# HG changeset patch
# User Dan
# Date 1182608213 14400
# Node ID 64e0d3d4cf14df3a06d45f1ae6cbfb3dd8e117c5
# Parent ad5986a53197eb55da849e9f15fc6ad86cc7763c
Emergency version change to 1.0rc3 to fix XSS vulnerabilities
diff -r ad5986a53197 -r 64e0d3d4cf14 ajax.php
--- a/ajax.php Sat Jun 23 09:55:58 2007 -0400
+++ b/ajax.php Sat Jun 23 10:16:53 2007 -0400
@@ -1,7 +1,7 @@
';
@@ -399,6 +400,7 @@
';
echo '
';
+ */
// User's own content
@@ -414,6 +416,8 @@
$this->err_page_not_existent();
}
+ /*
+
// Right sidebar
echo ' | ';
@@ -433,6 +437,8 @@
display_page_footers();
}
+ */
+
$this->send_headers = $send_headers;
unset($send_headers);
diff -r ad5986a53197 -r 64e0d3d4cf14 includes/pageutils.php
--- a/includes/pageutils.php Sat Jun 23 09:55:58 2007 -0400
+++ b/includes/pageutils.php Sat Jun 23 10:16:53 2007 -0400
@@ -1,7 +1,7 @@
load_theme('oxygen', 'bleu', false);
+$template->load_theme('stpatty', 'shamrock', false);
$modestrings = Array(
'welcome' => 'Welcome',
@@ -312,8 +313,8 @@
Welcome to Enano
- version 1.0 – stable
- also affectionately known as "banshee" :)
+ version 1.0rc3 – security release
+ also affectionately known as "druid" :)
Array('1.0RC1'),
'1.0RC1' => Array('1.0RC2')
);
-$this_version = '1.0';
+$this_version = '1.0RC3';
$func_list = Array(
- '1.0b4' => Array('u_1_0_RC1_update_user_ids', 'u_1_0_RC1_add_admins_to_group', 'u_1_0_RC1_alter_files_table', 'u_1_0_RC1_destroy_session_cookie', 'u_1_0_RC1_set_contact_email', 'u_1_0_RC1_update_page_text'),
- '1.0RC2' => Array('u_1_0_populate_userpage_comments')
+ '1.0b4' => Array('u_1_0_RC1_update_user_ids', 'u_1_0_RC1_add_admins_to_group', 'u_1_0_RC1_alter_files_table', 'u_1_0_RC1_destroy_session_cookie', 'u_1_0_RC1_set_contact_email', 'u_1_0_RC1_update_page_text') // ,
+ // '1.0RC2' => Array('u_1_0_populate_userpage_comments')
);
if(!isset($_GET['mode']))
@@ -339,6 +339,7 @@
function u_1_0_populate_userpage_comments()
{
+ /*
global $db;
$q = $db->sql_query('SELECT COUNT(c.comment_id) AS num_comments...');
if ( !$q )
@@ -348,6 +349,7 @@
{
}
+ */
}
switch($_GET['mode'])
|