- was allowing output buffer to fill completely instead of only half-way like VXD method.
Added log output when output buffers are full (on 9x and NT based OSes).

Fixed possible memory leak if disconnected after AR search.
Sysops can now set exemptions and flags they don't have as long as their level is equal or greater than the user's.

Failed login delay now occurs BEFORE response to client (per RFC2577).

Now restricts PORT command to ports >=1024 as recommended by RFC2577 to eliminate FTP proxy bounce attack to well known ports (e.g. SMTP).
Now delays 5 seconds on failed password attempt (as recommended by RFC2577).
Updated lprintfs.

Also handles resetting daily user stats if online during date change.

Also fixes bug with tlast field (supposed to minutes, not seconds).

Move internal sysop page (random tones) from getkey() to inkey() and replaced the short tones in msgabort() (every 100th call).

Changed strip_ctrl() and strip_exascii() to return the modified string.

Changed strip_ctrl() to JUST strip control chars and created prep_file_desc() to do what strip_ctrl used to (much more than just strip ctrl chars).
Updated crc32() to auto-detect ASCIIZ string length if no length is specified.
Updated various string loops to check for NULL rather than using strlen().

Added 32-bit CRCs for version and copyright strings to defeat the lame-o hex0rs.

JavaScript context is now only created when needed. This should improve performance (slightly), memory usage, and reliability (hopefully).

Updated mail-abuse.org DNS and HTTP server addresses.

TEXT.DAT  lines are now allocated with one additional byte and zero-filled for the new YNQX line (was just YN), for backwards compatibility.

Eliminated local sysop page sound (random tones) from msgabort() function (slowed down menu display too much).