phpBB • Free and Open Source Forum Software

stevemaury wrote: ↑

Wed Jun 24, 2020 6:04 pm

Do you realize that the order in which posts appear is a user setting? Just because you have set it to show newest first does not mean everyone has.

i was not aware of that, actually. interesting.

and just for those reading in the future, i've updated the OP with my suggested solution.

another strategy could be to reserve some old post_id s (either as dummy rows in the db or by making actual posts in a hidden forum) for use in the future as needed... but since i haven't done that, i don't know what i should do. i suppose i could sacrifice some random older post that no one will mi...

there's an abandoned extension That extension is not abandoned as it is in the CDB and works perfectly with phpBB 3.3.0 i maintain my assertion that the extension is abandoned considering: the author has died only one author is listed the extension was last updated in 2017 however, i was under the ...

(phpBB 3.2.8) i often find myself in a situation where i want to split off posts into a new topic and also create a new OP for that topic as an introduction . the obvious problem is that the new OP is newer than the existing posts i'm splitting off, so when all are placed in the same topic, the olde...

Dezdan wrote: ↑

Sun Feb 16, 2020 4:42 pm

With the abandonment of the 'Auto-Resize Images Server-side' extension, why isn't there another ext or builtin feature to resize images on upload?

whoops, it's not really abandoned. i'm the author and am trying to get the 'abandoned' status removed.

yes, i am also interested in something like this.
related discussion here:
viewtopic.php?f=496&t=2516526

sorry for the delay. i should log in more often. The code of that 3.0.7 mod accomplished that. Before asking for such an ext I just wanted to hear if your thoughts point in a similar direction. those are cool ideas, but i personally don't need as much logic/functionality. all i really want is to for...

... or is my only option to make a new extension myself? Did you? Otherwise I would also consider to co-fund the development of an extension to realise some more aspects of the idea to have an intro-forum where every member has started a topic upon registration (or later, if already registered) as ...

not only should you make backups, but you should test them by restoring them elsewhere. only then should you attempt the updates.

i'd just assume that php owns the files and set your permissions accordingly. if php can't write where it's supposed to, you'll know when you see the errors (like when you upload a file).

that depends. php needs write access to certain phpBB files/dirs, otherwise users wouldn't be able to do things like upload attachments. if php is run as the system user that owns said files, then 755 gives php write access. if php is run as a different account, then php can't write there. in that c...

but what's written about the exploit does not say that merely using try_files is sufficient for immunity. notably, the internal redirect fallback (the final argument to try_files ) is a URI rather than a standard response code like =404 (as AbaddonOrmuz points out), so their exploit URI still hits p...

That does not appear to be a sufficient condition for this exploit to succeed. The try_files check we have in place is sufficient to stop this. If you remove that line, you do indeed become vulnerable. that seems contradictory to what's written about the exploit, e.g.: No file existence checks like...

not sure if this is the right place to post this. move it wherever you want. anyway, if you use nginx and php7-fpm, please upgrade your php. a patch was released a few days ago. from my understanding, the sample config for nginx from phpBB is vulnerable: https://github.com/phpbb/phpbb/blob/master/ph...

downgrade is not trivial while php 7.3 being default package in Debian 10. When can phpBB 3.3 expected to be released? don't downgrade. just install sury's php 7.2 package alongside debian's 7.3. Who am I? I am a Debian Developer since year 2000, and I have been packaging PHP for Debian since PHP 5...