Btit Tracker v.1.3.2

This is important fix!
If you have heavy customized/hacked tracker, it's recomended to apply all hack again on this version.

Btit Tracker v.1.3.2
CHANGES:
- fixed all security holes founded all over the script
- fixed a lot of cosmetics things (thanks gAnDo)
- minor bug fixes

LIST OF CHANGED FILES:
account.php
account_change.php
admincp.php
allshout.php
announce.php
changelog.txt
comment.php
delete.php
details.php
download.php
extra-stats.php
forum.php
login.php
moresmiles.php
news.php
peers.php
recover.php
rss_torrents.php                + NEW
searchusers.php
torrent_history.php
torrents.php
upload.php
usercp.php
userdetails.php
include\functions.php
include\prune_users.php
include\masspm.php
blocks\seedwanted_block.php
blocks\lasttorrents_block.php
blocks\toptorrents_block.php
blocks\paypal_block.php         + NEW


Download: http://www.btiteam.org/index.php?ind=downloads&op=entry_view&iden=63

Thanks Lupin... updating now

  ;DGrande

i hope this fixes the ratio bugs and the no PID leechers when uploading to public sites..

cool, thanks for the notification via email. helps a lot.

Couple of small bugs not picked up.



Post titles in forums that have a ' in them come up as /'

open forums.php

find
      "in <a href=?action=viewtopic&topicid=$lasttopicid&amp;page=p$lastpostid#$lastpostid><b>$lasttopic</b></a></nobr>";replace with
      "in <a href=?action=viewtopic&topicid=$lasttopicid&amp;page=p$lastpostid#$lastpostid><b>".stripslashes($lasttopic)."</b></a></nobr>";find
        "$subject</td></tr></table></td><td class=lista align=center>$replies</td>\n" .replace with
        stripslashes($subject)."</td></tr></table></td><td class=lista align=center>$replies</td>\n" .find
    print("<table width=100%>\n<tr><td class=header>".VIEW_TOPIC.": $subject</td></tr>\n<tr><td>");replace with
    print("<table width=100%>\n<tr><td class=header>".VIEW_TOPIC.": ".stripslashes($subject)."</td></tr>\n<tr><td>");find
        print("<tr><td class=lista align=right>".RENAME_TOPIC.":</td><td class=lista><input type=text name=subject size=60 maxlength=$maxsubjectlength value=\"" . htmlspecialchars($subject) . "\">\n");replace with
        print("<tr><td class=lista align=right>".RENAME_TOPIC.":</td><td class=lista><input type=text name=subject size=60 maxlength=$maxsubjectlength value=\"" . stripslashes(htmlspecialchars($subject)) . "\">\n");find
      block_begin(REPLY." ".TOPIC.": <a href=?action=viewtopic&topicid=$id>$subject</a>");replace with
      block_begin(REPLY." ".TOPIC.": <a href=?action=viewtopic&topicid=$id>".stripslashes($subject)."</a>");


If using cutom users levels some members can clear the shoutbox

open blocks/shoutbox_block.php

find
if($CURUSER["id_level"]>6){replace with
if ($CURUSER["edit_torrents"]=="yes"){

I'm sorry if this is super stupid, but I want to make sure that I'm choosing the right upgrade. I have the 1.3.1 version - which sql do I choose for this? Is this alpha or beta?

After upgrade...
Total torrent speed not upgrade... 0 kb/s
Old torrents have old check speed 

@Koishii - If you have 1.31 then all you need to do is copy the new files over. The SQL hasnt changed.

@Xpeople - Try repairing your database:
http://www.btiteam.org/smf/index.php?topic=3002.0

@Rebel: what is ratio bug?

@All: NO SQL CHANGES...

Thanks for this change, i'll do it asap on my tracker.

@Koishii - If you have 1.31 then all you need to do is copy the new files over. The SQL hasnt changed.

I've backed up the database - but how can I ensure that I'm doing it properly and will not delete what has been done before? I don't want to delete what I've worked so hard to get to where it is.

-_-

check this topic http://www.btiteam.org/smf/index.php?topic=4480.0;topicseen

Thanks Lupin <3 But the only things that I'm concerned about is keeping the members that have signed up, the torrents posted on the tracker and the ratios the same.  (I'm okay with making modifications to the banner etc again) I really didn't have many modifications that I can think of. I can do the things you ask, but I am really scared to do that lest I lose my members' and torrents' info and ratios.

All user details are kept in the mysql database.
You are only changing the php files so will not loose any of this data.