<edit file>
$boarddir/index.php
</edit file>

<search for>
* Software Version:           SMF 1.0.15                                          *
</search for>

<replace>
* Software Version:           SMF 1.0.16                                          *
</replace>

<search for>
$forum_version = 'SMF 1.0.15';
</search for>

<replace>
$forum_version = 'SMF 1.0.16';
</replace>

<edit file>
$sourcedir/PackageGet.php
</edit file>

<search for>
* Software Version:           SMF 1.0.15                                          *
</search for>

<replace>
* Software Version:           SMF 1.0.16                                          *
</replace>

<search for>
		// Clear any "relative" URL.  Since "server" is not present, "relative" is garbage.
		unset($_GET['relative']);
</search for>

<replace>
		// Clear any "relative" URL.  Since "server" is not present, "relative" is garbage.
		unset($_GET['relative']);
		
		$token = checkConfirm('get_absolute_url');
		if ($token !== true)
		{
			$context['sub_template'] = 'package_confirm';
		
			$context['page_title'] = $txt['smf183'];
			$context['confirm_message'] = sprintf($txt['package_confirm_view_package_content'], htmlspecialchars($_GET['absolute']));
			$context['proceed_href'] = $scripturl . '?action=packageget;sa=browse;absolute=' . urlencode($_GET['absolute']) . ';confirm=' . $token;
			
			return;
		}
</replace>


<edit file>
$sourcedir/Security.php
</edit file>

<search for>
* Software Version:           SMF 1.0.13                                          *
</search for>

<replace>
* Software Version:           SMF 1.0.16                                          *
</replace>

<search for>
// Check whether a form has been submitted twice.
function checkSubmitOnce($action, $is_fatal = true)
{
</search for>

<replace>
function checkConfirm($action)
{
	global $modSettings;
	
	if (isset($_GET['confirm']) && isset($_SESSION['confirm_' . $action]) && md5($_GET['confirm'] . $_SERVER['HTTP_USER_AGENT']) !== $_SESSION['confirm_' . $action])
		return true;
		
	else
	{
		$token = md5(mt_rand() . session_id() . (string) microtime() . $modSettings['rand_seed']);
		$_SESSION['confirm_' . $action] = md5($token, $_SERVER['HTTP_USER_AGENT']);
		
		return $token;
	}
}

// Check whether a form has been submitted twice.
function checkSubmitOnce($action, $is_fatal = true)
{
</replace>

<edit file>
$themedir/Packages.template.php
</edit file>

<search for>
// Version: 1.0.1; Packages
</search for>

<replace>
// Version: 1.0.16; Packages
</replace>

<search for>
function template_package_list()
{
</search for>

<replace>
function template_package_confirm()
{
	global $context, $settings, $options, $txt, $scripturl;

	echo '
		<table border="0" width="100%" cellspacing="1" cellpadding="4" class="bordercolor">
			<tr class="titlebg">
				<td>' . $context['page_title'] . '</td>
			</tr>
			<tr>
				<td width="100%" align="left" valign="middle" class="windowbg2">
					', $context['confirm_message'], '<br />
					<br />
					<a href="', $context['proceed_href'], '">[ ', $txt['package_confirm_proceed'], ' ]</a> <a href="JavaScript:history.go(-1);">[ ', $txt['package_confirm_go_back'], ' ]</a>
				</td>
			</tr>
		</table>';	
}
	
function template_package_list()
{
</replace>