phpBB

Merge chmod changes into trunk

ok… i hope i haven’t messed too much with the code and everything is still working.
Changes:
- Ascraeus now uses constants for the phpbb root path and the php extension. This ensures more security for external applications and modifications (no more overwriting of root path and extension possible through insecure mods and register globals enabled) as well as no more globalizing needed.
- A second change implemented here is an additional short-hand-notation for append_sid(). It is allowed to omit the root path and extension now (for example calling append_sid(‘memberlist’)) – in this case the root path and extension get added automatically. The hook is called after these are added.

merging… again

some further fixes
- re-introduce grabbing random number from /dev/urandom

dumdidum… sorry. ;)

fixing some bugs

some bugs fixed

again, a lot of bug fixes

some fixes…

oi^2

Disable DEBUG by default, enable backtrace by default

fopen + fread + fclose -> file_get_contents

those were missing

fixing some bugs, most being submitted grammatical/spelling errors.

forgot to add true to the var_export function. :(

fix typo

some fixes today
- most important change is the consolidation of the display attachment functions; merging them together to have one function we need to call.

fix for bug #6140 (jabber not working)

by the power of math!

davidmj came up with a simpler (and working in all cases!) approach. :) Bow to him…

new mail_encode function to make sure we abide to the rfc but not split in-between of multibyte characters. The used method is not 100% accurate, but a good compromise between compatibility, conformance and performance.

ok, this should work now for mail() and smtpmail. We also removed the newline from the spacer for mail_encode due to php’s mail() function choking up on subjects with newlines.

let utf8 mails work again. I hope this is not giving problems for “strange” mail setups.

- make sure the sql layer for mysql always states mysql4 and get to mysql if using mysql < 4
- assign some default vars to email templates (we always need some basic ones)

- extend config checking to include check for writeable path
- removed not utilized user_allow_email column from schema
- removed inactive groups (they had no use at all, since inactive users are not able to login)
The only benefit those brought are distinguish users – but this is no longer needed too due to the inactive code present. This also allows us to retain group memberships as well as default settings for users being set inactive due to profile changes.
- rewrote user_active_flip to support multiple users and a mode, as well as coping with the aforementioned changes
- implemented updated jabber class to support SRV server records and for better jabberd2 support.
- jabber errors now logged to the error log with a full transaction
- fixed user_delete calls to include usernames where possible and also update last post information correctly
- implemented additioal checks to user management to cope with common mistakes
- On installation, guess the required mysql schema as best as possible. Users now only need to decide if they want to use the mysqli extension or not (mysqli selected by default) and no longer need to know their mysql version.
- founders do not need to re-activate their account on profile changes
- remove older session if re-authentication was successful (re-authentication always assigns a new session id)
- set the cookie directly instead of using php’s function
- added inactive_remind to see which users got deactivated because of reminders (or re-activation) sent out

hopefully not introduced too many bugs – those testing with CVS releases, please concentrate on user registration, activation, profile changes (email/password)...

- no more encoding mixture, say hello to UTF-8 (I’ll add a validation solution for PHP 4.3.3/4 ASAP) [side effect: fixes Bug #3762]
- take local server time into consideration for birthday/age calculation
- faster active topic search
- allow changing active topic time frame [Bug #4150]
- reload stylesheet on language change [Bug #4222]

some updates. Also adjusted the utf tools and normalizer more to our coding guidelines.

some bugfixes

make sure custom profile fields are created correctly on registration (#2225)

- fixed a few bugs
- added user_add() function
- check posted images ([img]) for same domain/scipt and php files
- auth_api.html updated to the coding guidelines look&feel
- introduced ability to force non page-updates (cron is using it)
- correctly resend coppa email

This looks a bit like an ugly hack, I know :(
But hopefully it will solve most of our encoding problems with jabber [Bug #1585]

- remove description from profile fields
- added disclaimer about DEBUG_EXTRA to the ACP (i think this is needed – some idiots might think it is wise to have this enabled on a production board. :) We may let it there for the Betas though, but it will be removed during the RC’s)
- some bugfixes

give location for missing email files for better support

- use php_uname(‘n’) instead of posix_uname and HTTP_HOST
- updated the authors file a bit

- allow searches for multibyte characters in fulltext_native
- use preg_quote safely

- fixed some bugs
- made sql schemas consistent
- added correct sequences and generators to sql schemas
- extended some rows to hold more data. This solves issues with multibyte characters and too short topic titles, names, etc.
- allow multibyte characters in usernames

- Bug 1104: fixed a typo ($necoding => $encoding)
- Bug 1139: active_topics now has a button to submit the “Display posts from previous ” form
- active_topics doesn’t return NULL rows anymore
- fix a padding bug in the search forum listing

- streamlined reports to consist of the feature set we decided upon (Nils, your turn now)
- use getenv instead of $_ENV (with $_ENV the case could be wrong)
- permission fixes (there was a bug arising with getting permission flags – re-added them and handled roles deletion differently)
- implemented max login attempts
- changed the expected return parameters for logins/sessions
- added acp page for editing report/denial reasons
- other fixes here and there

- mt_srand in unique_id working properly (swapped usec and sec)
- mt_srand in digest_md5 removed

- added acp_language (language pack management)
- minor adjustments to cope with PHP5.x

- fixing annoying queue bug

- added updated coding guidelines
- introduced is_registered and is_bot flags for correct determinition of guest/registered/bot users
- changed bot code to act on useragent || ip

- Documentation related changes
- added resend activation email dialog
- fixed issue in session code
- log failed/successful admin re-authentication/login
- fixed simple forum dropdown box (used in mcp and posting)

- a bunch of updates, most of them bbcode related

lets pm working again.

- added delete cookies link
- fixed global announcement links in viewforum
- do not display redirects in link forums as posts in forum overview

- put consoring and smilie processing into functions (we use them all over the place) for better changing and consistency.
- changed docs/AUTHORS to reflect the recent code re-use in functions_messenger.php
- pleasing the users a little bit more by using table constants. :D
- login box if “mode” is not allowed -> posting (thought about trigger_error integration, but we do not need this that often).

Wordwrap message

small change in handling recipients. ;)

my attempt to break things…

Don’t trigger_error when connect fails in queue, continue queue processing of next object on email/jabber failure

Minor changes

Updated the various “users of emailer”, fixed issue(!) of jabber using the email address as the uid, blah fixes, blah, blah di blah yakety smackety

oopsie, $fp no longer exists, using lock file instead