CVE-2016-4848 (published 2016-09-02T01:59Z)

Cross-site scripting (XSS) vulnerability in ClipBucket before 2.8.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Severity: MEDIUM
CVSS v2 base score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)
CVSS v3 base score: 6.1, MEDIUM (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

Weakness information:
cwe_id: CWE-79
cwe_name: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description: The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
extended_description: 
            Cross-site scripting (XSS) vulnerabilities occur when:
            
               Untrusted data enters a web application, typically from a web request.
               The web application dynamically generates a web page that contains this untrusted data.
               During page generation, the application does not prevent the data from containing content that is executable by a web browser, such as JavaScript, HTML tags, HTML attributes, mouse events, Flash, ActiveX, etc.
               A victim visits the generated web page through a web browser, which contains malicious script that was injected using the untrusted data.
               Since the script comes from a web page that was sent by the web server, the victim's web browser executes the malicious script in the context of the web server's domain.
               This effectively violates the intention of the web browser's same-origin policy, which states that scripts in one domain should not be able to access resources or run code in a different domain.
            
            There are three main kinds of XSS:
            
               
                  Type 1: Reflected XSS (or Non-Persistent) - 
         			The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to the victim. URLs constructed in this manner constitute the core of many phishing schemes, whereby an attacker convinces a victim to visit a URL that refers to a vulnerable site. After the site reflects the attacker's content back to the victim, the content is executed by the victim's browser.
               
                  Type 2: Stored XSS (or Persistent) - 
               The application stores dangerous data in a database, message forum, visitor log, or other trusted data store. At a later time, the dangerous data is subsequently read back into the application and included in dynamic content. From an attacker's perspective, the optimal place to inject malicious content is in an area that is displayed to either many users or particularly interesting users. Interesting users typically have elevated privileges in the application or interact with sensitive data that is valuable to the attacker. If one of these users executes malicious content, the attacker may be able to perform privileged operations on behalf of the user or gain access to sensitive data belonging to the user. For example, the attacker might inject XSS into a log message, which might not be handled properly when an administrator views the logs.
            
               
                  Type 0: DOM-Based XSS - 
               In DOM-based XSS, the client performs the injection of XSS into the page; in the other types, the server performs the injection. DOM-based XSS generally involves server-controlled, trusted script that is sent to the client, such as Javascript that performs sanity checks on a form before the user submits it. If the server-supplied script processes user-supplied data and then injects it back into the web page (such as with dynamic HTML), then DOM-based XSS is possible.
            
            
            Once the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site. Phishing attacks could be used to emulate trusted web sites and trick the victim into entering a password, allowing the attacker to compromise the victim's account on that web site. Finally, the script could exploit a vulnerability in the web browser itself possibly taking over the victim's machine, sometimes referred to as "drive-by hacking."
            In many cases, the attack can be launched without the victim even being aware of it. Even with careful users, attackers frequently use a variety of methods to encode the malicious portion of the attack, such as URL encoding or Unicode, so the request looks less suspicious.
         
         

Fix information:
repo_url: https://github.com/arslancb/clipbucket
commit_details: repo_url: https://github.com/arslancb/clipbucket
author: Saqib Razzaq
author_date: 2016-06-09 04:32:31-07:00
msg: Change log added, final commit for RC2 made
repository: repo_url: https://github.com/arslancb/clipbucket
repo_name: arslancb/clipbucket
description: Open source video sharing website script, Tune.pk clone, Youtube clone, dailymotion clone. PHP.
repo_language: JavaScript
owner: arslancb
file_changes: filename: changelog-2.8.1.v4328-rc2
change_type: ModificationType.ADD
diff: @@ -0,0 +1,853 @@
+------------------------------------------------------------------------
+r4143 | saqib.razzaq | 2016-05-17 20:58:43 +0500 (Tue, 17 May 2016) | 2 lines
+
+Read me modified
+
+------------------------------------------------------------------------
+r4144 | saqib.razzaq | 2016-05-17 21:03:14 +0500 (Tue, 17 May 2016) | 2 lines
+
+Final changes made for CB 2.8.1 RC1
+
+------------------------------------------------------------------------
+r4146 | jamilrehman | 2016-05-18 13:06:15 +0500 (Wed, 18 May 2016) | 1 line
+
+view photo zoom effect changed 
+------------------------------------------------------------------------
+r4147 | saqib.razzaq | 2016-05-18 17:19:28 +0500 (Wed, 18 May 2016) | 2 lines
+
+Fixed: admin doesn't have admin privilages
+
+------------------------------------------------------------------------
+r4148 | saqib.razzaq | 2016-05-19 11:10:56 +0500 (Thu, 19 May 2016) | 2 lines
+
+Fixed: Title length is limited to 70 characters
+
+------------------------------------------------------------------------
+r4149 | saqib.razzaq | 2016-05-19 11:32:36 +0500 (Thu, 19 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/91
+
+------------------------------------------------------------------------
+r4150 | saqib.razzaq | 2016-05-19 12:03:40 +0500 (Thu, 19 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/88
+
+------------------------------------------------------------------------
+r4151 | saqib.razzaq | 2016-05-19 12:18:14 +0500 (Thu, 19 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/93
+
+------------------------------------------------------------------------
+r4152 | saqib.razzaq | 2016-05-19 12:27:54 +0500 (Thu, 19 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/105
+
+------------------------------------------------------------------------
+r4153 | saqib.razzaq | 2016-05-19 15:34:12 +0500 (Thu, 19 May 2016) | 2 lines
+
+CB state displayed in admin area
+
+------------------------------------------------------------------------
+r4154 | saqib.razzaq | 2016-05-19 15:38:47 +0500 (Thu, 19 May 2016) | 2 lines
+
+Added admin friendly revision info
+
+------------------------------------------------------------------------
+r4155 | saqib.razzaq | 2016-05-19 15:54:57 +0500 (Thu, 19 May 2016) | 2 lines
+
+Extra paramter added into set_the_template() function
+
+------------------------------------------------------------------------
+r4156 | fahad.abbas | 2016-05-20 12:47:12 +0500 (Fri, 20 May 2016) | 2 lines
+
+modified : display none remoed
+
+------------------------------------------------------------------------
+r4157 | fahad.abbas | 2016-05-20 12:49:13 +0500 (Fri, 20 May 2016) | 2 lines
+
+modified : display none remoed
+
+------------------------------------------------------------------------
+r4158 | saqib.razzaq | 2016-05-23 11:12:03 +0500 (Mon, 23 May 2016) | 2 lines
+
+Removed test case from functions.php
+
+------------------------------------------------------------------------
+r4159 | itc.media | 2016-05-18 19:02:31 +0500 (Wed, 18 May 2016) | 3 lines
+
+Update forgot.html
+
+Corrected some typos.
+------------------------------------------------------------------------
+r4160 | saqib.razzaq | 2016-05-23 11:16:16 +0500 (Mon, 23 May 2016) | 3 lines
+
+Merge pull request #101 from ITC-Media/patch-8
+
+Typos fixed at forgot.html
+------------------------------------------------------------------------
+r4161 | saqib.razzaq | 2016-05-23 12:50:52 +0500 (Mon, 23 May 2016) | 8 lines
+
+Fixed: 
+- Load more button position issue
+
+Enhanced:
+- On click loading bars
+- Loading bars number
+ 
+
+------------------------------------------------------------------------
+r4162 | saqib.razzaq | 2016-05-23 13:04:01 +0500 (Mon, 23 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/120
+
+------------------------------------------------------------------------
+r4163 | saqib.razzaq | 2016-05-23 14:51:02 +0500 (Mon, 23 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/121
+
+------------------------------------------------------------------------
+r4164 | saqib.razzaq | 2016-05-23 14:55:09 +0500 (Mon, 23 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/118
+
+------------------------------------------------------------------------
+r4165 | saqib.razzaq | 2016-05-23 14:58:59 +0500 (Mon, 23 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/112
+
+------------------------------------------------------------------------
+r4166 | saqib.razzaq | 2016-05-23 17:40:17 +0500 (Mon, 23 May 2016) | 2 lines
+
+Removed empty spaces from ajax response
+
+------------------------------------------------------------------------
+r4167 | saqib.razzaq | 2016-05-23 17:59:43 +0500 (Mon, 23 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/130
+
+------------------------------------------------------------------------
+r4168 | saqib.razzaq | 2016-05-23 18:00:29 +0500 (Mon, 23 May 2016) | 2 lines
+
+Message wrapped inside conintainer
+
+------------------------------------------------------------------------
+r4169 | fahad.abbas | 2016-05-23 19:01:33 +0500 (Mon, 23 May 2016) | 3 lines
+
+modified  : lock file deleted flow changed 
+modified  : player volume cookie save flow done
+
+------------------------------------------------------------------------
+r4170 | fahad.abbas | 2016-05-23 19:32:12 +0500 (Mon, 23 May 2016) | 2 lines
+
+modified : junk code removed
+
+------------------------------------------------------------------------
+r4171 | sikanderzel | 2016-05-23 19:46:29 +0500 (Mon, 23 May 2016) | 1 line
+
+Lang codes addition
+------------------------------------------------------------------------
+r4172 | sikanderzel | 2016-05-23 19:47:54 +0500 (Mon, 23 May 2016) | 1 line
+
+Language Settings percentage issue resolved
+------------------------------------------------------------------------
+r4173 | sikanderzel | 2016-05-23 19:48:20 +0500 (Mon, 23 May 2016) | 1 line
+
+AjaxLang updated
+------------------------------------------------------------------------
+r4174 | sikanderzel | 2016-05-24 11:28:10 +0500 (Tue, 24 May 2016) | 1 line
+
+Lang phrasese
+------------------------------------------------------------------------
+r4175 | sikanderzel | 2016-05-24 11:28:57 +0500 (Tue, 24 May 2016) | 1 line
+
+lang pharase
+------------------------------------------------------------------------
+r4176 | sikanderzel | 2016-05-24 11:29:37 +0500 (Tue, 24 May 2016) | 1 line
+
+Lnaguage phrase
+------------------------------------------------------------------------
+r4177 | sikanderzel | 2016-05-24 11:30:05 +0500 (Tue, 24 May 2016) | 1 line
+
+language phrase
+------------------------------------------------------------------------
+r4178 | sikanderzel | 2016-05-24 11:30:28 +0500 (Tue, 24 May 2016) | 1 line
+
+language Phrase
+------------------------------------------------------------------------
+r4179 | sikanderzel | 2016-05-24 11:30:59 +0500 (Tue, 24 May 2016) | 1 line
+
+Language Phrase
+------------------------------------------------------------------------
+r4180 | sikanderzel | 2016-05-24 11:31:27 +0500 (Tue, 24 May 2016) | 1 line
+
+Language Phrase
+------------------------------------------------------------------------
+r4181 | sikanderzel | 2016-05-24 11:32:12 +0500 (Tue, 24 May 2016) | 1 line
+
+language Phares
+------------------------------------------------------------------------
+r4182 | sikanderzel | 2016-05-24 11:32:46 +0500 (Tue, 24 May 2016) | 1 line
+
+Language Phrases
+------------------------------------------------------------------------
+r4183 | sikanderzel | 2016-05-24 12:40:58 +0500 (Tue, 24 May 2016) | 1 line
+
+Language Phrases
+------------------------------------------------------------------------
+r4184 | sikanderzel | 2016-05-24 12:41:54 +0500 (Tue, 24 May 2016) | 1 line
+
+Language OPhrase
+------------------------------------------------------------------------
+r4185 | sikanderzel | 2016-05-24 12:43:13 +0500 (Tue, 24 May 2016) | 1 line
+
+Language Phrase
+------------------------------------------------------------------------
+r4186 | saqib.razzaq | 2016-05-24 12:52:35 +0500 (Tue, 24 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/127
+
+------------------------------------------------------------------------
+r4187 | sikanderzel | 2016-05-24 12:59:10 +0500 (Tue, 24 May 2016) | 1 line
+
+modified : lang code added
+------------------------------------------------------------------------
+r4188 | sikanderzel | 2016-05-24 13:01:16 +0500 (Tue, 24 May 2016) | 1 line
+
+Lang code added
+------------------------------------------------------------------------
+r4189 | sikanderzel | 2016-05-24 13:01:53 +0500 (Tue, 24 May 2016) | 1 line
+
+lang code added
+------------------------------------------------------------------------
+r4190 | sikanderzel | 2016-05-24 13:02:21 +0500 (Tue, 24 May 2016) | 1 line
+
+Lang code added
+------------------------------------------------------------------------
+r4191 | sikanderzel | 2016-05-24 13:03:42 +0500 (Tue, 24 May 2016) | 1 line
+
+lang code added
+------------------------------------------------------------------------
+r4192 | sikanderzel | 2016-05-24 13:04:09 +0500 (Tue, 24 May 2016) | 1 line
+
+Lang code added
+------------------------------------------------------------------------
+r4193 | sikanderzel | 2016-05-24 13:04:33 +0500 (Tue, 24 May 2016) | 1 line
+
+lang code added
+------------------------------------------------------------------------
+r4194 | sikanderzel | 2016-05-24 13:07:51 +0500 (Tue, 24 May 2016) | 1 line
+
+Language Translation via Bing Transalation Api
+------------------------------------------------------------------------
+r4195 | sikanderzel | 2016-05-24 13:10:18 +0500 (Tue, 24 May 2016) | 1 line
+
+Lang code added
+------------------------------------------------------------------------
+r4196 | sikanderzel | 2016-05-24 13:10:58 +0500 (Tue, 24 May 2016) | 1 line
+
+Unset cookie to avoid making headers huge
+------------------------------------------------------------------------
+r4197 | sikanderzel | 2016-05-24 13:11:25 +0500 (Tue, 24 May 2016) | 1 line
+
+Lang code added
+------------------------------------------------------------------------
+r4198 | sikanderzel | 2016-05-24 13:13:28 +0500 (Tue, 24 May 2016) | 1 line
+
+language translation method added
+------------------------------------------------------------------------
+r4199 | sikanderzel | 2016-05-24 13:15:07 +0500 (Tue, 24 May 2016) | 1 line
+
+lang code added
+------------------------------------------------------------------------
+r4200 | sikanderzel | 2016-05-24 13:36:59 +0500 (Tue, 24 May 2016) | 2 lines
+
+added : added
+
+------------------------------------------------------------------------
+r4201 | sikanderzel | 2016-05-24 15:39:25 +0500 (Tue, 24 May 2016) | 1 line
+
+jquery.cookie plugin added
+------------------------------------------------------------------------
+r4202 | saqib.razzaq | 2016-05-24 16:02:47 +0500 (Tue, 24 May 2016) | 2 lines
+
+test case removed
+
+------------------------------------------------------------------------
+r4203 | saqib.razzaq | 2016-05-24 16:29:12 +0500 (Tue, 24 May 2016) | 2 lines
+
+Fixed: https://github.com/arslancb/clipbucket/issues/115
+
+------------------------------------------------------------------------
+r4204 | saqib.razzaq | 2016-05-24 17:32:07 +0500 (Tue, 24 May 2016) | 2 lines
+
+Added prettySort() function
+
+------------------------------------------------------------------------
+r4205 | saqib.razzaq | 2016-05-24 17:39:09 +0500 (Tue, 24 May 2016) | 2 lines
+
+Set default value for paramter
+
+------------------------------------------------------------------------
+r4206 | jamilrehman | 2016-05-24 17:54:20 +0500 (Tue, 24 May 2016) | 1 line
+
+sorting function updated 
+------------------------------------------------------------------------
+r4207 | jamilrehman | 2016-05-24 18:14:18 +0500 (Tue, 24 May 2016) | 2 lines
+
+Parameter added
+
+------------------------------------------------------------------------
+r4208 | sikanderzel | 2016-05-25 12:19:21 +0500 (Wed, 25 May 2016) | 1 line
+
+User can delete video comment now..
+------------------------------------------------------------------------
+r4209 | sikanderzel | 2016-05-25 12:19:57 +0500 (Wed, 25 May 2016) | 1 line
+
+delete cmt condition added
+------------------------------------------------------------------------
+r4210 | sikanderzel | 2016-05-25 12:22:29 +0500 (Wed, 25 May 2016) | 1 line
+
+comment count are being updated now
+------------------------------------------------------------------------
+r4211 | sikanderzel | 2016-05-25 16:54:49 +0500 (Wed, 25 May 2016) | 1 line
+
+translated language add groups section in myaccount side menu. Now removed.
+------------------------------------------------------------------------
+r4212 | sikanderzel | 2016-05-25 16:55:14 +0500 (Wed, 25 May 2016) | 1 line
+
+lang code added
+------------------------------------------------------------------------
+r4213 | sikanderzel | 2016-05-25 16:55:41 +0500 (Wed, 25 May 2016) | 1 line
+
+lang code added
+------------------------------------------------------------------------
+r4214 | sikanderzel | 2016-05-25 17:09:59 +0500 (Wed, 25 May 2016) | 1 line
+
+Language translation functions added
+------------------------------------------------------------------------
+r4215 | sikanderzel | 2016-05-25 17:10:29 +0500 (Wed, 25 May 2016) | 1 line
+
+indentation perfection
+------------------------------------------------------------------------
+r4216 | sikanderzel | 2016-05-25 17:12:44 +0500 (Wed, 25 May 2016) | 1 line
+
+code optimization
+------------------------------------------------------------------------
+r4217 | sikanderzel | 2016-05-25 17:34:39 +0500 (Wed, 25 May 2016) | 1 line
+
+optimized Jquery
+------------------------------------------------------------------------
+r4218 | fahad.abbas | 2016-05-25 18:45:27 +0500 (Wed, 25 May 2016) | 2 lines
+
+modified : player icons conflict issue fixed
+
+------------------------------------------------------------------------
+r4219 | sikanderzel | 2016-05-26 12:23:44 +0500 (Thu, 26 May 2016) | 1 line
+
+videos can be removed from collections in admin panel
+------------------------------------------------------------------------
+r4220 | sikanderzel | 2016-05-26 12:24:30 +0500 (Thu, 26 May 2016) | 1 line
+
+videos can be removed from collections via admin panel
+------------------------------------------------------------------------
+r4221 | sikanderzel | 2016-05-26 15:11:10 +0500 (Thu, 26 May 2016) | 1 line
+
+private video will not be shown to guest users now..
+------------------------------------------------------------------------
+r4222 | saqib.razzaq | 2016-05-26 15:17:14 +0500 (Thu, 26 May 2016) | 2 lines
+
+Initializing advanced Development mode
+
+------------------------------------------------------------------------
+r4223 | saqib.razzaq | 2016-05-26 16:31:10 +0500 (Thu, 26 May 2016) | 2 lines
+
+DB class modified to fit advanced development mode
+
+------------------------------------------------------------------------
+r4224 | saqib.razzaq | 2016-05-26 16:33:43 +0500 (Thu, 26 May 2016) | 2 lines
+
+Development mode added to delete function
+
+------------------------------------------------------------------------
+r4225 | sikanderzel | 2016-05-26 16:36:05 +0500 (Thu, 26 May 2016) | 1 line
+
+is_video_user updated
+------------------------------------------------------------------------
+r4226 | saqib.razzaq | 2016-05-26 16:39:16 +0500 (Thu, 26 May 2016) | 3 lines
+
+devmode moves to functions_db
+
+
+------------------------------------------------------------------------
+r4227 | saqib.razzaq | 2016-05-26 16:41:05 +0500 (Thu, 26 May 2016) | 2 lines
+
+$__devmsg array created
+
+------------------------------------------------------------------------
+r4228 | sikanderzel | 2016-05-26 17:20:04 +0500 (Thu, 26 May 2016) | 1 line
+
+video structure updated
+------------------------------------------------------------------------
+r4229 | sikanderzel | 2016-05-26 20:08:59 +0500 (Thu, 26 May 2016) | 1 line
+
+seo urls for collection working now
+------------------------------------------------------------------------
+r4230 | saqib.razzaq | 2016-05-27 16:10:02 +0500 (Fri, 27 May 2016) | 2 lines
+
+Devmode file added in global folder to display development mode info in all themes
+
+------------------------------------------------------------------------
+r4231 | saqib.razzaq | 2016-05-27 16:10:47 +0500 (Fri, 27 May 2016) | 2 lines
+
+Modified devWitch() plus added showDevWitch()
+
+------------------------------------------------------------------------
+r4232 | saqib.razzaq | 2016-05-27 16:11:28 +0500 (Fri, 27 May 2016) | 2 lines
+
+Modified development mode intialization
+
+------------------------------------------------------------------------
+r4233 | saqib.razzaq | 2016-05-27 16:12:24 +0500 (Fri, 27 May 2016) | 2 lines
+
+variable assigning added to display_it() function
+
+------------------------------------------------------------------------
+r4234 | saqib.razzaq | 2016-05-27 16:18:15 +0500 (Fri, 27 May 2016) | 2 lines
+
+Documentation added for devWitch() function
+
+------------------------------------------------------------------------
+r4235 | saqib.razzaq | 2016-05-27 16:18:58 +0500 (Fri, 27 May 2016) | 2 lines
+
+Calling devWitch() inside body of theme 
+
+------------------------------------------------------------------------
+r4236 | sikanderzel | 2016-05-27 17:25:02 +0500 (Fri, 27 May 2016) | 1 line
+
+Get_collections function updated
+------------------------------------------------------------------------
+r4237 | sikanderzel | 2016-05-27 17:27:19 +0500 (Fri, 27 May 2016) | 1 line
+
+show_colection _form updated
+------------------------------------------------------------------------
+r4238 | sikanderzel | 2016-05-27 17:28:27 +0500 (Fri, 27 May 2016) | 1 line
+
+get_collections function parameters updated
+------------------------------------------------------------------------
+r4239 | saqib.razzaq | 2016-05-30 11:30:20 +0500 (Mon, 30 May 2016) | 2 lines
+
+Buttons modified
+
+------------------------------------------------------------------------
+r4240 | sikanderzel | 2016-05-30 12:47:17 +0500 (Mon, 30 May 2016) | 1 line
+
+seo url for videos sorting
+------------------------------------------------------------------------
+r4241 | fahad.abbas | 2016-05-30 16:02:34 +0500 (Mon, 30 May 2016) | 2 lines
+
+modiified : wrong wuries fixed
+
+------------------------------------------------------------------------
+r4242 | fahad.abbas | 2016-05-30 16:07:25 +0500 (Mon, 30 May 2016) | 2 lines
+
+modified : quries fixed for 2.8.1 upgrade
+
+------------------------------------------------------------------------
+r4243 | sikanderzel | 2016-05-31 18:44:49 +0500 (Tue, 31 May 2016) | 1 line
+
+orphan photos checkbox
+------------------------------------------------------------------------
+r4244 | saqib.razzaq | 2016-05-31 19:16:22 +0500 (Tue, 31 May 2016) | 2 lines
+
+Added array_val_assign() function
+
+------------------------------------------------------------------------
+r4245 | saqib.razzaq | 2016-05-31 19:17:08 +0500 (Tue, 31 May 2016) | 2 lines
+
+Deconstruction of helper class, code moved back to watch video
+
+------------------------------------------------------------------------
+r4246 | saqib.razzaq | 2016-05-31 19:19:00 +0500 (Tue, 31 May 2016) | 2 lines
+
+Added build_sort() && build_sort_photos() functions
+
+------------------------------------------------------------------------
+r4247 | saqib.razzaq | 2016-05-31 19:38:40 +0500 (Tue, 31 May 2016) | 2 lines
+
+Deconstructed videos part from helper class
+
+------------------------------------------------------------------------
+r4248 | saqib.razzaq | 2016-05-31 19:42:23 +0500 (Tue, 31 May 2016) | 2 lines
+
+Code moved back
+
+------------------------------------------------------------------------
+r4249 | jamilrehman | 2016-05-31 19:42:59 +0500 (Tue, 31 May 2016) | 1 line
+
+missing view photo page fixes 
+------------------------------------------------------------------------
+r4250 | saqib.razzaq | 2016-05-31 19:44:33 +0500 (Tue, 31 May 2016) | 2 lines
+
+Channels code modified
+
+------------------------------------------------------------------------
+r4251 | saqib.razzaq | 2016-06-02 15:40:46 +0500 (Thu, 02 Jun 2016) | 2 lines
+
+Modifications made for honey captions
+
+------------------------------------------------------------------------
+r4252 | saqib.razzaq | 2016-06-02 15:41:11 +0500 (Thu, 02 Jun 2016) | 2 lines
+
+CB Subtitles anchor added
+
+------------------------------------------------------------------------
+r4253 | saqib.razzaq | 2016-06-02 15:41:35 +0500 (Thu, 02 Jun 2016) | 2 lines
+
+uploadSubtitle() function added
+
+------------------------------------------------------------------------
+r4254 | saqib.razzaq | 2016-06-02 16:26:33 +0500 (Thu, 02 Jun 2016) | 2 lines
+
+Fixed CB Subtitles frontend issue
+
+------------------------------------------------------------------------
+r4255 | sikanderzel | 2016-06-02 19:38:27 +0500 (Thu, 02 Jun 2016) | 1 line
+
+logo upload from admin panel
+------------------------------------------------------------------------
+r4256 | sikanderzel | 2016-06-02 19:39:36 +0500 (Thu, 02 Jun 2016) | 1 line
+
+upload logo from admin panel
+------------------------------------------------------------------------
+r4257 | sikanderzel | 2016-06-02 19:49:38 +0500 (Thu, 02 Jun 2016) | 1 line
+
+mail on friend request
+------------------------------------------------------------------------
+r4258 | sikanderzel | 2016-06-02 19:50:39 +0500 (Thu, 02 Jun 2016) | 1 line
+
+Two functions added for friend request mail
+------------------------------------------------------------------------
+r4259 | sikanderzel | 2016-06-02 20:14:16 +0500 (Thu, 02 Jun 2016) | 1 line
+
+
+------------------------------------------------------------------------
+r4260 | saqib.razzaq | 2016-06-03 13:02:05 +0500 (Fri, 03 Jun 2016) | 2 lines
+
+Parameter default set to false
+
+------------------------------------------------------------------------
+r4261 | jamilrehman | 2016-06-03 13:12:45 +0500 (Fri, 03 Jun 2016) | 1 line
+
+myaccount layout issue fixed 
+------------------------------------------------------------------------
+r4262 | jamilrehman | 2016-06-03 15:05:46 +0500 (Fri, 03 Jun 2016) | 1 line
+
+unnecessary code removed 
+------------------------------------------------------------------------
+r4263 | fahad.abbas | 2016-06-03 15:42:52 +0500 (Fri, 03 Jun 2016) | 2 lines
+
+modified: report block added
+
+------------------------------------------------------------------------
+r4264 | jamilrehman | 2016-06-03 16:41:47 +0500 (Fri, 03 Jun 2016) | 1 line
+
+report-block layout issue fixed 
+------------------------------------------------------------------------
+r4265 | jamilrehman | 2016-06-03 17:43:46 +0500 (Fri, 03 Jun 2016) | 1 line
+
+on view photo lang code changed for share link
+------------------------------------------------------------------------
+r4266 | fahad.abbas | 2016-06-06 15:49:28 +0500 (Mon, 06 Jun 2016) | 2 lines
+
+modified : mysql query updated for version 5.6 
+
+------------------------------------------------------------------------
+r4267 | sikanderzel | 2016-06-06 16:38:12 +0500 (Mon, 06 Jun 2016) | 1 line
+
+dutch language added
+------------------------------------------------------------------------
+r4268 | sikanderzel | 2016-06-07 11:02:19 +0500 (Tue, 07 Jun 2016) | 1 line
+
+language correction
+------------------------------------------------------------------------
+r4269 | sikanderzel | 2016-06-07 11:34:57 +0500 (Tue, 07 Jun 2016) | 1 line
+
+link to upload logo..
+------------------------------------------------------------------------
+r4270 | saqib.razzaq | 2016-06-07 12:54:41 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Development mode menu added
+
+------------------------------------------------------------------------
+r4271 | saqib.razzaq | 2016-06-07 13:02:13 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Commented pre_upload() function
+
+------------------------------------------------------------------------
+r4272 | sikanderzel | 2016-06-07 13:30:36 +0500 (Tue, 07 Jun 2016) | 1 line
+
+upload logo error handling
+------------------------------------------------------------------------
+r4273 | sikanderzel | 2016-06-07 13:31:12 +0500 (Tue, 07 Jun 2016) | 1 line
+
+upload logo error handling
+------------------------------------------------------------------------
+r4274 | saqib.razzaq | 2016-06-07 13:39:41 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Contacts Manager lang code added
+
+------------------------------------------------------------------------
+r4275 | sikanderzel | 2016-06-07 13:54:40 +0500 (Tue, 07 Jun 2016) | 1 line
+
+optimized method used for friend request
+------------------------------------------------------------------------
+r4276 | sikanderzel | 2016-06-07 14:12:18 +0500 (Tue, 07 Jun 2016) | 1 line
+
+bugs resolved
+------------------------------------------------------------------------
+r4277 | sikanderzel | 2016-06-07 14:20:15 +0500 (Tue, 07 Jun 2016) | 1 line
+
+function edited for friend request email noty
+------------------------------------------------------------------------
+r4278 | saqib.razzaq | 2016-06-07 15:05:42 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Fixed: Selected files appearning twice
+
+------------------------------------------------------------------------
+r4279 | sikanderzel | 2016-06-07 15:28:37 +0500 (Tue, 07 Jun 2016) | 1 line
+
+remove extra function
+------------------------------------------------------------------------
+r4280 | sikanderzel | 2016-06-07 15:29:14 +0500 (Tue, 07 Jun 2016) | 1 line
+
+function added
+------------------------------------------------------------------------
+r4281 | sikanderzel | 2016-06-07 15:29:57 +0500 (Tue, 07 Jun 2016) | 1 line
+
+use of functions
+------------------------------------------------------------------------
+r4282 | saqib.razzaq | 2016-06-07 15:30:42 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Removed deprecated plugin
+
+------------------------------------------------------------------------
+r4283 | saqib.razzaq | 2016-06-07 15:52:32 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Broken mysql queries fixed
+
+------------------------------------------------------------------------
+r4284 | saqib.razzaq | 2016-06-07 16:38:52 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Fixed: User level not being displayed in admin area
+
+------------------------------------------------------------------------
+r4285 | saqib.razzaq | 2016-06-07 16:44:10 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Lang code added for weak password
+
+------------------------------------------------------------------------
+r4286 | saqib.razzaq | 2016-06-07 16:45:25 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Removed extra code
+
+------------------------------------------------------------------------
+r4287 | saqib.razzaq | 2016-06-07 17:07:33 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Test cases removed, message added
+
+------------------------------------------------------------------------
+r4288 | saqib.razzaq | 2016-06-07 17:08:04 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Test cases removed
+
+------------------------------------------------------------------------
+r4289 | saqib.razzaq | 2016-06-07 17:11:33 +0500 (Tue, 07 Jun 2016) | 2 lines
+
+Removed junk code
+
+------------------------------------------------------------------------
+r4290 | saqib.razzaq | 2016-06-08 10:59:25 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Fixed: Subscribe message not showing on 2.8.1 standard
+
+------------------------------------------------------------------------
+r4291 | saqib.razzaq | 2016-06-08 11:07:15 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Fixed broken queries for 2.8.1 upgrade
+
+------------------------------------------------------------------------
+r4292 | saqib.razzaq | 2016-06-08 11:08:29 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Changed back to comments_count
+
+------------------------------------------------------------------------
+r4293 | saqib.razzaq | 2016-06-08 11:13:56 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Space added between size and text
+
+------------------------------------------------------------------------
+r4294 | saqib.razzaq | 2016-06-08 12:41:05 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Added minified JS files for core
+
+------------------------------------------------------------------------
+r4295 | saqib.razzaq | 2016-06-08 12:42:29 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Minified JS files added for theme
+
+------------------------------------------------------------------------
+r4296 | saqib.razzaq | 2016-06-08 12:43:14 +0500 (Wed, 08 Jun 2016) | 3 lines
+
+Minified JS files included for production version
+
+
+------------------------------------------------------------------------
+r4297 | saqib.razzaq | 2016-06-08 12:43:41 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Removed loop, minifed files added
+
+------------------------------------------------------------------------
+r4298 | saqib.razzaq | 2016-06-08 12:48:44 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Minified css files included
+
+------------------------------------------------------------------------
+r4299 | saqib.razzaq | 2016-06-08 12:49:52 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Minifed Jquery UI css file added
+
+------------------------------------------------------------------------
+r4300 | saqib.razzaq | 2016-06-08 13:11:05 +0500 (Wed, 08 Jun 2016) | 1 line
+
+Update admin_change_pass.php
+------------------------------------------------------------------------
+r4301 | saqib.razzaq | 2016-06-08 13:12:38 +0500 (Wed, 08 Jun 2016) | 1 line
+
+Update README
+------------------------------------------------------------------------
+r4302 | saqib.razzaq | 2016-06-08 13:13:15 +0500 (Wed, 08 Jun 2016) | 1 line
+
+Update upgrade.sql
+------------------------------------------------------------------------
+r4303 | saqib.razzaq | 2016-06-08 13:13:42 +0500 (Wed, 08 Jun 2016) | 1 line
+
+Update LICENSE
+------------------------------------------------------------------------
+r4304 | saqib.razzaq | 2016-06-08 13:15:05 +0500 (Wed, 08 Jun 2016) | 1 line
+
+Update VERSION
+------------------------------------------------------------------------
+r4305 | saqib.razzaq | 2016-06-08 14:14:06 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Primary class added to default button
+
+------------------------------------------------------------------------
+r4306 | saqib.razzaq | 2016-06-08 14:20:42 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Removed extra menu link
+
+------------------------------------------------------------------------
+r4307 | saqib.razzaq | 2016-06-08 14:32:51 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+Lang coded header tag added
+
+------------------------------------------------------------------------
+r4308 | fahad.abbas | 2016-06-08 15:52:19 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+modiifed : char set extra conetnt header removed
+
+------------------------------------------------------------------------
+r4309 | fahad.abbas | 2016-06-08 16:49:22 +0500 (Wed, 08 Jun 2016) | 2 lines
+
+modified : xml title parsed in CDATA 
+
+------------------------------------------------------------------------
+r4310 | saqib.razzaq | 2016-06-09 10:42:17 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Removed outdated function call, updated comments
+
+------------------------------------------------------------------------
+r4311 | saqib.razzaq | 2016-06-09 10:49:28 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+indentation corrected, comments added
+
+------------------------------------------------------------------------
+r4312 | saqib.razzaq | 2016-06-09 10:51:51 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Comments modified, indentation fixed
+
+------------------------------------------------------------------------
+r4313 | saqib.razzaq | 2016-06-09 10:53:06 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Comments updated
+
+------------------------------------------------------------------------
+r4314 | saqib.razzaq | 2016-06-09 11:07:08 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Extra parameter added in function to return videos for myaccount page
+
+------------------------------------------------------------------------
+r4315 | saqib.razzaq | 2016-06-09 11:07:46 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Generic function call added, comments modified, indentation 
+
+------------------------------------------------------------------------
+r4316 | saqib.razzaq | 2016-06-09 11:10:46 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Limit added for useraccount videos
+
+------------------------------------------------------------------------
+r4317 | saqib.razzaq | 2016-06-09 11:13:17 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Indentation, comments updated
+
+------------------------------------------------------------------------
+r4318 | saqib.razzaq | 2016-06-09 11:18:12 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Code beautifying and optimization, comments
+
+------------------------------------------------------------------------
+r4319 | saqib.razzaq | 2016-06-09 11:22:55 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Code beautified
+
+------------------------------------------------------------------------
+r4320 | saqib.razzaq | 2016-06-09 12:09:32 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Fixed broken rss issue
+
+------------------------------------------------------------------------
+r4321 | fahad.abbas | 2016-06-09 12:42:36 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+modified : time comments check added
+
+------------------------------------------------------------------------
+r4322 | fahad.abbas | 2016-06-09 12:44:00 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+added : video js time comments plugin 
+
+------------------------------------------------------------------------
+r4323 | saqib.razzaq | 2016-06-09 13:07:29 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Modified category section
+
+------------------------------------------------------------------------
+r4324 | fahad.abbas | 2016-06-09 14:00:06 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+modified : console killed 
+
+------------------------------------------------------------------------
+r4325 | jamilrehman | 2016-06-09 15:33:37 +0500 (Thu, 09 Jun 2016) | 1 line
+
+404 page updated 
+------------------------------------------------------------------------
+r4326 | saqib.razzaq | 2016-06-09 15:50:45 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+Baseurl added, spelling corrected
+
+------------------------------------------------------------------------
+r4327 | fahad.abbas | 2016-06-09 16:04:52 +0500 (Thu, 09 Jun 2016) | 2 lines
+
+modified : file dir issue fixed
+
+------------------------------------------------------------------------

programming_language: Lua
filename: clipbucket.php
change_type: ModificationType.MODIFY
diff: @@ -11,9 +11,9 @@
  
  define("ClipBucket","ClipBucket - Open Source Media Sharing Script by Arslan Hassan");
  define("VERSION","2.8.1");
- define("STATE","RC1");
- define("REV","4143");
- define("RELEASED","17-05-2016");
+ define("STATE","RC2");
+ define("REV","4328");
+ define("RELEASED","09-06-2016");
  define("AUTHORS","ARSLAN HASSAN,FAWAZ TAHIR,FAHAD ABBAS,SAQIB RAZZAQ");
 
 ?>
\ No newline at end of file

programming_language: PHP