Search found 1572 matches

by Marc
Thu Sep 13, 2018 1:36 pm
Forum: phpBB Discussion
Topic: Discuss: phpBB 3.2.3 Release
Replies: 50
Views: 5493

Discuss: phpBB 3.2.3 Release

Please discuss the announcement here.

As a reminder, please do not post support requests here but rather use the Support Forum.
by Marc
Thu Sep 13, 2018 11:52 am
Forum: Announcements
Topic: phpBB 3.2.3 Release
Replies: 0
Views: 42532

phpBB 3.2.3 Release

Greetings everyone, We are pleased to announce the release of phpBB 3.2.3 "Bertie's long summer". This version is a maintenance release of the 3.2.x branch which fixes various issues reported in previous versions. The fixed issues include, among others, problems when submitting posts with more than ...
by Marc
Thu Aug 02, 2018 6:11 pm
Forum: [3.2.x] Styles Support & Discussion
Topic: phpBB 3.2 style changes
Replies: 30
Views: 19958

Re: phpBB 3.2 style changes

Update first post with changes for 3.2.3-RC2.
by Marc
Mon Mar 26, 2018 7:22 pm
Forum: [3.2.x] Styles Support & Discussion
Topic: phpBB 3.2 style changes
Replies: 30
Views: 19958

Re: phpBB 3.2 style changes

Updated the first post to add changes between 3.2.2 & 3.2.3-RC1.
by Marc
Sun Feb 25, 2018 9:36 am
Forum: [3.2.x] Support Forum
Topic: How to fix BREACH security exploit
Replies: 3
Views: 622

Re: How to fix BREACH security exploit

While tests like the mentioned are helpful for doing basic checks of the server setup, it's also important to understand what each of these mean. The BREACH exploit is a server side and browser side issue. It's unrelated to the software being used. In fact, the reason why there is a difference betwe...
by Marc
Tue Feb 20, 2018 7:13 am
Forum: phpBB Discussion
Topic: [Discuss] [Security] phpBB 3.2.2 Packages Compromised
Replies: 42
Views: 6761

Re: [Discuss] [Security] phpBB 3.2.2 Packages Compromised

As we mentioned in the announcement and the follow-ups, we've taken an extensive amount of time to investigate and try to track how this was possible. Neither Cloudflare nor we were able to find out how the attacker was able to acquire the API key. The very limited number of team members that had ac...
by Marc
Sun Feb 18, 2018 6:35 pm
Forum: phpBB Discussion
Topic: [Discuss] [Security] phpBB 3.2.2 Packages Compromised
Replies: 42
Views: 6761

Re: [Discuss] [Security] phpBB 3.2.2 Packages Compromised

API access with an API key does not require a login to the Cloudflare account, 2FA has no effect on that either. There was no login to our account.
DNSSEC wouldn't have changed anything as the DNS info was not forged or manipulated but rather just modified.
by Marc
Wed Jan 31, 2018 10:50 am
Forum: phpBB Discussion
Topic: [Discuss] [Security] phpBB 3.2.2 Packages Compromised
Replies: 42
Views: 6761

Re: [Discuss] [Security] phpBB 3.2.2 Packages Compromised

We will post an update with more details once the third-party site has finished its investigation.
Please refrain from trying to guess any involved parties or trying to draw conclusions.
Our detailed investigation has confirmed what has been stated in the announcement.
by Marc
Fri Jan 19, 2018 11:02 am
Forum: phpBB Discussion
Topic: phpBB Christams banner
Replies: 71
Views: 5481

Re: phpBB Christams banner

Until we have resolved the issue with our website update script you should enjoy our reminder that it's cold outside and appreciate the warmth of summer. :)
by Marc
Fri Jan 19, 2018 11:00 am
Forum: phpBB Discussion
Topic: Discuss: phpBB 3.2.2 Release
Replies: 76
Views: 12003

Re: Discuss: phpBB 3.2.2 Release

Correct. We generally don't replace packaged versions unless there was a packaging issue.
by Marc
Sun Jan 14, 2018 5:18 pm
Forum: [3.2.x] Support Forum
Topic: ERR_BLOCKED_BY_XSS_AUDITOR
Replies: 16
Views: 635

Re: ERR_BLOCKED_BY_XSS_AUDITOR

The code you're referring to is not part of the 3.2.2 package. I guess this was added by a manual edit or is part of a custom style. I guess Chrome does no longer like inline JavaScript. This does actually make sense as unobtrusive JavaScript is what should be unused nowadays (and since a few years ...
by Marc
Sun Jan 14, 2018 5:12 pm
Forum: [3.2.x] Support Forum
Topic: after upgrading description issue
Replies: 11
Views: 304

Re: after upgrading description issue

Please check your server's error log. A 500 error is usually a sign of a PHP error which should be logged into your error log. The exact error message will help quite a bit with actually figuring out what is causing the 500 error for you.
by Marc
Sun Jan 14, 2018 2:47 pm
Forum: [3.2.x] Support Forum
Topic: Disapearing attachments after update to 3.2.2
Replies: 90
Views: 8721

Re: Disapearing attachments after update to 3.2.2

phpBB should have released a 3.2.2-pl1 or something, containing the fixes for the three major bugs reported so far! Many won't know how to fix, and there is going to be months of questions all asking for help on the same issues. Yeah, they in fact should have tested this them selves to see if there...
by Marc
Thu Jan 11, 2018 8:08 pm
Forum: [3.2.x] Support Forum
Topic: Disapearing attachments after update to 3.2.2
Replies: 90
Views: 8721

Re: Disapearing attachments after update to 3.2.2

Thanks for the input. The actual fix is slightly different from the temporary fix but the pointer certainly helped with tracking this down.

Pull request that will go into 3.2.3:
https://github.com/phpbb/phpbb/pull/5082
by Marc
Wed Jan 10, 2018 9:18 pm
Forum: [3.2.x] Support Forum
Topic: 3.2.1 to 3.2.2 update timeout
Replies: 49
Views: 4394

Re: 3.2.1 to 3.2.2 update timeout

With the above in mind, I restored the phpBB Gallery extension and can now access ACP again. Reverted to prosilver style and ran the update (with phpBB Gallery installed but disabled). Timeout exactly the same. Restored database, logged into ACP, then deleted phpBB Gallery and ran update again. Tim...

Go to advanced search