Btit Tracker v.1.3.2

[Lupin]

This is important fix!
If you have heavy customized/hacked tracker, it's recomended to apply all hack again on this version.

Btit Tracker v.1.3.2
CHANGES:
- fixed all security holes founded all over the script
- fixed a lot of cosmetics things (thanks gAnDo)
- minor bug fixes

LIST OF CHANGED FILES:
account.php
account_change.php
admincp.php
allshout.php
announce.php
changelog.txt
comment.php
delete.php
details.php
download.php
extra-stats.php
forum.php
login.php
moresmiles.php
news.php
peers.php
recover.php
rss_torrents.php                + NEW
searchusers.php
torrent_history.php
torrents.php
upload.php
usercp.php
userdetails.php
include\functions.php
include\prune_users.php
include\masspm.php
blocks\seedwanted_block.php
blocks\lasttorrents_block.php
blocks\toptorrents_block.php
blocks\paypal_block.php         + NEW


Download: http://www.btiteam.org/index.php?ind=downloads&op=entry_view&iden=63

[gAnDo]

Thanks Lupin... updating now

[freedgt]

  ;DGrande

[Rebel]

i hope this fixes the ratio bugs and the no PID leechers when uploading to public sites..

[Rav33n]

cool, thanks for the notification via email. helps a lot.

[gAnDo]

Couple of small bugs not picked up.



Post titles in forums that have a ' in them come up as /'

open forums.php

find

Code:

      "in <a href=?action=viewtopic&topicid=$lasttopicid&amp;page=p$lastpostid#$lastpostid><b>$lasttopic</b></a></nobr>";

replace with

Code:

      "in <a href=?action=viewtopic&topicid=$lasttopicid&amp;page=p$lastpostid#$lastpostid><b>".stripslashes($lasttopic)."</b></a></nobr>";

find

Code:

        "$subject</td></tr></table></td><td class=lista align=center>$replies</td>\n" .

replace with

Code:

        stripslashes($subject)."</td></tr></table></td><td class=lista align=center>$replies</td>\n" .

find

Code:

    print("<table width=100%>\n<tr><td class=header>".VIEW_TOPIC.": $subject</td></tr>\n<tr><td>");

replace with

Code:

    print("<table width=100%>\n<tr><td class=header>".VIEW_TOPIC.": ".stripslashes($subject)."</td></tr>\n<tr><td>");

find

Code:

        print("<tr><td class=lista align=right>".RENAME_TOPIC.":</td><td class=lista><input type=text name=subject size=60 maxlength=$maxsubjectlength value=\"" . htmlspecialchars($subject) . "\">\n");

replace with

Code:

        print("<tr><td class=lista align=right>".RENAME_TOPIC.":</td><td class=lista><input type=text name=subject size=60 maxlength=$maxsubjectlength value=\"" . stripslashes(htmlspecialchars($subject)) . "\">\n");

find

Code:

      block_begin(REPLY." ".TOPIC.": <a href=?action=viewtopic&topicid=$id>$subject</a>");

replace with

Code:

      block_begin(REPLY." ".TOPIC.": <a href=?action=viewtopic&topicid=$id>".stripslashes($subject)."</a>");

If using cutom users levels some members can clear the shoutbox

open blocks/shoutbox_block.php

find

Code:

if($CURUSER["id_level"]>6){

replace with

Code:

if ($CURUSER["edit_torrents"]=="yes"){

[Koishii]

I'm sorry if this is super stupid, but I want to make sure that I'm choosing the right upgrade. I have the 1.3.1 version - which sql do I choose for this? Is this alpha or beta?

[Xpeople]

After upgrade...
Total torrent speed not upgrade... 0 kb/s
Old torrents have old check speed 

[gAnDo]

@Koishii - If you have 1.31 then all you need to do is copy the new files over. The SQL hasnt changed.

@Xpeople - Try repairing your database:
http://www.btiteam.org/smf/index.php?topic=3002.0

[Lupin]

@Rebel: what is ratio bug?

@All: NO SQL CHANGES...

[MarbolanGos]

Thanks for this change, i'll do it asap on my tracker.

[Koishii]

@Koishii - If you have 1.31 then all you need to do is copy the new files over. The SQL hasnt changed.

I've backed up the database - but how can I ensure that I'm doing it properly and will not delete what has been done before? I don't want to delete what I've worked so hard to get to where it is.

-_-

[Lupin]

check this topic http://www.btiteam.org/smf/index.php?topic=4480.0;topicseen

[Koishii]

Thanks Lupin <3 But the only things that I'm concerned about is keeping the members that have signed up, the torrents posted on the tracker and the ratios the same.  (I'm okay with making modifications to the banner etc again) I really didn't have many modifications that I can think of. I can do the things you ask, but I am really scared to do that lest I lose my members' and torrents' info and ratios.

[gAnDo]

All user details are kept in the mysql database.
You are only changing the php files so will not loose any of this data.