Major Forum Update (June 26, 2007)

Hello everyone. Today we brought you the major forum update, which is so huge that it's impossible to list all the changes. Our forum jumps directly from version 1.0.8 to version 1.1.3.

Here is the major update points for your referance (1/4 of all made updates. No kidding):

! Reporting a personal message needed some more sanitation. (PersonalMessage.php)
! Sending newsletters could cause a timeout on large boards. (ManageNews.php)
! Session fixation could in rare cases be applied - reported by David Vieira-Kurz. (Subs-Auth.php)
! Prevent recursive functions causing a stack overflow in PHP. (QueryString.php)
* Quick edit wasn't updating the subject correctly if it was the first message. (xml_topic.js)
! MySQL's utf8 collation mapped some characters as equal causing a database insert on posting a topic to go wrong in rare cases. (Subs.php)
! The HTML tag wasn't being properly escaped in the signature. (Subs-Post.php)
! Ensure locked topics aren't being editted by those without permission. (Post.php, xml_topic.js)
! Ensure bday3 is also set when checking birthdates. (Profile.php)
! Cookies were in some cases not stored on localhost. (Subs-Auth.php)

May 2007
--------------------------------------------------------------------------------
! ManageBans.php is required for changing ban status. (Mambo bridge/SMF_user_ban.php, SMF_user_unban.php)
+ Changed Mambo bridge to use new configuration object instead of $mosConfig variables. (Mambo bridge/several files)
! The login authenticator bot in Mambo was not logging in users. (Mambo bridge/SMF_login.php)
! Make sure the bridge doesn't rewrite the password in case of reserved names. (Mambo bridge/SMF_Register.php)
+ Have the bridge rewrite XML feeds to SEF URLs. (Mambo/Joomla bridges/smf.php)
! Update bridge version info. (Mambo/Joomla bridge/several files)
+ Added integrate_change_member_data, integrate_reset_pass, and integrate_delete_member hooks to Xoops bridge. (Xoops bridge/index.php)
! Updated Xoops bridge version. (Xoops bridge/xoops_version.php)
+ Added ability for admin to set specific URLs for login and logout redirection in Joomla bridge. (Mambo/Joomla bridge/several files)
+ Added Users Extended registration option to Mambo/Joomla bridge. (Mambo/Joomla bridge/several files)
! Cleaned up code that creates registration rewrites. (Mambo/Joomla bridge/smf.php, mod_smf_login.php, smf_integration_arrays.php)

April 2007
--------------------------------------------------------------------------------
! Allow the brd search paramter to be used in the url as a non array. (Search.php)
! mktree could potentially get itself into a loop. (Subs-Package.php)
! Attempt to stop loops on BBC parsing. (Subs.php)
! Sanitize input from the Joomla bridge registration, as the javascript check doesn't necessarily take care of it all. (Mambo/Joomla bridge/smf_registration.php)
+ Added AEC compatibility to Joomla bridge. (several files)
! Some HTML header information was missing from Joomla headers. (Mambo/Joomla bridges/smf.php, SMF_header_include.php)
! Fixed an undefined constant in e107 bridge language files. (e107 bridge/admin_smf_config.php, English.php, French.php)
+ Added mambots for several Mambo integration events. (Mambo 4.6 bridge/several files)
! Make sure the Mambo admin panel can populate the group arrays (Mambo 4.6 bridge/admin.smf.php)

March 2007
--------------------------------------------------------------------------------
! Joomla bridge was removing some semi-colons in URLs instead of converting them to SEF. (Joomla bridge/smf.php)
! Made bridged outgoing emails smarter when converting URLs. (Mambo/Joomla bridges/smf.php)
! Bridge wasn't using UTF-8 language files appropriately in certain circumstances (Joomla bridge/mod_smf_login.php, smf.php)
! Mambo 4.6 sometimes loads arrays as objects, invalidating output. (Mambo 4.6 bridge/admin.smf.php)
! Updated bridge version information (Joomla bridge/smf.xml)
! PHP 5.2.0 breaks the package manager. (Subs-Package.php)
! Searching for the end position in the package manager could fail. (Subs-Package.php)

February 2007
--------------------------------------------------------------------------------
! Fixed a remaining, if not extremely difficult to exploit, issue with downloads on IE - reported by Jessica Hope. (Display.php)
! Fixed to/bcc fields in Personal Messages not being htmlspecialchar'd - reported by Aria-Security team. (PersonalMessage.php)
! People with the manage_permissions could maybe abuse it. (ManagePermissions.php, ManageMembergroups.php)
! The path was sometimes wrong when installing a package. (Subs-Package.php)
! Display name can now be no longer than 60 characters as people were taking it too far! (Profile.php, Profile template)
& New error string for the above. (Errors language files)
! Quick edit would lose the old modified time if you made no changes. (Post.php)
! Password reminder was not respecting password strength. (Reminder.php)
! Retain all current theme settings when editing a different theme. (Themes.php)
! Try to ensure ID_MSG_LAST_VISIT is always set. (Load.php)
! Always send an alternative plain us-ascii text version of the body along with each mail for basic support of older mail clients. (Subs-Post.php)
! Convert non-ascii characters to entities for mails sent to yahoo addresses to assure characters are being displayed properly in yahoo's client. (Subs-Post.php)
! People upgrading from non-sha1 supporting PHP to new sha1 supporting PHP were having problems. (Subs-Compat.php, LogInOut.php)
& Fixed minor typos (Manual language files, Login language files)

January 2007
--------------------------------------------------------------------------------
! An error sometimes got generated around visual verification. (Register.php)
! Fixed undefined index error in search. (Search.php)
! Fixed error when deleting boards in some instances. (ManageBoards.php)
! Merging a topic wouldn't always work if using $_GET. (SplitTopics.php)
* Javascript wasn't working right when adding a poll. (Poll template)
& Updated copyright dates. (index language files)
+ Added a setting for toggling the complexity of the visual verification image used on registration (etc). (ManageRegistration.php, Register.php, Subs-Graphics.php, Register template)
& Added language entries for above. (Login language files)
! Quick modifying HTML posts would mess up linebreaks. (Post.php)
! The package manager wasn't uninstalling "end" searches correctly. (Subs-Package.php)
! Package manager was wrongly labelling redirects. (Packages.php)
! Inside of html tags convert  to a real newline. (Subs.php)
! Resend activation after email change did not work with Joomla bridge (Joomla bridge/smf.php)
! Fixed language synch for login module on non-forum pages (Joomla bridge/mod_smf_login.php)
! It was not possible to remove a partial custom index. (ManageSearch.php)
! Fixed a bug in PCRE causing regular expression compilation failures in UTF-8 mode. (Load.php, Search.php, Subs.php, Subs-Members.php, Subs-Post.php)
! If an email had a quote in it sending a newsletter would fail. (ManageNews.php)

December 2006
--------------------------------------------------------------------------------
! Wrong capitalization on a couple of function calls. (PersonalMessage.php, Profile.php)
! Some bridge registration functions were still using deprecated constants. (Mambo 4.6 bridge/smf_registration.php)
! Users should never be redirected by to registration and activation pages on login (Mambo/Joomla bridge/smf.php)
! Do not allow 0, 0px, or 0pt to be used in size tags. (Subs.php)
+ Added e107 bridge. (Several files)
! Fixed a bug with the to and bcc fields for PMs that could cause some problems when displaying an invalid name. (PersonalMessage.php)
+ Added delete member and change member data integration hooks to e107 bridge. (e107 bridge/smf.php)
+ Added an "Upgrade" tab to the Mambo/Joomla bridge config page. (several files)
! Fixed multi-language support for Mambo/Joomla bridge login module on non-forum pages. (Mambo/Joomla bridge/mod_smf_login.php)
+ Added register mambot to Mambo 4.6 bridge so that users who register in Mambo are auto-created in SMF. (Mambo 4.6 bridge/SMF_register.php, SMF_register.xml)
! Fixed bridge registration so that it uses Mambo 4.6's new language method. (Mambo 4.6 bridge/smf_registration.html.php)
! The regular expression used for parsing '/me'-lines didn't work properly in older PHP versions. (Subs-Post.php)
! Fixed usage of array before it was declared (Load.php)
! Mambo/Joomla bridge config should go to main admin page if "Cancel" is clicked (Mambo/Joomla bridge/admin.smf.php)
! Fixed a missing global (Mambo 4.6 bridge/smf.php)
+ Changed the SEF handling in the bridge for use with third party Joomla SEF components (Mambo/Joomla bridge/smf.php)
+ Added Kindred's enhancements to the bridged whos online (Mambo/Joomla bridge/smf.php, smf_integration_arrays.php)
! Deleting a member in SMF deleted in Joomla, but not in Joomla's ACL (Mambo/Joomla bridge/smf.php)
! Bridge login module didn't handle language variables correctly. (Mambo/Joomla bridge/mod_smf_login.php)
! Some dates in the installation script were not MySQL STRICT compatible. (install-1.1.sql)
! Log the ban check IP in messages. (Subs-Post.php)
! It was possible for files to be sent with the wrong mime type - reported by Jessica Hope and rotwang. (Display.php)
* Search template looked a little odd on IE. (Search template)
* In prune boards the checkbox for stickies would toggle with the board selection. (Admin template)
! Send annoucements in slightly smaller chunks. (Post.php)
! Make it impossible to make guests too much like administrators. (ManagePermissions.php)
! Aposthophes in smiley directories would cause a SQL error. (ManageSmileys.php)
! Fixed labelling personal messages not being restricted to the current member. (PersonalMessage.php)
! In rare cases search didn't return any results, while it should have. (Search.php)
! Optimized a query in recent posts. (Recent.php)
! Image verification sound wouldn't always work in Firefox. (Subs-Sound.php)
! Caching user permissions was not always respecting deny permissions. (Load.php)
! Put in a fix for DST issues cropping up due to spanned events. (Calendar.php)
! PM labels were not being properly truncated. (PersonalMessage.php)
* Don't allow people to report their own Personal Message. (PersonalMessage template)

Legend:
--------------------------------------------------------------------------------
! Minor change or bugfix. (don't bother to log typos except between releases.)
* Change like above, but affects templates.
& Change that affects a language file. (make two if it affects templates too.)
+ Feature addition or improvement.
- Feature or option removal.