本站升級至version2.0.20

[野味大雄]

因有安全性更新及bug fix, 本網已經立即升級至2.0.20
讓大家, 也讓本網更有保障
謝謝大家

以下是是次更新內容：
[Fix] Prevent login attempts from incrementing for inactive users

[Fix] Do not check maximum login attempts on re-authentication to the admin panel - tomknight

[Fix] Regenerate session keys on password change

[Fix] retrieving category rows in index.php (Bug #90)

[Fix] improved index performance by determining the permissions before iterating through all forums (Bug #91)

[Fix] Better handling of short usernames within the search (bug #105)

[Fix] Send a no-cache header on admin pages as well as normal board pages (Bug #149)

[Fix] Apply word censors to the message when quoting it (Bug #405)

[Fix] Improved performance of query in admin_groups (Bug #753)

[Fix] Workaround for an issue in either PHP or MSSQL resulting in a space being returned instead of an empty string (bug #830)

[Fix] Correct use of default_style config value (Bug #861)

[Fix] Replace unneeded unset calls in admin_db_utilities.php - vanderaj

[Fix] Improved error handling in modcp.php

[Fix] Improved handling of forums to which the user does not have any explicit permissions - vanderaj

[Fix] Assorted fixes and cleanup of admin_ranks.php, now requires confirmation of deletions

[Fix] Assorted fixes and cleanup of admin_words.php, now requires confirmation of deletions

[Fix] Addition and editing of smilies can no longer be performed via GET, now requires confirmation of deletions

[Fix] Escape group names in admin_groups.php

[Sec] Replace strip_tags with htmlspecialchars in private message subject

[Sec] Some changes to HTML handling if enabled

[Sec] Escape any special characters in reverse dns - Anthrax101

[Sec] Typecast poll id values - Anthrax101

[Sec] Added configurable search flood control to reduce the effect of DoS style attacks

[Sec] Changed the way we create "random" values for use as keys - chinchilla/Anthrax101

[Sec] Enabled Visual Confirmation by default

[Change] Changed handling of the case where a selected style doesn't exist in the database

[Change] Changed handling of topic pruning to improve performance

[Change] Changed default forum permissions to only allow registered users to post in new forums

[月見鈴音]

嗯...
上面的跑馬燈還停留在1/31...=3=

[野味大雄]

QUOTE的問題已經修正
謝謝flytommy提供消息^^

[野味大雄]

詳細更新資料:
來源:竹貓星球會員jwxinst發表之文章
http://www.phpbb-tw.net/phpbb/viewtopic.php?t=43651

[Fix] Prevent login attempts from incrementing for inactive users
修正了那些 沒有通過認証的帳戶登入不成功的次數

[Fix] Do not check maximum login attempts on re-authentication to the admin panel - tomknight
這個有點不了解, 不過主要是把"最多attempt登入數"(後台)設定不需要通過重新確認....- -"

[Fix] Regenerate session keys on password change
當你改變了密碼, session keys就會自動刷新.....

[Fix] retrieving category rows in index.php (Bug #90)

[Fix] improved index performance by determining the permissions before iterating through all forums (Bug #91)
這個是一個修正, 如果你不允許某個人進入你的站, 現在2.0.20就修正了→從DB裡讀取後→以介定IP和會員資料→仍然不能進入論壇
(以前的BUG會影響到某些黑客仍然可以進入→讀取的時候再讀取了一次資料庫吧?)
同時也修正了"權限"下觀看到的"隱藏板面"

[Fix] Better handling of short usernames within the search (bug #105)
之前有會員反應不能搜尋 自己的名稱→太短→兩個字→"we"

[Fix] Send a no-cache header on admin pages as well as normal board pages (Bug #149)

[Fix] Apply word censors to the message when quoting it (Bug #405)
這個修正, 樓上卻有人稱會不能用引言.....

[Fix] Improved performance of query in admin_groups (Bug #753)
對於"查看群組"....做出修正

[Fix] Workaround for an issue in either PHP or MSSQL resulting in a space being returned instead of an empty string (bug #830)

[Fix] Correct use of default_style config value (Bug #861)
這個之前可能會影響到某些外掛的功能
好像 style select是其中一個嗎@@?

[Fix] Replace unneeded unset calls in admin_db_utilities.php - vanderaj

[Fix] Improved error handling in modcp.php

[Fix] Improved handling of forums to which the user does not have any explicit permissions - vanderaj

[Fix] Assorted fixes and cleanup of admin_ranks.php, now requires confirmation of deletions
新增在後台 "確認刪除等級"功能

[Fix] Assorted fixes and cleanup of admin_words.php, now requires confirmation of deletions
新增在後台"確認刪除過濾文字"功能

[Fix] Addition and editing of smilies can no longer be performed via GET, now requires confirmation of deletions
新增在後台"確認刪除表情符號"功能

[Fix] Escape group names in admin_groups.php
離開群組的名稱會出現在 admin_groups.php....?

[Sec] Replace strip_tags with htmlspecialchars in private message subject

[Sec] Some changes to HTML handling if enabled
這個對某些喜歡html的會很開心吧?
[Sec] Escape any special characters in reverse dns - Anthrax101

[Sec] Typecast poll id values - Anthrax101

[Sec] Added configurable search flood control to reduce the effect of DoS style attacks
這應該是保護search功能, 控制了 search→減低了對資料庫的損耗, →也減低了任何惡意性的seach攻擊吧?

[Sec] Changed the way we create "random" values for use as keys - chinchilla/Anthrax101

[Sec] Enabled Visual Confirmation by default
這也是3.X的新功能, 將外掛加了進去↑

[Change] Changed handling of the case where a selected style doesn't exist in the database

[Change] Changed handling of topic pruning to improve performance

[Change] Changed default forum permissions to only allow registered users to post in new forums
....只允許註冊會員登入後發表發章在"新建討論板"