|
From: <mxb...@li...> - 2005-04-18 20:11:18
|
Hi everyone,
The mxBB Development Team is proud to announce the immediate release of
mxBB-Portal version 2.7.6, the "in between milestones" edition. :-)
This is a Critical Update that in addition to several bug fixes includes
a couple of security related fixes and some improvements based on back
ported code from our incoming next major release.
All Users of mxBB-Portal are strongly encouraged to upgrade to this release
as soon as possible.
mxBB-Portal 2.7.6 is already available from our main website:
http://www.mx-system.com/index.php?page=112&action=file&file_id=2
mxBB-Portal 2.7.6 Release Notes can be found here:
http://www.mx-system.com/forum/viewtopic.php?t=1224
It contains a step by step guide to help upgrade from 2.7.5-pl4 to 2.7.6
in just 5 minutes! ;-)
A detailed guide including code changes from 2.7.5-pl4 to 2.7.6 (written in
phpBB MOD format) has been posted here:
http://www.mx-system.com/forum/viewtopic.php?t=6576
Summary of changes introduced with 2.7.6:
Security Fixes:
* SQL Injection affecting mx_poll.php has been fixed. In addition
this script has been fully re-written based on code from latest
phpBB version.
* Included a .htaccess file in the cache folder to prevent others
from reading cached data.
* Added mxBB version number in ACP page footer (thanks to MHobbit for
pointing this out) as well as to add a condition to ensure version
numbers are only visible to logged in admins, which has been
introduced in phpBB 2.0.14.
* The scripts includes/page_header.php, includes/page_tail.php,
admin/page_header_admin.php, admin/page_footer_admin.php and
admin/pagestart.php have been fully revised to match the
corresponding scripts in phpBB. This not only introduces security
fixes but also may fix strange errors that happen from time to time
on some systems such as weird blank pages, etc.
Bug Fixes:
* Fixed new mx_request_vars class, MX_TYPE_NO_SQL has been replaced
with MX_TYPE_SQL_QUOTED and condition of execution fixed.
* Fixed bug building URLs to user profiles in mx_online.php.
* Renamed $starttime as $mx_starttime to avoid problems with other
scripts overriding its value.
* First attempt to fix PHP sessions management. A new function
mx_session_start() has been introduced. Hopefully this will help
minimize misterious problem that happends from time to time causing
weird blank pages and the like.
* Fixed some issues with our Cache generation functions.
* Fixed function mx_get_groups() to correctly deal with systems where
no usergroups are defined.
Functionality added or changed:
* New version of the mxBB Installer. A couple of minor bugs have been
fixed and the postgres7.php script has been updated as per changes
to fix the SQL parser introduced in phpBB 2.0.14 ;-).
Additionally, our main installer script is now officially named as
the
"mxBB Installation Wizard", which is much nicer ;-)
* Added basic support for Categories Hierarchy 2.1.0, meaning the
portal itself works. However, almost all blocks depending on forums
and topics information such as our Forum Index, LastMsgPost, Poll,
Announcements blocks are broken due to the particular DB structure
used by CH210 to organize forum data.
Anyway, it is good to see mxBB Portal itself works under CH210,
which is much more than what we had ;-)
* Optimized versions of mx_smilies_pass, mx_generate_smilies and
mx_decode has been introduced. This back ported code from 2.8
* Removed all duplicated phpBB template related files from our
distribution. This helps keep things organized and also avoids
duplicated efforts to apply MODs twice, and also simplifies the
task to create themes for mxBB.
* Added [delete] function to the ACP Objects Integrity Check.
* Changed ACP phpInfo utility, it now uses same technique than the
phpInfo panel already present in the mxBB Installation Wizard.
* Back ported new functions for compatibility with incoming modules.
Enjoy! ;-)
The mxBB Project Team
|