Legend:
* = New feature
- = Removed stuff
+ = Improved feature
! = Fixed bug
? = Other stuff
Important
This is a security release and we recommend to upgrade as soon as possible.
01. ! XAJAX API 'Plogin' Vulnerable to Brute Force Attacks
02. ! XAJAX API 'Plogin' can bypass disabled 'Enable Normal Login'
03. ! Vulnerability in Forgot Password implementation
04. * Locking account for 10 minutes if wrong password multiple times (x5)
05. ! Verify if user is already logged before display login page
06. ! Ignore chat triggers for interactive ban reason
07. * Checker: configure client connect message output
08. ! Support new line in comments
09. ? CI: Build with latest SM 1.12 stable version
10. ! Tab navigation logic and validation in admin panel
11. + Extend input compatibility to all steam id formats
12. ? Bump Font Awesome to 6.6.0
13. ! Do not print unblock infos if block still active
14. ! Prevent empty name on dashboard
15. ! Clean player names of unwanted chars
01. ? Add PHP 8.1 Compatibility
02. ? Update dependencies
03. ? Update requirements to PHP 8.1
04. ? Update requirements to SM 1.11
05. ? Rename Checker natives
06. ! Fixed display in Admin Panel
07. * Add Board Name support
08. ! Fixed Display in Installer
09. ? Emails changes (SMTP/Email templates)
10. * Auto Add server with rcon password
10. ! Fixed permissions for ADMIN_EDIT_ADMINS to changes admins pw
11. ! Fixed a way to insert invalid SteamID Format in DB
12. ? Improve game translations
13. + Improved sm_banip
01. * Comms in count list
02. ? Update requirements to SM 1.10
03. ! Fixed issue with Data Pack
04. ! Fixed display in Admin Panel
01. * Support challenges in A2S_INFO
02. ! Fixed security vulnerability in the SetupEditServer
03. ! Fixed auth check
Full Changelog: https://sbpp.github.io/blog/1.6.3_release/
01. ! Fixed issue with group Banning
02. ! Fixed AmxBans import issue
03. ! Fixed possible XSS Injection
04. + Adjusted regex for CSGO
05. + Added option to disable 'comms' tab
06. ! Fixed bugs with SteamID format
07. ! Fixed version checks
08. ? Git version is now only shown in dev builds
09. ! Fixed issue with email links
10. * Added session based logins
01. ! Fixed an issue while XAJAX initialized
02. ! Fixed the 'dash intro text' not displaying custom HTML elements
03. ! Fixed 'change password' function
04. ! Fixed encoding issues with player names
05. ! Fixed aspect ratio of map image
06. ! Fixed editing groups/override pages
07. ! Fixed display error for 'edit mod' page
08. ! Fixed version numbering displaying 0
09. + Improved sizes and file types of images
01. ! Fixed some XSS exploits
02. + Improved password hashing / security
03. * Added utf8mb4 support
04. + Updated tinymce
05. + Reformatted most of the code
06. * Added new natives (SourceBans_OnBanPlayer, SourceComms_OnBlockAdded)
07. - Removed DB Info page (potential attack vector)
08. ! various Plugin fixes
09. + Updated Installer Theme
01. ! Fix Admins and Groups Not Loading from Config
01. ! Fix Perm Ban bug in SourceSleuth
02. ! Fix Updater
01. ! Fix Variuous Bugs in the Plugins EXCEPT SourceSleuth
02. ? Updated ADOdb and LightOpenID Library
01. ! Fix Memory Leak in SourceSleuth Plugin
02. ? Optimized and updated IpToCountry.csv
01. ! Downgrade plugin to 1.5.3
02. + Add ULX Module for GMOD (Not Maintained by Me)
01. ! Fix XSS Vulnerability in SourceComms Page
01. ! Fix Ban/Comm Reason Issue in Plugin
02. ? CC-BY-NC-SA-3.0
01. * Added Steam3 ID to Ban and Comm list
02. * Added PHP7 Support
03. + Updated Comms page with better CSS
04. + Small misc theme fixes
05. + Small plugin fixes/optimizations
06. ! Fixed config.php bug with APIKey and URL
07. ! Fix MariaDB Empty Ban List
08. ? Optimized and updated IpToCountry.csv
01. * Added Steam API Key to Installer for Future Use
02. * Added Steam OpenID Login Support
03. * Added Updater Support
04. * Added Own Admin Config System (No More admins.cfg)
05. + Updated Smarty Library to 2.6.29
06. + Updated Plugins to use partial SourceMod 1.7 Syntax/API
07. + Changed Webpanel Background Color
08. ! Fixed Email Injection Bug on Webpanel
09. ! Fixed admin-flatfile issue in TF2 with New Config System
10. ! Fixed RCON on webpanel skipping NULL characters (RCON XML error)
11. ! Fixed importing banned_user.cfg with Steam3 [U:1:X]
12. ! Fixed BoxToMask Issue #52 in SourceBans.js
13. ! Fix HHVM issues with ADOdb
14. ? Optimized and updated IpToCountry.csv
01. * Changed licence to GNU AGPL v3
02. * Replaced GetClientAuthString with GetClientAuthId for SourceMod 1.7
03. * Added IP Banning with SourceSleuth
04. + Updated ADOdb Library to 5.19
05. + Updated TinyMCE Library to 3.5.11
06. - SourceMod 1.6.x and below are not supported
07. - Removed FamilySharing Ban Evasion Detection
08. - MariaDB not does not work anymore (Never was supported anyways)
09. ! Fixed Ban List lagging on MySQL 5.6+
10. ! Fixed Plugin Showing DataPack error
11. ! Fixed KickId in Webpanel not working when trying to use Steam3
12. ? Optimized and updated IpToCountry.csv
01. * Changed licence to GNU GPL v3
02. * Added SourceBans Connection Debugger
03. * Added SourceComms Search Box
04. + Re-made SourceBans Logo in Footer
05. ! Fixed getdemo.php spewing errors
06. ! Fixed Invalid Query in SB Plugin
07. ! Fixed parsing rcon status in CS:GO
08. ? Added/Fixed Copyright Headers
09. ? Updated SteamWorks Ext to git90
10. ? Optimized and updated IpToCountry.csv
01. * Integrated SourceComms
02. * Added TF2 Modern Theme as Default (Made by IceMan)
03. * Integrated SourceBans Checker
04. * Re-made SourceBans FAQ
05. * Added MvM and HL2 Map Pics
06. * Added Synergy to the Game List
07. + Re-arranged/Renamed Tabs
08. + Added More Robust LFI Patch
09. ! Fixed Plugin Pointing to wrong FAQ link
10. ? Optimized and updated IpToCountry.csv
01. ! Fixed LFI EXPLOIT //Thanks jsifuentes
02. ? Optimized and updated IpToCountry.csv
01. * Added Steam3 Support for Player Menu
02. * Added IP Ban checking from SourceSlueth
03. ! Fixed Steam Family Sharing Ban Evasion.
04. ? Added SteamWorks Extension
05. ? Optimized and updated IpToCountry.csv