Bug
- The search operator for partial matches does not work
- Compare ORIG_PATH_INFO with SCRIPT_NAME for checking trailing paths
- Advertisement of feature release in red indicates a problem
Security
- Disallow trailing paths (e.g. using the PATH_INFO feature) to prevent path-relative CSS injection
- Correctly validate ucp_pm_options form key
Bug
- Problem with russian letter while converting from 2.0.x
- Allow changing allow_avatar_remote when images/avatars/upload is not writable
- BBCode - Unable to use a proper URI token
- Wrong return "Return to ACP"
- MSSQL Schema is not azure compatible
- Password change requirement notification in UCP is not noticable
- Searching for the term "test *" will highlight nearly every word and displays htmlspecialchars as htmlentities.
- XHTML is invalid when a forum link without redirect counter is present
- UNABLE_GET_IMAGE_SIZE text misleading for remote avatars
- Post editor information is not updated when user being deleted with posts
- Grammar errors in docs/./../support/documents.php?mode=readme&version=3
- SQL Azure does not allow SELECT FROM sysfiles
- HTML files containing certain tags being rejected as possible attack vectors with "Check attachment file" set to "No"
- Permission mask does not accurately show some forum permissions if user has MOD parmissions
- Updater notice "Update files are out of date..." when updating to unreleased version
- Error bbcode.html not found when updating with custom style inheriting from prosilver
- In Automatic Update, new language strings from install.php are only loaded from English
- SQL cache destroy does not destroy queries to tables joined
- "Fulltext native" search fooled by hyphens
- Prevent Private Message system from returning "Unknown folder" when inbox folder is full
- Cookies do not work for netbios domain
- Not checking for phpBB Debug errors on functional tests
- PHP Lint Test should exclude selected subdirectories of the build directory.
- Don't run lint tests on Travis on postgres
- generate_text_for_display() treats "0" as an empty string
- Inline css with color value in subsilver2
- Coding Guidelines document says to place a comma after every array element, but fails to do so itself
- Anti Abuse Headers missing for sendpassword
- Chrome 30 adds outline to focused elements
- Wrong comma usage "You are receiving this notification"
- Travis-CI webserver not matching PHP files with anything after the .php
- Closed reports may seem open in detailed view
- .htaccess not working for Apache 2.4
- Do not call exit after display_progress_bar in acp_forums
- Compatibility error in forum_fn.js: .live should be replaced with .on
- Travis Image are broken due to repository rename
- acp_inactive.html has hard-coded text
- Custom BBCodes Fail to Render Language Strings with a Number
- Keyboard shortcut alt+h doesn't work properly in firefox
- Missing word "send" in comment in schema_data.sql
- IE 11 javascript selection is no longer supported
- Add noindex meta tag to subsilver2 pm/topic view-print template
- Remove keywords and description meta tags from prosilver view-print templates
- Update docs/AUTHORS for 3.0.13-RC1
- Avoid endless loop in build script
- build/save directories are no longer created
- Binary files missing from update packages
- No error shown when attempting to delete a founder
- MCP should open "Reported posts" instead of PM Reports
- Add php 5.6 to travis tests
- Variables read from style.cfg etc. should be htmlspecialchared
- Custom Profile Field display bug
- dbtools::sql_create_table incorrectly throws error related to auto-increment length on non auto-increment fields
- SMTP username and password should not autocomplete during install
- develop-ascraeus build status missing from "Automated Testing" section in README.md
- User attachments in ACP are not displaying every attachment
- Day and Month of Birthday Misaligned When Editing
- Broken error message when selecting invalid DB driver
- db_tools::sql_unique_index_exists() has wrong doc block
- Update phpunit to 3.8+
- Add config_*.php and tests_config_*.php to .gitignore
- Set fast finish for .travis.yml
- Broken tests due to absolute exclude
- DB_TEST: Special chars are not supported.
- WRONG_FILESIZE contains broken placeholders
- Undefined offset error when phpinfo() disabled and debug enabled
- Undefined index: MISSING_INLINE_ATTACHMENT notice given when viewing post details
- Git commit hook should not require commit message to start with a capital letter
- Functional tests on Travis fail since php update last night
- Remote upload stuck in infinite loop if server sends keep-alive
- Update ACP_MASS_EMAIL_EXPLAIN language key
- ldap_escape() added to PHP 5.6.0
- Banned users cause infinite recursion
- Warning displayed in PHP 5.6 for mbstring.http_input
- Remember me cookie gets unset by admin reauthentication
- Tests fail when generating coverage report
- deregister_globals() does not work correctly when $_COOKIE['GLOBALS'] - is specified
- Correctly validate imagick path as path and not string
- PHP 5.2 Unit Tests no longer work due to deprecated PHPUnit PEAR channel
- Escape information received from version server
Improvement
- Add Smiley Buttons in Signature Editor
- Rename "Ban usernames" to "Ban users" in ACP
- Languages variables should be used, not hardcoded
- Copyright notice in overall_header.html is not translatable
- Show entered search query in the search box when no results are found.
- Check CRLF line endings in the test suite
- Drop tables for postgres in the test suite
- Running tests doc should mention dbunit dependency
- phing build script does not include vendor folder, even if there are dependencies
- Remove Quote and Edit button when topic is lock
- missing semi colons in css
- Topic reply notification email text change
- Add a link to user's posts in the ACP user overview page
- Document exceptions to "Disable Board" in ACP.
- Add color demo when editing a group from the UCP
- include poster's username in email notifications of posts that get approved by moderators
- Too many redundant tests are run on Travis
- Allow mbstring.http_input='' besides 'pass' for PHP 5.6 compatibility
Task
- Remove phpunit.xml.functional and always include functional tests
- Travis should check commit message format
- Upgrade package checksums from MD5 to SHA256
- Create package download links and checksums for announcement via script
- Add MariaDB tests to Travis-CI
- Add MariaDB to supported RDBMS list
- Use 'set -x' in Travis CI setup scripts
- Use PHP_BINARY environment variable in lint unit test
- Make sure each unit test runs on its own
- Remove Travis CI notification configuration
- Upgrade composer.phar to 1.0.0-alpha8
- Correctly setup HHVM functional tests on Travis CI
- Backport Travis CI HHVM environment enabling to develop-olympus.
- No longer allow Travis CI HHVM environment to fail
- Add tests for get_username_string()
- Run Travis CI HHVM tests against MySQLi instead of MySQL
- hhvm-nightly 2014.04.16~precise breaks tests
- Add Sami to composer dependencies and build script
- Strip away copyrighted ICC profile from images
- Move commit check and file executable checks to 5.3.3 build on travis
- Composer no longer downloads sami/sami and fabpot/goutte
Bug
- Empty message in deleted messages in PM history
- Clarify docs about is_dynamic not being updated by set_config()
- LOCAL_URL not enforced in bbcodes
- Mysql fulltext index creation fails due to partial collation change
- Hard coded language in sessions.php
- Bots can be sent private messages
- Fatal error in functional tests when server returns 404
- Modify the trigger language when you edit a PM
- A bug in mail queue processing
- UCP > PM > Compose > enumerated recipients > BCC group misses a (prosilver)
- Provide Firebird, Oracle, and increased MSSQL support in unit tests
- trigger_error is using the default style
- PM print template (prosilver) with unnecessary variables
- Display images directly in IE9 and 10 instead of download
- PostgreSQL dbal tests try to connect to the database named as user specified in configuration
- Functional tests are not mentioned in RUNNING_TESTS.txt
- If you add a member to a group, the form_token can be set to 0 if the creation_time is 0 too. Maybe even if creation_time is unchanged.
- Wrong redirect to installer from acp
- create_schema_files.php is not creating the oracle or postgres' schema file properly
- prosilver: attachment-link will be displayed wrong, when filename is too long
- m_approve should not imply f_noapprove
- board_email & board_contact are not validated as email addresses in ACP
- Bot Definitions are outdated
- docs/./../support/documents.php?mode=install&version=3 claims there are tar.gz packages
- Search Box should display keywords entered by the user
- PHPBB_USE_BOARD_URL_PATH not implemented in posting_gen_topic_icons
- Invalid email message ids because config variable server_name is used even when force server URL settings is disabled
- Return value of $db->sql_fetchrow() on empty tables is not consistent on mssqlnative
- Travis tests fail on Postgres because database does not exist
- The functional test case framework does not install a full board each time
- MSSQLnative driver contains debug code error_reporting(E_ALL)
- missing closing span in subsilver2 simple_footer.html
- Duplicated /TD in styles/subsilver2/template/catpcha_qa.html
- acp_users_overview.html has a wrongly placed </dd>
- prosilver: searching for users: no textbox for Jabber
- Missing mandatory space in meta http-equiv=refresh
- phpBB Footer Link should be SSL
- Update docs/AUTHORS for 3.0.12-RC1
- {FORUM_NAME} is not filled in login mask when logging into a password protected forum
- ATTACHED_IMAGE_NOT_IMAGE thrown because of file limit in php.ini
- modules table lacks acl_u_sig for signature module
- Coding guidelines: static public
- Composer not finding symfony/config in PHP 5.3.3
- database_update.php should not set error_reporting to E_ALL
- Database unit tests fail on windows using sqlite2
- Functional tests do not clear the cache between each test
- /includes/session.php sends 401 HTTP status with "Not authorized" instead of "Unauthorized"
- Database sequences are not updated for tests using fixtures with auto_incremented columns
- @return void -> @return null
- Anonymous can be selected as a PM recipient
- CRLF line endings
- .lock files are not in .gitignore
- Functional tests do not assert that board installation succeeded
- Travis functional test case errors
- Firebird tables are not removed correctly on 3.0.9-rc1 update
- "Could not open input file: ../composer.phar" error during phing's create-package
- Newlines removed in display of PM reports, no clickable links in PM reports
- "String offset cast occured" error on PHP 5.4
- check_form_key breaks in tests when form is submitted in the same second it is retrieved
- Loose string comparison during new password activation
- Incorrect error message when no user selected for action on group membership management page
- Success message even withot selecting a user and performing a group operation
- "Array to string conversion" error in $user->format_date()
- Functional tests should fail if any debug output is made
- Numbering is wrong in coding guidelines
- Installer incorrectly removes /install from script_path
- UCP group manage page's error box differs heavily from the rest of the UCP
- SQL error on UCP groups manage page caused by setting color to 7 characters long string
- Add admin_login() to 3.0 functional test case
- is_absolute() should not depend on DIRECTORY_SEPARATOR
- is_absolute() throws E_NOTICE for empty string
- Test fixtures do not support utf8 characters
- Untranslated TOO_SHORT in UCP "Manage Groups"
- Reporting a post should require a captcha to be solved by guests
- Functional tests fail with retrieving install pages using file_get_contents
- phpbb_dbal_order_lower_test::test_cross_join should be called test_order_lower
- Missing underscore after function prefix in validate_data()
- Add unit tests for validate_data()
- Avoid API Limit from composer downloads on github
- install/install_update.php should use version.phpbb.com instead of www
- Close database connections from tests whenever possible
- Allow manual resync of database columns in unit tests not only on fixture load
- git-tools use invalid api urls
- Functional tests fail when phpBB can not create the config file
- Missing U_ACTION in acp_captcha.php
- Template tests fail on some systems due to a PHP error in glob()
- get_remote_file() should use HTTP 1.0
- Improvements to the PHP lint pre-commit hook
- Skip phpbb_dbal_order_lower_test on MySQL 5.6
- "occured" should be "occurred"
- Replace trademark ™ with ® on "Welcome to phpBB" install page
- Do not include vendor folder if there are no dependencies.
- MySQL Upgrader throws warnings on PHP 5.4
- Reporting posts leads to white page error
- Wrong poster in subscription email when poster is using the Quote button
- Error while moving posts to a new topic
- Undefined variable $browser in /download/file.php
Improvement
- New topic / reply notifications do not contain author's name.
- subsilver2: Do not show "Mark topics as read" when there are no topics
- More informative reporting of errors when database connection fails (MySQL and others)
- PHP-parse all php files as part of the test suite
- Disable style and language selectors if there's only one installed.
- sql server drop default constraint when dropping column
- Updated and Added to docs/./../support/documents.php?mode=install&version=3
- Change language entry for deleted PMs
- Upgrade Goutte and use Composer for Installation
- Phrasing & semantics of Board settings
- Get rid of $db->sql_return_on_error(true) trickery when splitting/merging topics
- Add Tebibyte to get_formatted_filesize()
- Add response status checks to functional tests
- Improve tooltip explaining the
- - BBcode
- Specify goutte version
- Use more granularity in dependency checks in compress test
- Prefer mysqli over mysql due to php 5.5 alpha 2 deprecating mysql
- Update extension list in running tests doc
- Latest pm reports row count
- InnoDB supports FULLTEXT index since MySQL 5.6.4.
- Update link in FAQ to Ideas Centre
- Prevent expensive hash computation in phpbb_check_hash() by rejecting very long passwords
Sub-task
- Move tests/mock_user.php to tests/mock/user.php
- Backport phing build.xml from develop to develop-olympus so it uses composer.
- Add unit tests for (phpbb_)is_absolute()
- Add unit tests for style_select() in functions.php
- Add unit tests for language_select() in functions.php
- Add unit tests for obtain online functions in functions.php
Task
- Have bamboo generate and publish a phpBB package for every build.
- Add unit tests for the compress class
- Fix README logo
- Fix travis.yml pyrus config
- Turn on PHPUnit's verbose mode on Travis
- Add PHP 5.5 environment on Travis-CI
- Run functional tests on Travis CI
- Install PHPUnit via Composer's require-dev to simplify test running (no need for pear)
- Increase composer minimum-stability from beta to stable
- Upgrade composer.phar to 1.0.0-alpha7
- Rename RUNNING_TESTS file to .md file to render it on GitHub
- Make phpBB Test Suite MySQL behave at least as strict as phpBB MySQL driver
- Add phing/phing to composer.json
- Update phpBB.com URLs to https in email templates
- Upgrade mysql_upgrader.php schema data.
Bug
- Unclear language for Inactive Users on ACP main page
- Duplicate Emails Sent When Subscribed to Forum and Topic
- Display backtrace on all E_USER_ERROR errors, not only SQL errors (when DEBUG_EXTRA is enabled)
- Unable to display 'option equal to non entered value' if dropdown CPF is not required
- PM message title box not accessible via Tab key
- Blue border width when table in a div
- Password length not in security settings
- fulltext_native.php on innodb loading deadly slow for big indexes
- Cannot change default of Boolean checkbox custom profile field
- Clear cache before phpBB installation
- Missing apostrophes in ACP user management -> permissions
- Unit tests do not remove comments from schemas
- Special characters aren't parsed in style component variables
- auth_ldap has an incorrect return value in login_ldap()
- Incorrect check for empty image file paths during conversion
- optionget/optionset functions in session.php and acp_users.php incorrectly check whether $data is at its default value
- Subsilver2 does not define $CAPTCHA_TAB_INDEX
- Marking forums as read displays misleading language
- Grammar defect in permissions language
- Test failure when no default timezone is set in php
- Out of range $start causes a page with no search results but with pagination
- Special character are not correctly parsed for SMTP protocol
- Incorrect class="postlink" in styles/subsilver2/template/faq_body.html
- Argument missing for adm_back_link() in acp_captcha.php
- All users can choose deactivated styles.
- template/ucp_main_front.html does not correctly handle active topic with the name "0"
- Default tz in registration dropdown not the same as the board default tz
- user_birthday does not use table alias in $leap_year_birthdays variable definition
- Orpahned privmsgs are left in the prvmsgs table, with no ties in privmsgs_to table
- $s_hidden_fields -> incorrect array name (3 files affected)
- Add a check for selected tables existence for ACP database backup tool
- Static calls in utf normalizer yield E_STRICT spam on php 5.4
- Prune Users produced unnecessarily long query; Got a packet bigger than 'max_allowed_packet' bytes
- Users are able to get the real filename of attachment
- negative value of ranks message
- Rank-item is not shown on team-list
- Use more descriptive message when disk is out of space
- Function user_notification() prevents notifications for users with stale bans
- Bug in the popup " Find a member" when select by letter.
- Search index creation CLI script incorrectly calculates indexing speed
- Long h2 title breaks div.minitabs in MCP
- After a conversion, passwords with UTF8 characters do not work when user_pass_convert is set.
- memberlist_view.html: including admin defined profile fields doesnt work
- Do not use SQLite on PHP 5.4 in Tests on Travis
- JS function addquote() works incorrectly in Opera
- MS SQL Error when searching Admin Log
- In pre-commit git hook, syntax error is thrown, but is not specifically described
- Git hooks do not work properly with git GUIs
- db_tools::create_unique_index does not use specified index names on MySQL
- Strict comparison on user_id for sending pms
- Template var for user rank not filled
- Misleading message in UCP when no permission to change password
- Missing alias for MAX(post_id) in SQL query in acp_main.php
- Missing BBCode Help Text in subsilver2
- $db->sql_fetchfield returns false with mssqlnative
- Side-by-side diff styling javascript bug
- Some files use 0xA9 as the copyright symbol which is neither ASCII nor the UTF8 copyright symbol.
- Auto increment tests depend on varbinary handling
- Default value for c_char_size in database unit tests is an empty string instead of a char(4)
- test_sql_fetchrow_returns_false_when_empty() fails on MSSQL and Oracle
- No remote avatar size limit results in files limited only by PHP memory limit
- Admin is logged out when accessing any url under adm/ without session id
- Update to docs/./../support/documents.php?mode=readme&version=3
- ACP phpBB logo needs registered trademark symbol
- Limit number of PM rules per user
- Comment removal functions: Backward compatibility broken
- Deleting user with undelivered PMs causes SQL error
- includes/constants.php version number incorrect
- Dropdown CPF now shows in profile when no value is selected
- Typo in prosilvers ucp_groups_membership.html
Improvement
- Add "Select All" to "Add multiple smilies" screen
- Add resync option to topic_view moderation page
- Names and descriptions for roles "Newly registered User" in "User roles" and "Forum roles" must be different
- Add backup warning to Automatic DB Updater
- License in header not linking to version 2 of GNU GPL
- Make commit-msg hook always not fatal
- Allow TLDs over 6 characters in email addresses
- Change the ACP user activation display
- Disable Retain/Delete Posts selection if the user has no posts.
- PM viewmessage page is misplacing the online icon
- Port functional tests to develop-olympus
- Sort installed styles list in admin control panel - styles
- Sort not installed styles list in admin control panel - styles
- ACP usability improvement: show deactivated styles below active styles in styles list
- Performance: Unneeded GROUP BY in update_forum_tracking_info
- phpBB Credit Line Hardcoded
- Add ability to count table rows to database abstraction layer
- Add label tags around "select" text in post splitting UI in MCP
- FAQ mentions SourceForge
- Installer should not display register globals UI for php 5.4+
- Enable Feeds by default
- Improve side-by-side diff styling
- Backport general development language changes in readme files
- Enable Avatars by default
- Allow specifying test config file name via environment variable
- Cosmetic improvements to RUNNING_TESTS.txt
- Do not write ?> into config.php to avoid whitespace output
- Clarify that SQLite3 is not supported for phpBB 3.0.x
New Feature
- Add template inheritance by default
Sub-task
- Mark (var)binary tests as incomplete on non-MySQL DBMSes
Task
- Update links in docs/readme.html
- Add a script that allows creating a search index from CLI
- Remove NOTE from header files
- Update notification in ACP (Olympus) for increase of minimum PHP version to 5.3.2
- Add Travis CI
- Update docs/AUTHORS for 3.0.11-RC1
- Update Travis Test Configuration: Travis no longer supports PHP 5.3.2