Otra version mas, parece ser que sera la "penultima" antes de
phpBB 2.2
Aqui esta el tema en cuestion creado por
Debe estar registrado para ver este enlace.
Se han fijado varios problemas:
[list:e275b583fc][*:e275b583fc]Fixed one vulnerability in admin_board.php - Xore
[*:e275b583fc]Added checking for proper session id characters to sessions and viewtopic to prevent injections - Bartlomiej Korupczynski
[*:e275b583fc]Fixed injection vulnerabilities possible with linked avatars
[*:e275b583fc]Implemented unsetting globalised variables
[*:e275b583fc]Limited confirm switch to POST variable in posting
[*:e275b583fc]Changed IP code in common.php to prevent IP spoofing
[*:e275b583fc]Updated visual confirmation
MOD [pre-edited files]
[*:e275b583fc]Moved obtaining word censors in modcp out of topic generation loop [increased performance/lower query count] - spotted by R45
[*:e275b583fc]Added the ability to link to https/ftps sites using the img bbcode tag
[*:e275b583fc]Fixed user online information in admin/index.php
[*:e275b583fc]Fixed getting group moderator in groupcp.php if running oracle backend - spotted by pakman
[*:e275b583fc]Fixed use of non-existing result variable in modcp (poster_id instead of user_id)
[*:e275b583fc]Fixed several vulnerabilities (XSS, SQL Injection and path disclosure) only possible with register_globals enabled - Matthew C. Kavanagh, Janek Vind
[*:e275b583fc]Fixed problem with SID not delivered to next page in groupcp.php[/list:u:e275b583fc]
