[mxbb-news] mxBB-Portal version 2.7.6 (the "in between milestones" edition) released!

[<mxb...@li...>]

Hi everyone,

The mxBB Development Team is proud to announce the immediate release of
mxBB-Portal version 2.7.6, the "in between milestones" edition. :-)

This is a Critical Update that in addition to several bug fixes includes
a couple of security related fixes and some improvements based on back
ported code from our incoming next major release.

All Users of mxBB-Portal are strongly encouraged to upgrade to this release
as soon as possible.


mxBB-Portal 2.7.6 is already available from our main website:

    http://www.mx-system.com/index.php?page=112&action=file&file_id=2


mxBB-Portal 2.7.6 Release Notes can be found here:

    http://www.mx-system.com/forum/viewtopic.php?t=1224

It contains a step by step guide to help upgrade from 2.7.5-pl4 to 2.7.6
in just 5 minutes! ;-)


A detailed guide including code changes from 2.7.5-pl4 to 2.7.6 (written in
phpBB MOD format) has been posted here:

    http://www.mx-system.com/forum/viewtopic.php?t=6576



Summary of changes introduced with 2.7.6:

   Security Fixes:
     * SQL Injection affecting mx_poll.php has been fixed. In addition
       this script has been fully re-written based on code from latest
       phpBB version.
     * Included a .htaccess file in the cache folder to prevent others
       from reading cached data.
     * Added mxBB version number in ACP page footer (thanks to MHobbit for
       pointing this out) as well as to add a condition to ensure version
       numbers are only visible to logged in admins, which has been
       introduced in phpBB 2.0.14.
     * The scripts includes/page_header.php, includes/page_tail.php,
       admin/page_header_admin.php, admin/page_footer_admin.php and
       admin/pagestart.php have been fully revised to match the
       corresponding scripts in phpBB. This not only introduces security
       fixes but also may fix strange errors that happen from time to time
       on some systems such as weird blank pages, etc.

   Bug Fixes:
     * Fixed new mx_request_vars class, MX_TYPE_NO_SQL has been replaced
       with MX_TYPE_SQL_QUOTED and condition of execution fixed.
     * Fixed bug building URLs to user profiles in mx_online.php.
     * Renamed $starttime as $mx_starttime to avoid problems with other
       scripts overriding its value.
     * First attempt to fix PHP sessions management. A new function
       mx_session_start() has been introduced. Hopefully this will help
       minimize misterious problem that happends from time to time causing
       weird blank pages and the like.
     * Fixed some issues with our Cache generation functions.
     * Fixed function mx_get_groups() to correctly deal with systems where
       no usergroups are defined.

   Functionality added or changed:
     * New version of the mxBB Installer. A couple of minor bugs have been
       fixed and the postgres7.php script has been updated as per changes
       to fix the SQL parser introduced in phpBB 2.0.14 ;-).
       Additionally, our main installer script is now officially named as
the
       "mxBB Installation Wizard", which is much nicer ;-)
     * Added basic support for Categories Hierarchy 2.1.0, meaning the
       portal itself works. However, almost all blocks depending on forums
       and topics information such as our Forum Index, LastMsgPost, Poll,
       Announcements blocks are broken due to the particular DB structure
       used by CH210 to organize forum data.
       Anyway, it is good to see mxBB Portal itself works under CH210,
       which is much more than what we had ;-)
     * Optimized versions of mx_smilies_pass, mx_generate_smilies and
       mx_decode has been introduced. This back ported code from 2.8
     * Removed all duplicated phpBB template related files from our
       distribution. This helps keep things organized and also avoids
       duplicated efforts to apply MODs twice, and also simplifies the
       task to create themes for mxBB.
     * Added [delete] function to the ACP Objects Integrity Check.
     * Changed ACP phpInfo utility, it now uses same technique than the
       phpInfo panel already present in the mxBB Installation Wizard.
     * Back ported new functions for compatibility with incoming modules.



Enjoy! ;-)

The mxBB Project Team