Re: PhpBB 2.0.14 Released

The 2.0.x discussion forum has been locked; this will remain read-only. The 3.0.x discussion forum has been renamed phpBB Discussion.
User avatar
nuckfan15
Registered User
Posts: 1849
Joined: Fri Jul 09, 2004 4:46 am
Location: Vancouver, BC
Name: Travis

Re: PhpBB 2.0.14 Released

Post by nuckfan15 »

What was really the need for this release. The only exploit that could really harm someone involves the calendar and downloads mod. It I think those invlolve perl, not many people use this mod anyway. Was there some other security update that is harmful?

Because I was reading at some security site that the exploit allows you to gain a hashed version of the admin's password ( user id 2 ). And this worked with the downloads and calendar mod?

Anyone know? Because I dont have these mods installed and dont really need to upgrade unless its critical.
Travis aka Nuckfan15 - No Private Support
Make use of the Support Request Template when seeking support.
sonyboy
Registered User
Posts: 2980
Joined: Thu Oct 07, 2004 2:10 am

Post by sonyboy »

Hey, check it out, and read What has changed in this release? part.
User avatar
nuckfan15
Registered User
Posts: 1849
Joined: Fri Jul 09, 2004 4:46 am
Location: Vancouver, BC
Name: Travis

Post by nuckfan15 »

Yeah, I read it as soon as I got on. I was just commenting on what I saw at some security site.
Travis aka Nuckfan15 - No Private Support
Make use of the Support Request Template when seeking support.
SK
Registered User
Posts: 483
Joined: Sat Jan 26, 2002 11:55 pm
Location: Nottingham, UK

Post by SK »

Does this mean PHPBB supports PHP5 now?
Fixed install.php problem with PHP5 register_long_arrays option turned off
NeoThermic
Security Consultant
Posts: 2141
Joined: Thu Dec 25, 2003 1:33 am
Location: United Kingdom
Contact:

Re: PhpBB 2.0.14 Released

Post by NeoThermic »

nuckfan15 wrote: Anyone know? Because I dont have these mods installed and dont really need to upgrade unless its critical.


This is mainly a bugfix with a few non-critical things patched. Since its not as severe need to upgrade, questions as the above are, obviously, expected.

Lets put it this way though, would you like to run the risk that one of these bugs (a few are to do with creating new sessions; the code failes to do that so you don't get logged in) could drive away a potential visitor? Or that these bugs could ruin your phpBB ExperenceTM?

Also, if something goes wrong with your board, who's to say its not due to a bug that is fixed in 2.0.14? If you upgrade now, you won't have to answer that question.

There's no point sitting on sub-standerd software if the upgrade is not only free, but easy.

NeoThermic
NeoThermic.com... a well of information. Ask me for the bit bucket so you can drink its goodness. ||新熱です
User avatar
stanleyb23
Registered User
Posts: 42
Joined: Tue Jul 27, 2004 2:12 pm

step by step

Post by stanleyb23 »

As always, our Code Changes Tutorial will be soon available too for those with heavily modded boards.

Do they mean the step by step manual?
I have a lot of mods and cant just copy files..

Im waiting for it!
sonyboy
Registered User
Posts: 2980
Joined: Thu Oct 07, 2004 2:10 am

Re: step by step

Post by sonyboy »

stanleyb23 wrote: As always, our Code Changes Tutorial will be soon available too for those with heavily modded boards.

Do they mean the step by step manual?
I have a lot of mods and cant just copy files..

Im waiting for it!


Yep, yep, just like MOD file.
DemonBob
Registered User
Posts: 226
Joined: Thu Jan 15, 2004 7:04 pm
Location: Louisiana, United States
Contact:

Re: step by step

Post by DemonBob »

stanleyb23 wrote: As always, our Code Changes Tutorial will be soon available too for those with heavily modded boards.

Do they mean the step by step manual?
I have a lot of mods and cant just copy files..

Im waiting for it!


Yes, thats what it means, they will have a tutorial ready thast looks like a mod install files, with all the changes in FIND/REPLACE/ADD setup.
Mr. Sharkey
Registered User
Posts: 635
Joined: Sun Mar 28, 2004 5:42 pm

Post by Mr. Sharkey »

they will have a tutorial ready thast looks like a mod install files

OK, I'm watching the clock. Acyd Burn, where are you??? :lol:
640 useless posts, at least one too many
Horvath
Registered User
Posts: 29
Joined: Mon Mar 28, 2005 6:14 am

Post by Horvath »

the fixes are already available. Just download the phpBB 2.0.14 [ Patch File Only]

http://prdownloads.sourceforge.net/phpb ... p?download
wGEric
Former Team Member
Posts: 8805
Joined: Sun Oct 13, 2002 3:01 am
Location: Friday
Name: Eric Faerber
Contact:

Post by wGEric »

Like always, the changes in MOD format can be found in this category
http://www.phpbb.com/phpBB/catdb.php?cat=48

Just check there. It is usually released within a few hours of when the newest version is released.
nuckfan15 wrote: not many people use this mod anyway


Lots of people use that Calendar MOD. It was the first and only one of its kind for a long time.
Eric
User avatar
nuckfan15
Registered User
Posts: 1849
Joined: Fri Jul 09, 2004 4:46 am
Location: Vancouver, BC
Name: Travis

Post by nuckfan15 »

wGEric wrote: Like always, the changes in MOD format can be found in this category
http://www.phpbb.com/phpBB/catdb.php?cat=48

Just check there. It is usually released within a few hours of when the newest version is released.
nuckfan15 wrote:not many people use this mod anyway


Lots of people use that Calendar MOD. It was the first and only one of its kind for a long time.



My mistake then. :P
Travis aka Nuckfan15 - No Private Support
Make use of the Support Request Template when seeking support.
Gonad The Barbarian
Registered User
Posts: 12
Joined: Tue Feb 15, 2005 3:32 am
Location: Cleveland, Tennessee
Contact:

Post by Gonad The Barbarian »

SK wrote: Does this mean PHPBB supports PHP5 now?
Fixed install.php problem with PHP5 register_long_arrays option turned off


I've got the same question as my servers will be upgraded to PHP5 sometime this month.
wGEric
Former Team Member
Posts: 8805
Joined: Sun Oct 13, 2002 3:01 am
Location: Friday
Name: Eric Faerber
Contact:

Post by wGEric »

Gonad The Barbarian wrote: I've got the same question as my servers will be upgraded to PHP5 sometime this month.


I think it will run on php 5 but is not officially supported.
Last edited by wGEric on Sat Apr 16, 2005 5:42 pm, edited 1 time in total.
Eric
Frold
Registered User
Posts: 447
Joined: Sat Nov 02, 2002 8:19 am

Post by Frold »

just delete!!
Last edited by Frold on Sat Apr 16, 2005 5:38 pm, edited 1 time in total.
Locked

Return to “2.0.x Discussion”