To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).
Please make sure you take a backup before uploading your new files!

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

Performance improvements:

• CSS and Javascript files are now automatically minimised (compressed)
• You can now set an option from config_editor.php to make bots receive cached versions of pages, so that bot activity is less likely to slow down your site
• A new “self-learning” technology has been developed to reduce the number of language strings that need to be loaded for individual pages. ocPortal will automatically learn which pages use which strings, so it only needs to load those ones “next time around” (the technology is adaptive, so if the pool of strings is insufficient, it loads more, but learns)
• Extra compression of some of the PNG files (most were already well compressed though)
• Advanced users can configure ocPortal to spread theme images across a CDN(requires use of OcCLE and the Code Book, and a properly configured network of CDN servers)
• Re-ordering of how CSS and Javascript files are loaded to optimise client-side performance; ocPortal will also merge some Javascript files that are served to staff for a common case where they tend to appear together anyway
• A well configured ocPortal server can now get a “Green tick” on Google PageSpeed and an “A grade” on YSlow.
• Memory usage has been improved a bit
• The number of queries used has been improved a bit in certain areas
• The number of queries in general is reduced, by automatic pre-fetching of translate-table content
• Various small optimisations to improve server-side PHP performance have been made
• Removed some unused CSS
• The database connection/initialisation code is now “lazy” meaning that AJAX scripts that do not end up needing to use the database will not establish an unnecessary connection
• New installs will now use the ‘HEAP’ MySQL table type for the sessions table, minimising the need for queries that cause disk writes
• Support for persistent caching on APC

Usability improvements:

• The ‘validated’ checkbox will now only show if the user has access to bypass validation in at least one selectable category
• “Interest levels” are not shown within the administrative side of the newsletter system unless there is some variation of interest levels within the set of subscribers
• Some improvements made to the bookmarks interface– better URL detection, auto-closing of popup
• Fatal errors now have a much higher chance of resulting in a clean ocPortal error message, including with failed upgrades (e.g. if you left old cod overrides in place)
• The upgrader’s “Alien file” finder will no longer show addon files as alien
• Improved the tree-list form fields so that they show proper labels for the default item selection
• Linked to Launchpad from the installer, so people can review translation progress whilst installing
• If background AJAX requests need to happen, and the network goes down, ocPortal will inform the user succinctly (rather than repeating the same complex error message over and over)
• Added form validation for forms on blocks and some miscellaneous screens
• Stopped double clicking on buttons for forms on blocks and some miscellaneous screens
• Improvements for developers, better AJAX API, cleaned up Javascript a bit, better integration API, better debug mode (the Code Book has been improved a lot recently also)
• Made the field validation error messages more user friendly
• Tailored message if you add a support ticket, rather than the stock ‘success’ one
• Clarified use of the ‘master password’ and ‘FTP domain’ fields during installation

New features:

• The “What’s new” newsletter feature now allows you to easily re-order categories, change what categories are used, is better presented, and allows you to choose the reference date
• Added a link to ocPortal’s bookmarks feature on the screen-actions block (commented out by default though)
• Added Guest forum searching to OCF

Dropped features:

• Removed the zone menu from the guest OCF bar (legacy navigation from ocPortal 3)

Bug fixes:

• After the first template edit, the “Edit this” icon is broken
• Fix to Comcode-tag-less ‘semihtml’ Comcode that contains symbols turning to ‘html’ Comcode and not working, after any edit
• Fixed filedump uploading
• Fix to Javascript sound API
• Fixes to OCF “posts since last visit” feature’s tracking, and changed the order used for the posts
• Fixes to table column widths
• Fix to HTTP authentication bug for those with HTTP authentication off in ocPortal, but active on the server
• Fix to “open in new window” on dropdown and zone menus
• Some improvements to the Tempcode compiler and engine, to allow it to better handle complex Tempcode customisation cases (when pre-processable symbols interact with template parameters)
• Fix to the “keep_markers” feature
• Fix to missing language strings in the Comcode editor
• Various fixes to search result ordering
• Rewrite of the Comcode ‘url’ tag processing to fix various issues
• Stopped the download of unnecessary data when adding remote downloads (downloading first 2MB of files that are not search indexable anyway)
• When iframes are disabled (hidden option), the shoutbox will no longer malfunction
• Fix to links in video search results
• Fix to error message shown when entering chat rooms
• Fix to bug when you double change a permission in the Permission Tree Editor, and it doesn’t change back
• Fix to links in gallery search results
• Fixed unnecessary inclusion of virtual root URL parameters in some links
• Fixes to how Comcode pages are given Comcode administrative permissions
• Fix when doing blank advanced catalogue searches
• Fixed XHTML validation error on query display screen
• Fix to tag feature on topicview screens
• Fix to URL generation on IPN-generated error e-mails
• Fix to the content tree feature when short-URLs are on
• Fix to IE6 issue when using the date chooser component
• Fix to OCF post-history button if the save page-request took more than a second
• Improved database compatibility
• Fixed display of times on the query view screen
• Fix MySQL strict-mode error on adding new support ticket types
• Fix to issue with setting member profile language on MSN’s where not all sites had all languages
• Fix to .po (Launchpad file) support
• Fix to Admin Zone front page if RSS is uninstalled
• Stopped RSS uninstallation breaking the weather block
• Fixed error in Facebook API support
• Fixed error in theme image setting screen if GD not installed
• Fixed assumption about English when installing the panel_top redirect
• Fixed some bugs choosing languages in the language admin module
• Fixed bug editing catalogues
• Fixed some bugs when running on OCF MSN’s with different table prefixes
• Fixed XML Sitemap error if polls have been added
• Fix to how addon directory on ocportal.com is probed
• Fixed problem on Atom feeds with no ‘rel’ attribute set for <link> tags
• Fixed error in utf-8 support with the mbstring PHP extension
• Re-enabled multi-lang installation (installing default content against all installed languages)
• Fixed problem with user language detection (read browser language even when this was disabled in ocPortal)
• Fixed some type-strictness errors, and some PHP-doc comment errors
• Fix to error messages from ‘html_entity_decode’ if webmasters set weird character sets
• Other very minor fixes

Update: Important fixes

The following files fix bugs found since 4.3 RC1 was released…

Upgrade automatically by visiting your administration center, where a notice will be displayed prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Additionally, you can upgrade using the package manager by downloading the attached patch, uploading it to the package manager, and applying it as prompted. For help with this refer to the Package Manager section of the Online Manual.

If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual about installing and upgrading. If you experience a session verification error when inputting FTP details for updating process, please see this topic.

It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on manual upgrades page for SMF 1.1.11 and 1.0.19.

Source: smf

This release fixes several reported issues with version released since 1.4.8 causing some incorrect functionality of MyBB. These bugs have been fixed to provide a more stable version of MyBB for public use.

What’s added/changed in this version?

• MyBB 1.4.10 is now compatible with PHP 5.3.
• Server Statistics are now sent to MyBB at the end of installation for analytical purposes. This is of course anonymous, no confidential information is sent, and you may easily opt out if you wish.
• … many other bug fixes

This release has been tested by our Software Quality Assurance group.

Information on upgrading, template changes and language changes can be found in the posts below.

Please note, that you need to run the upgrade script for this version.
This is so the templates may be updated.
There are no database schema changes in this version.

Upgrading from the 1.4 series

When upgrading from 1.4.9, you will not lose any custom themes, plugins or language packs which you may have installed.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process. You may download a ZIP archive of changed files here:

changed_files_1410.zip

You must then check for modified templates using the instructions below.

Upgrading from other versions

If you are upgrading from a version earlier than 1.2 then you will lose your custom themes, templates and language packs due to the number of changes between your version and the 1.2 series.

Before you attempt to upgrade, ensure you have a database backup and a copy of the files currently in use on your board. This is so you can revert back to your earlier version if you need to or something goes horribly wrong with the upgrade process.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process.

Changed files since MyBB 1.4.8

• calendar.php
• forumdisplay.php
• global.php
• managegroup.php
• member.php
• modcp.php
• moderation.php
• portal.php
• private.php
• search.php
• stats.php
• usercp.php
• xmlhttp.php
• admin
  • inc
    • functions_themes.php
    • functions_view_manager.php
  • modules
    • home
      • credits.php
    • forum
      • attachments.php
      • management.php
    • style
      • templates.php
      • themes.php
    • config
      • mycode.php
      • plugins.php
      • settings.php
    • tools
      • backupdb.php
      • mailerrors.php
      • maillogs.php
      • tasks.php
    • user
      • admin_permissions.php
      • group_promotions.php
      • groups.php
      • mass_mail.php
      • users.php
• install
  • index.php
  • upgrade.php
  • resources
    • language.lang.php
    • mybb_theme.xml
    • output.php
    • upgrade16.php
• inc
  • class_core.php
  • class_error.php
  • class_feedgeneration.php
  • class_moderation.php
  • class_parser.php
  • db_pdo.php
  • db_pgsql.php
  • functions.php
  • functions_forumlist.php
  • functions_online.php
  • functions_post.php
  • functions_search.php
  • functions_serverstats.php
  • functions_upload.php
  • init.php
  • 3rdparty
    • diff
      • Diff.php
  • languages
    • english.php
    • english
      • datahandler_user.lang.php
      • modcp.lang.php
  • datahandlers
    • event.php
    • pm.php
    • user.php
  • cachehandlers
    • eaccelerator.php
    • memcache.php
    • xcache.php
  • tasks
    • backupdb.php
    • massmail.php
    • promotions.php

* Red represents files that contain security updates
* Green represents new files added in this release

Bugs fixed since MyBB 1.4.8

• #180 – PHP 5.3/6.0 Changes & Support
• #249 – Server statistics on installation
• #297 – Old Credits Updated
• #307 – Mysql Backups – keys not quoted
• #308 – PostgreSQL error in Forum Management -> Edit Forum
• #309 – Direct access of some files generates PHP errors
• #310 – Multiple Smilies PHP Error
• #311 – RSS Feed incorrect formatting
• #318 – search_results_inlinemodcol Template Oversight
• #319 – Forum announcements trow do not alternate
• #320 – Mod-CP – Edit User & Birthday
• #321 – Future mass mailings
• #322 – HTML in forum names in 1.4.8
• #323 – Delete a PM using the delete button
• #324 – Maximum Length in Custom Profile Fields do not work
• #332 – SQLite version
• #333 – Captcha not shown if board is closed
• #334 – Missing label tag
• #335 – Board Statistics inconsistency
• #336 – Profile Display Problem: usereputationsystem
• #353 – ACP – group # of users when using additional groups bug
• #354 – System mail log: Wrong multipage links
• #355 – member.php custom profile fields alternating trow issue
• #356 – Search finduserthreads problem with limit
• #358 – PHP 5.3 my_number_format stats.php PHP warning
• #359 – Selective delete system mail logs not working
• #360 – capitalized LIMIT clause in db abstraction layer queries
• #361 – Hard-coded language string in admin permissions page
• #364 – Post not quoted from Reply button
• #366 – Merged Accounts and Join Date
• #367 – Who’s online do_addsubscription and removesubscriptions
• #368 – Search PHP error
• #369 – UserCP Ampersand in link not valid
• #370 – Copy forum – forum can have no parent
• #371 – Backup DB and Check File task enabling warning
• #372 – Syndication: Atom and RSS different time
• #373 – Buddy List doesn’t show invisible users as online
• #381 – </tr> tag missing in template member_register_customfield
• #382 – Email notification about errors not working
• #383 – [PM] “Replied to” icon not shown if you replied to all recipients
• #385 – “create new forum” generates postgresql error
• #386 – multiple forums memcache bug
• #387 – Custom Profile Fields using Check Boxes option forgets settings
• #388 – Inline Thread Deletion and Reported Posts
• #389 – thread views is stuck if php shutdown function not enabled.
• #392 – postgres “Split Threads” SQL error
• #394 – Naming an admin with special characters during installation doesn’t “work”
• #400 – Profile Editing
• #401 – Inline Moderation – do_multideleteposts
• #411 – Highlighted search results..
• #412 – Promotion bug
• #414 – 1.4.6, pgsql, ‘move thread’ gives SQL error
• #416 – Group Promotions not Working or ‘Broke’?
• #417 – Unapproved threads post count
• #423 – Users browsing a redirect forum
• #426 – Problems with language changes in several areas…
• #429 – MyBB Backups do not preserve NULL and whitespace
• #441 – Deleting a copied thread deletes the attachments of the original thread too
• #442 – Wrong dateline of split thread
• #451 – Unread PM notice dissapears after editing options
• #452 – Upgraded forums issue with themestylesheets cachefile column
• #457 – Double Template Rows
• #460 – Attachment search not working correctly
• #462 – missing “replied to” at PM replied via draft
• #463 – latest threads on portal page
• #466 – Last post date after custom merge
• #468 – Post count accepts minus numbers
• #473 – unresetted variable in view manager
• #476 – Subforum of password protected forum searchable
• #479 – postgresql merge users error
• #482 – There was a problem communicating with the mod version server.
• #501 – Hidden fields in profiles and Moderators
• #507 – Max password length
• #511 – managegroup.php and displaygroup
• #516 – Warning with custom profile field
• #517 – Incomplete theme exports
• #518 – Missing mod log entry
• #521 – Display and sort by rating doesn’t work in PostgreSQL
• #524 – Slight typo in ./inc/functions.php
• #531 – Findguest/user search error
• #532 – Email validation weakness
• #533 – Admincp User Merge and Disabled Forum Postcount
• #536 – Editing recurring event
• #541 – Some in cases in error handler don’t work as expected
• #547 – Warnings when adding a group promotion
• #549 – Cannot edit bio

Theme and template changes

Using the “Find Updated” link under the “Templates” page in the Admin CP you can find a list of the templates that have changed in this release that you’ve got one or more custom copies of.

After identifying changed templates using the tool you can either revert your custom template to the default (delete it) or use the “diff” tool to perform a difference analysis on your custom template and the default.

“Revert required” indicates that for this template to work correctly with MyBB 1.4.8 you’ll either need to revert it to the default or modify your custom template to include the changes in the default. If a revert is not required your custom version of the template should work perfectly fine.

Template changes

Since MyBB 1.4.8 the following templates have had changes to them:

• member_register_customfield
• posticons
• postbit_ignored

* Red represents the template must be updated or reverted to fix security problems

Language file changes

Since MyBB 1.4.8 the following language files have had changes to them:

• datahandler_user.lang.php

Either update your language packs to include the changes in these files or revert to the standard English language pack.

Plugins

Most of your MyBB 1.4.x plugins will work correctly with 1.4.10 without any updates.

Source : Mybb

2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges.  If you have untrusted authors on your blog, upgrading to 2.8.6 is recommended.

The first problem is an XSS vulnerability in Press This discovered by Benjamin Flesch.  The second problem, discovered by Dawid Golunski, is an issue with sanitizing uploaded file names that can be exploited in certain Apache configurations. Thanks to Benjamin and Dawid for finding and reporting these.

To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

Fixes have been made to the following issues:

• Fixed bug submitting forms if an swfupload field is hidden then reshown
• Fix to catalogue entry SEF URLs when editing
• Fixed some major problems saving match-key-error-messsages
• News can now be posted with past dates, and fixed problems with the news scheduling feature
• Fixed that multi-lang-content-support only triggered if you had customised language strings in more than one language pack
• Various httpauth fixes
• Fixed some MySQL strict-mode errors triggered by bots
• Fixed problem creating temp files on some rare systems
• Fixed OCF post history bug that can happen if a server is running slowly
• Fixed two problems in SMS API
• Some fixes/usability improvements to the online store functionality
• Lots of cleanups to ocPortal’s hard-coded custom profile fields
• No longer display ocPortal’s hard-custom CPF’s on admin_customprofilefields module if they are disabled due to an add-on being uninstalled
• Fix to .po file support (character sets)
• Improved support ticket error handling
• Fixed the need to click “-” twice on specific permission setting for changing permissions that are on by default
• Added some new synonyms for the Admin Zone search
• Allowed the Admin Zone search to work with the codenames for config options and specific permissions
• Fixed a bug importing members from a CSV if some members did not have the CPFs on the sheet only due to their usergroup membership
• Improved newsletter subscriber import to work better with other software’s CSV files, and guess forenames better
• Removed installers corrupt-file check when running in development mode
• Fixed bug editing the rules page, complaint about not setting headings
• Improvements to handling of PHP memory limit errors (bails out better, without loading any new files which would cause a white-screen error)
• Some fixes to upload error message handling, if upload fields are left blank
• Made drag&drop uploads work on Google Chrome, and fixed a small bug
• Support for new “code display” attachment mode, for displaying source code
• Fixed problem detecting the start page as an active page, in the menus CSS
• Fixed problem in upgrader, caches button wrongly disabled instead of close site button
• Removed add link on awards block if you don’t have permission to assign an award
• Preliminary support for Google’s svgweb so SVG can run in IE without an SVG plugin (not currently active as svgweb is too buggy)
• Added some extra images to those covered by the theme wizard
• Fixed bug with CEDI page deletion
• Made CEDI tree lists display canonically
• Fixed problem with newsletter subscriber importing if multi-lang is not enabled
• Fixed ugly display glitch of redirection messages
• Turned off MySQL strict mode if forum drivers other than OCF are being used (for better compatibility)
• Fixed complex bug when importing zips/tars into galleries and then adding images with the same file names as the zip/tar contents
• Made the upgrade feature display a better error message if an upload tar fails to transfer fully
• Allowed newsletter-drip-sending to be configurable
• Fixed problem with OcCLE database filesystem for some complex keys
• Fixed problem in MyBB driver
• Fixed display of some buttons in IE6
• Fixed display error in calendar
• Fixed some empty tags/visual gaps if ratings or trackbacks are disabled
• Improved RSS feed display
• Fixed some display problems with tables
• Fixed problem using the add-page-wizard on the welcome zone
• Fixed some behaviour problems on the member-selector field type
• Fixed bad error handling on swfupload if an error happens during transit
• Fixed support ticket permission setting in Permission Tree Editor
• Fixed problems on servers with ini_set disabled
• Fixed display of prices in purchase wizard
• Fixed support ticket post display to not have one too many counted
• “Create a personal topic with unknown” => “Create a personal topic”
• Note on zone-add screen if you have new-style short-URLs enabled
• New error message if suhosin has a low post.max_vars setting
• Marked-up WYSIWYG acronym in language files
• New specific error message if you try and add images/videos to a personal category container
• Language usability: Tax type => Tax rate
• Better permission checking for interfaces in the cms_catalogues module
• Better usability on the add-new-page wizard when multi-lang-content is enabled, and in general
• Fixed error checking gallery image allowance on certain cms_galleries module screens
• Fixed problem not passing currently-active-gallery into do-next manager in cms_galleries module, in some situations
• Removed the error message relating to full stops in developer mode if working with a non-English language pack
• Fixed problem “fixing past recurrences” when deleting a calendar event that has no recurrence”
• Better error handling when importing iCal and RSS
• Fixed some theoretical issues where IE might hide ocPortal error messages
• Allowed ocPortal to run with further stripped down info.php files

To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

Fixes have been made to the following issues:

• Major fix for Internet Explorer on forms with upload fields that are optional alternatives to URL fields.
• Major fix to new Flash uploader when a validation error happens just after an attached file uploads
• Workaround in new Flash uploader for Flash cookie caching bug
• Fixed support for .op files
• Major fix to theme images
• LDAP fix (one specific problem – note that we are only supporting OpenLDAP and ActiveDirectory)
• Fix to SEF URLs, when item names of items deep within a tree are edited
• Fix to SEF URLs, when item names of items are edited and no changes made to the name
• Many minor fixes (too many to list)

Also the following feature changes have been made:

• Support for closing support tickets from inside the tickets module (customers may use this also)
• Various measures to introduce better stability for developers, when errors happen
• Drag+Drop uploading for posting forms, on Firefox 3.6 (currently in alpha) and browsers with Google Gears installed (this is really cool)
• New icons for addon/module management

As promised, 2.0 RC2 boasts our new Curve theme, which has been made the new default theme. The previous default theme has been renamed Core. Please note Classic and Babylon themes have been removed from the package and are now only available by the theme site.

Major changes since the last release:

* Inclusion of the Curve theme
* Fixed a significant number of bugs reported by Beta Testers, Charter members, and community members.
* Optimized hundreds of queries for faster performance (with new indexes, re-written queries etc, changes to column type)
* Canonical link support for better search engine indexing
* Feature: ability to have different readmes in packages for different languages
* Feature: ability to delete languages (oops! we forgot that earlier)
* Linktrees have been re-added to the lower-areas of the forum. Also, linktrees have been added to the admin, moderation and profile sections.
* Lighttpd support for Queryless urls
* Improved support for right to left languages
* Fixed OpenID
* Extra fields to for Advanced Profile fields to surround/enclose within other text, and to choose placement as icon or signature.
* Several theme improvements for better semantics and standards support.
* Moved more JS out of templates
* Wireless links to switch back to normal mode.

Simple Machines would like to thank its Charter Members for their continued support for SMF.

Regards,

Simple Machines

This is a maintenance release for IP.Board 3 and addresses various bugs and adds in some enhancements to existing features along with performance improvements. Also, IP.Blog, IP.Gallery, and IP.Downloads have received a maintenance update.

Major Changes Since 3.0.3

Among many dozens of smaller bugs fixed, the following large changes and fixes have been made in the 3.0.4 release:

• IP.Board: RTE support in Safari and Chrome
• IP.Downloads: Option to not check filetype for linked files

Downloading

You can download IP.Board 3.0.4 and any applications you have an active license for in the client area. As always, make a backup of your community before proceeding.

is now released. ocPortal 4.2 is officially a ‘feature’ release, but in fact has a huge number of new features developed over the last 9 months or so. Upgrading is suggested, but please follow all our advice carefully and set aside a good amount of time for conversion. 4.1 themes in particular need some work to be converted.

The features

New features include:

• Online store (shopping cart)
• Big cleanup of blogging/news features
• Tidy-up of galleries
• Posting-rate graph
• True multi-language support – virtually all content (news posts, forum posts, CEDI pages, etc) can be translated.
• More data-conversion choices – importing from CSV files, RSS and JPEG meta-data, and ocPortal’s new XML format for synchronisation of data between sites
• Google Sitemap generation
• Twitter and Facebook syndication
• A new weather block to show the current weather in a given location
• Refreshed forum driver support (IPB3, vBulletin 3.8, SMF 2)
• All the menu templates and CSS have been rewritten to be far easier to understand and modify
• About 30 new config options, to allow greater flexibility
• Error messages are now much more thorough, providing solutions on how to resolve the errors
• Performance improvements, particularly to reduce memory usage
• Search-friendly URLs (URLs with keywords in, rather than ID numbers)
• Reviews support (e.g. people can post reviews for a catalogue entry)
• MkPortal import, and feature parity: Slide-shows and eCards from galleries, Top-sites support
• New ‘carousel’ Comcode tag
• Overhaul of the support ticket system, including SMS alert support
• Encrypted custom profile fields (CPFs) and privacy settings
• Flash and Java based uploaders
• Further improved best practice compliance for web standards, and support for the semantic web (“Web 3.0″) – Microformat support, Dublin Core support, and more
• tonnes more (most of which is documented across various posts in our public staff chat forum)

To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).
Please make sure you take a backup before uploading your new files!

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

Any common upgrade problems and known issues are being tracked in this forum topic.
If you have another problem, please file a bug report and ocProducts will respond and update the topic accordingly.

To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

Whilst this was all being finalised we took the opportunity to make some other small improvements:

• The user interface to the block assistant tool has been overhauled to be far more user friendly.
• Language strings can and will now handle pluralism correctly. For example, instead of “There are 1 entries” you will see “There is 1 entry”.
• The menu styles have been improved a bit.
• The main_countdown block now has a Javascript count down to make it feel more dynamic (previously it only changed when you refreshed).
• A new emoticon popup button has been placed next to all Comcode fields.
• When you export a theme add-on it automatically fills in the add-on description details from the theme description details.
• A common pattern of spam posts is now automatically filtered out.
• Forum selection lists have been replaced with ocPortal tree lists, so complex forum tree structures are easier to work with.
• The scope of the Admin Zone search has been increased a bit, and tuned a bit more.
• If files from uninstalled addons accidentally get re-uploaded, ocPortal is now less likely to fail with database errors.
• We no longer refer to ‘Root’ in public language strings, preferring the use of the word ‘Home’ (e.g. “Forum Home” instead of “Forum Root”).
• You can now use the arrow keys to make selections from auto-completing inputs (e.g. username selection inputs).
• The shoutbox block now has a parameter for how many messages are shown.
• When you use the Add New Page wizard, it’ll allow you to put a link into menus that are referenced but currently empty.
• Various bug fixes and usability improvements have also been made, in particularly IE6 compatibility issues.

Source: ocportal’s site.

phpBB 3.0.6 Release Candidate 1 released

by Acyd Burn » Sat Sep 12, 2009 5:48 pm

These vulnerabilities affects MyBB 1.4.8. MyBB 1.2 is also affected.

Thank you to endeavormac, frostschutz, and TheLinx for alerting us of these issues.

MyBB 1.4.8 to MyBB 1.4.9 Patch

This patch is only for users running MyBB 1.4.8. If you are running an older version of MyBB then please download MyBB 1.4.9 from the MyBB site and update to it.

Please download the attached ZIP archive and replace the files in your forum directory with those from the ZIP archive.

changed_files_1409.zip

If you wish to manually patch your board please download “mybb_1408_patches.txt” and follow the instructions in that file.

mybb_1408_patches.txt

Please Note: You do not have to run the upgrade script for this release.

Reporting MyBB security vulnerabilities

If you think you’ve found a vulnerability in MyBB, we advise you not to publicly post it on these forums or publicly release information about it elsewhere until we’ve had time to prepare and release a patch.

As always, you can send through security related messages on the MyBB website from the Contact Us page.

MyBB 1.2.14 Patch

Please follow step #1 in the mybb_1408_patches.txt file as listed above.

Please note all users of the 1.2.x series are urged to upgrade to the latest release of MyBB. (1.4.9) MyBB 1.2 is no longer being supported, though security updates for the MyBB 1.2 series will last through December 2009.

We are pleased to announce Invision Power Board 3.0.3 has been released.

This is a maintenance release for IP.Board 3 and addresses various bugs and adds in some enhancements to existing features. Also, IP.Blog, IP.Gallery, and IP.Downloads have received a maintenance update.

Major Changes Since 3.0.2

Among many dozens of smaller bugs fixed, the following large changes and fixes have been made in the 3.0.3 release:

• New option for dealing with members marked as spam: Unapprove posts, clear profile data and ban user
• Ability to mark members as spammers from the Manage Validating Queue in the ACP
• Added ability to edit status and about me information from moderator edit member page
• Profile screen now displays member’s email address if viewer is an administrator
• OpenID now supports PHP 5.3.0

Subscriptions Manager

Subscriptions Manager RC 2 is now available in the client area.

MS-SQL Database Driver

MSSQL Driver RC 1 released for IP.Board, IP.Blog, IP.Gallery and IP.Downloads. Includes ability to upgrade from 2.3.6

CleanCut Skin

The new CleanCut skin will be made available as a separate download soon. A blog entry will be posted with information when it is available.

IP.Converge 1.1.1 Released

This is a maintenance update to IP.Converge to address reported issues.

Downloading

You can download IP.Board 3.0.3 and any applications you have an active license for in the client area. As always, make a backup of your community before proceeding.

Source: IPB

On the back of the well received 4.2 (RC1) release comes ocPortal 4.2 (RC2), with over 100 bug fixes and usability improvements. We used our recent 9-day team meeting, this time held in Cheltenham (UK), to thoroughly test ocPortal’s major features in both development and live environments. We took the opportunity to address all the bug-related issues that cropped up during our tests, as well as collaborating on features that enhance the user-experience in ways that we never consciously thought of before – such as adding the ability to use the tab-key to make indents in ocPortal’s CSS and Template editors, or to be able to preview existing uploaded images on any edit form (next to the upload field).

About this release

Upgrading is not yet recommended for live sites, but new sites may wish to go with this release; it is still officially ‘bleeding-edge’ but this will change once it is no longer in Release Candidate status.

This website is now running RC2, and rigorous testing has been undertaken – it has passed all our code quality checking tools. The core 4.2 code, including any new features since the last release, is continually being deployed on our client-websites, and as such as already been thoroughly tried and tested.

Upgrading

To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).
Please make sure you take a backup before uploading your new files!

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

We have posted a topic explaining the key issues upgrading a 4.1 site, or a 4.2 beta site. This URL will be updated if new upgrade problems are found.

To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

Fixes have been made to the following issues:

• Fixed a number of PHP 5.3 compatibility issues: date.timezone requirement, ‘split’ deprecation
• Added sorting to the calendar upcoming events block
• Fixed problem in the back button image when you clicked through to a calendar event, from the calendar events block
• Comcode language strings are now de-cached if you edit the underlying language string
• Comcode language strings no longer produce fatal errors if they are invalid
• Fixed potential infinite loop if the menu caches corrupt
• Fixed problem with bot detection
• Allowed SEO URLs to work from CRON scripts (previously it would not as it got scared Apache was not running)
• Fixed problem if you resubmitted the language editor and chose to not resend post data, your language file customisations would be emptied
• As above, but in template editor
• Improved CSS for the calendar top bar, so it works better on IE6 and is pixel-perfect
• Fixed race conditions emptying the language and template caches (i.e. if you empty in the exact millisecond someone else is reading, a locking error could have previously happened)
• Fixed bug if Comcode is asked to render a table with only a single cell
• Fixed error in downloads and catalogues systems where it was saying there were no subcategories when there were (problem with the language strings)
• Fixed ordering for the “show member’s recent posts” link
• Fixed race condition emptying the file-based persistent cache
• Fixed two very minor type-strictness errors
• Worked around problems with the helper panel image display, on Internet Explorer
• Fixed typo on match-key permissions screen, and clarified language
• Fixed usability issue on calendar week view, it now says what months weeks are in
• Fixed stack trace if you incorrectly specified the dimensions to the ‘flash’ Comcode tag
• Fixed minor issue with the latest “Hack attack” e-mail being sent after a “Hacker was IP banned” e-mail (i.e. wrong order leading to a little confusion)
• Fixed broken “zone editor” links as generated from the Site Tree Editor
• Stopped connectivity problems when pinging news services (when adding/editing news) causing fatal errors
• Fixed bad IP addresses causing fatal errors
• Fixed problem with preprocessor-detected Javascript and CSS not getting recorded as required for blocks
• Fixed rare false-positive hack-attack mail

4.2 RC1 also includes these fixes except the last one which will be fixed in RC2.

Source: OCporal

ocPortal 4.2 is officially a ‘minor’ release, but in fact has a huge number of new features developed over the last 8 months or so.

The features

New features include:

• Big cleanup of blogging/news features
• Tidy-up of galleries
• Posting-rate graph
• True multi-language support – virtually all content (news posts, forum posts, CEDI pages, etc) can be translated.
• More data-conversion choices – importing from CSV files, RSS and JPEG meta-data, and ocPortal’s new XML format for synchronisation of data between sites
• Google Sitemap generation
• Twitter and Facebook syndication
• A new weather block to show the current weather in a given location
• Refreshed forum driver support (IPB3, vBulletin 3.8, SMF 2)
• All the menu templates and CSS have been rewritten to be far easier to understand and modify
• About 30 new config options, to allow greater flexibility
• Shopping cart/Online store
• Error messages are now much more thorough, providing solutions on how to resolve the errors
• Performance improvements, particularly to reduce memory usage
• Search-friendly URLs (URLs with keywords in, rather than ID numbers)
• Reviews support (e.g. people can post reviews for a catalogue entry)
• MkPortal import, and feature parity: Slide-shows and eCards from galleries, Top-sites support
• New ‘carousel’ Comcode tag
• Overhaul of the support ticket system, including SMS alert support
• Encrypted custom profile fields (CPFs) and privacy settings
• Flash and Java based uploaders
• Further improved best practice compliance for web standards, and support for the semantic web (“Web 3.0″) – Microformat support, Dublin Core support, and more
• tonnes more (most of which is documented across various posts in our public staff chat forum)

About this release

Upgrading is not yet recommended for live sites, but new sites may wish to go with this release; it is still officially ‘bleeding-edge’ but this will change once it is no longer in Release Candidate status.

This website is now running RC1, and a lot of testing has been done in the last couple of releases – it’s past all our code quality tools, and some manual testing. Also, the 4.2 code written since the last beta has been actively used on a number of client websites so is relatively tried and tested.

There is one small caveat in this release – the shopping cart stuff that was recently announced is not yet finished. I still need to review this code and there is some polishing off to do. It currently won’t run as I disabled part of it for this release.
As the shopping cart is a relatively isolated part of the system the system should be able to stay stable (with fixes as problems are found) whilst this is finished. So this isn’t strictly a true RC release because we wouldn’t release it like this – but in terms of stability, it’s not beta either.

Upgrading

To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).
Please make sure you take a backup before uploading your new files!

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

We have posted a topic explaining the key issues upgrading a 4.1 site, or a 4.2 beta site. This URL will be updated if new upgrade problems are found.

Ack, sorry this released got so delayed!

For those who have been following development, this has been severely delayed. Lessons have been learnt here – in hindsight it was a mistake to try and use a single code repository both for developing new client releases, and preparing for an imminent release. The plan had been to keep clients on the main code path, to make it easier for them to upgrade – incorporating their new features directly into development, and choosing synchronised release points. It worked in the earlier stages of 4.2 development when we had fewer clients, but since then it became virtually impossible to manage as so many sites have had so many different and changing schedules and things got so busy, and we’ve had a number of different developers writing code. So, in the future client sites will be developed in their own forked versions of ocPortal, and then patches from these sites will be applied to create new ocPortal versions as and when is possible on a reasonable schedule; clients will then be able to be synchronised back onto the main development path at a later date.

The future

Our core team is having a group meeting in England for 1 1/2 weeks starting Monday. Whether this means we’ll be around more or less during this period I’m not quite sure yet, but I wanted to mention this, and we hope to get a few more exciting things underway .

To upgrade follow the steps in your website’s http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached TAR file as one of these steps (“3: Upload an upgrade TAR for extraction”).

» alternatively (but not recommended), you can manually upload the files inside the attached TAR file over existing files (7-zip is just one of many tools for tar files). This is not recommended because it will bypass the upgraders addon-aware extraction algorithm and potentially cause problems.

For more details, see our upgrading tutorial.

Important fixes:

• Fixed a strange but rare Tempcode crash, possibly caused by a PHP bug
• Fixed problems with selecting groups of usergroups to NOT allow PT’s from
• Fixed error caused by PHP 5.3 (works around poorly-conceived deprecation notice on the part of the language designers)
• Worked around problem on some servers where screens stopped downloading part-way through (fault on servers, caused by poor connectivity, problem triggered by inline AJAX requests)
• Fixed problem in some PHP versions, caused in last patch release (our code quality checking tools are now updated to catch this kind of compatibility error now)
• Fixed bug if mbstring extension not installed, introduced in last patch release with the unicode changes

Misc fixes:

• keep_su now will update ‘last online’ if keep_su_online=1
• Fixed some type strictness errors, and some small API usability issues for programmers
• Fixed many cases of automated error mails possibly going out with keep_* parameters in the URLs
• Added ‘ID’ parameter to ‘POINTS_LEADERBOARD_ROW’ template
• Allowed the main_newsletter_signup block to work even if there is no text file to e-mail out to people signing up (as originally there was designed to be)
• Fixed stack trace in the installer if you enter a file path when asked for a base URL, and config editor, and ocPortal itself
• Fixed bug with PHP 6 unicode support
• Fixed various API problems relating to Tempcode SET/GET variables, that came up with a small added feature
• New RATING/VIEWS symbols
• Abstract file manager now not usually visible on Windows
• Fixed problems with iCal API
• Fixed problems when renaming or deleting forum groups, when those were tied into config options (disassociation now prevented); fixed related problem where disassociation led to a stack trace
• Fixed problem with choosing to import an addon from ocportal.com, when subcategories were involved
• Fixed problem on results-browsers, when SEO URLs were disabled
• Fixed small problem on phpdoc extraction API
• Fixed typos in chat rooms Javascript code, causing possible minor bug
• Fixed the insert-GUID feature when template editing is accessed from the template tree
• Allowed drop down menus to work using keyboard (accessibility)
• Fixed usability problem if you click a newsletter confirmation URL twice
• Fixed manually-set chat room member blocking
• Fixed usergroup screen to show members correctly, for non-privileged viewers
• Fixed API problem with subscriptions (affected eCommerce programmers only)
• Detected if a Firewall is blocking the quick installer from working, and shows an appropriate error message rather than gibberish
• Fixed some race conditions
• Fixed complex rare problem, when trying to edit a Comcode page and you’re not staff on a site (due to the M.S.N. staff filter)
• Made the eCommerce transaction log show transaction IDs
• Fixed problem with sales missing from the eCommerce charts
• Fixed possible crash looking at topic history, if posts with history within the topic had been deleted
• Fixed slight bugs in mysqli and mysql_dbx drivers
• Fixed problem in WYSIWYG editor with numbered lists getting changed into unordered lists
• Fixed meta data not saving in the calendar
• Fixed uninstalling eCommerce addon breaking catalogues addon
• Fixed rare bug in Comcode parser

Stats fixes:

• Fixed problem with how some page-file paths in the stats system are not properly converted to page-links for clarity
• Fixed bar graphs possibly having the top chopped off
• Stopped the default stats period being suggested if there are not stats for that period – moves ahead to a workable window if it needs to
• Mirrored the scatter graphs so as to match normal expectations for graphs
• Fixed problem with scatter graph results table, if there was a day of no results (termination of continuation)
• Fixed problem with the submission graphs not being broken down by day properly
• Fixed the overview graphs (was broken by a prior usability improvement)

Source: ocportal’s site

We are pleased to announce Invision Power Board 3.0.2 has been released.

This is the second maintenance release for IP.Board 3 and addresses various bugs and adds in some enhancements to existing features. Also, IP.Blog, IP.Gallery, and IP.Downloads have received a maintenance update.

Major Changes Since 3.0.1

Among many dozens of smaller bugs fixed, the following large changes and fixes have been made in the 3.0.2 release:

• Improved search and member list performance
• Date filter options for Active Content page
• Many improvements for Sphinx searching (i.e. ability to filter by forum, ability to search titles only, ability to group posts as topics, plugin functionality for modifying the query, and misc bug fixes)
• Ability to hide an application’s tab on the front end, while still allowing it to be publicly accessible
• Improved IP address lookup tool can now support add-on applications
• Portal option to not pin pinned topics for articles
• Added link to user profile when editing a member in ACP
• Added display of time remaining for suspended members when editing a member in ACP
• Spam Monitoring Service support
• Ability to control image quality for Gallery images (jpg/png only)
• PHP version 5.3 is now supported in IP.Board except for OpenID login method. We are awaiting updates from OpenID vendors.

Downloading

You can download IP.Board 3.0.2 and any applications you have an active license for in the client area. As always, make a backup of your community before proceeding.

Spam Monitoring Service

To retrieve your key, login to your client area and go to your purchases. You will see an option to create a spam service key. Place that key in the Spam Service settings in your IP.Board 3.0.2 AdminCP.

Subscriptions Manager

The first Release Candidate of Subscriptions Manager is now available in the client area. While not the final version, feedback has been good and several clients are using it on their live site. However, we do of course suggest you wait until the final version before using it live.

MS-SQL Database Driver

The MS-SQL database driver is now available for new installations of IP.Board 3. Upgrade capability from IP.Board 2 will be available within the next two weeks.

Spam Monitoring Service: Legacy License Holders

As the Spam Monitoring Service incurs additional operating costs for IPS to operate it is only available to IPS Hosting customers plus IP.Board Standard, IP.Board Business, and Community Suite license holders. Those holding old Lifetime or Perpetual licenses cannot participate in this service as that license type only includes technical support and access to product upgrades – not our new advanced services – since those services were not even conceived several years ago when those license types were offered. Of course the new spam service is our only new advanced service but we do have more planned and must begin the transition process now.

To allow those holding Lifetime or Perpetual licenses to switch to a Standard license while still recognizing their long-standing status we will offer the following methods to switch:

Lifetime License: Your first renewal date will be a full year from the date you request to switch. This means if you requested the change August 15, 2009 you would not be invoiced for any renewal charges until August 15, 2010.

Perpetual License: Your first renewal date would be 6 months from the time of your then-current renewal date. This means that if your Perpetual license support was set to expire December 19, 2009 then your new Standard license renewal would be June 19, 2010.

We also recognize that some clients understand that the spam service (and future advanced services) do require additional operating expenditures for IPS but they prefer to keep their current license type. For those clients, you can choose to keep your current Perpetual or Lifetime license but add on a service enhancement package to that license for $50 per year. For Perpetual license holders this would replace the current $30 renewal you have in place.

Finally, it is certainly not required that any Lifetime or Perpetual license holder switch to a Standard license or otherwise pay any additional fees. If you are not interested in the spam service or wish to wait until we have more advanced services in the future you can certainly do so. IPS will continue to honor your product upgrade and technical support services under the Lifetime and Perpetual licenses as we have for many years now.

Please submit a ticket if you have any questions or wish to make a change.

Source IPS forum