We are pleased to announce the release of phpBB 3.1.12 "Bertie’s look back at Mars". This version is a security release of the 3.1.x branch which fixes one security issue and also adds one minor feature addition, as well as fixing various issues reported in previous versions.
Previous versions did not limit the allowed schemes for URLs in profile fields and therefore allowed users to also specify URLs with the javascript scheme. This is now forbidden. As always, please keep in mind that external URLs can potentially be unsafe. Therefore it is recommended to not click on any URLs that might look suspicious to you. We would like to thank “aaaimg” for the disclosure of this issue to our development team.
As a minor feature addition, phpBB now also supports Memcached caching. This was merged before the EoM (End of Maintenance) and is therefore also part of this package.
Since the End of Life (EOL) date of the phpBB 3.1 branch has been passed, this also marks the last release in the phpBB 3.1 line. It will not continue to receive any maintenance or security updates.
The fixed issues include, among others, issues with updating older password hashes on PostgreSQL, an issue when using the Sphinx search backend, and with one migration during upgrades.
The full list of changes is available in the changelog file within the docs folder contained in the release package. You can find the key highlights of this release on the wiki at https://wiki.phpbb.com/Release_Highlights/3.1.12 and a list of all issues fixed on our tracker at https://tracker.phpbb.com/issues/?filter=14392
The packages can be downloaded from our downloads page.
The development team thanks everyone who contributed code to this release: abyssmedia
If you have any questions or comments, we'll be happy to address them in the discussion topic.
- The phpBB Team
Release Highlights
New Features
- Memcached support - phpBB now supports memcached caching PHPBB3-15122
- Password updater working with PostgreSQL - The cron for updating legacy password hashes was running invalid queries on PostgreSQL PHPBB3-15347