phpBB • Free and Open Source Forum Software

This is a reply to the following thread: http://www.phpbb.com/phpBB/viewtopic.php?t=185180 The bug can allow attackers to obtain password hashes I have a question. I was wondering what the implications this has for phpBB. For example, if somebody has the hash of a password, can they login? Can they ...

When sending a mass email, does it get sent to the administrator? If so, then it looks like my mass email didn't work (although it said it did). If not, then I don't know whether or not my mass emailed worked. I don't want to re-send, thinking it didn't work, and end up sending 2 messages. Is there ...

You do not need to log out and log in again to read a new message. Just have the forum/topic view open, and click "refresh". Forums like phpBB are good for holding meetings in a way, because each person can reply to the person above. It is different to a real time chat like IRC, because you have a r...

Which version of netscape? If it's netscape 4.x or earlier, furgedaboudit! If it's netscape 6 or higher, that's a completely different browser. It should work fine on netscape 6 or higher. But yeah, try disabling gzip. If your server has mod_gzip installed, and you also have gzip compression enabled...

Here's a suggested alternative template for admin_send_email.tpl Charset: iso-8859-1 {MESSAGE} ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ You are receiving this email because you are currently a member of {SITENAME}. If you have a question about your membership, or you no longer wish to be a member, please contac...

I had the same problem today :) I fixed it. here's some more info. Your "avatars" directory on your web site must be read AND write enabled. In your ftp program, go up one level. Select the "avatars" directory and change the "permissions" for that directory. You'll either have to set a code (such as...

It looks like they are using subsilver graphics on a forum that is not phpBB.

I do not think this is an unreasonable thing to do. They should feel free to use parts of phpBB in their board.

Then phpBB is disabling it when in fact it should not be disabling it, because my PHP setup is fine.

It seems that all of the people with this problem are using PHP 4.1.2 (myself, Heiko, and Biggs).

Any more theories? Do we know for sure if this is any different in RC4?

Just curious about the bug. I know now wouldn't be a good time to explain what it's about, since not everyone has upgraded to RC4, but will there be a time when it will be allowed to be explained? Just wondering... I haven't experience with it, but it's obvious from the code above that the security...

I've done searches, and couldn't find anything, so forgive me if this has been answered elsewhere please. Is there a reason/workaround for this problem in the meantime? theFinn states that if the file upload row does not appear, it means that my implementation of php probably doesn't support file up...

I don't think phpBB is a registered trademark of the phpbb group but I'm not sure and I wouldn't be surprised if it was. However, even if so, I'm almost certain that they wouldn't mind you using their trademark on your phpBB itself! Obviously, I like subblue's image. But that kind of goes without sa...

The css from the overall_header.tpl is an alternative to the .css file. It isn't the same. Subsilver now comes with both the .css file, which contains static styles and the styles in the overall_header file, which uses the database styles. The styles in the overall_header file override the static st...

You can try brute force and bring your server to a halt. :lol: Hi all, would I be right in saying the following? That if you found a password that did work (by brute force), it would not necessarily be the user's password - it could just be another group of letters and digits that generate the same...

Marcus - yes, there is! Just disable the remote linked avatars. Let them upload it or upload it from the remote site, or choose it from the gallery. Daniel doesn't know how it works, or perhaps he only uses remotely linked avatars. In my opinion, remotely linked avatars are a bad idea for security r...

Yep and hopefully, it will speed up the pages a bit. You'll notice the speedup on low latency connections such as cable and T1.