Forums update!

Posts: 3257 · Posted: Tue Mar 01, 2005 5:24 pm Post subject: Forums update!

Took the time today to upgrade the forums from 2.0.11 to 2.0.13
Looks like everything is working fine, if anyone sees anything out of place, or not working, you let me know...

Posts: 2723 · Posted: Wed Mar 02, 2005 1:39 am Post subject:

Kudos and thanks for the upgrade to help keep us as secure and functionable as possible.

Posts: 399 · Modder Joined: 15 Sep 2004 Posts: 399

Awesome.

So what does this .02 upgrade include? Safe from l33t hax0rs now? Laughing

Posts: 3257 · Posted: Wed Mar 02, 2005 9:54 am Post subject:

Its really only a .01 upgrade.
PHPBB-2.0.12 came out, and the next day a few bugs were discovered (missing a slash in one line of code), nothing major. So they patched and re-released, thats where 2.0.13 came from...
Mostly just security fixes... Lemme see if I can get a list for you...

Looks like there were a few full path disclosure bugs in 2.0.11:
Changelog:
* Added confirm table to admin_db_utilities.php
* Prevented full path display on critical messages
* Fixed full path disclosure in username handling caused by a PHP 4.3.10 bug - AnthraX101
* Added exclude list to unsetting globals (if register_globals is on) - SpoofedExistence
* Fixed arbitrary file disclosure vulnerability in avatar handling functions - AnthraX101
* Fixed arbitrary file unlink vulnerability in avatar handling functions - AnthraX101
* Removed version number from powered by line
* Merged database update files to update_to_latest.php file
* Fixed path disclosure bug in search.php caused by a PHP 4.3.10 bug (related to AnthraX101's discovery)
* Fixed path disclosure bug in viewtopic.php caused by a PHP 4.3.10 bug - matrix_killer

Posts: 1124 · Posted: Wed Mar 02, 2005 3:34 pm Post subject:

I can't see anyone's avatars.............just those annoying little red X's.......... Crying or Very sad

Posts: 1475 · Posted: Wed Mar 02, 2005 7:11 pm Post subject:

i dont even see the little red X's....

Posts: 3257 · Posted: Wed Mar 02, 2005 7:14 pm Post subject:

hmmm, thats odd...

Posts: 2723 · Posted: Wed Mar 02, 2005 8:00 pm Post subject:

Yeah, I just noticed that too. Something didn't look quite right, and its definitely the lack of avatarness.

EDIT: They're fixed now ^_^.

Posts: 3257 · Posted: Wed Mar 02, 2005 8:07 pm Post subject:

Its OK...
Everythings alright!
Nothing to fear!

Turns out theres a folder in the forum folder called "avatars", and when I replace the old forum folder with the new one, it helps to move the avatars =P

Good thing I keep numerous backups of everything...

Posts: 1124 · Posted: Thu Mar 03, 2005 10:06 am Post subject:

Thanks Guys!!!!