phpAdsNew - ChangeLog phpAdsNew 2.0.8 + Misc changes - 2006-01-24: Added support for MySQL 4.1+ and 5+ running ANSI or strict modes, by explicitly setting the SQL mode (Matteo) - 2006-03-26: Updated documentation licence and added PDF bookmarks for easier navigation (Niels, Matteo) + Misc bugfixes - 2005-11-20: Views and clicks for non exiisting banners were wrongly assigned to an unnamed hidden campaign (Matteo, thanks to C. Viebrock) - 2005-11-20: Fixed some incompatibilities in SWF converter because of a missing NULL byte (Matteo) - 2005-12-07: Geotargeting wasn't correctly working when using local invocation inside a PHP function - bug #1374437 (Matteo, thanks to D. Kraft) - 2005-12-23: Fixed possible HTML injection and XSS vulnerability in lib-history.inc.php - bug #1386287 (Matteo) - 2006-01-22: Fixed possible HTML injection and XSS vulnerability in the login form (Matteo, thanks to V. Khera) - 2006-01-23: Fixed problems in adview.php and lib-view-main.inc.php when no user agent was supplied - bugs #1404174/#1406092 (Matteo) - 2006-01-23: Fixed a bug in the SYSVSHM delivery cache module which prevented it from correctly working - bug #1388635 (Matteo) - 2006-03-13: MySQL 5 compatibility mode wasn't correctly activated during install or upgrade (Matteo) - 2006-03-22: Duplicating SQL stored banners wasn't duplicating the image - bug #1450612 (Matteo, thanks to B. Franz) - 2006-03-22: Last month/year selections didn't include the last day of the period in the stats screens - bug #1441150 (Matteo) - 2006-03-23: XML-RPC invocation didn't correctly work if the library was included inside a function - bug #1456409 (Matteo) phpAdsNew 2.0.7 + Misc changes - 2005-08-25: Added new database setting to allow connection to the database using sockets (Matteo) - 2005-09-25: Rewrote the swf hardcoded link converter, which results in wider compatibility (Matteo) - 2005-11-05: Added workaround to guarantee compatibility with PHP 4.4.1 (bug #35067, fixed in 4.4.2) (Matteo) + Misc bugfixes - 2005-08-25: Fixed bug which prevented stats-global-clients from working when there were many banners - bug #1267218 (Matteo) - 2005-09-09: Fixed bug on calculations made during prority compensation (Matteo, thanks to mibus) - 2005-09-26: Compressed flash banners with version >= 6 were always saved as not compressed after the conversion (Matteo) - 2005-10-16: Geotargeting wasn't correctly working under some circumstances (Matteo) - 2005-10-20: GeoIP region for somewhat reason was broken in the last release (Matteo) - 2005-10-31: Fixed potential incompatibility with mod_security which could block PAN sessionid cookie (Matteo) - 2005-11-09: Fixed SQL injection vulnerability with magic_quotes off in lib-session.inc.php (Matteo) - 2005-11-09: Fixed multiple full path discolsure vulnerabilities (Matteo) - 2005-11-12: Fixed problems with session caused by the recent changes (Matteo) - 2005-11-14: Fixed potential HTTP response splitting attacks (Matteo) phpAdsNew 2.0.6 + Misc changes - 2005-07-11: Database password is now not mandatory during install, making easier using phpAdsNew on test installs (Matteo) - 2005-07-11: Added capability to connect to MySQL using an explicitly named socket (Matteo) - 2005-07-11: Removed eval call from XML-RPC invocation to increase security (Matteo) + Misc bugfixes - 2005-07-06: The new cookie handling was overwriting $_COOKIES when not necessary, causing troubles e.g. with vBullettin logout - bug #1231476 (Matteo) - 2005-07-11: An unescaped "&" was present in the bannercode when using local invocation and SQL stored banners - bug #1235074 (Matteo) - 2005-07-11: Fixed problems when selecting mod_geoip geotracking plug-in in host settings - bug #1235843 (Matteo) - 2005-07-11: Plain remote invocation wasn't correclty working when adviews logging was disabled (Matteo) - 2005-07-17: Fixed local file inclusion security issues - bug #1239473 (Matteo) - 2005-08-05: Submitting blank block_adviews/clicks in statistics settings was causing an error into config.inc.php - bug #1249803 (Matteo) - 2005-08-16: Fixed SQL injection vulnerability in lib-view-direct.inc.php, which could also be exploited when using MySQL 4.1+ (Matteo, thanks to Pine Digital Security) - 2005-08-16: Fixed another XML-RPC vulnerability by upgrading the bundled xmlrpc library (Matteo, thanks to Stefan Esser) phpAdsNew 2.0.5 + Misc bugfixes - 2005-06-12: Fixed PHP errors during invocation when the GeoIP configuration data wasn't correctly saved (Matteo) - 2005-06-13: Upgrade from 2.0.5-rc1 wasn't working if pack cookies was enabled (Matteo) - 2005-06-13: Geotargeting plug-in configuration is now recreated during upgrade (Matteo) - 2005-06-29: Fixed Edd Dumbill's XML-RPC library vulnerability backporting the PEAR package fixes (Matteo, thanks to Stefan Esser and the PEAR XML_RPC team) phpAdsNew 2.0.5 RC2 + Misc changes - 2005-06-06: Added Half Page 300 x 600 IAB standard banner size (Matteo) - 2005-06-07: Added the capability to enable transparency in Flash banners (Matteo) + Misc bugfixes - 2005-05-13: Optimized days running check during priority and autotargeting calculations (Matteo, thanks to joce) - 2005-06-06: Zoneid parameter wasn't correctly handled by the pop-up code - bug #1214452 (Matteo, thanks to Brainiac) - 2005-06-07: New unified plugin wasn't working with GeoIP region v115 databases and canadian IPs (Matteo, thanks to Thomas J Mather) - 2005-06-08: Non-US/CA regions delivery limitations weren't available with GeoIP city database (Matteo) - 2005-06-08: Country names and US/CA region names were not correctly sorted (Matteo) phpAdsNew 2.0.5 RC1 + Misc changes - 2005-03-17: Changed the way phpAdsNew sends and receives cookies to avoid cookie overpopulation (Matteo) - 2005-05-04: Added incremental cookies to avoid the same cookie being wrongly overwritten during high concurrency (Matteo) - 2005-05-04: Added city, worldwide region, organization, ISP, netspeed, postal-, DMA- area code delivery limitations (Matteo) - 2005-05-04: Rewrote MaxMind GeoIP plugin to support all the available database types and newly added delivery limitations (Matteo) - 2005-05-04: Added an option to choose between the standard and the recently added way to handle cookies for better backwards compatibility (Matteo) - 2005-05-12: Removed old and now useless "backwards compatibility" directory, which is also creating problems on some platforms (Matteo) + Misc bugfixes - 2005-03-17: Outgoing e-mails did not comply to RFCs when no charset was set in the language file (Matteo) - 2005-03-31: Moving local SQL stored banners to web stored was broking delivery until cache wasn't rebuilt (Matteo) - 2005-04-05: Enhanced new cookie handling to better deal with concurrent access, which previously didn't correctly work (Matteo) - 2005-04-16: Added workaround to make maintenance working if the cronjob is started a few seconds before the scheduled time (Matteo) - 2005-04-22: Example XML-RPC invocation class could return cached banners under some circumstances - bug #1174890 (Matteo, thanks to Colin Viebrock) - 2005-04-22: Fixed possibly uninitialized variable in lib-remotehost - bug #1187931 (Matteo) - 2005-04-24: Additional ranges ("last month", "this year" and "last year") are now available when showing statistics (Matteo, thanks to Colin Viebrock) - 2005-04-24: FTP stored banners parameters weren't correctly stored as urlencoded - bug #1170590 (Matteo) - 2005-04-24: Flash hardcoded link converter didn't work with PHP 4.3.5+ and FTP stored banners, due to a PHP behaviour change - bug #1170584 (Matteo) - 2005-05-04: Old settings weren't correctly overwritten during upgrade when necessary (Matteo) - 2005-05-06: Merged organization and ISP delivery limitations because the database has the same format (Matteo) - 2005-05-12: Javascript remote invocation didn't correctly deal with multibyte encodings (Matteo) - 2005-05-12: Added missing Retry button when getting fatal errors during upgrade (Matteo) phpAdsNew 2.0.4-pr2 + Misc bugfixes - 2005-03-14: Texts under banners and text ads were not accepting HTML tags anymore (Matteo) - 2005-03-14: Fixed multiple full path disclosure security threats (Matteo, thanks to cXIb8O3) - 2005-03-14: Fixed cross site scripting vulnerability in adframe.php (Matteo, thanks to cXIb8O3) phpAdsNew 2.0.4-pr1 + Misc bugfixes - 2005-03-07: Non-latin1 alt/status texts on JS invocation were broken due to recent changes (Matteo) phpAdsNew 2.0.4 + Misc bugfixes - 2005-02-10: HTML banners containing script tags were generating JS errors on IE (Matteo) - 2005-02-22: Added missing Retry button when getting fatal errors during install (Matteo) - 2005-02-24: Converted SWF links were lost after updating banner properties - bug #1118544 (Matteo) - 2005-02-25: Status text containing quotes was causing JS errors - bug #1150893 (Matteo) - 2005-02-25: Rewrote output functions to correctly handle HTML entities in names or descriptions - bug #639011 (Matteo) - 2005-03-03: Added warning when register_log_arrays PHP5 confiugration parameter is disabled (Matteo) - 2005-03-03: Removed default charset, which was breaking browsers' automatic charset recognition (Matteo) phpAdsNew 2.0.3 + Misc bugfixes - 2005-01-27: Content-disposition header was wrong in generated reports, resulting in a mangled filename - bug #1067963 (Matteo) - 2005-01-29: There was an error in the queries used when generating reports with compact stats enabled (Matteo) - 2005-02-04: Fixed incompatibilites with IE and Flash banners caused by post-Eolas handling (Matteo) - 2005-02-04: Fixed problems with IE when using JS invocation with non-latin status/alt texts (Matteo) - 2005-02-05: Fixed problems with settings pages not displayed when using russian-cp1251 translation (Matteo, thanks to Pawel Golovin) - 2005-02-05: Added default charset (iso-8859-1) into english/default.lang.php that is always included (Matteo) - 2005-02-05: Added proper header encoding for outgoing e-mails, according to RFC 2047 - bug #1037033 (Matteo) - 2005-02-05: Language limitation was only checking against the first language accepted - bug #1098001 (Matteo) - 2005-02-08: Client path wasn't stripped from uploaded banner filenames under some circumstances - bug #1118544 (Matteo) phpAdsNew 2.0.2 + Misc changes - 2003-10-20: Added post-Eolas ActiveX handling for Flash, QuickTime, Real and Shockwave banners... JS REQUIRED NOW! (Niels) - 2003-10-27: Added initial support for the new format of the MaxMind GeoIP Region edition database (Niels) - 2003-10-27: A major rewrite of adpopup.php (Niels) - Now compatible with the upcoming IE ActiveX changes - Improved compatibility with untested browsers such as (hopefully) Safari - Tested with IE4, IE5, IE5.5, IE6, NS3, NS4, NS6, NS7, O5, O6, O7, Moz 0.9.2 - Moz 1.5.0 on Windows, IE4.5, IE5 on Mac - Added the ability to center the popup in the middle of the screen - Added the ability to move the popup to coordinates from the bottom right of the screen - Creating a popup with the toolbar visible now works - Creating a popup that appears 'when the page is closed' now also appears when the window is closed - 2003-10-27: The delivery cache is now split into two for a (hopefully) small speed-up (Niels) - 2003-11-07: Short tags for PHP scripts ( and ) in HTML banners are now allowed when the server allows this for normal PHP scripts (Niels) - 2003-12-17: Added content-length to headers to adview.php and adimage.php when image is used from the database (Niels, thanks to Osma Ahvenlampi) - 2003-12-17: Improved compatibility of the Simple layer style. Improved support for Opera, Mozilla and IE non-quirks mode. (Niels) + Misc bugfixes - 2003-10-07: Fixed referer delivery limitation when using JavaScript (Niels) - 2003-10-08: Added missing comma to P3P header (Niels) - 2003-10-09: Added support for stats conversion using Mozilla (Niels) - 2003-10-20: The 'check hardcoded links' checkbox on the 'Add new banner' page is now always visible for Opera and Netscape (Niels) - 2003-10-20: Added phpAds_path to require inside lib-xmlpcs.inc.php (Niels) - 2003-10-20: Deactivated banners are no longer automatically reactivated when editing it's properties (Niels) - 2003-10-21: Increased the length of the target field from 16 to 24 to get better compatibility with RealPlayer (Niels) - 2003-10-27: Fixed PHP5 warning during install (Niels) - 2003-10-27: Delivery cache is now rebuild after editing properties of a zone (Niels) - 2003-10-27: Added a missing token to the default P3P compact header (Niels) - 2003-10-28: Moving zones to another publisher didn't work on the Advanced and Invocationcode pages (Niels) - 2003-11-07: XML-RPC transfers from server to client are now base64 encoded to prevent XML errors with HTML entities (Niels) - 2003-11-07: Fixed a PHP parsing problem in HTML banners which used multiple sections (Niels) - 2003-11-17: Fakecron script didn't correctly work on some setups at 08 and 09 AM because of a wrong implicit octal to decimal conversion (Matteo) - 2003-11-19: Banner upload didn't always work with safe mode and open_basedir restrictions, even when using misc/tmp workaround (Matteo) - 2003-12-17: Fixed a problem where the settings were lost when logging in directly to settings page (Niels) - 2004-01-18: Fixed GeoIP module to handle extended country codes (A1, A2, O1) - bug #878910 (Matteo) - 2004-01-18: Fixed wrong strpos syntax during proxy detection - bug #874467 (Matteo) - 2004-01-18: Flash hardcoded links conversion checkbox didn't appear when the path had "swf" in it - bug #873195 (Matteo) - 2004-02-19: Raised max gui_link_compact_limit value by changing its type to integer (Matteo) - 2004-03-02: Converted URLs were persistant after re-uploading a new Flash banner - bug #887893 (Niels) - 2004-03-02: Fixed a bug in the Javascript Row selection code, which prevented FireFox users from selecting a country, continent, language or region - bug #905052 (Niels) - 2004-03-02: Activate and Expiration date of a campaign was not handled properly in some cases - bug #883697 (Niels) - 2004-03-08: Flash hardcoded links converter didn't recognize https:// links - bug #911919 (Matteo, thanks to M.Shumackov) - 2004-06-18: Campaign blocking wasn't working in Javascript remote invocation with register_globals off (Matteo) - 2004-08-17: Fixed warnings that could show on Windows platforms in lib-expiration.inc.php - bug #1006617 (Matteo) - 2004-10-11: Fixed ordering problems in all the report plug-ins. Ordering was wrongly dependent on date style (Matteo) - 2004-10-11: Banner selection linking method wasn't working when displayed in compact version (Matteo) - 2004-10-13: History wasn't available with verbose stats when no adviews are logged (Matteo) - 2004-10-13: Clicks detail wasn't always shown in mail reports when the campaign had no adview (Matteo) - 2004-12-21: Prevented HTTP headers injection in adclick.php (Matteo, thanks to Tem) phpAdsNew 2.0.1 * Skipped phpAdsNew 2.0 + Misc changes - 2003-08-19: Added PHP5 check and warnings during install (Matteo) - 2003-08-22: Optimized in the main stats page and client, campaign, affiliate history (Matteo) - 2003-08-22: Added indexes on zoneid fields of stats tables (Matteo) - 2003-09-10: Added optional check for dev-builds in currently available product updates (Matteo) - 2003-09-11: Added a flag which states if the release is to be considered stable or a development build (Matteo) - 2003-09-11: Added automatic enabling of dev-builds product updates when upgrading to a dev-build (Matteo) - 2003-09-14: Optimised queries and added date filter to the 'campaign overview', 'Publishers & zones', 'Zone overview' & 'Linked banners overview' pages (Niels) - 2003-09-26: Removed dependency on MD5() SQL function when upgrading from a release which didn't store passwords as md5 digest (Matteo) - 2003-09-29: Updated copyright information in all the headers (Niels) - 2003-09-29: Disabled E_NOTICE warnings because this is going to be the final version... (Niels) + Misc bugfixes - 2003-08-08: Adviews email warning limit wasn't correctly saved (Matteo) - 2003-08-18: PHP code parsing in HMTL banners wasn't working as expected - bug #788280 (Matteo) - 2003-09-01: Fixed possible SQL errors on affiliate, campaign and client history reports (Matteo) - 2003-09-13: Fixed E_ALL problems with hardcoded sources in banner-edit.php (Niels) - 2003-09-13: Disabled logging of clicks for Flash banners in the admin interface - bug #794495 (Niels) - 2003-09-13: Direct selection could not retrieve the stored delivery cache, resulting in a full query everytime (Niels) - 2003-09-14: Fixed E_ALL warnings in lib-history.inc.php (Niels) - 2003-09-17: Fixed E_ALL warning on line 203 of lib-permissions (Matteo) - 2003-09-24: Fixed bug in revision check that caused modified file warnings (Niels) - 2003-09-29: Added missing CSS definitions to RTL-text stylesheet (Niels) - 2003-09-29: &'s are now properly removed from URLs before converting them (Niels) - 2003-09-29: Prevented a SQL error on old versions of MySQL when using the Distribution by Size stats (Niels) v 2.0rc4.2 + Misc changes - 2003-07-29: Created new artwork for the installer (Niels) - 2003-07-27: Reordered the install pages (Niels) - 2003-07-27: Added integrity check of the files to the installer and updater (Niels) - 2003-07-27: Added a check to see if the cache dir is writable to the updater (Niels) - 2003-07-27: Added a check to see if magic_quotes_sybase is turned off to the installer and updater (Niels) - 2003-07-27: Raised the minumum required version of PHP to 4.0.3 (Niels) + Misc bugfixes - 2003-07-17: Report were created without delimiters/quotes with register globals off (Matteo) - 2003-07-20: Added exceptions to bannerid requirement for banner-activate and banner-delete (Niels) - 2003-07-23: Added missing style definitions for banner append to the css file (Niels) - 2003-07-27: Fixed Javascript error during form submit on zone-advanced page when using text ads (Niels) - 2003-07-27: Appended HTML to a text ad zone wasn't saved at all (Niels) - 2003-07-29: The search box is no longer visible during an upgrade (Niels) v 2.0rc4.1 + Misc bugfixes - 2003-07-09: HTML banner preview wasn't working: it redirected to client-index instead (Matteo) - 2003-07-09: Fixed division by zero error in lib-priority that could have been generated on line 886 (Matteo) - 2003-07-09: Userlog index wasn't working: it caused an endless redirection loop (Matteo) - 2003-07-10: Userlog delete didn't work (Matteo) - 2003-07-11: Some configuration variables were not correctly set, causing E_ALL notices (Matteo) - 2003-07-11: Fixed E_ALL notices in admin-search.php (Matteo) - 2003-07-11: Fixed E_ALL notices in local and iframe remote invocation when no banner was return by the delivery engine (Matteo) - 2003-07-12: Available languages scan was also searching outside the language dir, giving errors when open_basedir restriction was set (Matteo) - 2003-07-14: PHP code inside HTML banners only worked when it was a single line, now multiple lines are supported again (Niels) v 2.0rc4 + Misc changes - 2003-04-13: Added support for paths in direct selection query string (Niels) - 2003-04-13: Beacon image is now enclosed in a hidden layer to prevent unneeded linewraps after tables and other html tags (Niels) - 2003-04-16: Added transparent background and no-border support to simple interstitial layerstyle (Matteo) - 2003-05-08: Added ability to use tabs and place quotes around fields in csv report files (Niels) - 2003-05-20: Added error message when trying to install phpAdsNew using a PHP version affected by bug #20144, which makes the installer fail (Matteo) - 2003-05-22: The banner append code was largely rewritten to allow appending individual banners (Niels) - 2003-06-09: Added extra warning to settings page to make sure the location of the geo database isn't provided as an URL (Niels) - 2003-06-09: The views and clicks remaining fields on the Campaign properties page now allow bigger values (Niels) - 2003-06-15: Added cachebuster to the JavaScript invocation (Niels) - 2003-06-19: Added redirection to index pages when required entity id variables (clientid, campaignid, etc.) are missing (Matteo) - 2003-07-08: Added support for the Region Edition database to the MaxMind geotargeting Apache module plugin (Niels, thanks to TJ) + Misc bugfixes - 2003-04-13: Logging of geodata for Adclicks didn't work properly (Niels) - 2003-04-13: Campaigns with zero clicks or zero views remaining were listed as 'unlimited' on the 'Campaign overview' page (Niels) - 2003-04-13: On the 'Statistics settings page', 'Log Country' was active even when 'Compact stats' were used. Option should become disabled (Niels) - 2003-05-06: Typo in globalisation of weight_old caused an warning when submitting the Campaign Properties page (Niels) - 2003-05-06: Bannertext was missing from preview calculation and causing a warning on the Zone Probability page (Niels) - 2003-05-06: Trying to generate a report with an empty inventory caused an error, it is now not possible to generate reports in this case, preventing the error (Niels) - 2003-05-06: Removed duplicate include of lib-view-query.php from adview.php and lib-view-main.php, it is now only included when really needed (Niels) - 2003-05-06: The MySQL port is now always appended to the hostname during connection as a speed optimalisation (Niels) - 2003-05-06: The dbQuery() function now automatically connects to the database if there isn't a connection available yet, in order to help prevent unused connections (Niels, thanks to Doru Petrescu) - 2003-05-06: Fixed E_ALL error during banner preview when no html was appended to the banner (Matteo) - 2003-05-07: Fixed E_ALL error in lib-priority when inactive campaigns were present (Niels) - 2003-05-13: When clicking on a banner from the administrator interface, "log=no" parameter was propagated to the destination site (Matteo) - 2003-05-13: The english language file is now always included by lib-invocation, because it contains strings that might not yet have been translated (Niels) - 2003-05-13: Made some experimental changes to lib-priority, which should make it less agressive (Niels) - 2003-05-13: Added extra headers to prevent caching of admin pages by proxy servers (Niels) - 2003-05-14: Added a 10 second timeout to the product updates check, to prevent unwanted error messages (Niels) - 2003-05-14: Strings that are stored in config.inc.php can now include single quotes (Niels) - 2003-05-14: Reports are no longer send when all the advertisers campaigns are deactivated and no new statistics are available (Niels) - 2003-05-20: The global 'Alter HTML...' setting didn't have any effect on newly created HTML banners (Niels) - 2003-05-23: Javascript validation of zone width and height in zone-edit didn't work on Mozilla (Matteo) - 2003-05-24: When using qmail as MTA reports were displayed incorrectly (no newlines) on some mail clients (Matteo) - 2003-05-27: Could not (de)activate banners from client interface, when correct permissions were set (Niels) - 2003-05-27: Fixed error when zones were set to private instead of public (Niels) - 2003-05-27: It is now not possible anymore to append a banner to itself (Niels) - 2003-05-31: Added missing flags and country codes, see bug #746359 for details (Matteo) - 2003-06-01: Fixed errors when delivery caching was set to 'none' (Matteo) - 2003-06-12: Fixed bug when disabling client reports on client properties page (Matteo) - 2003-06-19: Fixed problems when session expired on pages using POST to submit changes, see bug #753517 (Matteo) - 2003-06-28: Fixed wrong hour detection with one digit hours and a division by zero in lib-priority (Matteo) - 2003-06-29: After adding a HTML banner, the target of an tag will now also honour the destination frame set on the banner properties page (Niels) - 2003-06-29: If a HTML banner is added without a tag, but with an