Fix XSS vulnerability in change nickname + make it available for registered users only

Made code reading easier for newbies
Removed inefficient memcached caching of members and ignored
Display access denied page for non-authorized use of sub-sections.
Added change nickname option in profile
Various bugfixes

CHANGELOG

@@ -1,3 +1,27 @@
+Version 1.15.1 - Dec. 19, 2015
+Fix XSS vulnerability in change nickname + make it available for registered users only
+
+Version 1.15 - Dec. 17, 2015
+Made code reading easier for newbies
+Removed inefficient memcached caching of members and ignored
+Display access denied page for non-authorized use of sub-sections.
+Added change nickname option in profile
+Various bugfixes
+
+Version 1.14.1 - Nov. 2, 2015
+Ignore possible deadlock warning
+Only display the let users in button when there are guests waiting to be let in
+Fix filter and ignore feature if they have multiple values
+
+Version 1.14 - Oct. 31, 2015
+Added support for sqlite and PostgreSQL database engines
+Replaced deprecated HTML with CSS for HTML5 compatibility
+Show Topic on login and don't prepend "Topic:"
+More optimizations and fixes
+
+Version 1.13.1 - Sep. 15, 2015
+Fix saving some setup settings
+
 Version 1.13 - Sep. 15, 2015
 Switch from mysqli to PDO
 More optimizations

README

@@ -19,7 +19,7 @@ along with this program.  If not, see <http://www.gnu.org/licenses/>.
 GENERAL INFORMATION:
 
 This is a PHP Chat based on LE CHAT v.1.14. An up-to-date copy of this script can be downloaded at https://github.com/DanWin/le-chat-php
-The original perl LE CHAT script by Lucky Eddie can be downloaded at http://4fvfamdpoulu2nms.onion/lechat/ or via a tor2web proxy like https://4fvfamdpoulu2nms.tor2web.blutmagie.de/lechat/ if you don't have TOR installed.
+The original perl LE CHAT script by Lucky Eddie can be downloaded at http://4fvfamdpoulu2nms.onion/lechat/ or via a tor2web proxy like https://4fvfamdpoulu2nms.onion.to/lechat/ if you don't have TOR installed.
 If you add your own cool features or have a feature request, please tell me and I will add them, if I like them.
 Please also let me know about any bugs you find in the code, so I can fix them.
 Now a piece of information about the origin of the name "LE CHAT" copied from the original script:
@@ -88,6 +88,6 @@ If you never used regex before, check out this starting guide to begin with regu
 
 LIVE DEMO:
 
-If you want to see the script in action, you can visit my TOR hidden service http://tt3j2x4k5ycaa5zt.onion/chat.php or via a tor2web proxy like http://tt3j2x4k5ycaa5zt.tor2web.blutmagie.de/chat.php if you don't have TOR installed.
+If you want to see the script in action, you can visit my TOR hidden service http://tt3j2x4k5ycaa5zt.onion/chat.php or via a tor2web proxy like http://tt3j2x4k5ycaa5zt.onion.to/chat.php if you don't have TOR installed.
 Considering this is a hidden service, you should be prepared for the worst case, as people often tend to do illegal activities in the TOR network. I'm not online 24/7 so it might not be possible to remove such content right away.
 If you should see illegal content, don't panic. Use the contact form on my site to notify me and clean your browser cache afterwards.

README.md

@@ -2,7 +2,7 @@ General Information:
 --------------------
 
 This is a PHP Chat based on LE CHAT v.1.14. An up-to-date copy of this script can be downloaded at https://github.com/DanWin/le-chat-php
-The original perl LE CHAT script by Lucky Eddie can be downloaded at [his site](http://4fvfamdpoulu2nms.onion/lechat/) or via a tor2web proxy like [this one](https://4fvfamdpoulu2nms.tor2web.blutmagie.de/lechat/) if you don't have TOR installed.
+The original perl LE CHAT script by Lucky Eddie can be downloaded at [his site](http://4fvfamdpoulu2nms.onion/lechat/) or via a tor2web proxy like [this one](https://4fvfamdpoulu2nms.onion.to/lechat/) if you don't have TOR installed.
 If you add your own cool features or have a feature request, please tell me and I will add them, if I like them.
 Please also let me know about any bugs you find in the code, so I can fix them.
 Now a piece of information about the origin of the name "LE CHAT" copied from the original script:
@@ -76,6 +76,6 @@ If you never used regex before, check out [this starting guide](http://docs.acti
 Live demo:
 ----------
 
-If you want to see the script in action, you can visit my [TOR hidden service](http://tt3j2x4k5ycaa5zt.onion/chat.php) or via a tor2web proxy like [this one](http://tt3j2x4k5ycaa5zt.tor2web.blutmagie.de/chat.php) if you don't have TOR installed.
+If you want to see the script in action, you can visit my [TOR hidden service](http://tt3j2x4k5ycaa5zt.onion/chat.php) or via a tor2web proxy like [this one](http://tt3j2x4k5ycaa5zt.onion.to/chat.php) if you don't have TOR installed.
 Considering this is a hidden service, you should be prepared for the worst case, as people often tend to do illegal activities in the TOR network. I'm not online 24/7 so it might not be possible to remove such content right away.
 If you should see illegal content, don't panic. Use the contact form on my site to notify me and clean your browser cache afterwards. I will remove the content as soon as possible.

lang_de.php

@@ -165,7 +165,7 @@ $T=array(
 	'savechanges' => 'Änderungen speichern',
 	'reloadpb' => 'Postbox neu laden',
 	'reloadmsgs' => 'Nachrichten neu laden',
-	'chgprofile' => 'Profil ändern',
+	'chgprofile' => 'Profil',
 	'adminbtn' => 'Admin',
 	'admnotes' => 'Adminnotizen',
 	'notes' => 'Notizen',
@@ -259,7 +259,7 @@ $T=array(
 	'no' => 'Nein',
 	'colbg' => 'Hintergrundfarbe',
 	'coltxt' => 'Schriftfarbe',
-	'maxname' => 'Maximale Benutzernamen-Länge',
+	'maxname' => 'Maximale Nicknamen-Länge',
 	'minpass' => 'Minimale Passwortlänge',
 	'defaultrefresh' => 'Standardzeit zum Neuladen der Nachrichten (Sekunden)',
 	'suguests' => 'Anwerber aktivieren',
@@ -279,8 +279,7 @@ $T=array(
 	'chatname' => 'Chatname',
 	'destroy' => 'Chat zerstören',
 	'destroyed' => 'Chat erfolgreich zerstört',
-	'topic' => 'Thema: %s',
+	'topic' => 'Thema',
-	'admtopic' => 'Thema',
 	'passreset' => 'Passwort zurücksetzen',
 	'cantresetpass' => 'Passwort kann nicht zurückgesetzt werden',
 	'succpassreset' => 'Password erfolgreich zurückgesetzt',
@@ -305,6 +304,12 @@ $T=array(
 	'numnotes' => 'Anzahl an zu behaltenden Notizversionen',
 	'revisions' => 'Revisionen:',
 	'older' => 'Älter',
-	'newer' => 'Neuer'
+	'newer' => 'Neuer',
+	'accessdenied' => 'Zugriff verweigert',
+	'loggedinas' => 'Du bist als %s angemeldet und hast keinen Zugriff auf diesen Bereich.',
+	'changenickname' => 'Nickname ändern',
+	'newnickname' => 'Neuer Nickname:',
+	'nicknametaken' => 'Nickname ist bereits vergeben',
+	'nopass' => 'Ungültiges Passwort (Mindestens %d Zeichen), Nickname nicht geändert'
 );
 ?>

lang_en.php

@@ -20,8 +20,8 @@
 
 //Language: English
 $I=array(
-	'nodb' => 'No Connection to Database!',
+	'nodb' => 'No connection to database!',
-	'nodbsetup' => 'No Connection to Database, please create a database and edit the script to use the correct database with given username and password!',
+	'nodbsetup' => 'No connection to database, please create a database and edit the script to use the correct database with given username and password!',
 	'changelang' => 'Change language:',
 	'expire' => 'Invalid/expired session',
 	'kicked' => 'Kicked!',
@@ -166,7 +166,7 @@ $I=array(
 	'savechanges' => 'Save changes',
 	'reloadpb' => 'Reload Post Box',
 	'reloadmsgs' => 'Reload Messages',
-	'chgprofile' => 'Change Profile',
+	'chgprofile' => 'Profile',
 	'adminbtn' => 'Admin',
 	'admnotes' => 'Admin Notes',
 	'notes' => 'Notes',
@@ -260,7 +260,7 @@ $I=array(
 	'no' => 'No',
 	'colbg' => 'Background colour',
 	'coltxt' => 'Text colour',
-	'maxname' => 'Maximal user name length',
+	'maxname' => 'Maximal nickname length',
 	'minpass' => 'Minimal password length',
 	'defaultrefresh' => 'Default message reload time (seconds)',
 	'suguests' => 'Enable applicants',
@@ -280,8 +280,7 @@ $I=array(
 	'chatname' => 'Chat name',
 	'destroy' => 'Destroy chat',
 	'destroyed' => 'Successfully destroyed chat',
-	'topic' => 'Topic: %s',
+	'topic' => 'Topic',
-	'admtopic' => 'Topic',
 	'passreset' => 'Reset password',
 	'cantresetpass' => 'Can\'t reset password',
 	'succpassreset' => 'Successfully reset password',
@@ -306,6 +305,12 @@ $I=array(
 	'numnotes' => 'Number of notes revisions to keep',
 	'revisions' => 'Revisions:',
 	'older' => 'Older',
-	'newer' => 'Newer'
+	'newer' => 'Newer',
+	'accessdenied' => 'Access denied',
+	'loggedinas' => 'You are logged in as %s and don\'t have access to this section.',
+	'changenickname' => 'Change nickname',
+	'newnickname' => 'New nickname:',
+	'nicknametaken' => 'Nickname is already taken',
+	'nopass' => 'Invalid password (At least %d characters), not changing nickname'
 );
 ?>