne)

01 Mar-2012 Build 1627 Dietmar Woellbrink (Luisehahne)

# Fixed FCKeditor to work with IE9 (Tks to marmot for the source)

! started rebuild and reorganize the OutputFilter-System

! update correct_theme_source and fixed the call in all files

# fixed index warning in form modul (Tks to DBS)

# fixed FCKeditor to work in IE7/8, IE9 not tested

! redesign filemanager FCKeditor

! set Moduleversion to 2.9.7.1

# typofix in Droplet [ShowRandomWysiwyg]

# Droplet [SectionPiocker] fixed

+ Added new droplets [ShowWysiwyg] and [ShowRandomWysiwyg]

! forgot info.php

# fixed FCKeditor to work in IE9 (Tks to marmot)

! update module version to 2.9.7

# fixed function SanitizeHttpReferer() in consideration of subdirectories

! update INSTALL and UPGRADE instruction to 2.8.3 (Tks to Ruebenwurzel)

+ Validationfix, add qx_rawlang.php in quickSkin_alpha to solve

  <a> escaping malformed URI reference messages in javascript

! fixed magic_quotes_gpc=on, magic_quotes going to be removed in PHP6.

  and some hoster do not set it to off

# fixed tabindex in installer (Tks to Easyuser)

# fixed installer call in /admin/index.php

# little fixes in classs database and add new readonly property DbName

! Number of version and revision updated in branch.

11 Feb-2012 Build 1611 Werner v.d.Decken(DarkViper)

! Number of version and revision updated.

11 Feb-2012 Build 1610 Werner v.d.Decken(DarkViper)

! Version 2.8.3 tagged

! change Website Baker to WebsiteBaker in installer

09 Feb-2012 Build 1608 Dietmar Woellbrink (Luisehahne)

# typofix in /modules/form/view.php (Tks to jacobi22)

# some little changes and fixes in template allcss and round

+ add // register_frontend_modfiles('jquery'); to activate comment out

! Set version to 2.71

! login.php fallback to revision 1602

# fixed parse error in login.php

! fix local module reload and module manuell install

! forgot to upload login.php

! a quick simple stylesheet fix in wb_theme,

! little designfix in forgot_form.php

! fix media if uploading zip files with folder, than create FolderProtectFiles

# more fixed issues with get_magic_quotes_gpc and FCKeditor

! remove create and upload in FCKeditor Filemanager

! update all used files with redirect_url to $_SESSION['HTTP_REFERER']

# fixed undefined fragment index in initialize.php

! add $_SESSION['HTTP_REFERER'] storing active pagelink if page_id != 0

# fixed issues with get_magic_quotes_gpc and FCKeditor

# highly critical security-fix

# announced on http://www.darksecurity.de/advisories/2012/SSCHADV2012-003.txt

# fix form language vars for better understanding (Tks to Maverik)

! change request if HTTP_REFERER is not empty in logout.php

# fixed use of undefined constant fri in /form/view.php

# rebuild protectfile in pages/posts

# little Typo-fix in database::SqlImport(). (grummel)

# little Regex-fix in database::SqlImport().

! mod form: added request var to submit a request identifier.

! argument ?fri=12345 on GET-view will submit 'FormRequestId: 12345' by email

# fixed starting upgrade-script if missing revision in settings

# all module depending code removed, some little fixes, better integration for module-upgrade

+ module news: added sql-dump to create database tables

# module news: some little fixes in install/upgrade

+ added new method SqlImport() to class database

# fixed double table width in modify.php form module ((Tks to Ruebenwurzel)

19 Jan-2012 Build 1584 Dietmar Woellbrink (Luisehahne)

- remove scrollable table in overview form module

# wysiwyg module, fix issues with magic_quote_gpc if on

# form module, fix regex for radio and checkbox (Tks to Ruud)

! form module, make show submission table scrollable

# wysiwyg module some little typo fixes a.s.o.

! dropdown list to choose recipient for email confirmation

- remove unneeded input fields in form settings

# fixed warning in domain independend image links

# fixed save dirmode and filmode to 0 if not superadmin

# wysiwyg module changed to domain independend image links

# fixed captcha error message in form module

! set form module to version 2.8.4

+ add instruction README.de.txt in form module

! update jquery to jQuery 1.7.1 and jQuery UI 1.8.17

+ add automatically generated e-mail language form variable

! send confirmation mail with details to superadmin from SERVER_EMAIL

! send confirmation mail without details to sender from SERVER_EMAIL

! security fix, force SMTP Authentifikation

! server and email settings only for superadmin

# remove session_start() in /account/logout.php

!  added $module_directory to make quickskin directory changes dynamically

# possible errors on 'save password' fixed. Minimum length of password set to 6 chars

! fix show_menu2 2th parameter for template round and allcss (Tks to Ruebenwurzel)

! set fingerprint_with_ip_octets default to 2 in a new installation

# fix wbmailer_smtp_auth, could not be disabled after enabled

# fix class.login, when name and pass are both empty no longer call increase_attemps

! some redirect updates in frontend account files

! fixed:: detection of serverdefined charsets more different

# entities fixes in FI and TR languages files (Tks to Ruebenwurzel)

! add linebreak in backend message for 'delete install folder...'

! only superadmin can start the upgrade-script from backend

# secureForm Fix for hosting with load balancing

! upgrade script start automatically after uploading a new version and login to the backend

# remove backslash in $_CONFIG['extensions_dir']

# bugfix in forgot_form.php

# typofix in function make_dir

! wb_quickSkin_28.php create _skin folders with folder protect file

! add a 3th parameter to function make_dir to allows the creation of nested directories specified in the pathname. Defaults to TRUE

01 Jan-2012 Build 1554 Dietmar Woellbrink (Luisehahne)

! recoded  formmodul, add dropdown email_fromname_field

# fix mdcr.js $scriptLink to absolute url

! change separator breadcrumb admintools

+ add languages vars in languages files

+ add upload error mesages moduleinstall

+ add index.php if not exists in function createFolderProtectFile

! corrected changed coding between login_form and forgot_form

! update php mailer to version 5.2

! christmas time corrected wrong files

- remove quickSkin /temp/folder/ for a later solution

18 Dez-2011 Build 1547 Dietmar Woellbrink (Luisehahne)

18 Dez-2011 Build 1546 Dietmar Woellbrink (Luisehahne)

! update quickSkin

! update languages files

+ add /temp/quickSkin/ folder

! begin fixing sec_anchor in urls

15 Dez-2011 Build 1545 Dietmar Woellbrink (Luisehahne)

15 Dez-2011 Build 1544 Dietmar Woellbrink (Luisehahne)

# fix droplet sectionPicker

# fix install config.php not writeable

# check table droplet if empty import examples

# fix wrong background url in "Website Under Construction"

! change block BEGIN to LOOP in quickskin (Tks to Stefek)

! did some changes and fixes found by testers

! update phpmailer to version 5.1

! add table db engine in module install scripts

! some small updates in modules

! continue updating headerinfos, adding upgrade scripts to module

10 Dez-2011 Build 1536 Dietmar Woellbrink (Luisehahne)

+ add FolderProtectFile to quickskin

10 Dez-2011 Build 1535 Dietmar Woellbrink (Luisehahne)

+ add function getTableEngine to class.database

+ add Quickskin to include folder

+ add reworkes Droplet SectionPicker to load modules frontend.css

# /output_filter/filter-routines.php rel-URL Filter fixed for mailto-links

+ new backend theme handling (Tks to Stefek)

# some fixes in install

! small changes in INSTALL and UPGRADE (Tks to unawave2)

! update upgrade-script showing from Version to Version (Tks to unawave2)

+ add Servicepack version to header.htt

! add Instructions for droplets

! update templates allcss and round (Tks to Rübenwurzel)

+ Add UPGRADE Instructions

! Update INSTALL Instructions

! Optimize config.php handling for installation

+ add new backend theme handling (Tks to Stefek)

! rework login and show_menu in templates allcss and round

22 Nov-2011 Build 1527 Dietmar Woellbrink (Luisehahne)

# typofix in BG and RU

# fix versions compare upgrade from WB version 2.7

# fix fingerprint in secureform

! update jquery to version 1.7

# /modules/output_filter/filter-routines.php little fix to inserting mdcr.js

# /modules/form/view.php little fix depending from recoded output filter

! update jquery to version 1.6.4

09 Nov-2011 Build 1520 Werner v.d.Decken(DarkViper)

+ new filter for relative-URL added

+ some small fixes

! /admin/admintools/tool.php completely recoded

! /wb/index.php output_filter request changed to adopt new output_filter

! corrected properties

# fix SERVER_EMAIL in language files

# fix encoded text in sections.php

+ add missing image in argos_theme

+ add forgotten language variable

# typofix and changes in languages

# account/signup.php, check if user is already logged

# fix non object message in framework/functions.php

! outputfilter now check and add missing slash in empty href if relative urls are enabled

! settings for pwgen updated

# fixed strict notice warning in class.wb

! change editor for intropage to editarea

! add missing slash in themes

+ new constant 'DO_NOT_TRACK' set to true if a client sends the DNT-Header

# continue fixing frontend account

# fixed print_error exit in frontend account

# fixed field_remove

+ new class PasswordHash

+ new Password-/Hash-generator

# syntaxfix order::clean()

# fixed order::clean()

! change sql statements to strict in module droplets

! fix vars in compatibility mode for versions before 2.8.1 in frontend.functions.php

# fixed c&p mistake

- removed stoneaged code from 2.4

# sync working copy

# little fix in calling globalExceptionHandler from inner core files

# fixed secureform

! sync changelog

11 Aug-2011 Build 1496 Werner v.d.Decken(DarkViper)

! activate globalExceptionHandler in inner core files

# fix SQL-statements to SQL-strict

# Fixed save wrong template directory in database

# Ticket #1106 FatalError in groups module

# Ticket #1107 Deleting users not possible

  Change handling, first user will be set to inactive

  secound inactive user will be show in an extra dropdown

  and can now deleted from user table or reactivated

! comment out $email_body .= "\n\nIP: ".$_SERVER['REMOTE_ADDR'];

! set default  FCKConfig.FillEmptyBlocks to true

+ little fix in globalExceptionHandler

+ globalExceptionHandler activated

# class.order completely recoded to reduce SQL requests

# all other files: fix SQL-statements to SQL-strict

# database::field_modify() there was a bug to fix

# all other files: fix SQL-statements to SQL-strict

! rename config.php.bak to config.php.new

# fixed rss.php SERVER_EMAIL

! move fixes 2.8.2 to 2.8.3

! fixes will be shown in an extra readme

! an package with the fixed files will be created

! for all users who downloaded the 2.8.2 before 29 Jul-2011

! Changed version to 2.8.2

! preparing backend for the new installer

+ add SecureFormSwitcher (Admintool)

22 Jul-2011 Build 1478 Dietmar Woellbrink (Luisehahne)

! inactive user in dropwonlist are show with line-through

21 Jul-2011 Build 1477 Dietmar Woellbrink (Luisehahne)

! update some languages variables (Tks to Rübenwurzel, Testör)

! move function url_encode from admin/pages to framework/functions.php

! add missing svn properties in some headerinfos

! font-size correction in wb_theme (Tks to Rübenwurzel)

! optimize blacklist handling, add more separator ",#|;"

  set of a wildcard ".*?" e.g. ph.*? proof ext like php, php3, php4 etc.

! optimize blacklist handling, add more separator ",#|;"

  set of a wildcard ".*?" e.g. ph.*? proof ext like php, php3, php4 etc.

# fix strict warnings in media if default theme ist not Argos Theme

+ add new settings value in install, upgrade-script and core module

# change lang variable to remove upgrade-script

! reworked add sections in pages

! fix set empty href in show_menu2

! set show_menu2 version to 4.9.6

! reworked Droplet LoginBox, add redirect query

- remove unneeded folder js

! set Droplet to version 1.1.0

+ add checkboxes to change frontend absolute url to relative urls

! set output_filter version to 0.2

#  for security reasons the 'remember me' functionality is deaktivated in

   class login

!  'Get configuration values' is optimized

# found more backlinks to fix

- remove not working ftan in frontend

# fixed redirect in login procedure (Tks to mr-fan)

! update droplet LoginBox, additional parameter $redirect

# remove double config call in media (Tks to Testör)

# fixed version.php

! change to Release Candiate 7

# languages Typo fix (Tks to pcwacht)

! update intro, fixed saving

# fixed install/save.php (Tks to pcwacht)

! Forgotten upload changelog and version.php

07 Jul-2011 Build 1468 Dietmar Woellbrink (Luisehahne)

! update jquery-min to version 1.6.2

! update jquery-ui-min to version 1.8.14

# fix index error in media upload (Tks to DBS)

+ add missing nopreview.jpg

! update media browser not to show forbidden files

- remove unused jquery archiv folder

02 Jul-2011 Build 1467 Dietmar Woellbrink (Luisehahne)

# fix missing header for some error messages

01 Jul-2011 Build 1465 Dietmar Woellbrink (Luisehahne)

! update admintools FTAN handling

01 Jul-2011 Build 1464 Werner v.d.Decken(DarkViper)

# fixed Ticket 1050 Bug in include/phpmailer/class.phpmailer.php with Lotus Notes

# fixed Ticket 573, 939 Bad formatting of e-mail received from form submissions

# fixed Ticket 1009 cannot change user password without changing Email in preference

+ class-switcher for SecureForm added

! correct all misspellings on finnish language file (Tks to invisigoth)

# Ticket 1101, phtml|php5|php4|php|cgi|pl|exe|com|bat|src| will be hardcoded

  additional you can set more extension in settings extended in field rename_file_types

  rename_file_types now is a blacklist and will no longer be renamed to .txt

! update admintools modules to work with SecureForm Patch from NorHei

# Ticket 1099: change title for add_child_page in page tree

# Ticket 833 fixed markup for table cells in view.php

! change themes.css to make style more flexible in success.htt and error.htt

+ backend themes: add js function redirect_to_page(url, timer) to redirect without message

! Preparing 2.8.2 stable, last tests

+ add PL languages to news and captcha_control (tks to vixrealitum)

! update PL language for WebsiteBaker (tks to vixrealitum)

# fixed Bug-Ticket #1096: editing of files via modules/edit_module_files.php

# in /framework/functions.php::media_filename - replace whitespaces by _

# /upgrade-script.php - some small fixes

# fix target in admin/media/browse.php

# http://www.websitebaker2.org/forum/index.php/topic,21688.msg145812.html#msg145812

# Tks to the community

! change status to RC6

# replace eregi with pregmatch in search_modext (Tks to Thorn)

# small fix at calling of moveCssToHead() in /index.php

! cleanup some code in edit_module_files.php

# secure fix edit_module_files.php

# fix wb_wrapper_edit_area.php

! syncronice version (no data changes)

03 May-2011 Build 1446 Werner v.d.Decken(DarkViper)

# fixed validation of username in users and signup

# small validation fixes in backend themes

22 Apr-2011 Build 1444 Dietmar Woellbrink (Luisehahne)

! remove auto including YUI Framework in backend for modules, enable with ->print_footer(true)

! ->print_error and ->print_success too accept a message as array

! auto validate in frontend if style block inside body tag

! captcha now XHTML valide

15 Apr-2011 Build 1442 Dietmar Woellbrink (Luisehahne)

! update search, pls test, (Tks to Thorn)

# recoded /modules/admin.php info_banner, now compare with modify in pages

# security fixes remove defined WB_PATH for backend templates

# fixed class.admin.php missing $TEXT declaration, add get_section_details

# add missing methode is_group_match in class.wb.php

17 Mar-2011 Build 1439 Werner v.d.Decken(DarkViper)

# see http://www.websitebaker2.org/forum/index.php/topic,20547.msg140512.html#msg140512

# update NL language file (Tks to Argos)

+ add page position in get_page_details

11 Feb-2011 Build 1430 Dietmar Woellbrink (Luisehahne)

# add forgotten javascript variable

! update Argostheme to version 1.5 (Tks to Argos)

! validation fixes

! call edit_full_area on the fly

! validation fixes in wb_theme

! validation fixes

04 Feb-2011 Build 1425 Dietmar Woellbrink (Luisehahne)

# typo fix and simplify used_octets calculation

! add FINGERPRINT_WITH_IP_OCTETS to table settings

! update SecureForm.php to work behind Proxies

# fix Undefined index: WARN_PAGE_LEAVE

# YGN Ethical Hacker Group (2.8.2 / 2.9.0)

! update rel handling FCKeditor for urls

# remove new function see http://www.websitebaker2.org/forum/index.php/topic,20268.msg139557.html#msg139557

! add redirect timer description in settings.php

# fixed unsafe sql queries

# fixed unsafe sql queries

23 Jan-2011 Build 1414 Dietmar Woellbrink (Luisehahne)

! backend start warning if upgrade-script exists

# Bugfix for Ticket 900

# fixed wb::password_chars

# Bugfix for Tickets 965, 966 and 910

# Bugfix for build 1409

+ Ticket 1058 added warn_page_leave (currently only in wysiwyg)

# small changes in sm2menu() [SM2_NO_TITLE + SM2_XHTML_STRICT]

# various Security fixes, thanks to secunia and others

# Security fix to stop users from changing module contents without permission, thanks to Michael Schwarz

# Security fix (XSS) in form module, thanks to Michael Schwarz

# Security fix in pages

! small fix

! secure peparing and beginning fix admin/pages

21 Jan-2011 Build 1401 Frank Heyne (FrankH)

! fixed changelog

# Security fix in admin/media, thanks to hal 9000

# Ticket 1090 fix wrong translation

# Security fix in admin/admintools and admin/groups

! recoded rediect timer in print_success (tks to Chio)

19 Jan-2011 Build 1396 Werner von den Decken (DarkViper)

! remove header redirect and add a die message

# Security fix in admin/addons

! set construct to FRONTEND class.wb

! set 2.8.2 to RC5

# Bugfix in Security fix

! update headerinfos, change secure messages

# more Security fix for admin/pages

# fix class.wb

16 Jan-2011 Build 1386 Dietmar Woellbrink (Luisehahne)

16 Jan-2011 Build 1385 Frank Heyne (FrankH)

! Security fix in admin/pages

# Security fix for news module

# Some more Security fixes, thanks to Gerben van Veenendaal

# fix known error in drag and drop

! update admin/modules unpack handling, overwrite newer files

+ output fixings, known error in jsadmin will be fix later

# fix class.admin

! fixed inclusion of SecureForm

+ added IDNA/Punycode to  wb::validate_email()

# Security fix for modules jsadmin, menu_link and output_filter

# Security fix for WYSIWYG module

# Security fix for Wrapper module

# Security fix for Form module (new version is 2.8)

# bugfix for delete_field in Form module

# fixed headerinfos

10 Jan-2011 Build 1373 Dietmar Woellbrink (Luisehahne)

10 Jan-2011 Build 1372 Dietmar Woellbrink (Luisehahne)

# captcha patch (Tks to FrankH)

! update install, changed some default settings to enabled

06 Jan-2011 Build 1369 Dietmar Woellbrink (Luisehahne)

- delete class.secureform.php

+ add newest SecureForm

# fixed Call to a member function read() on a non-object in function register_frontend_modfiles

# securtiy fix in class.login

# see http://www.websitebaker2.org/forum/index.php/topic,20347.msg137554.html#msg137554

# fixed showing system_default for search_template

! added some functions

! set status to 2.8.2 RC3

! added function 'db_update_key_value()'

# Ticket #1053, Ticket #941 show_breadcrumb

! additional functions added in class.database

! sync languages files with 2.9.0.dev

! unzip addons now overwrite newer files

! show_menu2 display Title-attribute fixed

! tooltip added, change modul version to 4.9.5

28 Dec-2010 Build 1359 Dietmar Woellbrink (Luisehahne)

28 Dec-2010 Build 1358 Dietmar Woellbrink (Luisehahne)

# security fix: in path admin/pages/ - added FTAN check

! had to enhance parameter for getFTAN() in framework/class.secureform.php

# more little fixes in settings

! change to RC2

# security fix: remaining vulnerabilities mentioned in http://secunia.com/secunia_research/2010-90/

# security fix: in path admin/templates/ - added FTAN check

# security fix: in path admin/settings/ - added FTAN check

+ added admin/images

# fixed save handling settings entries

! local sync

! security fix: changed $section_required into $no_section_required (apparently used by no module at all)

# security fix: in path admin/users/ - added FTAN check

# security fix: remaining vulnerabilities mentioned in http://secunia.com/secunia_research/2010-91/

# security fix:           vulnerabilities mentioned in http://secunia.com/secunia_research/2010-92/

# security fix: remaining vulnerabilities mentioned in http://secunia.com/secunia_research/2010-93/

# same for upgrade templates

21 Dec-2010 Dietmar Woellbrink (Luisehahne)

# syntaxfix in initialize.php

+ add ini_set('display_errors', 1) (Tks to Thorn)

! update headerinfos

# fix save access rights in settings

# fix Droplet LoginBox fronend_signup (tks to Maverik)

# fix save user e-mail,

#	Ticket #999 wrong sql statement in admin/pages/index.php (Tks to Lucutus)

12-May-2010 Dietmar Woellbrink (Luisehahne)

-	remove admin/images

11-May-2010 Dietmar Woellbrink (Luisehahne)

+	Ticket #1005 add FR Language for the admin templates (Tks to quinto)

#	Ticket #998 fix German language file from mixture of du and Sie (Tks to Erpe)

!	see forum: JQuery und Backend-Theme

02-May-2010 Dietmar Woellbrink (Luisehahne)

02-May-2010 Dietmar Woellbrink (Luisehahne)

!	changes Backend javascripts from body to head

!	insert modulename in sections, even for missing module, you can style it with class selector: module_disabled

!	check for installed modules before loading in content

27-Apr-2010 Dietmar Woellbrink (Luisehahne)

27-Apr-2010 Dietmar Woellbrink (Luisehahne)

#	Fixed bug in /modules/admin.php

22-Apr-2010 Dietmar Woellbrink (Luisehahne)

!	Ticket #995 update jquery-ui.css and images (Tks to Ruebenwurzel)

+	add languages files for jquery datepicker (tks to Ralf)

!	Ticket #994 WYSIWYG editors sorted by name (tks to Aldus)

!	update class.login.php (tks to Ruud)

19-Apr-2010 Dietmar Woellbrink (Luisehahne)

18-Apr-2010 Dietmar Woellbrink (Luisehahne)

18-Apr-2010 Dietmar Woellbrink (Luisehahne)

!	litte fix to show GMT value in default view

!	fixed file_list

!	Update headerinfos admin/interface

!	styling in preference.htt in themes

14-Apr-2010 Dietmar Woellbrink (Luisehahne)

14-Apr-2010 Dietmar Woellbrink (Luisehahne)

#	Ticket #986 Typo inside the german language file

#	Ticket #982 Unnessesary heredoc causes on errors while installation!

#	Ticket #926/Ticket #928 Mail Notification on new user registration

14-Apr-2010 Dietmar Woellbrink (Luisehahne)

#	Ticket #983 Sorting order of modules and templates inside groups.php

#	Ticket #982 - Wrong use of heredoc-syntax in some language-files (BG, CS and HR) breaks the installation-process.

14-Apr-2010 Dietmar Woellbrink (Luisehahne)

14-Apr-2010 Dietmar Woellbrink (Luisehahne)

14-Apr-2010 Dietmar Woellbrink (Luisehahne)

#	Ticket #979 False PHP 4 requirements in install

#	Ticket #980 Usebility - Bug in the settings-interface