SMF forum upgrade thread

[Tony]

Upgraded to 2.0.4 Just some security updates, nothing exciting

[Rotary-Motion]

 

[Tony]

Upgraded to 2.0.5 (again just security patches)

[nigelb]

What sort of security are you installing Tony?

[Tony]

It's just fixes for possible security vulnerabilities that have been found in the software rather than a security system as such.

To leave it unpatched might leave the forum open to future attack.

Been quite the hoo-har recently with the Ubuntu forum (different software) being hacked and all 1.8 million usernames/emails/password hashes extracted from the database.  The attacker then went on to use these to get into other forums (which is why forum admin should DEFINITELY have a different password to other forums they are on).

[Tony]

Upgraded to 2.06 from my mobile, too easy

[Rotary-Motion]

Upgraded to 2.06 from my mobile, too easy

 

[Tony]

Now at 2.0.7, fixes for several bugs and adds PHP 5.5 compatibility.

[greasemonkey]

Will it play tunes?

[Jamesrl]

I've just sent 5 mins reading this thread and as yet have seen NOTHING about the SadoMasochisum Forum.

Very disappointed of Suffolk.

[Tony]

Upgraded forum to SMF 2.0.8.  Changes: addressing memory issues with 2.0.7, MySQL 5.6 compatibility issues and a rare memberlist search bug.

Would have done it sooner but there was a conflict with the skype plugin which I only got around to resolving this evening.

[Tony]

Upgraded forum to SMF 2.0.9

Changelog

! SMF tries to stick ORDER BY NULL onto INSERT IGNORE queries containing sub-selects with a GROUP BY statement, causing a database error (Reported by guest)
 ! "Show Results" button always shown for polls as long as you can vote in them (Reported by Chainy)
 ! Multi-select boxes for settings were broken when no value had been selected (Reported by Suki)
 ! Some mail providers screw up the activation link (Reported by NanoSector)
 ! PHP 5.4 changes default charset to UTF-8, which can cause problems with search results and PM notification emails (Reported by fun4us)
 ! Make sure opcode cache gets cleared when regular cache does
 ! Log pruning should only delete closed mod reports, not open ones
 ! Fix layout issue with manage permissions page (Reported by Antes)
 ! Adjust image check to not fail on "cellTextIsHtml", unless paranoid... (Reported by Arantor)
 ! Sanitize all package XML to prevent any XSS attacks (Reported by Arantor)
 ! Add session check when previewing posts to prevent XSS via [html] from forged forms (Reported by emanuele)
 ! Sanitize maintenance mode title to prevent XSS attacks if HTML is used in it (Reported by guest)

[K.H]

Is this Klingon?

[Tony]

Yes, decloaking off the starboard bow.

[Tony]

Upgraded to SMF 2.0.10.  Nothing obviously useful to us fixed, but it's good to stay up to date anyway.

Changelog

April 2015
-------------------------------------------------------------------------------
 ! The instructions on ManagePaid page need to be updated
 ! PayPal emails are case insensitive
 ! Long standing problem with ManageNews and PostgreSQL
 ! Long standing problem with Smiley sets and PostgreSQL
 ! Errors show in log when handling certain tar.gz packages

March 2015
-------------------------------------------------------------------------------
 ! Forum Maintenance - Topics fails if header is collapsed
 ! Fix for unsupported UTF8mb4 characters

February 2015
-------------------------------------------------------------------------------
 ! SSI.php doesn't handle "hide results until user has voted" properly
 ! Sanitize package redirects

January 2015
-------------------------------------------------------------------------------
 ! Can't use WYSIWYG editor in Pale Moon browser
 ! Search dialogue can overflow inappropriately
 - Excessive line in ManageServer.php in the patch upgrade from 2.0.8
 ! HTML tag broken in 2.0.9 install package
 ! Wrong link in ManageAttachments
 * Error suppression missing in Subs-Package
 ! XML post preview was broken in 2.0.9
 ! Chrome doesn't like opacity for the news fader anymore
 + Add additional emails in Paid Subscriptions settings for PayPal business accounts.