Discuss: phpBB 3.3.2 Release

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Anti-Spam Guide
User avatar
Marc
Development Team Leader
Development Team Leader
Posts: 5479
Joined: Tue Oct 30, 2007 10:57 pm
Location: Munich, Germany
Name: Marc
Contact:

Discuss: phpBB 3.3.2 Release

Post by Marc »

Please discuss the announcement here.
User avatar
Meis2M
Translator
Posts: 921
Joined: Wed Mar 03, 2010 11:32 am
Location: IR.Damghan
Name: میثم نوبری
Contact:

Re: Discuss: phpBB 3.3.2 Release

Post by Meis2M »

Hello
congratulation :D
phpBB persian international support
Follow us in Instagram
Free upgrade and install extensions on your forum - drop me PM
Ultimate phpBB SEO Friendly URL extension
User avatar
halil16
Registered User
Posts: 112
Joined: Fri Jul 24, 2020 11:30 pm
Location: Türkiye

Re: Discuss: phpBB 3.3.2 Release

Post by halil16 »

Thank you so much. I love phpBB. Some say it's too difficult. Yes, I was very sleepless. :)
Is there more time for the new style to come with phpBB 4? If I remember correctly, it was announced in 2018. Very exciting.
I use Google Translation. Although I am well versed in this, sometimes translation can be silly.
User avatar
P_I
Registered User
Posts: 1319
Joined: Tue Mar 01, 2011 8:35 pm
Location: Staying home - Western Canada
Contact:

Re: Discuss: phpBB 3.3.2 Release

Post by P_I »

My localhost testbed (CentOS 8.2 with PHP 7.4) successfully (and smoothly) updated by phpBB 3.3.1 using the Full Package and following https://www.phpbb.com/support/docs/en/3 ... date_full/.

Sanity testing looks good and therefore I'll be updating my production boards later today.

Many thanks to all the work behind the scenes and volunteer their time.

Added later: Since phpBB 3.3 is now the flagship release, when in this board going to upgrade to phpBB 3.3? Inquiring minds would like to know.
Normal people… believe that if it ain’t broke, don’t fix it. Engineers believe that if it ain’t broke, it doesn’t have enough features yet. – Scott Adams
Paul
Infrastructure Team Leader
Infrastructure Team Leader
Posts: 26935
Joined: Sat Dec 04, 2004 3:44 pm
Location: The netherlands.
Name: Paul Sohier
Contact:

Re: Discuss: phpBB 3.3.2 Release

Post by Paul »

P_I wrote:
Fri Nov 06, 2020 4:38 pm

Added later: Since phpBB 3.3 is now the flagship release, when in this board going to upgrade to phpBB 3.3? Inquiring minds would like to know.
When it is done. Like always, we don't provide timelines on things. We are working on it, but had some issues that needed solving first.
Knock knock
Race condition
Who's there?

My BlogMy Photosmy phpBB Extensionscustom phpBB work & Development
User avatar
Gumboots
Registered User
Posts: 393
Joined: Fri Oct 11, 2019 1:59 am

Re: Discuss: phpBB 3.3.2 Release

Post by Gumboots »

Is the diff for 3.3.2 RC1 still applicable to the final version?

https://gist.github.com/marc1706/b8988d ... cd62a38ac4
User avatar
RMcGirr83
Former Team Member
Posts: 21680
Joined: Wed Jun 22, 2005 4:33 pm
Location: Your display
Name: Rich McGirr

Re: Discuss: phpBB 3.3.2 Release

Post by RMcGirr83 »

EDIT never mind forum_fn.js had a DIFF in it.
Last edited by RMcGirr83 on Fri Nov 06, 2020 6:59 pm, edited 2 times in total.
Former Modifications/Extensions Team Member | My extensions | github | All requests for support via PM will be ignored
Appreciate the extensions/mods/support then buy me a beerImage
User avatar
JoshyPHP
Code Contributor
Posts: 1177
Joined: Mon Jul 11, 2011 12:28 am

Re: Discuss: phpBB 3.3.2 Release

Post by JoshyPHP »

Marc wrote:
Fri Nov 06, 2020 3:59 pm
Please discuss the announcement here.
I've just read about SECURITY-264. I think it's bogus and the "fix" is wrong, which makes the situation worse. Where should I post?
I wrote the thing that does BBCodes in 3.2+.
User avatar
Marc
Development Team Leader
Development Team Leader
Posts: 5479
Joined: Tue Oct 30, 2007 10:57 pm
Location: Munich, Germany
Name: Marc
Contact:

Re: Discuss: phpBB 3.3.2 Release

Post by Marc »

JoshyPHP wrote:
Fri Nov 06, 2020 6:53 pm
Marc wrote:
Fri Nov 06, 2020 3:59 pm
Please discuss the announcement here.
I've just read about SECURITY-264. I think it's bogus and the "fix" is wrong, which makes the situation worse. Where should I post?
You can open a ticket or contact me via PM or on Discord if you want to maybe discuss this more in detail since I was also the person that implemented this.
User avatar
JoshyPHP
Code Contributor
Posts: 1177
Joined: Mon Jul 11, 2011 12:28 am

Re: Discuss: phpBB 3.3.2 Release

Post by JoshyPHP »

Marc wrote:
Fri Nov 06, 2020 6:58 pm
You can open a ticket or contact me via PM or on Discord if you want to maybe discuss this more in detail since I was also the person that implemented this.
How about a topic on Area 51? I don't have Discord and I think a topic will be easier to reference.

I'll create a ticket with a proposed fix. I can't find SECURITY-264 or I don't have access to it. Are security tickets made public after release?
I wrote the thing that does BBCodes in 3.2+.
User avatar
Marc
Development Team Leader
Development Team Leader
Posts: 5479
Joined: Tue Oct 30, 2007 10:57 pm
Location: Munich, Germany
Name: Marc
Contact:

Re: Discuss: phpBB 3.3.2 Release

Post by Marc »

A topic on Area51 works as well. You can also reach me on IRC if that's maybe easier for you.
Security tickets are typically not made public.
User avatar
PlanetStyles.net
Former Team Member
Posts: 4700
Joined: Wed Nov 04, 2009 11:16 pm
Location: UK
Name: Christian
Contact:

Re: Discuss: phpBB 3.3.2 Release

Post by PlanetStyles.net »

Gumboots wrote:
Fri Nov 06, 2020 6:31 pm
Is the diff for 3.3.2 RC1 still applicable to the final version?

https://gist.github.com/marc1706/b8988d ... cd62a38ac4
I believe so
User avatar
Gumboots
Registered User
Posts: 393
Joined: Fri Oct 11, 2019 1:59 am

Re: Discuss: phpBB 3.3.2 Release

Post by Gumboots »

Cool. Thought it might be, but wanted to double check. :)
User avatar
P_I
Registered User
Posts: 1319
Joined: Tue Mar 01, 2011 8:35 pm
Location: Staying home - Western Canada
Contact:

Re: Discuss: phpBB 3.3.2 Release

Post by P_I »

P_I wrote:
Fri Nov 06, 2020 4:38 pm
Sanity testing looks good and therefore I'll be updating my production boards later today.
JoshyPHP wrote:
Fri Nov 06, 2020 6:53 pm
I think it's bogus and the "fix" is wrong,
I'm not overly concerned with 'bogus', but 'fix is wrong' has me concerned and wondering if that means updating to 3.3.2 might break something.

Is this a 'blocker' type problem or just a bug?
Normal people… believe that if it ain’t broke, don’t fix it. Engineers believe that if it ain’t broke, it doesn’t have enough features yet. – Scott Adams
User avatar
JoshyPHP
Code Contributor
Posts: 1177
Joined: Mon Jul 11, 2011 12:28 am

Re: Discuss: phpBB 3.3.2 Release

Post by JoshyPHP »

No, in practical terms it fixes phpBB's actual behaviour so that's good. After reading more about it, I don't think the report is *bogus*, although I don't have access to it. I believe there was an XSS and that it's been fixed, but it was fixed at the wrong level, which changed the meaning of a little-used API. I'm jumping on it ASAP so that the API can be restored and nobody will ever be affected.
I wrote the thing that does BBCodes in 3.2+.
Post Reply

Return to “phpBB Discussion”