Search options (Page 38 of 307)

Mpok: A number of problems come from the fact that the check greatly reduces the number of valid redirects. A redirect with an absolute URL (eg: http://example.com/path/to/punbb/file.php) or with a relative URL (eg: file.php) work. Anything else no longer does. We're actively looking at ways to increase the flexibility of the URLs accepted while keeping forums secure.
Documenting the change wouldn't really have done much good, since some of the URLs previously redirected to are now impossible to redirect to. There are also too many permutations of code to generate a redirect URL for us to predict which a user is using and how to correct it. You're right that we should have drawn more attention to the change though.
And in any case, there is no excuse for making a change that was explicitly warned against earlier in this topic.

Mpok: Then you point out where it's being used hardcoded so we can make sure it uses the language files, you don't unilaterally decide to edit the hardcoded text. Otherwise, your changes only benefit you and not the wider community. They can also potentially cause problems down the line, as you see here.
That doesn't change the fact that you shouldn't be translating strings in the database though. And even if we tweaked db_update.php to convert the guest user (which requires changing one line, not adding eight), that wouldn't change the fact that the text shouldn't be converted in the first place.

Yes, we're not planning on releasing a buggy final product

I will say this again: making those changes exposes your site to security risks. Do not do that.

There's code lying around somewhere that changes the check so it only looks for http: as opposed to the base URL, which works in most cases (obviously not for redirecting to https sites). I don't know it offhand.

It's actually not a big modification at all
And the hiding would involve actually not executing the code.
As you pointed out though, $pun_url would have to be updated. That would be the only change.

Those are examples of modifications that you want ported to extensions, not hooks.

The fact that PunBB.fr has chosen to go overboard with their translation by changing actual strings in the database does not mean that we need to take that into account. You are not supposed to be changing that.

The Guest user should not need to be converted because nobody should have been touching that account

You're putting a query within the loop? I assume that's the problem, since it's an unbuffered query.
Moved to Integration.

You have to be more specific about what you're trying to do and what you want to know or I can't help you

game.swf?csrf_token=foo
You can't get the value of csrf_token from that?