phpBB

Development Wiki

Release Highlights/3.1.4

From phpBB Development Wiki

This page highlights important changes in phpBB 3.1.4

Security and Hardening

  • Security: An insufficient check allowed users of the Google Chrome browser to be redirected to external domains (e.g. on login). Thanks to Mathias Karlsson (avlidienbrunn) for bringing this to our attention.
  • Hardening: The HTTP protocol version received via SERVER_PROTOCOL is now verifed to have the expected format. See PHPBB3-13765.

New Features

  • Events - More events have been added to the template and the php core

Notable Bug Fixes

  • Version check of extensions - File caching of extensions' version check file doesn't work
  • Fix links from /board - Append page name to base url if it doesn't contain it and the path ends without a trailing slash

Event changes

PHP Events (Hook Locations)

Identifier Placement Arguments Added in Release Explanation
core.acp_email_display includes/acp/acp_email.php exclude, template_data, usernames 3.1.4-RC1 Modify custom email template data before we display the form
core.acp_users_modify_profile includes/acp/acp_users.php data, submit, user_id, user_row 3.1.4-RC1 Modify user data on editing profile in ACP
core.acp_users_profile_modify_sql_ary includes/acp/acp_users.php cp_data, data, sql_ary, user_id, user_row 3.1.4-RC1 Modify profile data in ACP before submitting to the database
core.acp_users_profile_validate includes/acp/acp_users.php data, error, submit 3.1.4-RC1 Validate profile data in ACP before submitting to the database
core.approve_posts_after includes/mcp/mcp_queue.php action, notify_poster, num_topics, post_info, redirect, success_msg, topic_info 3.1.4-RC1 Perform additional actions during post(s) approval
core.approve_topics_after includes/mcp/mcp_queue.php action, first_post_ids, notify_poster, redirect, success_msg, topic_info 3.1.4-RC1 Perform additional actions during topics(s) approval
core.delete_topics_after_query includes/functions_admin.php topic_ids 3.1.4-RC1 Perform additional actions after topic(s) deletion
core.delete_topics_before_query includes/functions_admin.php table_ary, topic_ids 3.1.4-RC1 Perform additional actions before topic(s) deletion
core.disapprove_posts_after includes/mcp/mcp_queue.php disapprove_reason, disapprove_reason_lang, is_disapproving, lang_reasons, notify_poster, num_disapproved_posts, num_disapproved_topics, post_disapprove_list, post_info, redirect, success_msg, topic_information, topic_posts_unapproved 3.1.4-RC1 Perform additional actions during post(s) disapproval
core.display_forums_before includes/functions_display.php active_forum_ary, display_moderators, forum_moderators, forum_rows, return_moderators, root_data 3.1.4-RC1 Event to perform additional actions before the forum list is being generated
core.faq_mode_validation faq.php ext_name, lang_file, mode, page_title 3.1.4-RC1 You can use this event display a custom help page
core.get_unread_topics_modify_sql includes/functions.php last_mark, sql_array, sql_extra, sql_sort 3.1.4-RC1 Change SQL query for fetching unread topics data
core.markread_before includes/functions.php forum_id, mode, post_time, should_markread, topic_id, user_id 3.1.4-RC1 This event is used for performing actions directly before marking forums,
core.mcp_sorting_query_before includes/functions_mcp.php forum_id, limit_days, limit_time_sql, min_time, mode, sort_by_sql, sort_by_text, sort_days, sort_dir, sort_key, sql, topic_id, total, type, where_sql 3.1.4-RC1 This event allows you to control the SQL query used to get the total number
core.mcp_topic_review_modify_row includes/mcp/mcp_topic.php current_row_number, forum_id, id, mode, post_row, row, start, topic_id, topic_info, total 3.1.4-RC1 Event to modify the template data block for topic reviews in the MCP
core.obtain_users_online_string_modify includes/functions.php item, item_id, l_online_users, online_userlist, online_users, rowset, user_online_link 3.1.4-RC1 Modify online userlist data
core.obtain_users_online_string_sql includes/functions.php item, item_id, online_users, sql 3.1.4-RC1 Modify SQL query to obtain online users data
core.phpbb_content_visibility_get_visibility_sql_before phpbb/content_visibility.php forum_id, get_visibility_sql_overwrite, mode, table_alias, where_sql 3.1.4-RC1 Allow changing the result of calling get_visibility_sql
core.topic_review_modify_row includes/functions_posting.php cur_post_id, current_row_number, forum_id, mode, post_row, row, topic_id 3.1.4-RC1 Event to modify the template data block for topic reviews
core.ucp_pm_compose_modify_data includes/ucp/ucp_pm_compose.php action, delete, msg_id, preview, reply_to_all, submit, to_group_id, to_user_id 3.1.4-RC1 Modify the default vars before composing a PM
core.ucp_prefs_personal_data includes/ucp/ucp_prefs.php data, error, submit 3.1.0-a1 Add UCP edit global settings data before they are assigned to the template or submitted
core.ucp_profile_info_modify_sql_ary includes/ucp/ucp_profile.php cp_data, data, sql_ary 3.1.4-RC1 Modify profile data in UCP before submitting to the database
core.ucp_profile_modify_profile_info includes/ucp/ucp_profile.php data, submit 3.1.4-RC1 Modify user data on editing profile in UCP
core.ucp_profile_reg_details_data includes/ucp/ucp_profile.php data, submit 3.1.4-RC1 Modify user registration data on editing account settings in UCP
core.ucp_profile_reg_details_sql_ary includes/ucp/ucp_profile.php data, sql_ary 3.1.4-RC1 Modify user registration data before submitting it to the database
core.ucp_profile_reg_details_validate includes/ucp/ucp_profile.php data, error, submit 3.1.4-RC1 Validate user data on editing registration data in UCP
core.ucp_profile_validate_profile_info includes/ucp/ucp_profile.php data, error, submit 3.1.4-RC1 Validate user data on editing profile in UCP
core.ucp_register_data_after includes/ucp/ucp_register.php cp_data, data, error, submit 3.1.4-RC1 Check UCP registration data after they are submitted
core.ucp_register_data_before includes/ucp/ucp_register.php data, submit 3.1.4-RC1 Add UCP register data before they are assigned to the template or submitted
core.ucp_register_user_row_after includes/ucp/ucp_register.php cp_data, submit, user_row 3.1.4-RC1 Add into $user_row before user_add
core.user_active_flip_after includes/functions_user.php activated, deactivated, mode, reason, sql_statements, user_id_ary 3.1.4-RC1 Perform additional actions after the users have been activated/deactivated
core.user_active_flip_before includes/functions_user.php activated, deactivated, mode, reason, sql_statements, user_id_ary 3.1.4-RC1 Check or modify activated/deactivated users data before submitting it to the database
core.viewforum_get_topic_data viewforum.php forum_data, forum_id, sort_days, sort_dir, sort_key, sql_array, topics_count 3.1.0-a1 Event to modify the SQL query before the topic data is retrieved

Template Events

Identifier Prosilver Placement (If applicable) Subsilver Placement (If applicable) Added in Release Explanation
overall_header_navbar_before overall_header.html overall_header.html 3.1.4-RC1 Add content before the navigation bar
overall_header_searchbox_before overall_header.html 3.1.4-RC1 Add content before the search box in the header
posting_editor_bbcode_status_after posting_editor.html posting_body.html 3.1.4-RC1 Add content after bbcode status
posting_editor_smilies_after posting_editor.html posting_body.html 3.1.4-RC1 Add content after smilies
posting_editor_smilies_before posting_editor.html posting_body.html 3.1.4-RC1 Add content before the smilies
posting_pm_layout_include_pm_header_after posting_pm_layout.html 3.1.4-RC1 Add content after the include of posting_pm_header.html
posting_pm_layout_include_pm_header_before posting_pm_layout.html 3.1.4-RC1 Add content before the include of posting_pm_header.html
posting_poll_body_options_after posting_poll_body.html posting_poll_body.html 3.1.4-RC1 Add content after the poll options on creating a poll
search_results_header_after search_results.html search_results.html 3.1.4-RC1 Add content after the header of the search results
search_results_header_before search_results.html search_results.html 3.1.4-RC1 Add content before the header of the search results.
search_results_searchbox_after search_results.html search_results.html 3.1.4-RC1 Add content right after the searchbox of the search results.
ucp_profile_profile_info_before ucp_profile_profile_info.html ucp_profile_profile_info.html 3.1.4-RC1 Add options in profile page fieldset - before jabber field.
ucp_profile_profile_info_after ucp_profile_profile_info.html ucp_profile_profile_info.html 3.1.4-RC1 Add options in profile page fieldset - after custom profile fields.
ucp_profile_register_details_before ucp_profile_reg_details.html ucp_profile_reg_details.html 3.1.4-RC1 Add options in profile page fieldset - before first field.
ucp_profile_register_details_after ucp_profile_reg_details.html ucp_profile_reg_details.html 3.1.4-RC1 Add options in profile page fieldset - after confirm password field.
viewtopic_body_pagination_top_after viewtopic_body.html viewtopic_body.html 3.1.4-RC1 Add content after the pagination at top
viewtopic_body_postrow_post_details_after viewtopic_body.html viewtopic_body.html 3.1.4-RC1 Add content after the post details
viewtopic_body_postrow_post_details_before viewtopic_body.html viewtopic_body.html 3.1.4-RC1 Add content before the post details

ACP Template Events

Identifier Placement Added in Release Explanation
acp_users_profile_before acp_users_profile.html 3.1.4-RC1 Add content before the profile details when editing a user in the ACP
acp_users_profile_after acp_users_profile.html 3.1.4-RC1 Add content after the profile details but before the custom profile fields when editing a user in the ACP
acp_users_profile_custom_after acp_users_profile.html 3.1.4-RC1 Add content after the the custom profile fields when editing a user in the ACP