diff --git a/doc/ChangeLog b/doc/ChangeLog index 586809a5..f7698b62 100755 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -1,3 +1,11 @@ +Version 2.7.2, released Jan. 30th, 2008 +======================================= + +- Fixed vulnerability if logbook contains HTML code +- Fixed display of locked datetime attributes +- Fixed problem with FCDeditor in French +- Fixed problem with image upload in other languages + Version 2.7.1, released Jan. 22th, 2008 ======================================= diff --git a/doc/index.html b/doc/index.html index 91e4baf0..c0572e6c 100755 --- a/doc/index.html +++ b/doc/index.html @@ -28,7 +28,7 @@  [Links]  * 

Home of the Electronic Logbook package by Stefan Ritt

-
Current version is : 2.7.1
+
Current version is : 2.7.2
certificate
diff --git a/doc/index_d.html b/doc/index_d.html index b1284415..59a1c11e 100644 --- a/doc/index_d.html +++ b/doc/index_d.html @@ -28,7 +28,7 @@  [Links]  * 

Home of the Electronic Logbook package by Stefan Ritt

-
Current version is : 2.7.1
+
Current version is : 2.7.2
certificate diff --git a/src/elogd.c b/src/elogd.c index c1ad134c..1a5ad183 100755 --- a/src/elogd.c +++ b/src/elogd.c @@ -10,7 +10,7 @@ \********************************************************************/ /* Version of ELOG */ -#define VERSION "2.7.1" +#define VERSION "2.7.2" char svn_revision[] = "$Id$"; /* ELOG identification */ @@ -8909,14 +8909,14 @@ void show_edit_form(LOGBOOK * lbs, int message_id, BOOL breply, BOOL bedit, BOOL format_flags[MAX_N_ATTR], year, month, day, hour, min, sec, n_attr, n_disp_attr, n_lines, attr_index[MAX_N_ATTR], enc_selected, show_smileys, show_text, n_moptions, display_inline, allowed_encoding; - char str[2 * NAME_LENGTH], str2[NAME_LENGTH], preset[2 * NAME_LENGTH], *p, *pend, star[80], comment[10000], - reply_string[256], list[MAX_N_ATTR][NAME_LENGTH], file_name[256], *buffer, format[256], date[80], - script_onload[256], script_onfocus[256], script_onunload[256], attrib[MAX_N_ATTR][NAME_LENGTH], *text, - orig_tag[80], reply_tag[MAX_REPLY_TO * 10], att[MAX_ATTACHMENTS][256], encoding[80], - slist[MAX_N_ATTR + 10][NAME_LENGTH], svalue[MAX_N_ATTR + 10][NAME_LENGTH], owner[256], locked_by[256], - class_value[80], class_name[80], ua[NAME_LENGTH], mid[80], title[256], login_name[256], full_name[256], - cookie[256], orig_author[256], attr_moptions[MAX_N_LIST][NAME_LENGTH], ref[256], file_enc[256], - tooltip[10000], enc_attr[NAME_LENGTH], user_email[256]; + char str[2 * NAME_LENGTH], str2[NAME_LENGTH], preset[2 * NAME_LENGTH], *p, *pend, star[80], comment[10000], + reply_string[256], list[MAX_N_ATTR][NAME_LENGTH], file_name[256], *buffer, format[256], date[80], + script_onload[256], script_onfocus[256], script_onunload[256], attrib[MAX_N_ATTR][NAME_LENGTH], *text, + orig_tag[80], reply_tag[MAX_REPLY_TO * 10], att[MAX_ATTACHMENTS][256], encoding[80], + slist[MAX_N_ATTR + 10][NAME_LENGTH], svalue[MAX_N_ATTR + 10][NAME_LENGTH], owner[256], locked_by[256], + class_value[80], class_name[80], ua[NAME_LENGTH], mid[80], title[256], login_name[256], full_name[256], + cookie[256], orig_author[256], attr_moptions[MAX_N_LIST][NAME_LENGTH], ref[256], file_enc[256], + tooltip[10000], enc_attr[NAME_LENGTH], user_email[256]; time_t now, ltime; char fl[8][NAME_LENGTH]; struct tm *pts; @@ -24873,8 +24873,7 @@ void interprete(char *lbook, char *path) strencode2(str2, command, sizeof(str2)); strencode2(str3, full_name, sizeof(str3)); - sprintf(str, loc("Error: Command \"%s\" is not allowed for user \"%s\""), - str2, str3); + sprintf(str, loc("Error: Command \"%s\" is not allowed for user \"%s\""), str2, str3); show_error(str); return; }