MyAAC v0.8.26

[slawkens]

Probably one of the latest security updates for 0.8 series.
Upgrade to 1.x ASAP!

Fixed

• Security: Fix some session vulnerabilities (7176584)
• Don't trust cloudflare IP, can be spoofed (f5d986a)
• Patch parseBBCode function from develop, fixing security issues + modify escapeHtml function to use UTF-8 encoding (591b793)
• Fix: Open Redirect via redirect Parameter (e1f819e)
• News: Do not cache if logged as admin, so it shows the admin buttons (0f1fd1c)
• escapeHtml in 404.php (a251ccb)

Removed

• Remove polls, may have sql injection (c76c95f)

---

This discussion was created from the release MyAAC v0.8.26.