FYI…

- http://isc.sans.org/diary.php?date=2005-04-16
Updated April 16th 2005 23:55 UTC
"The "We know we are (not) furry" release includes both bugfixes and non-critical security issues. The changelog, shown below, is from the phpbb website.
- http://www.phpbb.com/phpBB/viewtopic.php?f=14&t;=281963
—–
-Hardened author and keyword search a bit to not allow very server intensive searches
-Fixed full path disclosure in bad word parsing
-Resetting complete userdata array in session code if authentication fails
-Fixed bug in moderator control panel where certain parameters could lead to an "error creating new session" sql error
-Fixed bug in session code where empty page ids could lead to an "error creating new session" sql error
-Fixed html handling in signatures if html is turned off globally
-Fixed install.php problem with PHP5 register_long_arrays option turned off
-Fixed potential issues with styling system
-Added correct class to login_body template file
-Removed file db/oracle.php from package
-Removed version number from message body page in /admin (if user is not an admin) - mikelbeck
-Fixed case-sensitivity issues in postgres7.php - R45
—– "
- http://www.phpbb.com/downloads.php

:blink: :oops: