What's New
XMB 1.9.11
- MySQL Version Requirement Raised to 4.1.7.
New Features
- 0000276: Un-Backwards the Authentication Checks.
- - 0000040: Move More Code from header.php into elevateUser().
- - 0000023: Redesign the Language System.
- - 0000144: Language File Import Tool.
- 0000257: Context Sensitive Quick Jump.
- 0000240: Apply the same regex to avatar URLs as [img] URLs.
- 0000224: memcp.php?action=subscriptions Needs to be Multi-Paged.
- 0000258: Show Attachments and Thumbnails in Post Preview.
- 0000170: Add upload limit description to attachment templates.
- 0000074: Links for Each Post.
- 0000003: Require Authentication Before Password Change.
- 0000054: Rennovate the Search Feature.
- - 0000099: Censor Search Input From Non-Staff.
- - 0000147: Multi-Forum Search Selections.
- - 0000146: Subject-Only Search Option.
- - 0000145: Context-Sensitive Search Links.
- 0000055: Make Admin Icons Part of the Theme System.
- 0000056: [Meta] Search Engine Optimization.
- - 0000160: Change Footer Link Text.
- - 0000092: Add Sample robots.txt File to Distribution.
- - 0000235: Third Redirect in Viewthread Should Use Status 301.
- - 0000123: Implement Status 503 for bbstatus Option.
- - 0000268: Implement rel canonical.
- - 0000225: Redirect Guests to Login on Access Errors.
- - 0000175: Action=Printable Should Link Back to Thread.
- - 0000014: memcp, u2u links and prevent indexing of post and search.
- 0000171: Function Parameter Efficiency Review.
- 0000036: Members location sort.
- 0000077: New Tool to Fix Orphaned Posts.
- 0000017: Reorganize Member Management Tools.
- 0000018: Add Reg Form Description of Disallowed Chars for Usernames.
- - 0000062: Add Reg Form Case Sensitivity Explanation for Captcha.
- 0000244: MySQL Error Reporting Improvement.
- 0000027: [Meta] Overhaul the Attachment System.
- - 0000019: Enable Attachment Persistence for Post Previews.
- - 0000031: Thumbnails for Attached Images.
- - 0000028: Image Attachment Limit.
- - 0000030: Inline Attachment Caching.
- - 0000029: Multiple Attachments.
- - 0000198: Simultaneous Upload.
- - 0000032: Disk Storage Option for Attachments.
- - 0000116: Check for Output Corruption for Attachments.
- - 0000128: Thumbnails for Hotlinked Images.
- - 0000135: "Pretty" URLs for Attachments.
- - 0000137: Add New Attachment Options to Admin Panel.
- 0000158: Email Notices Should Always Include a Link.
- 0000004: Redesign Moderator Log System.
- 0000169: Members Before Guests in Whos Online.
- 0000150: Check for Output Corruption for Captcha.
- 0000069: New setting & default: IP banning Disabled.
- 0000100: Allow HTML in Board Rules.
- 0000129: Implement New $full_url Checking in Installer.
- 0000006: U2U Popup Alert.
- 0000151: Check for Output Corruption at End of header.php.
- 0000068: Add DEBUG logic to check if the $full_url is correct.
- 0000084: Implement Optional Logging for MySQL.
- 0000095: Add a Preview Button for Quick Replies.
- 0000098: All NUL Bytes Should Be Filtered From User Input.
Bugs added in version 1.9.10 fixed in 1.9.11
- 0000008: Newsletter E-Mails Are Corrupted.
- 0000215: Uninitialized Variable in Memcp.php.
- 0000109: User Access List problems.
- 0000132: SQL File Upload May Cause Unexpected Errors.
- 0000157: Invalid Argument Warning in cp.php.
- 0000239: MySQL version mismatch during installation, while this is not true..
- 0000105: Existing User With Restricted Address Can't Edit Profile.
- 0000112: Off-By-One in Merge Reply Addition.
- 0000211: goto=search Still Generates &page=1.
- 0000075: Post error includes double header.
- 0000087: Icons for profile, website, find and u2u in viewthread_post template should have titles in them.
- 0000127: vtmisc.php Raises "Efficiency Notice" in Debug Mode.
Bugs added in version 1.9.9 fixed in 1.9.11
- 0000090: Uninitialized array $sqlsrch in misc.php.
- 0000125: $fids Not Initialized In stats.php.
- 0000152: Registered Global $permsNew in cp.php.
- 0000168: Uninitialized Variables in Userlist Checking.
- 0000049: Remove DEBUG_ALL.
- 0000119: Super Administrator Permissions Not Always Applied.
- 0000124: forum.moderator Index Missing in Several Calls.
Bugs added in version 1.9.8 SP3 fixed in 1.9.11
- 0000122: Installer Adds HTML to Censors Table.
- 0000177: Smilies Don't Work With BBCode Off.
- 0000277: New Usernames Need to be Trimmed.
- 0000042: Literal \r\n in A.P. Template Selector.
- 0000045: Typeo In 404 Header.
- 0000108: Typeo in isValidFilename() Regex Pattern.
- 0000071: $THEME variable missing from function error().
Legacy bugs fixed in 1.9.11
- 0000011: Unable to Login on IIS Due to Cookie Problems.
- 0000107: Undisclosed vulnerability in captcha.inc.php.
- 0000009: socket_SMTP Injection Vulnerability.
- 0000051: Forum Management Should Be Non-Destructive.
- 0000096: Undisclosed vulnerability in BBCode.
- 0000120: Function forum() is Incorrectly Parameterized..
- 0000130: MIME Type Not DB-Safe in Attachment Inserts.
- 0000212: Uninitialized Variable $firstpage in cp2.php.
- 0000230: Unsanitized Input Paths in Who's Online.
- 0000237: Uninitialized Variable $newtemplatename in cp2.php.
- 0000254: Undisclosed vulnerability in header.php.
- 0000010: Theme Import Broken by PHP Bug 45283.
- 0000012: function Redirect() fails to halt script.
- 0000013: SMTP Errors in Windows Caused by PHP Bug 45305.
- 0000016: Add call to is_string() inside postedVar().
- 0000024: Upgrade Utility Will Not Allow Valid TABLEPRE Config.
- 0000025: Incomplete Validation of $tid in viewthread.php.
- 0000052: Finish the i/o overhaul of cp.php?action=members.
- 0000073: List BBCode insert deletes the message contents in Opera.
- 0000076: Posts Orphaned by Incorrect WHERE Command in viewthread.
- 0000094: Re-Write the Settings INSERT Query in cinst.php.
- 0000118: Search Fails to Check Forums.Status Value.
- 0000126: No Permissions Checking in memcp.php.
- 0000141: Copy Thread Doesn't Increment Member Post Counts.
- 0000142: Empty Thread Deletes all Attachments.
- 0000149: I/O Failure in [size] BBCode.
- 0000164: Email Address Validation Failure.
- 0000194: Database tools.
- 0000228: action=getip is supposed to be limited to admins.
- 0000265: Moderator Permissions Escalation.
- 0000007: Remove Extraneous GROUP BY From Queries.
- 0000015: imghash not initialized in post.php.
- 0000034: Long URLs Can Exceed Line Wrap Limit.
- 0000035: $boardurl does nothing, should be removed.
- 0000038: lastvisit not always recorded in members table.
- 0000039: Banned Member Profile Inconsistencies.
- 0000043: Fix Last Posts Uses Wrong Sort.
- 0000046: U2U Subjects Have Many Spaces After Re:.
- 0000050: viewthread should not rely on threads.replies.
- 0000053: The URL "Double Slash Problem".
- 0000057: Remove All page=1 Links.
- 0000058: Malformed Location Headers.
- 0000059: Filter out empty and dupe poll options.
- 0000061: Cancelled BBCode Prints "null".
- 0000067: action=printable URLs are not robot-exclusion compliant.
- 0000072: forumdisplay should throw status 404 for bad links.
- 0000089: Slashing is still broken in action=printable.
- 0000093: Slashing Still Broken in Profile->Forum Most Active In.
- 0000101: Vote Stuffing Check Isn't Working.
- 0000114: Board Status Effect Should Be More Restrictive.
- 0000131: Query Output is Not HTML-Safe in Debug Mode.
- 0000138: Quick Jump Should Not Be Seen if Index Perms Denied.
- 0000148: Orphaned Polls.
- 0000154: Redirected tids Use Invalid URL.
- 0000155: Report Post Doesn't Check Email Alert Settings.
- 0000167: Captcha settings should be disabled in debug mode.
- 0000179: action=online call to multi() is hosed.
- 0000186: Member List Multi Page Broken.
- 0000197: Group and Forum Views Should Include Name in Title.
- 0000199: Annonymous Login is not sticky.
- 0000210: Date Format Has No Default Value.
- 0000220: Default Theme Isn't Used if User's Theme is Missing.
- 0000226: Password Reset Should Not Be Allowed On Banned Accounts.
- 0000242: Invalid Use of fetch_array() in member.php?action=profile.
- 0000245: Unhandled Input: Prune all posts in topicadmin.php.
- 0000250: Remove Destructive Theme Writes From Primary Upgrade Script.
- 0000252: Links in reported post messages have wrong format..
- 0000264: XMB Forum User Impersonation - 2006-04-15.
- 0000270: ROOT Should Not Appear in forumJump().
- 0000271: Typo with the Email BBCode button.
- 0000282: Unable to Attach Files on IIS.
- 0000070: Search method should be GET.
- 0000115: Member List Uses Wrong Default Sort.
- 0000162: E-mail Privacy Default.
- 0000178: Align BBCode Breaks When Empty.
- 0000191: Duplicate Who's Online Entries.
- 0000203: Template Leading Whitespace is Inconsistent.
- 0000227: Unused $online Array Indexes Should Be Unset in misc.php.
- 0000232: Firefox BBcode Causes Linefeeds to Disappear.
- 0000256: PHP Notice Thrown by Invalid Registration.
- 0000274: Last Login Date Incorrect in Editprofile.
- 0000280: fixUrl() eats leading '(' char.
- 0000020: Users See Blank Notice When Board=Off.
- 0000022: Missing Translation, $lang[addressupdate].
- 0000079: editprofile doesn't display username.
- 0000110: Forum Admin Link Displayed to Non-Admins.
- 0000159: Hyperlink BBCode Nonsense.
- 0000234: today.php lastpost column doesn't match other areas.
- 0000033: message() calls nav() when header is false.
- 0000047: Wrong bgcolor used for quick reply captcha.
- 0000078: Remove "postsubject" from the post_edit template.
- 0000080: O.O.O. in Avatar Checking.
- 0000121: Unused globals in function postify().
- 0000161: member.php comment grammar.
- 0000251: Strange Params for postify() in topicadmin.php?action=split.