4images 1.7.3

[Jan]

Die neue Version 1.7.3 wurde soeben veröffentlicht und enthält ein paar neue Features und einige Bugfixes sowie alle Sicherheitsfixes.
Neue Features sind unter anderem RSS-Feeds und CAPTCHA-Schutz für Formulare (Kommentare, Registrierung etc.).
Wir empfehlen allen Nutzern ein Update auf die aktuelle Version. Alle Änderungen und Features sind in der Datei "docs/Changelog.txt" aufgelistet.

The new version 1.7.3 has just been released and contains a few new features and a lot of bugfixes as well as all security fixes.
New features are RSS-Feeds and CAPTCHA-Protection for Forms (Comments, Registration etc.).
We recommend all users to update to the current version. All changes and features are listed in "docs/Changelog.txt".

Download:
http://www.4homepages.de/4images/download.php

Demo:
http://www.4homepages.de/4images/demo.php

Für Feedback zur 4images 1.7.3 Version bitte diesen Thread nutzen.

Please use this thread for feedback about the 4images 1.7.3 version.

[Jan]

=========================================================
ChangeLog Version 1.7.3
=========================================================
- New feature: RSS Feeds (see docs/RSS.english.txt or docs/RSS.deutsch.txt)
- New feature: CAPTCHA protection of forms (see docs/CAPTCHA.english.txt or docs/CAPTCHA.deutsch.txt)
- New feature: Protection against hotlinking.
- Important security fixes (XSS and SQL injection issues)
- Small fix for <br> in postcard messages
- Small fix for parse errors when having <?xml in templates
- Fixed fatal error when third parameter of imagepng is higher than 9 with PHP5
- Fixed wrong sorting for next/prev image
- Fixed sharing sessions for multiple installations under the same domain
- Fixed bug for wrong bbcode url parsing
- Added new tag {image_url} which points to the detail page of an image and can be used in templates (ie. thumbmail_bit.html)
- Added EXIF support (similar to IPTC support, thanks to Dennis Häfner)
- Added rel="nofollow" attribute in automatically parsed urls (http://googleblog.blogspot.com/2005/01/preventing-comment-spam.html)
- Added support for {ifno ..} tags in addition to {ifnot ..}
- Added anchor for direct access to comments in comment_bit.html (ie. for RSS)
- Updated right-click-disable javascript in header.html to work with Firefox
- Updated url for ICQ detail pages (http://www.icq.com/people/about_me.php?uin=12345)
- Database errors are now shown to admins only. Users will get a general error message.
- Parsing of header and footer are  moved into template class to allow assigning vars to them during script runtime
- Bugfix: [1.7.2] Security fix for global.php (http://www.4homepages.de/forum/index.php?topic=12720.0)
- Bugfix: [1.7.1 / 1.7.2] Security fix for SQL injection in session.php (http://www.4homepages.de/forum/index.php?topic=12807.0)
- Bugfix: [1.7 - 1.7.2] Extra backslash in URLs ( http://example.com\/index.php ) (http://www.4homepages.de/forum/index.php?topic=12530.0)
- Bugfix: [1.7.2] Fehler bei Registrierung, wenn User bereits existiert (http://www.4homepages.de/forum/index.php?topic=12534.0)
- Bugfix: Weird problem when downloading from 4images (http://www.4homepages.de/forum/index.php?topic=12013.0)
- Bugfix: http://www.4homepages.de/forum/index.php?topic=8186.0

Neue Dateien / New Files:
---------------------------------------
- captcha.php
- includes/captcha_utils.php
- Folder: /captcha/
- rss.php

Geänderte Dateien / Changed Files:
---------------------------------------
- categories.php
- details.php
- download.php
- global.php
- lightbox.php
- index.php
- member.php
- postcards.php
- register.php
- search.php
- top.php
- includes/cache_utils.php
- includes/constants.php
- includes/db_mysql.php
- includes/functions.php
- includes/image_utils.php
- includes/page_header.php
- includes/sessions.php
- includes/template.php
- admin/admin_functions.php
- admin/admin_global.php
- admin/categories.php
- admin/checkimages.php
- admin/comments.php
- admin/email.php
- admin/home.php
- admin/images.php
- admin/thumbnailer.php
- admin/usergroups.php
- admin/users.php
- admin/validateimages.php

Sprache / Language:
---------------------------------------
- main.php
    new: $lang['captcha']
    new: $lang['captcha_desc']
    new: $lang['captcha_required']
    new: $lang['exif_datetime']
    new: $lang['exif_isospeed']
    new: $lang['exif_exposure']
    new: $lang['exif_aperture']
    new: $lang['exif_focallen']

Geänderte Templates / Changed Templates:
---------------------------------------
- comment_bit.html
- comment_form.html
- details.html
- footer.html
- header.html
- member_profile.html
- member_uploadform.html
- postcard_preview.html
- register_form.html

Neue Templates / New Templates:
---------------------------------------
- exif_bit.html
- rss.xml
- rss_item.xml
- images/rss.gif

[Jan]

Heres a detailed list of what changed in templates. If you use a  custom template pack, don't forget to add the new template files (exif_bit.html, rss.xml, rss_item.xml, images/rss.gif).

comment_bit.html

New (line 3):

Code: [Select]

   <a name="comment{comment_id}"></a>

comment_form.html

New (line 28):

Code: [Select]

                {if captcha_comments}
                <tr>
                  <td width="90" valign="top"><b>{lang_captcha}</b></td>
                  <td>
                    <a href="javascript:new_captcha_image();"><img src="{url_captcha_image}" border="0" id="captcha_image" /></a>
                    <br />
                    <input type="text" name="captcha" size="30" value="" class="commentinput" id="captcha_input" />
                    <br />
                    {lang_captcha_desc}
                  </td>
                </tr>
                {endif captcha_comments}

details.html

New (line 163, after {endif iptc_info}):

Code: [Select]

                  {if exif_info}
                  <br />
                  <table width="100%" border="0" cellspacing="0" cellpadding="1">
                    <tr>
                      <td class="bordercolor">
                        <table width="100%" border="0" cellpadding="3" cellspacing="0">
                          <tr>
                            <td class="head1" valign="top" colspan="2">EXIF Info</td>
                          </tr>
                          {exif_info}
                        </table>
                      </td>
                    </tr>
                  </table>
                  {endif exif_info}

New (line 183, after {if allow_comments}):

Code: [Select]

                  <a name="comments"></a>

footer.html

New (line 1):

Code: [Select]

{if has_rss}
<p align="center">
  <a href="{rss_url}"><img src="{template_url}/images/rss.gif" border="0" width="15" height="15" alt="{rss_title}" /></a>
</p>
{endif has_rss}


Replacement (line 29):

Code: [Select]

<p align="center">
  Powered by <b>4images</b> {script_version}
  <br />
  Copyright &copy; 2002 <a href="http://www.4homepages.de" target="_blank">4homepages.de</a>
</p>
<!--
<p align="center">
  <a href="http://validator.w3.org/check/referer"><img src="http://validator.w3.org/images/vxhtml10" height="31" width="88" alt="Valid XHTML 1.0!" border="0" /></a>
</p>
// -->

replaced by

Code: [Select]

{copyright}

header.html

Replacement (line 7):

Code: [Select]

<script language="javascript" type="text/javascript">
<!--
  function opendetailwindow() {
    window.open('','detailwindow','toolbar=no,scrollbars=yes,resizable=no,width=680,height=480');
  }

  function right(e) {
    if (navigator.appName == 'Netscape' && (e.which == 2 || e.which == 3)) {
      alert("© Copyright by {site_name}");
      return false;
    }
    else if (navigator.appName == 'Microsoft Internet Explorer' && (event.button==2 || event.button == 3)) {
      alert("© Copyright by {site_name}");
      return false;
    }
    return true;
  }
  document.onmousedown=right;
  if (document.layers) window.captureEvents(Event.MOUSEDOWN);
  window.onmousedown=right;
// -->
</script>

replaced by

Code: [Select]

<script language="javascript" type="text/javascript">
<!--
  var captcha_reload_count = 0;
  var captcha_image_url = "{url_captcha_image}";
  function new_captcha_image() {
    if (captcha_image_url.indexOf('?') == -1) {
      document.getElementById('captcha_image').src= captcha_image_url+'?c='+captcha_reload_count;
    }
    else {
      document.getElementById('captcha_image').src= captcha_image_url+'&c='+captcha_reload_count;
    }

    document.getElementById('captcha_input').value="";
    document.getElementById('captcha_input').focus();
    captcha_reload_count++;
  }

  function opendetailwindow() {
    window.open('','detailwindow','toolbar=no,scrollbars=yes,resizable=no,width=680,height=480');
  }

  function right(e) {
    if ((document.layers || (document.getElementById && !document.all)) && (e.which == 2 || e.which == 3)) {
      alert("© Copyright by {site_name}");
      return false;
    }
    else if (event.button == 2 || event.button == 3) {
      alert("© Copyright by {site_name}");
      return false;
    }
    return true;
  }

  if (document.layers){
    document.captureEvents(Event.MOUSEDOWN);
    document.onmousedown = right;
  }
  else if (document.all && !document.getElementById){
    document.onmousedown = right;
  }

  document.oncontextmenu = new Function("alert('© Copyright by {site_name}');return false");

// -->
</script>

New (line 52):

Code: [Select]

{if has_rss}
<link rel="alternate" type="application/rss+xml" title="{rss_title}" href="{rss_url}" />
{endif has_rss}

member_profile.html

Replacement (line 31):

Code: [Select]

          <td class="row2">{if user_icq}<a href="http://wwp.icq.com/scripts/search.dll?to={user_icq}">{user_icq}</a> (<b>{user_icq_status}</b>){endif user_icq}</td>

replaced by

Code: [Select]

          <td class="row2">{if user_icq}<a href="http://www.icq.com/people/about_me.php?uin={user_icq}" target="_blank">{user_icq}</a> (<b>{user_icq_status}</b>){endif user_icq}</td>

member_uploadform.html

New (line 65):

Code: [Select]

          {if captcha_upload}
          <tr>
            <td class="row1" valign="top"><b>{lang_captcha}</b></td>
            <td class="row1">
              <a href="javascript:new_captcha_image();"><img src="{url_captcha_image}" border="0" id="captcha_image" /></a> <br />
              <input type="text" name="captcha" size="30" value="" class="commentinput" id="captcha_input" />
              <br />
              {lang_captcha_desc}
            </td>
          </tr>
          {endif captcha_upload}

postcard_preview.html

New (line 35):

Code: [Select]

  {if captcha_postcards}
  <br />
  <table width="450" border="0" cellspacing="0" cellpadding="1" align="center">
    <tr>
      <td valign="top" class="head1">
        <table width="100%" border="0" cellpadding="4" cellspacing="0">
          <tr>
            <td class="row1" valign="top"><b>{lang_captcha}</b></td>
            <td class="row1">
  <a href="javascript:new_captcha_image();"><img src="{url_captcha_image}" border="0" id="captcha_image" /></a> <br />
              <input type="text" name="captcha" size="30" value="" class="commentinput" id="captcha_input" />
              <br />
              {lang_captcha_desc}
</td>
          </tr>
        </table>
      </td>
    </tr>
  </table>
  {endif captcha_postcards}

register_form.html

New (line 65):

Code: [Select]

          {if captcha_registration}
          <tr>
            <td class="row1" valign="top"><b>{lang_captcha}</b></td>
            <td class="row1">
              <a href="javascript:new_captcha_image();"><img src="{url_captcha_image}" border="0" id="captcha_image" /></a> <br />
              <input type="text" name="captcha" size="30" value="" class="commentinput" id="captcha_input" />
              <br />
              {lang_captcha_desc}
            </td>
          </tr>
          {endif captcha_registration}