Statistics: Posted by david — Fri Jan 21, 2011 10:55 am — Replies 0 — Views 546

Statistics: Posted by david — Tue Jan 18, 2011 1:29 pm — Replies 3 — Views 348

Statistics: Posted by david — Tue Dec 14, 2010 8:06 pm — Replies 8 — Views 573

naderman wrote:
Hi everyone,

We are pleased to announce the release of phpBB "Patience is a Virtue" 3.0.8. This new version is a maintenance release fixing a large number of bugs as well as improving on usability and performance. Unfortunately we have also discovered a security issue in the previous version affecting boards which have the flash BBCode enabled - it is disabled by default. On WebKit based browsers like Safari or Chrome, as well as Opera, the flash BBCode can be used to execute javascript causing a cross site scripting vulnerability.

To fix this problem in 3.0.7, please go to line 354 in includes/message_parser.php, and right before

Code:

      // Apply the same size checks on flash files as on images

add these lines:

Code:

      $in = str_replace(' ', '%20', $in);

      // Make sure $in is a URL.
      if (!preg_match('#^' . get_preg_expression('url') . '$#i', $in) &&
         !preg_match('#^' . get_preg_expression('www_url') . '$#i', $in))
      {
         return '[flash=' . $width . ',' . $height . ']' . $in . '[/flash]';
      }


This will not fix the problem in already existing posts. In order to scan your board for malicious posts we have created a scanning script. Simply upload it to your phpBB's root directory and access it directly. A new version of the Support Toolkit including this script as well as a tool for reparsing individual posts will be released soon. We will keep you updated.

The release also fixes a problem with the recaptcha plugin which could have helped spammers circumvent the captcha in some cases. A thank you goes to Evilzone.org for highlighting a few bugs and giving as an overall good security rating.

We urge you to update your installation as soon as possible. Our support team will only support phpBB 3.0.8, updates to phpBB 3.0.8 and conversions to phpBB 3.0.8. Submissions to our trackers for older versions will not be accepted, please make sure you update before you submit a bug report.

If you use a language pack other than the default "English [GB]", you should check our downloads section, an update may already be available.

We would also like to say a special thank you to everyone who has contributed a patch to this release:
Adam Reyher, Chris Sfanos, Cristian Rodriguez, Cullen Walsh, David Ward, Gabriel Vazquez, Marc Alexander, Mark, mrkurt, narqelion, Nick Anderegg, Oleg Pudeyev, Patrick W, Paul Sohier, Richard Foote, RMcGirr83, Rob House, SA007, Tabitha Backoff, Thatbitextra and Yuriy Rusko.

For a complete list of changes with attributed ticket numbers, please consult our comprehensive changelog.

Installation instructions

A short explanation of how to do a conversion, installation or update is included within the provided INSTALL.html file, please be sure to read it. You can find a list of requirements on our Downloads page.

Security

If you find any security issues please report them to our security tracker.

Available packages

If you experience problems with the automatic update (white screens, timeouts, etc.) we recommend using the "changed files only" or "patch" method for updating.

• Full Package:
  Full phpBB 3 source code and english language files.
• Automatic Update Package:
  Update package for the automatic updater, contains changes from previous release to this release.
• Changed Files Only:
  Complete files, but only those that were changed since previous releases of phpBB 3. This archive contains changed files for every previous release.
• Patch Files:
  This file contains diffs against the previous phpBB 3 release, which can be applied with the patch utility.

Select the package most suitable for you. We recommend the following methods depending on your situation:

• For new installations you should use the Full Package
• For updates of boards without modifications you can use the Automatic Update Package (guided update) or the Changed Files Only package (manual update).
• For updates of boards with modifications you should use the Automatic Update Package. If you are confident with patch files and patching you can use the Patch Files Package.
• International Support Teams may use the Patch Package in conjunction with the Code Changes to better support users with problematic conflicts during their update process or to help them update code sections.
• If you are a hoster/provider, you may want to use the Patch Files Package to update all of your client installations.

Please ensure you read the INSTALL and README documents in docs/ before proceeding with installation, updates or conversions!

Download Locations

The download is of course available on our downloads page.
Our release archive provides all packages we build. If you do not find your desired package you can probably find it in the release archive.

These are the files with their md5 sums:

phpBB-3.0.8.zip (Full Package)
md5sum: 81de73308603abee863be7552c7caac7
phpBB-3.0.8.tar.bz2 (Full Package)
md5sum: 7b20c8377364fc0458a241e232a019d0
phpBB-3.0.8-patch.zip (Patch Files)
md5sum: 75308c5c4e8d1c17ca8faa30687f1b42
phpBB-3.0.8-patch.tar.bz2 (Patch Files)
md5sum: 295a8bf9bfd3f90d715ecd642b3aa773
phpBB-3.0.8-files.zip (Changed Files)
md5sum: 03e1ad263c697f2b2da0632b1138aaf3
phpBB-3.0.8-files.tar.bz2 (Changed Files)
md5sum: 31632678f94ccb677c2fda40fc91123a
phpBB-3.0.7-PL1_to_3.0.8.zip (Automatic Update Package from 3.0.7-PL1)
md5sum: 78f54abe9c11a645362ff08bcea67ec3
phpBB-3.0.7-PL1_to_3.0.8.tar.bz2 (Automatic Update Package from 3.0.7-PL1)
md5sum: 351e9f24fd7d3e291eade22484340d22
phpBB-3.0.7-PL1_to_3.0.8-codechanges.zip (Language and Style Code Changes)
md5sum: 4503e3959d39a6bd9d80bbe2e2b9d0a4
phpBB-3.0.7-PL1_to_3.0.8-codechanges.tar.bz2 (Language and Style Code Changes)
md5sum: b088ba2a16b456b4f7e764f381c4a3b7
phpBB-3.0.8.webpi.zip (Microsoft Web Platform Installer Package)
md5sum: af2d5111e435315891a8f772e85fbd47

Download & Documentation

• phpBB Downloads
• phpBB Projects page @ ohloh
• phpBB 3 Documentation
• phpBB 3 support forum
• phpBB 3 bug tracker
• phpBB on GitHub
• phpBB Code Wiki

Statistics: Posted by Unknown Bliss — Sat Nov 20, 2010 1:05 pm — Replies 5 — Views 949

naderman wrote:
Hello phpBB supporters!

We can finally announce the availability of the first release candidate of phpBB 3.0.8 aimed at experienced users in an effort to increase the quality of final releases.

Please scrutinise this release in-depth and report issues to the bug tracker. Critical bugs halting the board's operation should be reported immediately. Feel free to contact developers directly about such problems.

We recommend that international support sites update their sites to RC1 too. We are able to provide direct support to them within our international support sites forums.

Tagging/Reviewing fixes

On our new tracker QA team members can still mark bug fixes as verified. Use the "Verify Solution" button from the button set at the top of the ticket. Of course prior to clicking you should have properly checked whether the bug was really fixed. Comment on the respective bug if you find problems so the fix can be corrected.

You can find a list of unverified fixes at http://tracker.phpbb.com/secure/IssueNa ... stId=10055

Language Packs and Styles

We already gave out instructions to language pack authors to let them update their language packs in a timely manner. The changes are provided with the code changes package (see downloads section below). Style authors should also download the code changes package and adjust their styles accordingly. Please post within our Styles forums if you have questions or encounter problems.

New features, changes, bug fixes

phpBB 3.0.8 is a maintenance release fixing a number of bugs as well as solving a few usability issues. The release fixes a problem with the recaptcha plugin which could have helped spammers circumvent the captcha in some cases. A thank you goes to Evilzone.org for highlighting a few bugs and giving us an overall good security rating. A misbehaviour of message queuing has been fixed in this release. If you experience delayed notification messages after the update, please increase the queue package size in e-mail settings.

The full changelog is available at http://tracker.phpbb.com/secure/Release ... ctId=10010 or in the changelog file within the docs folder contained in the package which includes previous releases.

Available packages

If you experience problems with the automatic update (white screens, timeouts, etc.) we recommend using the "changed files only" or "patch" method for updating.

• Full Package:
  Full phpBB 3 source code and english language files.
• Automatic Update Package:
  Update package for the automatic updater, contains changes from previous release to this release.
• Changed Files Only:
  Complete files, but only those that were changed since previous releases of phpBB 3. This archive contains changed files for every previous release.
• Patch Files:
  This file contains diffs against the previous phpBB 3 release, which can be applied with the patch utility.
• Code Changes Package:
  This package contains MOD instructions for changes to the following sections: Language changes, prosilver style changes and subsilver2 style changes.

Select the package most suitable for you. We recommend the following methods depending on your situation:

• For new installations you should use the Full Package
• For updates of boards without modifications you can use the Automatic Update Package (guided update) or the Changed Files Only package (manual update).
• For updates of boards with modifications you should use the Automatic Update Package. If you are confident with patch files and patching you can use the Patch Files Package.
• Style Authors and Translators may use the Code Changes Package to update their styles or language packs.
• International Support Teams may use the Patch Package in conjunction with the Code Changes to better support users with problematic conflicts during their update process or to help them update code sections.
• If you are a hoster/provider, you may want to use the Patch Files Package to update all of your client installations.

Please ensure you read the INSTALL and README documents in docs/ before proceeding with installation, updates or conversions!

Download Locations

The download is of course available on our downloads page.
Our release archive provides all packages we build. If you do not find your desired package you can probably find it in the release archive.

These are the files with their md5 sums:

phpBB-3.0.8-RC1.zip
md5sum: d605745c42eabff83bd96659fa4ed510
phpBB-3.0.8-RC1.webpi.zip
md5sum: ce3e8f019420cfe021b8f7659d4ba827
phpBB-3.0.8-RC1.tar.bz2
md5sum: 150ba4a5d99af881fdaea59c20fd071e
phpBB-3.0.8-RC1-patch.zip
md5sum: 4ae6ab0f80e44d13b450827287dca416
phpBB-3.0.8-RC1-patch.tar.bz2
md5sum: 4ceb421bc0bcf109d7632be1f6ecd0ae
phpBB-3.0.8-RC1-files.zip
md5sum: 6145d9bcb0d4a655fbbcbe6d7b1536ad
phpBB-3.0.8-RC1-files.tar.bz2
md5sum: 164406cb7637f887b6bb3f44cc387913
phpBB-3.0.7-PL1_to_3.0.8-RC1.zip
md5sum: 14d21f3432e369a4fe75ef847aadbe13
phpBB-3.0.7-PL1_to_3.0.8-RC1.tar.bz2
md5sum: 6c788c925be78f6699743e2db8a7c56e
phpBB-3.0.7-PL1_to_3.0.8-RC1-codechanges.zip
md5sum: f348eb89e44845aff918b6362d6aafc7
phpBB-3.0.7-PL1_to_3.0.8-RC1-codechanges.tar.bz2
md5sum: 76eb3cbdbac93c45d12198d7a2a14fbd


*IMPORTANT*

To correctly perform an update, do not forget to re-enable the PHPBB_QA constant in your includes/constants.php file. Otherwise you are not prompted for an update in the ACP and the automatic update will eventually fail.

Download & Documentation

• phpBB Downloads
• phpBB Projects page @ ohloh
• phpBB 3 Documentation
• phpBB 3 support forum
• phpBB 3 bug tracker
• phpBB Code Forge
• phpBB Code Wiki

Have fun with the release,
the phpBB Team

Statistics: Posted by david — Thu Nov 11, 2010 10:48 am — Replies 7 — Views 642

Erik Frèrejean wrote:
Hi,

The Support team is pleased to announce the release of Support Toolkit 1.0.2, this release is a maintenance release resolving a number of issues and introduces some changes aimed at overall usability of the STK.

New features:
With this release the Support Toolkit is extended with the following new features.

• [Add] Added a way to force the BOM sniffer to check all files within the phpBB path. (Bug #62186)
• [Add] Added Emergency Repair Kit. (Bug #62202)
• [Add] Added a SRT generator, which tries to pre-fill some important pieces of information. (Bug #62280)

Changes:
Besides new features, this release includes some larger changes to system.

• [Change] Use a whitelist of files that will be ran through the BOM sniffer. (Bug #62183)
• [Change] The BOM sniffer will create a backup the files in which it found issues.
• [Change] Database won't run the same check twice when no changes where detected for a given step.
• [Change] Try to overwrite the PHP time and memory limits, this might prevent some issues.

Bug fixes:
This release fixes the following bugs.

• [Fix] The style dir critical repair tool doesn't recognise non-installed styles. (Bug #62130)
• [Fix] In some environments the database cleaner breaks when no changes are found. (Bug #62180, Patch by VSE)
• [Fix] Force sorting when loading database cleaner data files. (Bug #62180, Patch by Noxwizard)
• [Fix] Correctly handle the restore deleted users tool when there are no deleted users. (Bug #62181)
• [Fix] Removed some php ≥ 5.0.0 code.
• [Fix] Automatic critical repair tools wheren't ran. (Bug #62194)
• [Fix] Reparse all BBCodes fail. (Bug #62203)
• [Fix] Private message senders get changed after merge users tool has merged PMs. (Bug #62247, Patch by ToonArmy)
• [Fix] A couple of language related issues.
• [Fix] Log the user out when using the STK logout method and using the phpBB buildin login method.
• [Fix] Fixed an issue that broke backward compatibility with phpBB versions prior to 3.0.3.
• [Fix] Correctly re-add all modules when "reset modules" in the database cleaner is ran. (Bug #62429)
• [Fix] Make sure that the STK is able to run when the user has UMIL < 1.0.3 installed. (Bug #62430)
• [Fix] Prevent bots from being buplicated in the user groups table when the database cleaner is ran. (Bug #62434)
• [Fix] Maintain the user signature options when reparsing signatures. (Bug #62451)
• [Fix] Remove PHP 5 only code from the Merge users tool. (Bug #62458)

Download:
The new packages can be downloaded from the STK section in the CDB.

Updating:
When updating from any older Support Toolkit version first delete the old "stk/" directory before uploading the new version.

If you are unfamiliar with the toolkit, please see the Support Toolkit page.

As always, assistance with installation, updating or any of the tools provided with the Toolkit is available in the Support Forum. Please submit any bugs/suggestions to the Support Team Tools bugtracker.

Thank you, and enjoy.

The phpBB Team

You may discuss this announcement in the [Discuss] Support Toolkit 1.0.2 released topic.

Statistics: Posted by Unknown Bliss — Mon Nov 01, 2010 6:34 pm — Replies 0 — Views 269

Statistics: Posted by david — Mon Oct 25, 2010 3:14 pm — Replies 6 — Views 520

Statistics: Posted by Unknown Bliss — Fri Oct 08, 2010 12:02 pm — Replies 1 — Views 315

EXreaction wrote:
The Modifications Team is proud to announce the availability of the 1.0.3 "Countdown to Libertyvasion Edition" of UMIL, the Unified MOD Install Library.

UMIL is a library for MOD authors that enables them to easily create database installation and update scripts for their MODs. It provides unified methods to access phpBB's API for adding modules, adding permissions, modifying the database, and more.

We require MODs containing UMIL that are newly submitted to the MODDB to contain this new version. In order to update the UMIL release included with your MOD just replace the old UMIL folder with the new one. No other changes are required.

How to get it:

You can get UMIL and more information from the UMIL page.

What's new:

The following was changed in this release:

• [Fix] Correct table prefix #62118
• [Fix] Fix the create_table_sql for postgresql properly #61365
• [Feature] Ability to specify a custom table prefix to be used
• [Change] Remove the update check in stand-alone mode, it caused problems in some situations

Bugs:

Please report any bugs you encounter to the tracker.


The Modifications Team

Statistics: Posted by david — Tue Aug 10, 2010 9:01 pm — Replies 0 — Views 458

Statistics: Posted by david — Sun Aug 01, 2010 11:09 pm — Replies 12 — Views 951

SyntaxError90 wrote:
Following up OSCON 2010, we have opened up a new contribution type in our customization database called "Bridges and Integration." It is our hope that we will have a variety of officially maintained Bridges available as well as allowing the community to create them too.

Submitting a bridge will work just like submitting a regular MOD, but with some slightly different packaging guidelines. The code will then be checked for security vulnerabilities and tested to ensure it is functional. If a bridge you are creating is still in development, post about in the [3.0.x] MODs in Development, only add "[Bridge]" after the progress prefix, much like this example.

You can view the complete rules and packing recommendations regarding the submission of bridges and integration here: http://www.phpbb.com/mods/rules-and-pol ... b/bridges/
You can submit your own bridges here: http://www.phpbb.com/customise/db/bridges-24

Feel free to ask for assistance on the phpBB side of things in [3.0.x] MOD Writers Discussion or our IRC channel: #phpBB-Coding.

Statistics: Posted by david — Sun Aug 01, 2010 8:34 pm — Replies 1 — Views 286

Code:

Username:
Start Post Count:

Statistics: Posted by Unknown Bliss — Fri Jul 30, 2010 5:05 am — Replies 18 — Views 1173

Statistics: Posted by Unknown Bliss — Mon Jul 12, 2010 3:33 pm — Replies 2 — Views 333

Marshalrusty wrote:
June 17th, 2010 marks the 10 year anniversary of the day that phpBB-founder James "theFinn" Atkinson sat down in front of his computer and wrote the first few lines of what would later become phpBB 1.0.0. While others have come and gone, phpBB has survived through an entire decade with 4 development team leaders working with thousands of contributors and millions of users. The PHP Group recently celebrated their own 15 year anniversary, making phpBB one of the longest standing PHP-based projects in existence.

Exactly five years ago, our second Development Team Leader Paul S. Owen noted phpBB's 5 year anniversary by raising a glass. Today, I ask you to raise an aluminum can of your favorite beverage to all those who have made this day possible.

Thanks you for your continuing support,

- The phpBB Team

Statistics: Posted by Developer [Bot] — Fri Jun 18, 2010 6:59 am — Replies 2 — Views 508

A_Jelly_Doughnut wrote:


AutoMOD 1.0.0 Released

The Modifications Team is proud to announce the immediate availability of the "We'll Release it Tomorrow" stable release of AutoMOD, our automated MOD installation tool. There have been a large number of bug fixes for this release. Refer to the changelog for more details.

About AutoMOD

AutoMOD is a tool for installing MODs in an automated manner. It performs the file edits for you. As of today, AutoMOD is considered a stable release, meaning we believe all the serious bugs have been removed, and will provide support for any which do still exist.

Getting started

Find more information and a download link on the:

AutoMOD page

The source is available from the code forge under the GNU GPL version 2

Translations

On the download page there are also translations available. If you would like to translate AutoMOD to your language, send a PM to A_Jelly_Doughnut.

Statistics: Posted by david — Sat Jun 12, 2010 8:00 am — Replies 3 — Views 415