# HG changeset patch # User Dan # Date 1182608213 14400 # Node ID 64e0d3d4cf14df3a06d45f1ae6cbfb3dd8e117c5 # Parent ad5986a53197eb55da849e9f15fc6ad86cc7763c Emergency version change to 1.0rc3 to fix XSS vulnerabilities diff -r ad5986a53197 -r 64e0d3d4cf14 ajax.php --- a/ajax.php Sat Jun 23 09:55:58 2007 -0400 +++ b/ajax.php Sat Jun 23 10:16:53 2007 -0400 @@ -1,7 +1,7 @@ '; @@ -399,6 +400,7 @@ '; echo ''; + */ // User's own content @@ -414,6 +416,8 @@ $this->err_page_not_existent(); } + /* + // Right sidebar echo ''; @@ -433,6 +437,8 @@ display_page_footers(); } + */ + $this->send_headers = $send_headers; unset($send_headers); diff -r ad5986a53197 -r 64e0d3d4cf14 includes/pageutils.php --- a/includes/pageutils.php Sat Jun 23 09:55:58 2007 -0400 +++ b/includes/pageutils.php Sat Jun 23 10:16:53 2007 -0400 @@ -1,7 +1,7 @@ load_theme('oxygen', 'bleu', false); +$template->load_theme('stpatty', 'shamrock', false); $modestrings = Array( 'welcome' => 'Welcome', @@ -312,8 +313,8 @@
[ Enano CMS Project logo ]

Welcome to Enano

-

version 1.0 – stable
- also affectionately known as "banshee" :)

+

version 1.0rc3 – security release
+ also affectionately known as "druid" :)

Array('1.0RC1'), '1.0RC1' => Array('1.0RC2') ); -$this_version = '1.0'; +$this_version = '1.0RC3'; $func_list = Array( - '1.0b4' => Array('u_1_0_RC1_update_user_ids', 'u_1_0_RC1_add_admins_to_group', 'u_1_0_RC1_alter_files_table', 'u_1_0_RC1_destroy_session_cookie', 'u_1_0_RC1_set_contact_email', 'u_1_0_RC1_update_page_text'), - '1.0RC2' => Array('u_1_0_populate_userpage_comments') + '1.0b4' => Array('u_1_0_RC1_update_user_ids', 'u_1_0_RC1_add_admins_to_group', 'u_1_0_RC1_alter_files_table', 'u_1_0_RC1_destroy_session_cookie', 'u_1_0_RC1_set_contact_email', 'u_1_0_RC1_update_page_text') // , + // '1.0RC2' => Array('u_1_0_populate_userpage_comments') ); if(!isset($_GET['mode'])) @@ -339,6 +339,7 @@ function u_1_0_populate_userpage_comments() { + /* global $db; $q = $db->sql_query('SELECT COUNT(c.comment_id) AS num_comments...'); if ( !$q ) @@ -348,6 +349,7 @@ { } + */ } switch($_GET['mode'])