REMOVE flash player support (or add the option to disable it)

https://www.phpbb.com/ideas/
Post Reply
User avatar
php-BB-Is-Awesome
Registered User
Posts: 19
Joined: Mon Feb 22, 2021 4:26 am

REMOVE flash player support (or add the option to disable it)

Post by php-BB-Is-Awesome »

The last release of Adobe Flash Player was released on September 10, 2013, 7 years ago. For those 7 years, Adobe only pushed out security updates and minor bug fixes. Adobe themselves discontinued all support, including security updates, on December 31, 2020. In a move to further reduce the number of Flash Player installations, Adobe added a "time bomb" to Flash to disable existing installations after January 12, 2021. https://en.wikipedia.org/wiki/Adobe_Flash_Player

My proposal is the phpBB begin the transition of phasing out flash player support. At the moment, the editor currently has a button to embed flash player. I propose this button be either removed or an option be given to disable it.
User avatar
GanstaZ
Registered User
Posts: 860
Joined: Wed Oct 11, 2017 10:29 pm
Location: Zverse

Re: REMOVE flash player support (or add the option to disable it)

Post by GanstaZ »

Current state about flash on phpBB github
"When answer lies in the question,.. question becomes redundant!"
User avatar
Ancient Viking
Registered User
Posts: 591
Joined: Sun Jan 15, 2012 11:43 pm

Re: REMOVE flash player support (or add the option to disable it)

Post by Ancient Viking »

php-BB-Is-Awesome wrote:
Tue Mar 16, 2021 3:59 am
The last release of Adobe Flash Player was released on September 10, 2013, 7 years ago. For those 7 years, Adobe only pushed out security updates and minor bug fixes. Adobe themselves discontinued all support, including security updates, on December 31, 2020. In a move to further reduce the number of Flash Player installations, Adobe added a "time bomb" to Flash to disable existing installations after January 12, 2021. https://en.wikipedia.org/wiki/Adobe_Flash_Player

My proposal is the phpBB begin the transition of phasing out flash player support. At the moment, the editor currently has a button to embed flash player. I propose this button be either removed or an option be given to disable it.
Agreed. I see no reason to keep support for something that's the EOL status.

IIRC, any Flash option is disabled by default in ACP.
My local forum: egetforum.nu - Offline Forum Online!
User avatar
thecoalman
Community Team Member
Community Team Member
Posts: 4587
Joined: Wed Dec 22, 2004 3:52 am
Location: Pennsylvania, U.S.A.
Contact:

Re: REMOVE flash player support (or add the option to disable it)

Post by thecoalman »

php-BB-Is-Awesome wrote:
Tue Mar 16, 2021 3:59 am
I propose this button be either removed or an option be given to disable it.
I'm not criticizing your suggestion but being able to use flash in a post or PM is permission based. I'm pretty sure the default permissions are set to no for everyone on a new install going back to 2007.

ACP >> post settings

Set Allow use of [FLASH] BBCode tag in posts: to no.

AFAIK even if this were set to yes no permission sets have this set to yes by default so it would effectively still be disabled if you have not specifically enabled it that groups user/forum permissions. [flash] and the [img] bbcodes are different in that they have permissions and can be enabled or disabled for different groups.
“Results! Why, man, I have gotten a lot of results! I have found several thousand things that won’t work.”

Attributed - Thomas Edison
User avatar
php-BB-Is-Awesome
Registered User
Posts: 19
Joined: Mon Feb 22, 2021 4:26 am

Re: REMOVE flash player support (or add the option to disable it)

Post by php-BB-Is-Awesome »

thecoalman wrote:
Wed Mar 17, 2021 12:51 am
php-BB-Is-Awesome wrote:
Tue Mar 16, 2021 3:59 am
I propose this button be either removed or an option be given to disable it.
I'm not criticizing your suggestion but being able to use flash in a post or PM is permission based. I'm pretty sure the default permissions are set to no for everyone on a new install going back to 2007.

ACP >> post settings

Set Allow use of [FLASH] BBCode tag in posts: to no.

AFAIK even if this were set to yes no permission sets have this set to yes by default so it would effectively still be disabled if you have not specifically enabled it that groups user/forum permissions. [flash] and the [img] bbcodes are different in that they have permissions and can be enabled or disabled for different groups.
Would removing this feature and permission settings also simplify and better optimize the code? I would presume that would be one less query to run too. I would also assume that it would be better to maintain future releases, not incorporating this dated legacy code from an area long past.

Unless there is a specific reason to keep it within phpBB that I am unaware of?
User avatar
3Di
Former Team Member
Posts: 16499
Joined: Mon Apr 04, 2005 11:09 pm
Location: Milano 🇮🇹 Frankfurt 🇩🇪
Name: Marco
Contact:

Re: REMOVE flash player support (or add the option to disable it)

Post by 3Di »

Flash attachments have been already removed some time ago,
the rest of the code is already planned to be removed soon, see https://github.com/phpbb/phpbb/pull/6056
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Want to compensate me for my interest? Donate
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades
User avatar
php-BB-Is-Awesome
Registered User
Posts: 19
Joined: Mon Feb 22, 2021 4:26 am

Re: REMOVE flash player support (or add the option to disable it)

Post by php-BB-Is-Awesome »

3Di wrote:
Wed Mar 17, 2021 8:09 pm
Flash attachments have been already removed some time ago,
the rest of the code is already planned to be removed soon, see https://github.com/phpbb/phpbb/pull/6056
I see it was added to the tracker in August 2020 of last year https://tracker.phpbb.com/browse/PHPBB3-16574

I presume more waiting is required. Patience is a virtue, or so I have been told. I am sure there are other more important matters. At least there is progress, and I look forward to the future. 8-)
ErikMouse
Registered User
Posts: 27
Joined: Wed Mar 27, 2013 9:04 am
Name: Erik Mouse

Re: REMOVE flash player support (or add the option to disable it)

Post by ErikMouse »

Um, before we begin discussing gutting a phpBB version to remove code over an EOL issue, you may want to take a look at Ruffle replacing it.

WTF is Ruffle you say? Ruffle is a Flash Player emulator written in Rust. Ruffle runs natively on all modern operating systems as a standalone application, and on all modern browsers through the use of WebAssembly. Leveraging the safety of the modern browser sandbox and the memory safety guarantees of Rust, we can confidently avoid all the security pitfalls that Flash had a reputation for. Ruffle puts Flash back on the web, where it belongs - including iOS and Android!

--
Erik Mouse
Last edited by thecoalman on Sat Apr 17, 2021 10:05 am, edited 1 time in total.
Reason: Removed unnecessarily large quote. When quoting please only quote relevant text. Thanks.
User avatar
php-BB-Is-Awesome
Registered User
Posts: 19
Joined: Mon Feb 22, 2021 4:26 am

Re: REMOVE flash player support (or add the option to disable it)

Post by php-BB-Is-Awesome »

While I am sure you are a fan of the limited open-source alternative, it is not widely used, adopted, or available.

Code: Select all

sudo apt-get install ruffle
Reading package lists... Done
Building dependency tree       
Reading state information... Done
E: Unable to locate package ruffle
Ubuntu Linux is arguably the most widely home use distro at the moment. Your claim that it is widely adopted by all mainstream OSs (operating systems) does not seem to be true.

The development claims to have the support of old flash sites such as Newgrounds, for example. Visting Newgrounds seems to suggest they are no longer using flash themselves. They also claim to have the New York Time's backing, but the New York Times does not have any flash content.
Heo32
Registered User
Posts: 196
Joined: Sat Jan 07, 2017 10:08 pm

Re: REMOVE flash player support (or add the option to disable it)

Post by Heo32 »

Flash is dead. Get rid of it.
Windows & Nginx & PHP & MySQL & phpBB & WordPress & Cloudflare • Updated: January 12, 2021

Allow using Content-Security-Policy without unsafe-inline • Content-Security-Policy
stevemaury wrote:
Sun May 20, 2018 8:16 pm
I went to your board and looked for an hour or so, but did not see the women without underwear.
User avatar
3Di
Former Team Member
Posts: 16499
Joined: Mon Apr 04, 2005 11:09 pm
Location: Milano 🇮🇹 Frankfurt 🇩🇪
Name: Marco
Contact:

Re: REMOVE flash player support (or add the option to disable it)

Post by 3Di »

Heo32 wrote:
Wed Apr 28, 2021 11:41 am
Flash is dead. Get rid of it.
3Di wrote:
Wed Mar 17, 2021 8:09 pm
Flash attachments have been already removed some time ago,
the rest of the code is already planned to be removed soon, see https://github.com/phpbb/phpbb/pull/6056
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Want to compensate me for my interest? Donate
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades
Post Reply

Return to “phpBB Ideas”