Version 4.1.4 - Various Bug Fixes

Many bug fixes have been addressed and were already a part of the master branch. These include:

• Fix SQL injection exploit on account login and registration pages.
• Fix invalid path on TOS page.
• Added updated classes / races.
• Fixed many typo errors.
• Fixed missing images under several theme directories.
• Updated WoW Head URL.

Version 4.1.3 - Bug Fixes

Fixed issues on a few pages where strings were not escaped before inserting into the database. This caused an SQL error to be displayed and prevented the rows from being updated or inserted.

Version 4.1.2 - Bug fixes: updater, news, server info, remote-access, trinityore commands

Fixed database updater bug

• Issue found when looking for remote SQL or PHP files. Also added some debug information for troubleshooting.

Fixed string escape issue in admin -> news

• No string escape function was used on the message and subject for news entries so adding a single or double quote would break the query.

Fixed more info link on frontpage under server info

• URL was pointing to a nonexistent page when clicking the more info link on the home page. Links now properly redirect to correct server statistics page.

Disabled remote-include for DB updater script

• Default settings do not allow include to point to remote (http / https) files. Disabled this feature to prevent errors.
• Remote SQL udpates do not appear to work properly, temporarily disabling.

Fixed database count() function

• The count, otherwise known as num_rows, was implemented incorrectly. Fixed the issue to return proper counts.

Fixed password display for realm remote-access

• Remote-access password was shown in cleartext, changed it to be a password field.

Fixed issue with TrinityCore server commands page

• Commands were not displayed properly. Updated the logic to pull the allowed commands based on user's current gmlevel.

Fixed issue with locked accounts

• When requiring account activation is true the user must follow the provided link in email to help prevent bots from creating many accounts. If an admin were to set a users account to activated, or "unlocked", the user still wasn't able to login due to bug in the logic.

Fixed remote-access issues

• Remote access was left out of SQL queries for adding / updateing realms.
• Rewrote the RA socket class to be more user friendly and work with the new database structure.

Version 4.1.1 - Numerous Bug Fixes

Email system update, fixed bug with registration page.

• Replaced outdated mail delivery class with PHPMailer.
• Fixed #34 registration undefined index due to variable rename.
• Fixed #32 by disabling the DB Config admin link since this is no longer used.

Fixed account registration / activation issue

• Select query was being run against the wrong database. Corrected the issue which will now allow users to complete the registration process.
• Fixed issue with homepage Server Info & Users Online boxes …
• Fixed issue found where Server Info & Users Online did not display due to variable renaming.

Attempt to fix logout bug reported

• Cannot reproduce the logout issue however, this may fix the issue as seen by some users.

Fixed admin update page issue

• Update page always showed an update available due to file_exists not intended to be used on URLs. Update checks now work as intended.

Fixed issue with admin -> shop items

• Issue found where adding or editing shop items would fail due to type mismatch.

Fixed logout issue

• Fixed issue where users with FireFox browser were unable to logout.
• Rewrote the login/logout code to resolve the issue.

Version 4.1.0 - Database rewrite, Admin->Updates rewrite, General Cleanup

• Removed caching function
• Separated the MaNGOS Web database from the realm database
• Modified SQL install and update scripts
• Moved all configuration variables into the database (except the MWE database connection info)
• Updated module_char_rename config option to use new name.
• Deleted core\class.config.php - no longer used.
• Fixed SQL access in rss.php file.
• Added ability to sort admin->users & admin->chartools to make it easier to find entries. Still requires some work to incorporate multiple table lookups (e.g. sql joins for class/race).
• Rewrote the entire update system. No longer support updating the php files on the fly due to huge security risk.
• Created custom updater script which can be used for multiple versions.
• Changed install & update redirects to happen if directories exist. User should delete these directories when complete.

Version 4.0.8 - Added new templates, fixed XSS exploit

• Fixed XSS exploit issue in install script
• Added Mists of Pandaria template
• Added Burning Crusade template
• Fixed a few broken images

Version 4.0.6 - Players Online, SQL, Server Statistics Bug Fixes & Cleanup

Realm Players Online

• From the frontpage you can click on the number of users online for any given realm. This should take you to the usersonline page and show the respectful realm. The function to check, or set the current realm based on the link was missing so this was added.

General

• Identified several broken class references between Config & Core. This update fixes that and cleans up the variables and functions.

SQL installation file

• Added Server Statistics page
• Reordered entries
• Removed hard set item ID from insert statements, used NULL instead so DB will auto_increment

Server Statistics

• Removed unused lines of code
• Cleaned up top menu breadcrumb links

Players Online

• Cleaned up top menu breadcrumb links

Admin In Game Email & Character Tools

• Cleaned up the way the realm names were listed

4.0.4 - RSS, Login & Top Kills Cleanup

RSS function was broken. Cleaned it up to get it passing RSS validation.
Fixed Top Kills page - background was solid black for some reason. Updated it to be more clean using the standard table design and background.
Moved main content down to prevent login button from being covered up.

Version 4.0.2 - Account/User Page Updates

A lot of general code / user experience cleanup.
Admin->Ban account for period of time.
Admin->Add ban IP option.
Admin->Account list page -> clean up active (aka suspend) / banned status.
Admin->Created Ban List page showing all current account and IP bans in the database.

Version 4.0.0 Initial Release

This is the main initial release for MaNGOSWebV4. It does include a lot of changes/fixes/updates. Still in QA but wanted to get a copy out for everyone to use.