Development

Milestone 2.0-alpha2

• bug #408: Add CRAM-MD5 support to fluxbb-mailer
• bug #409: The $to and $from addresses need sanitized/decoded for SMTP
• bug #410: Add linewrapping support for emails
• bug #794: Mails seem to be HTML by default
• bug #970: Make FluxBB compatible with Laravel 4.1.26
• bug #972: More Bugs found
• bug #973: Migrations Censoring does not exist
• bug #974: static.sgitcdn.com domain no longer exist
• bug #975: Fix tipography errors
• bug #985: "Remember me" login does not work
• bug #995: can not use View as View
• bug #999: Redirect messages are not flashed
• bug #1002: Loading Nonexistant Class
• enhancement #303: Tidy up admin options
• enhancement #304: Add jQuery
• enhancement #333: Subforums
• enhancement #411: Add cc/bcc/multiple to support for emails
• enhancement #412: Add attachment support to fluxbb-mailer
• enhancement #447: move all themes except air to style repository
• enhancement #512: Pluralization support for language strings
• enhancement #715: Put time settings under "Time and timeouts" in Options
• enhancement #726: Authentication interface
• enhancement #741: Improved Error Pages
• enhancement #795: Admin index page (interface only)
• enhancement #796: Admin controllers
• enhancement #805: fluxbb/core should be a Laravel package
• enhancement #815: Changing board title and description
• enhancement #824: Route prefix
• enhancement #825: Asset management
• enhancement #847: Do not create forum during installation
• enhancement #885: Replace radio buttons with checkboxes
• enhancement #977: Some hardcoded strings in views
• enhancement #984: Styling for automatic saving of admin options
• enhancement #986: Alerts should disappear after five seconds
• task #312: Replace pun_* variables
• task #503: Convert mail templates to new language system

Milestone 1.6

• bug #1106: get_title(). If the array of $pun_bans is empty, then ...
• bug #1125: User Bans list ordered by IP
• bug #1126: Profile and Registration form language files still reference a 6 character password length.
• enhancement #108: BBcode tag for inline code
• enhancement #707: Convert old passwords when logging in
• enhancement #733: New smilies
• enhancement #971: Change default name of default forum and category to be more useful
• enhancement #1022: Require PHP 5.6
• enhancement #1023: Drop mysql_ support
• enhancement #1069: Stronger password hashes (and salts)
• enhancement #1070: Remove Selector Hacks for IE6
• enhancement #1109: Deprecations for PHP 7.2
• enhancement #1117: avoid $db->num_rows()
• enhancement #1127: Remove AOL IM
• enhancement #1128: Convert breadcrumbs to be a function
• enhancement #1138: For PHP 7.4
• task #1073: Wrong DBlayer constructors
• task #1080: Remove old styles

Milestone 1.5.11 (2018-12-31)

• bug #1054: The bbcode2email() function has no localization
• bug #1057: Add CSRF protection to promote user action
• bug #1077: Possible CSRF in login?
• bug #1081: openssl_random_pseudo_bytes() is not cryptographically secure
• bug #1087: LIKE and '_'
• bug #1095: Radium and Cobalt have unreadable alert on admin index
• bug #1098: Don't use local aware format for sprintf
• bug #1113: Vulnerability to rebuild the search index
• bug #1124: Where is the start transaction in the db_update.php?
• enhancement #1089: Time formatting in profile.php
• enhancement #1097: We need a ban on references in the titles
• enhancement #1101: SMTP Password field on admin_options page too short
• enhancement #1103: Ban mail/domain dosent check for duplicates
• enhancement #1108: Incorrect answer for search results with short text
• enhancement #1115: Need 503 status for maintenance and error pages
• enhancement #1121: Require more characters for password

Milestone 1.5.10 (2016-06-16)

• bug #792: Profile and signature img
• bug #1012: Incorrect coding login.php
• bug #1017: fix CSS
• bug #1056: Invalidate only feed caches
• bug #1058: hash_equals(): Expected known_string to be a string, null given
• bug #1059: No csrf_token in unsubscibe link of subscription email
• bug #1062: Edit.php and checkboxes
• bug #1068: Wrong description for BBCode
• bug #1072: The DB class for SQLite doesn't maintain string values by default?
• bug #1075: Empty PHP_SELF somewhere
• bug #1078: InnoDB check failed
• bug #1082: Custom title overrides "Banned"
• enhancement #1019: Refactor/move forum_list_plugins to common_admin.php
• enhancement #1025: Display error message inline with login form
• enhancement #1027: Change htmlspecialchars to pun_htmlspecialchars
• enhancement #1064: error() function, PUN_DEBUG and security
• enhancement #1066: For long nicknames

Milestone 1.5.9 (2016-06-16)

• bug #1011: No automatic redirection to install.php
• bug #1016: Does not work glob()
• bug #1032: No notifications for users w/ language set to an inexistent language
• bug #1033: Make it easier to configure frame options header
• bug #1039: Parser error message no have name tag
• bug #1040: PHP 7 compatibility
• bug #1041: Fatal error mysqli_free_result
• bug #1043: Prevent timing attack
• bug #1046: Exclude newlines when parsing username in quote tag
• bug #1049: CSRF attack allows to stick, lock, etc.
• enhancement #1029: db_update.php: Inline script trips over content security policy

Milestone 1.5.8 (2015-01-23)

• bug #925: Scrollbar in chrome fluxbb1.5.5
• bug #949: Use \r\n for SMTP, FORUM_EOL for others
• bug #951: [url][img] patch doesn't work.
• bug #963: Add rel="prev", rel="next" and rel="canonical"
• bug #969: New TLDs not allowed as valid URLs
• bug #996: Prevent clickjacking attacks
• bug #998: Bug in validate_redirect() function
• bug #1001: Remove setting of values in quickpostform
• bug #1006: [HTB23246] File Inclusion in install.php
• enhancement #57: Making a new forum is a 2 step process
• enhancement #810: Improve unread forums tracking
• enhancement #935: Auto-promotion improvements
• enhancement #936: Add new group permission to allow moderators to promote users
• enhancement #941: Remove obsolete global variables
• enhancement #944: Remove "page 1" when thread or forum has just one page
• enhancement #947: Improve Air/Earth/Fire design
• enhancement #948: Require passwords with at least 6 characters
• enhancement #959: Quick actions from registration email
• enhancement #965: Avoid double redirect when no new posts are found
• enhancement #976: [PATCH] Invalidate updated cache files from PHP's Opcache
• enhancement #992: Drop IE6 support
• enhancement #997: Make random passwords longer
• enhancement #1007: Antispam hooks
• enhancement #1008: Please delete your install.php file
• task #942: Remove obsolete language strings
• task #966: Optimize images in FluxBB core

Milestone 1.5.7 (2014-10-20)

• bug #961: Open Redirection Vulnerability
• bug #990: SQL injection in profile.php

Milestone 1.5.6 (2014-01-09)

• bug #923: Redeclared method error when changing usernames
• bug #940: Cross-site request forgery issues with FluxBB
• enhancement #913: Adding subject if someone hits the preview button
• enhancement #927: Split thread function is... "splitted"
• enhancement #929: Textarea resize
• enhancement #930: Allow non array page titles
• enhancement #934: HTML5 validation

Milestone 1.5.5 (2013-11-18)

• bug #884: No horizontal scrollbar in [code]
• bug #887: URLs with user/forum/topic/post ID are broken
• bug #888: Notices in FluxBB 1.5.4
• bug #895: random_pass() might generate URL-unfriendly passwords
• bug #896: No permission without 403
• bug #897: "\r\n" breaks headers in email in certain conditions
• bug #903: UTF8 related fixes
• bug #904: Charset conversion in db_update.php doesn't work
• bug #905: Merging topics hangs when users are subscribed
• bug #911: Triple border in IE11
• enhancement #889: Excess array cell of $lang_install
• enhancement #891: Remove unused line of code in generate_quickjump_cache
• enhancement #902: Miscellaneous
• enhancement #908: Regenerate the users info cache in register.php
• enhancement #919: $page_title in admin_loader.php
• enhancement #921: Disable admin_forums.php form when no categories exist
• enhancement #922: Function do_smilies() and $pun_config

Milestone 1.5.4 (2013-08-14)

• bug #821: Referrer check breaks with UTF-8 URLs
• bug #830: Problem with PHP_EOL constant and email.php
• bug #835: Replace MSN Messenger
• bug #836: microtime overload specific to PHP5 being used
• bug #838: Moderators can edit Admin's posts.
• bug #839: Strict standards error in PostgreSQL adapter
• bug #849: Installer does not send Content-Type header
• bug #850: Avoid preg_replace() with PREG_REPLACE_EVAL
• bug #855: Escaping admin's mail
• bug #858: chrome - scroll
• bug #866: Broken PostgreSQL support on 1.5.1+ with o_redirect_delay == 0
• bug #867: forum administration
• bug #871: Caching breaks on concurrent access, possible information disclosure
• bug #872: When update is unable to add o_base_url, it gives wrong warning
• bug #875: Redirect URL after email dialog not verified
• bug #877: When no forums, statistics are wrong displayed
• enhancement #828: Improve installation instructions

Milestone 1.4.10 (2013-04-22)

• bug #851: Backport password reset vulnerability fix
• bug #852: Backport IP address escaping fixes
• bug #853: Backport category escaping fix

Milestone 1.5.3 (2013-02-22)

• bug #822: Vulnerability in FluxBB 1.5.2 and possible earlier
• bug #829: Category not escaped on profile/administration page

Milestone 1.5.2 (2013-01-12)

• bug #765: Some bugs in SQLite dblayer
• bug #767: Local links are broken
• bug #768: Even more unescaped IP addresses
• bug #776: Search page: XHTML error when forum is empty
• bug #777: Revert XHTML doctype changes
• bug #778: Contents of code tag susceptible to alteration.
• enhancement #779: Don't redirect back when reporting posts
• enhancement #786: Add nofollow to user generated links

Milestone 2.0-alpha1 (2012-12-22)

• bug #384: ReplaceQueries don't work properly with PostgreSQL
• bug #388: TruncateTable query should also reset the auto increment value
• bug #420: Move the cache dir outside doc root
• bug #502: Check whether language exists
• bug #513: handle_arrays() only works once
• bug #515: DB Layer: Escape table names etc.
• bug #520: Half of language strings
• bug #525: Allow to assign index when creating table
• bug #526: Can't specify length for integer column type
• bug #527: Collation for the table column
• bug #532: Duplicate language keys
• bug #533: Dots aren't allowed in cookie name
• bug #536: Default value for table column
• bug #541: Fix tableInfo for PostgreSQL
• bug #543: Move base_url to config.php
• bug #549: Change language files charset to utf-8
• bug #554: Call to undefined function utf8_bad_clean()
• bug #565: Create new gettext module
• bug #613: Unit tests for cache adapters
• bug #660: Error when installing 2.0 snapshot.
• bug #709: Strange message on some pages
• bug #731: Unable to register
• enhancement #214: Switch to a better password hashing system
• enhancement #305: Add a proper cache layer
• enhancement #306: Switch to session based authentication
• enhancement #307: Create a new database layer and query builder
• enhancement #310: Move the database access into an API
• enhancement #320: Create a "more random" random function
• enhancement #323: Update utf8 library to the version in fluxbb/utf8
• enhancement #326: database layer still needs support for various constructs
• enhancement #335: Use flash messages instead of redirection
• enhancement #351: Change error_reporting level in debug mode
• enhancement #365: Add tables related queries to database layer
• enhancement #367: Add new translation system
• enhancement #433: Allow for queries from/to non-prefixed tables
• enhancement #489: Simplify factory method for database layer
• enhancement #490: Check return values for different query types
• enhancement #497: Add sprintf functionality to translation system
• enhancement #517: Lazy connect to database
• enhancement #518: Figure out subqueries
• enhancement #542: Improve query error handling
• enhancement #595: Change languages to codes
• enhancement #596: Language class tidy
• enhancement #623: Cache: Skip tests when backend is not installed
• enhancement #657: Simpler cache accessor
• enhancement #694: Login functionality
• enhancement #695: Create default tables (migrations)
• enhancement #696: Search page (interface only)
• enhancement #697: New post page (interface and functionality)
• enhancement #698: Profile > Essentials page (interface only)
• enhancement #699: Profile > Editing interfaces
• enhancement #701: Register page (interface only)
• enhancement #702: Register page (functionality)
• enhancement #704: Config
• enhancement #705: Use action filters for permission checks
• enhancement #706: Display redirect messages on new pages
• enhancement #708: Logout functionality
• enhancement #740: Agree to rules
• task #322: Sort the copyright notices for cache and database libraries
• task #325: Consider GPLv3?
• task #339: sort submodules
• task #374: Create test framework+cases for fluxbb-cache
• task #386: Remove admin plugins feature
• task #387: Create test cases for fluxbb-password
• task #498: Convert files to new translation system
• task #546: Replace "e-mail" with "email"
• task #548: Unify module documentation
• task #550: Proper naming scheme in cache module
• task #703: Create an install script

Milestone 1.5.1 (2012-11-13)

• bug #667: Use PHP_EOL to separate headers in emails
• bug #668: Radio button label styling issue for old styles
• bug #669: Missing closing tag "</li>
• bug #673: IP field not escaped
• bug #679: Clickable links and ftp.exe
• bug #681: Redirect and execution termination
• bug #685: BBCode bug
• bug #690: Wrong CSS rule in Air.css
• bug #710: Error: Unable to send email. SMTP server: "501 Syntactically invalid EHLO argument(s) ".
• bug #711: Incorrect language string for guests
• bug #719: Big checkbox in search.php
• bug #729: Stick topic checkbox doesn't work when posting new reply
• bug #737: Unable to change profile info of unverified users
• bug #738: N+1 queries in admin_users.php
• bug #742: Duplicate attribute in profile.php
• bug #743: Login from viewtopic.php?pid=XXX#pXXX
• bug #746: Element and selectors in CSS rules in XHTML
• bug #747: Drop-down menu cut off in Firefox
• bug #755: Allow HTTP and FTP links only
• enhancement #403: Add support links in the admin panel
• enhancement #654: Display seconds remaining for all floods
• enhancement #666: Removing database size and row count from admin_index
• enhancement #682: Improve group auto-promotion help text
• enhancement #693: Serve content with XHTML content type
• enhancement #717: Clickable labels for checkboxes and radio buttons everywhere
• enhancement #757: pun_include: Allow files from subdirectories
• enhancement #760: Change example email address to use RFC 2606 reserved example domain
• enhancement #762: add_field suggestion for SQLite
• task #689: Spelling/grammar errors in comments
• task #751: Technetium doesn't use border radius in Internet Explorer

Milestone 1.5.0 (2012-05-05)

• task #661: Merge v1.4.9 changes

Milestone 1.4.9 (2012-05-03)

• bug #591: Ignore BBCodes in user input in search.php
• bug #598: Undefined index: path in misc.php
• bug #599: Manage subscription lists when merging and splitting threads
• bug #614: get_tracked_topics() and FORUM_MAX_COOKIE_SIZE
• bug #618: Double ";" in functions.php
• bug #620: Fluxbb doesn't give 404 http status code
• bug #633: Path disclosure in search.php
• bug #640: Renaming a user will unban them
• bug #642: Test NULL must be "===" or is_null(...)
• bug #644: Chrome styles target anchors like links
• bug #652: Size(s) of avatars possibly negative
• bug #658: technetium has wrong css rule for img max-width
• enhancement #632: Post.php performance hack large boards
• enhancement #638: Add rel=prev and rel=next to flubb 1.4
• enhancement #649: Clickable labels for checkboxes and radio buttons

Milestone 1.5-beta (2012-04-24)

• enhancement #646: Per-group setting for disallowing links in posts
• enhancement #647: Promote user groups based on post count
• enhancement #653: Disallowing links in the website field in users' profiles
• task #648: Remove ranks feature

Milestone 1.4.8 (2012-01-05)

• bug #485: Four bytes utf-8 character truncate text at that character
• bug #494: Argument by reference in some functions
• bug #495: Search can be tricked into examining and joining everything
• bug #500: Moscow Time = UTC+4
• bug #501: Undefined index notices in error function
• bug #504: Empty forums string in breadcrumb of search
• bug #506: Test topic name after install
• bug #507: htmlspecialchars in help.php for links
• bug #508: Thousands of returns in message crash the forum
• bug #509: is_writable() ignores ACLs on Windows NTFS Server
• bug #510: New BBCode checking in search_idx.php
• bug #522: fix js
• bug #529: URL tag in IMG
• bug #530: End slash for url is outside the bbcode
• bug #537: Notice: Undefined index: code in parser.php
• bug #540: File uploads fail on Windows when magic_quotes_gpc is enabled
• bug #552: Backwards-incompatible regex
• bug #559: The add_field doesn't work properly for SQLite
• bug #573: Empty paragraph tags aren't correctly handled
• enhancement #524: Match on digits for id in new BBCode.
• enhancement #544: FORUM_DISABLE_STRIPSLASHES
• enhancement #561: Show URLs at the start of Notification Mail
• task #523: Spelling error in post.php language file

Milestone 1.4.7 (2011-09-13)

• bug #486: Use language RTL setting in db_update.php
• bug #488: Vulnerabilities caused by get_remote_addr()

Milestone 1.4.6 (2011-08-12)

• bug #332: BBCode in URLs is parsed
• bug #371: Cache isn't updated when mass deleting users
• bug #372: Display issue for admin user list in Opera
• bug #377: Required field names missing from javascript in viewtopic.php
• bug #378: Board stats cache isn't updated when user renamed
• bug #379: The form_user variable sent when posting breaks guest posting when language packs are enabled
• bug #380: Javascript error on db_update
• bug #382: Escaping guest's email in post.php
• bug #398: Install.php: set default language also for guest
• bug #399: Notice: Undefined variable: install_lang in install.php
• bug #400: Error during the installation, how to go ahead?
• bug #419: First fallback language for admin panel is broken
• bug #425: Some newline (\n) characters required in admin_index.php
• bug #426: userlist.php box headings does not reflect the box content
• bug #436: Layout broken when you disable search for a user
• bug #439: A couple of minor stuff
• bug #441: Commas not escaped correctly in email names
• bug #444: magic_quotes_gpc and $_FILES
• bug #445: Can't use [code] string inside a code tag
• bug #446: Minor search issue
• bug #448: E-mail encoding bug when using local mailer
• bug #455: Add field error using SQLite
• bug #459: Potentially misleading error message in include/functions.php
• bug #465: Separate forum e-mail and report flood
• bug #476: Language files string "Forum mailer" not correct for some languages
• enhancement #91: Pretty significant performance regressions in 1.4.X when searching
• enhancement #250: Clean up regex
• enhancement #279: Search in severals forums - backport from 1.3
• enhancement #291: Maintenance page should be shown during db_update
• enhancement #317: Subscription emails include bbcode
• enhancement #394: Improve readability of report messages
• enhancement #401: Add new bbcode
• enhancement #402: Handle relative links in url tags
• enhancement #422: Use templates for all emails
• enhancement #427: Applying URL validation to website field in profile
• enhancement #429: Add last visit to user search
• enhancement #430: Use same anchor text in search breadcrumbs to link back to the search page.
• enhancement #435: Oxygen style improvements
• enhancement #437: Add link separator to separate post links
• enhancement #438: Use smaller test.png image
• enhancement #449: Sort plugins list
• enhancement #458: Redirect to "edit ban" page when banning an already banned user
• enhancement #463: Add include/user/ folder to default package.
• enhancement #480: Merge two queries in moderate.php
• task #273: Tabindex needs checked
• task #464: Drop support for unsupported <link rel="..."> values
• task #470: Spelling mistake in admin_index.php lang file
• task #472: Use KB, MB instead of KiB, MiB etc.
• task #474: Some small changes

Milestone 1.2.24 (2011-08-03)

• bug #240: FluxBB 1.2.23: Authentication cookie sometimes set incorrectly
• bug #460: Deprecated MySQL syntax in install.php
• enhancement #457: Some minor fixes for fluxbb 1.2

Milestone 1.4.5 (2011-03-22)

• bug #257: Censoring messes up the subject/message validation
• bug #266: Subscription emails are not censored
• bug #270: Images are not parsed correctly in signatures
• bug #272: New member group title set wrongly
• bug #274: Lower-case username in search breadcrumbs
• bug #277: Dupe users in update script broken
• bug #280: Moderators can move/split posts to any board
• bug #281: dblayer->affected_rows() doesn't work on SQLite
• bug #283: Possible issues with maintenance mode
• bug #284: No bottom breadcrumbs on forum moderation page
• bug #285: Issue with 'forum_hmac' function in PHP 4
• bug #287: db_update uses wrong $lang_update index
• bug #290: Error generating stopwords cache ID
• bug #294: _track cookie can be too large for nginx
• bug #316: ONLOAD Javascript error
• bug #318: Cannot use num_rows on unbuffered queries
• bug #324: Check custom headers when detecting http/https
• bug #331: Hard-coded language entry in admin reports
• bug #338: Quoting users with special character usernames fails
• bug #343: Moderators can ban other moderators
• bug #347: Remove action=foo
• enhancement #70: Simplify generate_navlinks() function
• enhancement #168: Mass delete/ban/change group of users
• enhancement #245: organizing admin area
• enhancement #267: Cache system on extern.php
• enhancement #275: \n display at maintenace page
• enhancement #278: Splitting posts should allow choose destination board
• enhancement #282: Automatically regenerate the stopwords cache when required
• enhancement #297: Forum e-mails get rated as spam by SpamAssassin
• enhancement #299: Cache board statistics
• enhancement #300: Enable the "quick reply area" for the Guests too
• enhancement #301: add sqlite db location warning on installation
• enhancement #319: Fallback if unicode-properties aren't enabled
• enhancement #330: Not Valid RSS (repeat)
• enhancement #354: Add a last visit field to users profile
• task #252: Update minimum requirements

Milestone 1.4.4 (2011-02-02)

• bug #166: Censoring still doesn't work fully with utf-8
• bug #179: Indexer can't recognize Unicode punctuation
• bug #200: Search by posts shows incorrect reply count
• bug #256: Rebuild Index don't work
• bug #258: Unable to fetch ban list
• bug #259: Collation not updated
• bug #263: Bad use of error() in 1.4.3
• bug #265: Not Valid RSS
• bug #269: Issue with the new search system
• enhancement #58: Search page isn't as informative as it could be
• enhancement #175: Add <link rel=prev, next, authors, etc.
• enhancement #176: Don't add single quotes for notification mail subject
• enhancement #178: Use merged stopwords from the all languages
• enhancement #188: Option to list topics alphabetically
• enhancement #195: Deleting a report
• enhancement #205: Preview button in quick reply area
• enhancement #206: Hide rules, announcement, and additional menu items from groups without "Read board" permission
• enhancement #213: Use forum title for pagination
• enhancement #222: Word required for censoring feature
• enhancement #239: Unicode hyperlink not clickable and truncated
• enhancement #248: Move the mark as read link
• enhancement #251: Remove process_form() JavaScript from update script
• enhancement #254: Improve cookie security
• enhancement #262: Add permalink to search breadcrumbs
• enhancement #268: Tidy up the quicklinks in the header
• task #190: Cache censored words
• task #249: Change copyright to 2011
• task #261: "New replies" quick search

Milestone 1.4.3 (2011-01-22)

• bug #86: Remove example plugin from distribution
• bug #95: SQL error when showing all posts from an user (with PostgreSQL)
• bug #97: Invalid styles are available for selection
• bug #98: Code isn't trimmed properly inside code tags
• bug #103: Undefined variable in delete.php
• bug #105: Unable to change users admin_note or num_posts when they are banned
• bug #106: Mods can edit admins profile
• bug #107: document.getElementById("find_user").username is undefined
• bug #114: Bug Categories
• bug #152: Error quoting a post with an image used as URL
• bug #156: no clears on moderate.php
• bug #159: help.php list examples
• bug #162: Don't replace [img] tags inside [code] tags when quoting posts.
• bug #164: base_url is never validated
• bug #174: Feed link not properly aligned
• bug #177: 1.4.2 sets a bad cookie after registering.
• bug #180: $db->index_exists should be case-insensitive
• bug #192: Minor content issues with install script
• bug #209: Use absolute paths to define PUN_ROOT
• bug #210: Files with DOS line endings
• bug #227: Plugin calling "message()" fails
• enhancement #5: Localization of install page
• enhancement #8: Stripping empty BBCodes results in empty message error
• enhancement #19: Clickable board title
• enhancement #20: Hide SMTP password in admin options
• enhancement #22: Convert/style list in admin intro text to an unordered list
• enhancement #27: Reorganize quick searches
• enhancement #30: Only admins should be able to run the upgrade script
• enhancement #66: admin_bans.php doesn't list current bans
• enhancement #75: Topic permalinks
• enhancement #81: viewtopic.php and ORDER BY posted
• enhancement #99: Forum permalinks
• enhancement #100: wordwrap should be enabled on posts
• enhancement #104: Spacing around images in posts
• enhancement #134: Stick topic option in post.php
• enhancement #142: Forum subscriptions
• enhancement #148: Redirection after deleting a message
• enhancement #149: Support for HTTPS
• enhancement #150: Localization of db_update script
• enhancement #153: Tidy up install/upgrade messages
• enhancement #158: DB error messages re-used
• enhancement #169: Show quick jump dropdown list on all pages
• enhancement #170: Allow moderators to view a user's subscriptions
• enhancement #173: Only regenerate quickjump cache when necessary
• enhancement #212: Remove the database password confirmation in install.php
• enhancement #237: Language of the admin in install.php
• task #83: We don't have a README
• task #101: Erroneous file permissions

Milestone 1.4.2 (2010-08-09)

• bug #60: Upgrading to utf8_general_ci can cause "identical" usernames
• bug #76: Huge posts can break formatting
• bug #78: Censor URL in viewtopic.php
• bug #79: Constant PUN_RANKS_LOADED already defined
• bug #80: FluxBB's cache is not updated when used with apc.stat=0
• bug #82: Reason must be under 65535 bytes when making a report
• bug #84: Parameters of extern.php changed from 1.2 to 1.4
• bug #85: Blank errors from DBLayer::error() when a transaction fails
• bug #87: Name for quick reply form
• bug #88: Localization of "New forum"
• bug #93: PHP unserialize() vulnerability affects cookie data
• enhancement #17: Add database password confirmation in install script
• enhancement #41: LIMIT X,Y is used in various places other than just displaying posts
• enhancement #77: No IP when banning a user without posts

Milestone 1.4.1 (2010-07-21)

• bug #48: Comment typo in example plugin
• bug #52: In the update script we assume we should be using a latin1 connection
• bug #54: viewtopic.php unstable in SQLite
• bug #55: Number of Rows still shows all the rows in the database
• bug #62: Notice error in plugin menu
• bug #63: BBcode checking in search_idx
• bug #65: Notice: Undefined index in post.php
• bug #67: CSS issue in Opera 10.6 and Chrome
• bug #69: Wrong post time in delete.php
• bug #71: censor_words() does not work properly with Russian characters
• bug #72: Insufficient input validation in admin_users.php
• bug #73: Unescaped topic subject in search.php
• enhancement #21: Hide incompleted fields in profile page
• enhancement #32: Censoring in moderator menu
• enhancement #42: Signature length notification

Milestone 1.4.0 (2010-06-19)

• bug #1: PHP 5.3 displays warnings when using date()
• bug #4: Overlapping H2
• bug #9: Parser shouldn't replace empty BBCode inside [code] tags
• bug #11: Install button disabled on back
• bug #13: Bottom paging link overlaps "Subscribe to this topic" for long titles
• bug #26: Help page styling
• bug #28: Wide image handling interferes with hyperlinking image
• bug #33: Wildcards don't work in search
• bug #34: Undefined variable in admin_prune
• bug #35: db_update.php missing DIV
• bug #37: URLs are truncated after encoding
• bug #39: [Patch] Remove unused translations
• bug #40: Subject isn't censored in post.php and edit.php
• bug #44: html_entity_decode gives warnings when using PHP4
• bug #45: Install page styling
• bug #46: Help page: Code BBCode
• bug #47: Removing empty bbcode
• bug #49: Redirect box extends off the right of the screen in Technectium
• bug #50: Styling issue with 'ins'
• enhancement #3: Improving performance for large topics
• enhancement #7: Only reindex / preparse if necessary when upgrading
• enhancement #10: substr in forum_clear_cache can be simplified
• enhancement #24: Consistency in coding style
• enhancement #38: The bbcode supported could be improved
• task #43: [Patch] Tidy whitespace