Share

PHP Prayer Board and Prayer Board

File Release Notes and Changelog

Release Name: 0.52

Notes: Important security fixes for those running the program in an environment accessible by untrusted vistors (e.g., the Internet). HTML tags are not stripped. Form input is sanitized to prevent SQL injection.


Changes: RCS file: /cvsroot/phpprayerboard/prayerb/.htaccess,v Working file: .htaccess head: 1.1 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.1 keyword substitution: kv total revisions: 1; selected revisions: 1 description: ---------------------------- revision 1.1 date: 2003/10/03 16:31:47; author: andrewziem; state: Exp; Important security enhancements including those against SQL injection and XSS. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/COPYING,v Working file: COPYING head: 1.1 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.1 rel-0-5-1: 1.1 keyword substitution: kv total revisions: 1; selected revisions: 1 description: ---------------------------- revision 1.1 date: 2003/04/06 23:24:54; author: andrewziem; state: Exp; added COPYING and README ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/README,v Working file: README head: 1.5 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.5 rel-0-5-1: 1.2 keyword substitution: kv total revisions: 5; selected revisions: 4 description: ---------------------------- revision 1.5 date: 2003/10/04 15:24:25; author: andrewziem; state: Exp; lines: +44 -21 Updated documentation. Added a few comments. Corrected names in XML. ---------------------------- revision 1.4 date: 2003/06/28 20:09:24; author: andrewziem; state: Exp; lines: +35 -0 New installation instructions. Began XML support. ---------------------------- revision 1.3 date: 2003/05/12 22:56:30; author: andrewziem; state: Exp; lines: +2 -5 Updated documentation: it's no longer necessary to manually init db. Removed expiration HTTP header. It was dumb. Began implenenting configuration choice for initials or full names. ---------------------------- revision 1.2 date: 2003/04/12 15:29:59; author: andrewziem; state: Exp; lines: +13 -10 Renamed <prayerboard_global.inc> to <.php>. Added <prayerboard_cfg.php> to separate code and settings. Rewrote <prayerboard_db.php> to better abstract database. Commented out "DROP DATABASE" from <pb.sql> (duh). Fixed double escaping problem. Updated copyright notices. Spelling (proram->program). Added <UPGRADE> file. Added <README> file. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/UPGRADE,v Working file: UPGRADE head: 1.3 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.3 rel-0-5-1: 1.1 keyword substitution: kv total revisions: 3; selected revisions: 3 description: ---------------------------- revision 1.3 date: 2003/10/04 15:24:25; author: andrewziem; state: Exp; lines: +5 -0 Updated documentation. Added a few comments. Corrected names in XML. ---------------------------- revision 1.2 date: 2003/06/28 21:01:19; author: andrewziem; state: Exp; lines: +3 -0 Added and implemented full name / initials option. Fixed: will not query database when connection is bad. Clarified configuration. Added program branding (specifiy your org. name and URL). Removed GPL reference in footer (unnecessary). Began adding system error handling. Roughed-in XML support. ---------------------------- revision 1.1 date: 2003/04/12 15:29:59; author: andrewziem; state: Exp; Renamed <prayerboard_global.inc> to <.php>. Added <prayerboard_cfg.php> to separate code and settings. Rewrote <prayerboard_db.php> to better abstract database. Commented out "DROP DATABASE" from <pb.sql> (duh). Fixed double escaping problem. Updated copyright notices. Spelling (proram->program). Added <UPGRADE> file. Added <README> file. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/pb.sql,v Working file: pb.sql head: 1.4 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.4 rel-0-5-1: 1.2 rel-0-5: 1.1.1.1 start: 1.1.1.1 vendor: 1.1.1 keyword substitution: kv total revisions: 5; selected revisions: 3 description: ---------------------------- revision 1.4 date: 2003/10/03 16:35:02; author: andrewziem; state: Exp; lines: +4 -0 Index created wrong. ---------------------------- revision 1.3 date: 2003/06/28 19:42:18; author: andrewziem; state: Exp; lines: +18 -18 Ran dos2unix to fix cr/lf stuff. ---------------------------- revision 1.2 date: 2003/04/12 15:29:59; author: andrewziem; state: Exp; lines: +1 -1 Renamed <prayerboard_global.inc> to <.php>. Added <prayerboard_cfg.php> to separate code and settings. Rewrote <prayerboard_db.php> to better abstract database. Commented out "DROP DATABASE" from <pb.sql> (duh). Fixed double escaping problem. Updated copyright notices. Spelling (proram->program). Added <UPGRADE> file. Added <README> file. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard.css,v Working file: prayerboard.css head: 1.2 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.2 rel-0-5-1: 1.1.1.1 rel-0-5: 1.1.1.1 start: 1.1.1.1 vendor: 1.1.1 keyword substitution: kv total revisions: 3; selected revisions: 3 description: ---------------------------- revision 1.2 date: 2003/06/28 19:42:18; author: andrewziem; state: Exp; lines: +222 -222 Ran dos2unix to fix cr/lf stuff. ---------------------------- revision 1.1 date: 2002/06/28 01:40:37; author: andrewziem; state: Exp; branches: 1.1.1; Initial revision ---------------------------- revision 1.1.1.1 date: 2002/06/28 01:40:37; author: andrewziem; state: Exp; lines: +0 -0 imported sources ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard.php,v Working file: prayerboard.php head: 1.13 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.13 rel-0-5-1: 1.8 rel-0-5: 1.3 start: 1.1.1.1 vendor: 1.1.1 keyword substitution: kv total revisions: 14; selected revisions: 6 description: ---------------------------- revision 1.13 date: 2003/10/04 15:24:25; author: andrewziem; state: Exp; lines: +2 -0 Updated documentation. Added a few comments. Corrected names in XML. ---------------------------- revision 1.12 date: 2003/10/03 16:31:47; author: andrewziem; state: Exp; lines: +2 -1 Important security enhancements including those against SQL injection and XSS. ---------------------------- revision 1.11 date: 2003/06/28 21:01:19; author: andrewziem; state: Exp; lines: +36 -21 Added and implemented full name / initials option. Fixed: will not query database when connection is bad. Clarified configuration. Added program branding (specifiy your org. name and URL). Removed GPL reference in footer (unnecessary). Began adding system error handling. Roughed-in XML support. ---------------------------- revision 1.10 date: 2003/05/12 22:56:30; author: andrewziem; state: Exp; lines: +1 -6 Updated documentation: it's no longer necessary to manually init db. Removed expiration HTTP header. It was dumb. Began implenenting configuration choice for initials or full names. ---------------------------- revision 1.9 date: 2003/04/12 18:29:00; author: andrewziem; state: Exp; lines: +3 -1 Fixed that cache_html time not honored (either off or 10 minutes). ---------------------------- revision 1.8 date: 2003/04/12 15:59:10; author: andrewziem; state: Exp; lines: +4 -1 Caching is now optional. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard_cfg.php,v Working file: prayerboard_cfg.php head: 1.5 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.5 rel-0-5-1: 1.3 keyword substitution: kv total revisions: 5; selected revisions: 3 description: ---------------------------- revision 1.5 date: 2003/06/28 21:01:19; author: andrewziem; state: Exp; lines: +30 -2 Added and implemented full name / initials option. Fixed: will not query database when connection is bad. Clarified configuration. Added program branding (specifiy your org. name and URL). Removed GPL reference in footer (unnecessary). Began adding system error handling. Roughed-in XML support. ---------------------------- revision 1.4 date: 2003/05/12 22:56:30; author: andrewziem; state: Exp; lines: +5 -6 Updated documentation: it's no longer necessary to manually init db. Removed expiration HTTP header. It was dumb. Began implenenting configuration choice for initials or full names. ---------------------------- revision 1.3 date: 2003/04/12 15:59:11; author: andrewziem; state: Exp; lines: +4 -0 Caching is now optional. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard_db.php,v Working file: prayerboard_db.php head: 1.6 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.6 rel-0-5-1: 1.3 rel-0-5: 1.1 keyword substitution: kv total revisions: 6; selected revisions: 4 description: ---------------------------- revision 1.6 date: 2003/10/03 16:35:02; author: andrewziem; state: Exp; lines: +4 -1 Index created wrong. ---------------------------- revision 1.5 date: 2003/10/03 16:31:47; author: andrewziem; state: Exp; lines: +41 -18 Important security enhancements including those against SQL injection and XSS. ---------------------------- revision 1.4 date: 2003/06/28 21:01:19; author: andrewziem; state: Exp; lines: +5 -2 Added and implemented full name / initials option. Fixed: will not query database when connection is bad. Clarified configuration. Added program branding (specifiy your org. name and URL). Removed GPL reference in footer (unnecessary). Began adding system error handling. Roughed-in XML support. ---------------------------- revision 1.3 date: 2003/04/12 15:45:34; author: andrewziem; state: Exp; lines: +1 -1 Finished implementing new posting option. Posting can be disabled. Forgot to mention that autocreation was implemented for databases and tables. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard_expire.php,v Working file: prayerboard_expire.php head: 1.6 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.6 rel-0-5-1: 1.4 rel-0-5: 1.1.1.1 start: 1.1.1.1 vendor: 1.1.1 keyword substitution: kv total revisions: 7; selected revisions: 3 description: ---------------------------- revision 1.6 date: 2003/10/03 16:31:47; author: andrewziem; state: Exp; lines: +4 -2 Important security enhancements including those against SQL injection and XSS. ---------------------------- revision 1.5 date: 2003/06/28 19:42:18; author: andrewziem; state: Exp; lines: +91 -91 Ran dos2unix to fix cr/lf stuff. ---------------------------- revision 1.4 date: 2003/04/12 16:11:20; author: andrewziem; state: Exp; lines: +3 -2 Typo ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/Attic/prayerboard_global.inc,v Working file: prayerboard_global.inc head: 1.5 branch: locks: strict access list: symbolic names: rel-0-5: 1.4 start: 1.1.1.1 vendor: 1.1.1 keyword substitution: kv total revisions: 6; selected revisions: 6 description: ---------------------------- revision 1.5 date: 2003/04/12 15:33:33; author: andrewziem; state: dead; lines: +0 -0 Removed file which was renamed. ---------------------------- revision 1.4 date: 2002/06/30 00:59:48; author: andrewziem; state: Exp; lines: +136 -133 began database abstraction ---------------------------- revision 1.3 date: 2002/06/29 02:21:28; author: andrewziem; state: Exp; lines: +17 -0 improved error detection and reporting ---------------------------- revision 1.2 date: 2002/06/28 03:18:04; author: andrewziem; state: Exp; lines: +1 -6 added website url to footer ---------------------------- revision 1.1 date: 2002/06/28 01:40:36; author: andrewziem; state: Exp; branches: 1.1.1; Initial revision ---------------------------- revision 1.1.1.1 date: 2002/06/28 01:40:36; author: andrewziem; state: Exp; lines: +0 -0 imported sources ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard_global.php,v Working file: prayerboard_global.php head: 1.3 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.3 rel-0-5-1: 1.1 keyword substitution: kv total revisions: 3; selected revisions: 3 description: ---------------------------- revision 1.3 date: 2003/06/28 21:01:19; author: andrewziem; state: Exp; lines: +20 -5 Added and implemented full name / initials option. Fixed: will not query database when connection is bad. Clarified configuration. Added program branding (specifiy your org. name and URL). Removed GPL reference in footer (unnecessary). Began adding system error handling. Roughed-in XML support. ---------------------------- revision 1.2 date: 2003/05/12 22:56:30; author: andrewziem; state: Exp; lines: +3 -0 Updated documentation: it's no longer necessary to manually init db. Removed expiration HTTP header. It was dumb. Began implenenting configuration choice for initials or full names. ---------------------------- revision 1.1 date: 2003/04/12 15:29:59; author: andrewziem; state: Exp; Renamed <prayerboard_global.inc> to <.php>. Added <prayerboard_cfg.php> to separate code and settings. Rewrote <prayerboard_db.php> to better abstract database. Commented out "DROP DATABASE" from <pb.sql> (duh). Fixed double escaping problem. Updated copyright notices. Spelling (proram->program). Added <UPGRADE> file. Added <README> file. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard_post.php,v Working file: prayerboard_post.php head: 1.6 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.6 rel-0-5-1: 1.4 rel-0-5: 1.1.1.1 start: 1.1.1.1 vendor: 1.1.1 keyword substitution: kv total revisions: 7; selected revisions: 3 description: ---------------------------- revision 1.6 date: 2003/10/03 16:31:47; author: andrewziem; state: Exp; lines: +5 -3 Important security enhancements including those against SQL injection and XSS. ---------------------------- revision 1.5 date: 2003/06/28 19:42:18; author: andrewziem; state: Exp; lines: +118 -118 Ran dos2unix to fix cr/lf stuff. ---------------------------- revision 1.4 date: 2003/04/12 15:52:31; author: andrewziem; state: Exp; lines: +1 -1 Changed allow_post to allow_modify in <prayerboard_cfg.php>. Allow_modify will turn on/off posting and expiration now. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard_tip.php,v Working file: prayerboard_tip.php head: 1.6 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.6 rel-0-5-1: 1.2 rel-0-5: 1.1.1.1 start: 1.1.1.1 vendor: 1.1.1 keyword substitution: kv total revisions: 7; selected revisions: 5 description: ---------------------------- revision 1.6 date: 2003/10/03 16:37:47; author: andrewziem; state: Exp; lines: +3 -3 Help updated. ---------------------------- revision 1.5 date: 2003/10/03 16:31:47; author: andrewziem; state: Exp; lines: +1 -1 Important security enhancements including those against SQL injection and XSS. ---------------------------- revision 1.4 date: 2003/06/28 21:01:19; author: andrewziem; state: Exp; lines: +8 -1 Added and implemented full name / initials option. Fixed: will not query database when connection is bad. Clarified configuration. Added program branding (specifiy your org. name and URL). Removed GPL reference in footer (unnecessary). Began adding system error handling. Roughed-in XML support. ---------------------------- revision 1.3 date: 2003/06/28 19:42:19; author: andrewziem; state: Exp; lines: +76 -76 Ran dos2unix to fix cr/lf stuff. ---------------------------- revision 1.2 date: 2003/04/12 15:29:59; author: andrewziem; state: Exp; lines: +4 -4 Renamed <prayerboard_global.inc> to <.php>. Added <prayerboard_cfg.php> to separate code and settings. Rewrote <prayerboard_db.php> to better abstract database. Commented out "DROP DATABASE" from <pb.sql> (duh). Fixed double escaping problem. Updated copyright notices. Spelling (proram->program). Added <UPGRADE> file. Added <README> file. ============================================================================= RCS file: /cvsroot/phpprayerboard/prayerb/prayerboard_xml.php,v Working file: prayerboard_xml.php head: 1.4 branch: locks: strict access list: symbolic names: rel-0-5-2: 1.4 keyword substitution: kv total revisions: 4; selected revisions: 4 description: ---------------------------- revision 1.4 date: 2003/10/04 15:24:25; author: andrewziem; state: Exp; lines: +2 -2 Updated documentation. Added a few comments. Corrected names in XML. ---------------------------- revision 1.3 date: 2003/10/03 16:31:47; author: andrewziem; state: Exp; lines: +3 -2 Important security enhancements including those against SQL injection and XSS. ---------------------------- revision 1.2 date: 2003/06/28 21:01:19; author: andrewziem; state: Exp; lines: +59 -0 Added and implemented full name / initials option. Fixed: will not query database when connection is bad. Clarified configuration. Added program branding (specifiy your org. name and URL). Removed GPL reference in footer (unnecessary). Began adding system error handling. Roughed-in XML support. ---------------------------- revision 1.1 date: 2003/06/28 20:09:24; author: andrewziem; state: Exp; New installation instructions. Began XML support. =============================================================================