Search found 1539 matches

by Marc
Mon Mar 26, 2018 7:22 pm
Forum: [3.2.x] Styles Support & Discussion
Topic: phpBB 3.2 style changes
Replies: 22
Views: 7801

Re: phpBB 3.2 style changes

Updated the first post to add changes between 3.2.2 & 3.2.3-RC1.
by Marc
Sun Feb 25, 2018 9:36 am
Forum: [3.2.x] Support Forum
Topic: How to fix BREACH security exploit
Replies: 3
Views: 284

Re: How to fix BREACH security exploit

While tests like the mentioned are helpful for doing basic checks of the server setup, it's also important to understand what each of these mean. The BREACH exploit is a server side and browser side issue. It's unrelated to the software being used. In fact, the reason why there is a difference betwe...
by Marc
Tue Feb 20, 2018 7:13 am
Forum: phpBB Discussion
Topic: [Discuss] [Security] phpBB 3.2.2 Packages Compromised
Replies: 42
Views: 4297

Re: [Discuss] [Security] phpBB 3.2.2 Packages Compromised

As we mentioned in the announcement and the follow-ups, we've taken an extensive amount of time to investigate and try to track how this was possible. Neither Cloudflare nor we were able to find out how the attacker was able to acquire the API key. The very limited number of team members that had ac...
by Marc
Sun Feb 18, 2018 6:35 pm
Forum: phpBB Discussion
Topic: [Discuss] [Security] phpBB 3.2.2 Packages Compromised
Replies: 42
Views: 4297

Re: [Discuss] [Security] phpBB 3.2.2 Packages Compromised

API access with an API key does not require a login to the Cloudflare account, 2FA has no effect on that either. There was no login to our account.
DNSSEC wouldn't have changed anything as the DNS info was not forged or manipulated but rather just modified.
by Marc
Wed Jan 31, 2018 10:50 am
Forum: phpBB Discussion
Topic: [Discuss] [Security] phpBB 3.2.2 Packages Compromised
Replies: 42
Views: 4297

Re: [Discuss] [Security] phpBB 3.2.2 Packages Compromised

We will post an update with more details once the third-party site has finished its investigation.
Please refrain from trying to guess any involved parties or trying to draw conclusions.
Our detailed investigation has confirmed what has been stated in the announcement.
by Marc
Fri Jan 19, 2018 11:02 am
Forum: phpBB Discussion
Topic: phpBB Christams banner
Replies: 30
Views: 2181

Re: phpBB Christams banner

Until we have resolved the issue with our website update script you should enjoy our reminder that it's cold outside and appreciate the warmth of summer. :)
by Marc
Fri Jan 19, 2018 11:00 am
Forum: phpBB Discussion
Topic: Discuss: phpBB 3.2.2 Release
Replies: 72
Views: 7746

Re: Discuss: phpBB 3.2.2 Release

Correct. We generally don't replace packaged versions unless there was a packaging issue.
by Marc
Sun Jan 14, 2018 5:18 pm
Forum: [3.2.x] Support Forum
Topic: ERR_BLOCKED_BY_XSS_AUDITOR
Replies: 16
Views: 359

Re: ERR_BLOCKED_BY_XSS_AUDITOR

The code you're referring to is not part of the 3.2.2 package. I guess this was added by a manual edit or is part of a custom style. I guess Chrome does no longer like inline JavaScript. This does actually make sense as unobtrusive JavaScript is what should be unused nowadays (and since a few years ...
by Marc
Sun Jan 14, 2018 5:12 pm
Forum: [3.2.x] Support Forum
Topic: after upgrading description issue
Replies: 11
Views: 203

Re: after upgrading description issue

Please check your server's error log. A 500 error is usually a sign of a PHP error which should be logged into your error log. The exact error message will help quite a bit with actually figuring out what is causing the 500 error for you.
by Marc
Sun Jan 14, 2018 2:47 pm
Forum: [3.2.x] Support Forum
Topic: Disapearing attachments after update to 3.2.2
Replies: 74
Views: 4846

Re: Disapearing attachments after update to 3.2.2

phpBB should have released a 3.2.2-pl1 or something, containing the fixes for the three major bugs reported so far! Many won't know how to fix, and there is going to be months of questions all asking for help on the same issues. Yeah, they in fact should have tested this them selves to see if there...
by Marc
Thu Jan 11, 2018 8:08 pm
Forum: [3.2.x] Support Forum
Topic: Disapearing attachments after update to 3.2.2
Replies: 74
Views: 4846

Re: Disapearing attachments after update to 3.2.2

Thanks for the input. The actual fix is slightly different from the temporary fix but the pointer certainly helped with tracking this down.

Pull request that will go into 3.2.3:
https://github.com/phpbb/phpbb/pull/5082
by Marc
Wed Jan 10, 2018 9:18 pm
Forum: [3.2.x] Support Forum
Topic: 3.2.1 to 3.2.2 update timeout
Replies: 49
Views: 2839

Re: 3.2.1 to 3.2.2 update timeout

With the above in mind, I restored the phpBB Gallery extension and can now access ACP again. Reverted to prosilver style and ran the update (with phpBB Gallery installed but disabled). Timeout exactly the same. Restored database, logged into ACP, then deleted phpBB Gallery and ran update again. Tim...
by Marc
Wed Jan 10, 2018 9:15 pm
Forum: phpBB Discussion
Topic: phpBB Update on Synology fails due to MariaDB database error
Replies: 11
Views: 1212

Re: phpBB Update on Synology fails due to MariaDB database error

It's kind of difficult for us to support any special type of package. phpBB itself will always try to connect to the database that it's offered. If you upgrade to MariaDB 10 and phpBB is trying to connect to MariaDB 5, then the Synology package is passing the MariaDB 5 settings to it. If you upload ...
by Marc
Wed Jan 10, 2018 8:03 pm
Forum: [3.2.x] Support Forum
Topic: PHP 7.1.13 and 7.2.1 crashes site when logging into forums
Replies: 6
Views: 903

Re: PHP 7.1.13 and 7.2.1 crashes site when logging into forums

We have noticed a similar issue in our appveyor builds with the release of PHP 7.1.13. So far I wasn't able to track down the actual reason for the crash but it sure seems like a segfault in PHP itself. For now I think your safest bet is staying with PHP 7.1.12 and wait for the next update.
by Marc
Tue Jan 09, 2018 8:55 pm
Forum: [3.2.x] Support Forum
Topic: 3.2.1 to 3.2.2 update timeout
Replies: 49
Views: 2839

Re: 3.2.1 to 3.2.2 update timeout

Please refer to this topic for the recommended fixes for the migration issues: https://www.phpbb.com/community/viewtopic.php?f=556&t=2453611 If you now get a 500 error, chances are that your cache is corrupted. In your cache folder (should contain folders production & installer) remove everything ex...

Go to advanced search