usebb-announce — Latest news

[UseBB-Announce] UseBB2Drupal

[UseBB P. <co...@us...>]

A UseBB 1 migration/conversion module for Drupal 8 has been released:
UseBB2Drupal (https://www.drupal.org/project/usebb2drupal). This module
performs migration of users, categories, forums, topics, posts and IP
address bans without overwriting existing Drupal content. It also
translates internal forum links to the new Drupal paths.

If you own a UseBB 1 forum and are willing to migrate to Drupal 8, please
test the module thoroughly on a private or local environment and submit any
issues to the issue tracker on Drupal.org (
https://www.drupal.org/project/issues/usebb2drupal?categories=All). You can
also clone the repo from GitHub (https://github.com/dietrichm/usebb2drupal) and
create pull requests.

Soon, UseBB.net will be replaced with a (probably read only) copy of the
forum in Drupal 8. Existing UseBB 1 users are then highly recommended to
migrate their forum to Drupal 8.

UseBB Project

[UseBB-Announce] UseBB 1.0.16 released

[UseBB P. <co...@us...>]

The UseBB Project releases UseBB 1.0.16, a maintenance release of the UseBB
1 light PHP 4 and MySQL based forum package.

* Changes since 1.0.15

Only a small set of bug fixes and a small style change distinguishes this
release from the previous. See the Changelog for the detailed list.

* Upgrading

UseBB 1.0.16 can be considered a stable version of UseBB 1. However,
numerous forums are still using an older 1.0.x or beta 0.x version. Keeping
into account all the issues and bugs fixed over time, we encourage all of
these websites to upgrade to 1.0.16 as soon as possible.

Any version less than 1.0.16 is now out of official support. Visit
http://www.usebb.net/downloads/ for downloads. Information about upgrading
is available in the docs/index.html document.

UseBB Project
http://www.usebb.net

[UseBB-Announce] UseBB 2 project cancelled

[UseBB P. <co...@us...>]

Years after the initial plans for a grown up successor to UseBB 1, the
largely inactive UseBB 2 project is now cancelled. Studies,
professional work and other personal things have been and currently
still are in the way of dedicating enough time to its development.
Also, I see less value in continuing the current v2 project since in
the mean time many other (forum) systems have met or surpassed the
concepts and features that were to make UseBB 2.

In the future, chances exist I will start a new successor project
("UseBB 3" or using a different name), taking into account the
expectations and methodologies for today's web applications and
offering migration options for existing UseBB users. For this, a lot
of brainstorming and planning has to take place first, which will not
happen in the near future.

What concerns UseBB 1, it can not meet all of today's requirements for
modern forum software, especially in the field of extensibility and
spam protection. Which is not a surprise, given the code base reaching
the age of 9 years, and v1's development stopped quite some time ago
in favour of v2. However, for the time being I will continue releasing
small bug fix and security releases until people have had the
opportunity to migrate to another package or an eventual successor.
The support forum will also remain open as long as possible and
required.

I have to thank the people who supported v2's development in several
ways, offered help and gave comments and helpful critiques. In case a
new project will be started, this will be announced at UseBB.net and
elsewhere.

Dietrich Moerman
UseBB founder and developer

[UseBB-Announce] UseBB 1.0.15 released

[UseBB P. <co...@us...>]

The UseBB Project releases UseBB 1.0.15, a maintenance release of the
UseBB 1 light PHP 4 and MySQL based forum package.

* Changes since 1.0.14

	- Fixed a few bugs in ACP and Your Panel
	- Fixed a bug with sorting search results
	- CSS changes to use CSS3 based drop shadows and more

See the Changelog for the complete list.

* Upgrading

UseBB 1.0.15 can be considered a mature and stable version of UseBB 1,
suitable for all websites. However, numerous forums are still using an
older 1.0.x version, or even a beta 0.x one. Keeping into account all
the issues and bugs fixed over time, we encourage all of these
websites to upgrade to 1.0.15 as soon as possible.

Any version less than 1.0.15 is now out of official support. Visit
http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document.

* Future plans and ongoing support

Because of the limitations in the old UseBB 1 code base and its
already reduced development activity, as of now only bug fix releases
will be made. Future functionality improvements are very unlikely. But
we do still provide support for UseBB 1. The current version was
verified to work with PHP 4.4, 5.2, 5.3 and the latest 5.4. Should
there be any problems, please contact us at the forums or GitHub.

UseBB Project
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.14 released

[UseBB P. <co...@us...>]

The UseBB Project releases UseBB 1.0.14, a general improvement and
maintenance release for the UseBB 1 light PHP 4 and MySQL forum
package.

* Changes since 1.0.13

	- Added Google Analytics support
	- Added re-sync statistics ACP module
	- Added Stop Forum Spam API request ACP module
	- Potential spammer restrictions can be applied to guests
	- Automatically close other sessions for same user
	- Subsets of breadcrumbs can now be used in templates

More changes and bug fixes were made. See the Changelog for a complete list.

* Upgrading

UseBB 1.0.14 can be considered a mature and stable version of UseBB 1,
suitable for all websites. However, numerous forums are still using an
older 1.0.x version, or even a beta 0.x one. Keeping into account all
the issues and bugs fixed over time, we encourage all of these
websites to upgrade to 1.0.14 as soon as possible.

Any version less than 1.0.14 is now out of official support. Visit
http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document.

UseBB Project
http://www.usebb.net

[UseBB-Announce] UseBB development at GitHub

[UseBB P. <co...@us...>]

A couple of days ago, the UseBB project started using GitHub for its
development activities.

In practice, the Subversion repository as well as the Trac instance at
SourceForge.net have been replaced by a GitHub account and Git
repository, including an issue (ticket) tracker and wiki. The old SVN
repo has become inactive and the Trac instance removed, so please
update your bookmarks and/or tools to fetch the development source
code. Downloads, UseBB 1 resource trackers and mailing lists remain at
SF.net.

All information can be found at https://github.com/usebb/UseBB (you
can switch the branch in the menu - 'master' is UseBB 2 and 'v1.0' is
1.0.x), and additional Git or GitHub help can be found at
http://help.github.com/.

As always, your ideas and help are appreciated, so feel free to add
issues, make comments or even fork the code to make your improvements
(http://help.github.com/fork-a-repo/).

Thanks
Dietrich
The UseBB Project

PS: the master is branch is currently empty, but v2 source code will
be added soon.

[UseBB-Announce] UseBB 1.0.13 released

[UseBB P. <co...@us...>]

The UseBB Project releases UseBB 1.0.13, a general improvement and
maintenance release for the UseBB 1 light PHP 4 and MySQL forum
package.

* Changes since 1.0.12

  - Anti-spam measures, including:
     * Potential spammer statuses
     * Stop Forum Spam API integration
     * Mass cleaning up profile spam accounts in ACP
  - Persistent database connections
  - Email form or custom URL usage for "Contact admin"
  - Searching users by email address in ACP

More changes and bug fixes were made. See the Changelog for a complete list.

* Anti-spam measures

The rise of spam attacks have made us adding more measures against
forum spam. Most notably are the introduction of the potential spammer
status and the integration of Stop Forum Spam for checking and
submitting spammer data.

For more information on anti-spam measures, please read the new
document "Spam Protection" (docs/anti-spam.html). It contains some
recommended settings for public forums.

* Upgrading

UseBB 1.0.13 can be considered a mature and stable version of UseBB 1,
suitable for all websites. However, numerous forums are still using an
older 1.0.x version, or even a beta 0.x one. Keeping into account all
the issues and bugs fixed over time, we encourage all of these
websites to upgrade to 1.0.13 as soon as possible.

Any version equal or less than 1.0.12 is now out of official support.
Visit http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document.

UseBB Project
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.12 released

[UseBB P. <co...@us...>]

The UseBB Project releases UseBB 1.0.12, a general improvement and
maintenance release for the UseBB 1 light PHP 4 and MySQL forum
package.

* Changes since 1.0.11

  - Fixed two security issues
  - Enhanced security all over the system
  - New topic/post reply links can now be shown to guests
  - Added members/staff/guests filter on online user list
  - New max topic age setting for active topics
  - Removed usage of deprecated PHP functionality

Much more changes and bug fixes were made. See the Changelog for a
complete list.

* Vulnerability "HTB22914: Local File Inclusion in UseBB"

Recently, High-Tech Bridge SA discovered a possible issue in UseBB
1.0.11 and earlier. The issue exists in the fact that admin.php may
possibly include PHP files not used for the UseBB admin control panel
(ACP).

The faulty code in question is only executed for logged in
administrator accounts, and can only include non-relevant PHP files if
a directory "sources/admin_" exists, which is not the case in UseBB 1.
Therefore, the issue does not pose a direct threat to an existing
UseBB set-up, but is classified a security issue anyway and has been
fixed in UseBB 1.0.12.

* Vulnerability "HTB22913: Multiple CSRF (Cross-Site Request Forgery) in UseBB"

High-Tech Bridge SA also discovered possibilities of executing CSRF
attacks in UseBB 1.0.11 and earlier. This way, when a user is given a
malicious URL or visits a web page containing such URL or JavaScript,
requests may be executed that add, edit or delete data on the forum,
including topics, posts, account information and settings in the ACP
(if the user has logged in into the ACP).

As a solution, UseBB 1.0.12 has implemented URL and form tokens for
sensitive actions. Accessing or executing above URLs or scripts now
doesn't have an effect on the data.

(If you developed mods, please read
http://sourceforge.net/apps/trac/usebb/wiki/UseBB1CSRF on how to apply
this yourself.)

* More security enhancements

Passwords can now be composed of more characters, including symbols.
The system itself will also generate these stronger passwords itself.
A combination of at least letters and numbers is now required for new
passwords.

Non-fatal PHP notices are now hidden on production environments, but
can still be logged if desired.

It is no longer possible to use "debug mode" in level 2 on production
environments. In other words, database errors will always have the
usernames filtered, and the list of SQL queries is never shown.

The Admin Control Panel has added a manual and automatic logout
feature, and sessions are now immediately destroyed (regardless of
cleanup) when the "max session lifetime" inactivity time was reached.

* Removal of deprecated PHP functionality

PHP 5.3 has made a number of PHP functionalities deprecated. This
includes the magic_quotes_runtime behaviour which UseBB 1 has used
since the beginning. As of UseBB 1.0.12, magic quotes are no longer
used and more old code for PHP < 4.3 is removed.

In order to run 1.0.12 it is now necessary to have PHP 4.3 or later,
or PHP 5. (Please note PHP 4 is officially out of support by the PHP
Group, and UseBB 2 will completely abandon PHP 4 support.)

* Upgrading

UseBB 1.0.12 can be considered a mature and stable version of UseBB 1,
suitable for all websites. However, numerous forums are still using an
older 1.0.x version, or even a beta 0.x one. Keeping into account all
the issues and bugs fixed over time, we encourage all of these
websites to upgrade to 1.0.12 as soon as possible.

Any version equal or less than 1.0.11 is now out of official support.
Visit http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document.

UseBB Project
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.11 released

[UseBB P. <co...@us...>]

The UseBB Project releases UseBB 1.0.11, a new bugfix and maintenance
release for the UseBB 1 light PHP 4 and MySQL bulletin board system.

* Changes since 1.0.10

  - Fixed security issue with forum/topic RSS feeds with "read" forum
permission;
  - increased possibilities when deleting users, i.e. removing all
posts and banning email address/domain;
  - preview feature and bugs fixed for member pruning.

Much more changes and bug fixes were made. See the Changelog for a
complete list.

* RSS feeds security issue

A security issue has been discovered in UseBB 1.0.10 with per forum
and topic RSS feeds in combination with restricted forum access
permissions, giving users access to post contents that should remain
hidden. Anyone having a restricted "read" permission set but NOT an
equal or more restricted "view" one is prone to this issue.

A full disclosure and patch was released earlier at
http://www.usebb.net/community/topic-2495.html. There is no need to
apply the patch before upgrading to 1.0.11.

* Support for PHP 5.3

Although UseBB 1 is written in PHP 4 and upto now still uses some PHP
features that will be removed in future major releases (and thus are
currently deprecated), UseBB 1.0.11 remains working and supported
under the recent PHP 5.3. Code rewriting to avoid using deprecated
functions will take place for future 1.0.x releases.

* Upgrading

Upgrading to UseBB 1.0.11 is STRONGLY encouraged. Any version equal or
less than 1.0.10 is now out of official support. Visit
http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document. Upgrading
usually is as easy as overwriting a set of files.

UseBB Project
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.10 RSS feeds security issue

[UseBB P. <co...@us...>]

Very recently, a security issue has been discovered in UseBB 1.0.10
with per forum and topic RSS feeds in combination with restricted
forum access permissions.

UseBB 1.0.10 uses the "view" forum permission to enable or disable per
forum and topic feeds. This way, if a forum has e.g. "view" set to
guests but "read" to members, a guest gets access to the contents of
the first posts through the forum feed and all the posts of a topic
through its topic feed. With expected behaviour, UseBB should instead
use the "read" permission setting to show or hide first posts'
contents in the forum feeds and the topic feeds in their entirety.

Anyone having a restricted "read" permission set but NOT an equal or
more restricted "view" one is prone to this issue and should either
disable per forum/topic feeds, adjust the "view" permission to be
equal to the "read" one or fix their UseBB setup.

Fixing UseBB 1.0.10 is done through uploading (overwriting) a new
rss.php or applying the patch. rss.php can be found in the top
directory of your UseBB setup.

* New rss.php: http://usebb.cvs.sourceforge.net/viewvc/usebb/UseBB/rss.php?revision=1.20
* Patch file: http://usebb.cvs.sourceforge.net/viewvc/usebb/UseBB/rss.php?r1=1.18&r2=1.20&view=patch

UseBB 1.0.11, including more changes and bug fixes to be released
after testing, will have this issue fixed as well.

For questions and support, please ask at http://www.usebb.net/community/.

Apologies for any inconvenience and thank you for your understanding.

UseBB Project
http://www.usebb.net

PS: If you encounter PHP (5.3) errors concerning deprecated functions,
this is a different (and harmless) issue that can be fixed easily too:
http://www.usebb.net/community/topic-post9792.html#post9792.

[UseBB-Announce] UseBB 1.0.10 released

[UseBB P. <co...@us...>]

The UseBB project releases UseBB 1.0.10, the tenth maintenance release
of the UseBB 1 light PHP 4 and MySQL bulletin board system.

This release fixes a quite important issue with possible infinite
loops on BBCode parsing making DoS attacks possible. It also includes
a major change in RSS feed generation, adding per forum and topic
feeds and fixing multiple problems with feed contents.

Ofcourse, several other smaller bug fixes and changes are included:

- Fixed bug #2367: SQL error on search sorted by author.
- Fixed bug with remembering guest auth settings on adding new forum.
- Mass email in board default language and only to unique email addresses.
- Personal emails now sent in correct (recipient's) language.
- ...

As always, upgrading is recommended. Any version less or equal to
1.0.9 is now unsupported. Visit http://www.usebb.net/downloads/ for
downloads. Information about upgrading is available in the
docs/index.html document.

[UseBB-Announce] UseBB 1.0.9 released

[UseBB T. <co...@us...>]

After eight months without a new release, here is UseBB "still alive" 
1.0.9. UseBB is a light and Open Source PHP/MySQL bulletin board package.

Version 1.0.9 fixes the bugs disovered since the release of 1.0.8 in 
September 2007, including:
- BBCode in links breaks XML well-formedness;
- RSS feed fails to validate;
- redirect URLs containing backslashes on some platforms (Windows);
- Jabber link on profile needs "xmpp" as protocol, not "jabber";
- made smiley image tags refer to the path using ROOT_PATH.

As always, upgrading is recommended. (All < 1.0.9 versions are 
officially unsupported as of today.) Visit 
http://www.usebb.net/downloads/ for downloads. Information about 
upgrading is available in the docs/index.html document.

-- 
Regards,
Dietrich Moerman
UseBB Developer
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.8 released

[UseBB T. <co...@us...>]

I am happy to announce version 1.0.8 of the light and Open Source 
PHP/MySQL bulletin board package "UseBB".

Version 1.0.8 is a minor security and bug fix release. The most 
important fix is for a few full path disclosure vulnerabilities reported 
by Ilia Alshanetsky. Upgrading is highly recommended. Visit 
http://www.usebb.net/downloads/ for downloads. Information about 
upgrading is available in the docs/index.html document.

One of the discovered vulnerabilities is the same one found in 1.0.5 and 
prior releases. The fix introduced in 1.0.6 turned out insufficient and 
the vulnerability appeared to come forward in another case as well. It 
does not pose a direct threat to the forum but may disclose sensitive 
information which may be abused by a user who has shell access to the 
server or can abuse another vulnerable application or script.

Thus, as always, it is highly advised to regularly check for and install 
updates of installed software. Nobody except the owner is responsible 
when a vulnerability in an outdated version of an application has been 
abused.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.7 "vulnerability"

[UseBB T. <co...@us...>]

Yesterday (July 20th, 2007), a post was made on the popular Bugtraq 
mailing list about a so-called vulnerability in UseBB 1.0.7. This 
vulnerability includes an insecure value of PHP's PHP_SELF variable 
being used in forms in three old upgrade scripts that can be exploited 
for an "XSS attack". However, unlike the report states, this 
vulnerability should be rated far from "dangerous".

The vulnerability is found in upgrade scripts which were used to upgrade 
a few old versions of UseBB, being 0.2.3, 0.3 and 0.4. The latter one 
was released almost 2.5 years ago. Second, this vulnerability poses zero 
security threats to an existing UseBB set-up. The only possible abuse of 
this vulnerability is through receiving a malformed URL (containing 
possibly dangerous JavaScript) to one of these update scripts. Chances 
anyone gets into this situation are very rare, unless you are still 
updating an unsupported 2.5 years old UseBB version and are receiving 
"help" from an abusive person.

As a resolution to this vulnerability, these three upgrade scripts have 
been removed from the source tree in CVS, since they were obviously no 
longer supported and possibly even not working anymore. If you have the 
install/ directory present in a publicly available forum, it is advised 
to remove it in any case, although the scripts should only cause SQL 
errors and perform no changes when used with an existing set-up.

I am not very satisfied by the way this vulnerability was made public. 
Next to it being rated "dangerous" without a valid reason, I have not 
been contacted about this vulnerability in advance to offer a resolution 
before the report was made public. I am very disappointed in the 
reporter (who calls himself "S4mi") and hope he/she understands the 
mistakes that were made.

Since this is not the first time we are plagued by partially false 
reports, we will start publishing our own security reports when 
necessary as of the release of UseBB 2.0.0.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.7 released

[UseBB T. <co...@us...>]

I am happy to announce version 1.0.7 of the light and Open Source 
PHP/MySQL bulletin board package "UseBB".

Version 1.0.7 is a minor feature enhancements and bug fix release. 
Changes include but are not limited to:
- added an (random math based or custom) anti-spam question feature 
against spam bots;
- added a security measure which generates a new session ID when logging 
in/out;
- fixed a few minor bugs found since version 1.0.6.

Upgrading is highly recommended. Visit http://www.usebb.net/downloads/ 
for downloads. Information about upgrading is available in the 
docs/index.html document.

This release also features a small gain in performance. 1.0.7 uses only 
92% of 1.0.6's and no more than half(!) of 1.0's processing time. In 
other words, 1.0.7 can serve twice as much requests in the same time 
span than version 1.0. Another reason to keep your UseBB version up to date.

In the mean time, 2.0's development continues, and to emphasize this 
upcoming switch to PHP 5.2 we have joined the Go PHP 5 campaign. This 
campaign was started by a group of PHP based Open Source projects - 
including Drupal, phpMyAdmin, Typo3 and Symfony - who have decided to 
make new developments PHP 5.2 based as of February 5th, 2008, hoping to 
speed up PHP 5 migration. (Please note, this date is NOT the release 
date of UseBB 2.0.) More information on this campaign can be found at 
http://gophp5.org.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.6 released

[UseBB T. <co...@us...>]

The UseBB Team is happy to announce version 1.0.6 of the light and Open 
Source PHP/MySQL bulletin board package "UseBB".

Version 1.0.6 is a minor security and bug fix release. Changes include 
but are not limited to:
- fixed a full path disclosure vulnerability;
- fixed a bug that posed problems when setting certain time zones;
- fixed more bugs in the SQL Toolbox and ACP Modules panes of the ACP.

Upgrading is highly recommended. Visit http://www.usebb.net/downloads/ 
for downloads. Information about upgrading is available in the 
docs/index.html document.

The discovered security vulnerability (full path disclosure) only occurs 
on PHP setups with register_globals enabled and certain GET or POST 
variables passed to the system, resulting into an error containing the 
script's full path on the web server. This vulnerability itself cannot 
be exploited directly, but the disclosed information may be abused by 
people with system access.

Thanks to Jesper Jurcenoks of netVigilance, Inc. for reporting this. 
Their security advisory can be found at 
http://www.netvigilance.com/advisory0016.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.5 released

[UseBB T. <co...@us...>]

The UseBB Team is happy to announce version 1.0.5 of the light and Open 
Source PHP/MySQL bulletin board package "UseBB".

Version 1.0.5 is a minor bug fix release. Changes include but are not 
limited to:
- various bugs fixed (including with MySQL 5, BBCode and Abyss);
- avatars are now resized when needed using JavaScript instead of always 
using HTML;
- topic view counts are now increased once per user's session;
- spam proof e-mail addresses now shown as HTML entities.

Upgrading is, as always, recommended. Visit 
http://www.usebb.net/downloads/ for downloads. Information about 
upgrading is available in the docs/index.html document.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.4 released

[UseBB T. <co...@us...>]

The UseBB Team is happy to announce version 1.0.4 of the light and Open
Source PHP/MySQL bulletin board package "UseBB".

Version 1.0.4 is a minor bug fix release. Changes include but are not
limited to:
- some minor bugs were fixed throughout the system;
- changes were applied to improve global performance, especially for
template parsing;
- mass email messages are now sent in chunks of 100 recipients;
- version checking is now also possible through the PHP cURL extension;
- small changes to improve usability on some parts.

Upgrading is, as always, recommended. Visit
http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document.

With this fourth bug fix release for the 1.0 branch, I also want to
comment on the code and database design of this fairly old system. I
would like to emphasise that throughout the "designing" and writing code
in 2004 and 2005 no tests on performance have ever been applied to the
1.0 codebase, neither were special measures taken to ensure the
performance. For example, no or less indexes were applied to the
database tables.

Even though some PHP optimisations have been applied in this release,
some design flaws remain in place, however they should not pose any
problems to small communities and in any case do not form any security
problems. We do not wish to fix these design and performance issues any
more but instead focus on developing UseBB 2.0, which will (should)
gradually replace existing UseBB 1 installations where possible.

What concerns 2.0's development, a new roadmap for the project in 2007
is available at http://usebb.sourceforge.net/roadmap.php. Note that 2.0
is a rewrite "from scratch" in PHP 5. As mentioned, we are working on
the system design and will (re)start developing code as soon as time
permits. A preview 1.99 release will be made available when most parts
of the base system are completed. Of course, as mentioned before we keep
releasing UseBB 1 bug fix releases in the mean time as long as we think
is necessary.

All what is left to say is: happy 2007 and enjoy your forum!

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.3 released

[UseBB T. <co...@us...>]

Another year has passed in the life of the UseBB Project, which is now 
officially 3 years old. We have taken this opportunity to release 
version 1.0.3 of the light and Open Source PHP/MySQL bulletin board 
package "UseBB".

Version 1.0.3 is a minor improvements and bug fix release. Changes 
include but are not limited to:
- added httpOnly cookies support for improved security (enabled by default);
- a few bugs fixed throughout the whole board, including for BBCode 
processing;
- some "strange things" were fixed (for example the ability to post with 
only BBCode tags and no text).

Upgrading is, as always, recommended. Visit 
http://www.usebb.net/downloads/ for downloads. Information about 
upgrading is available in the docs/index.html document.

With this release, we again like to thank all the people who supported 
us in the past year, and of course SourceForge.net for hosting downloads 
and CVS. In the past four months, they have processed another 5,000+ 
downloads, putting the UseBB 1 download counter at over 25,000 copies.

What concerns the ongoing 2.0 development progress, more info can be 
found at http://www.usebb.net/community/topic-1249.html and 
http://dietrich.wordpress.com/tag/usebb-2/. We still appreciate all 
requests, comments and critiques. What did you like about UseBB 1 and 
would like to see again or even improved in 2.0? What sucks in UseBB 1? 
Comments on internal workings and development are welcome as well. 
Please tell us on the forums!

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.2 released

[UseBB T. <co...@us...>]

The UseBB Team is happy to announce version 1.0.2 of the light and Open 
Source PHP/MySQL bulletin board package "UseBB".

Version 1.0.2 is a minor bug fix release. Changes include but are not 
limited to:
- Reply-To header support for emails (required on some hosts);
- security fix for the PHP Zend_Hash_Del_Key_Or_Index vulnerability;
- various bugs fixed throughout the whole board;
- limited performance improvements on topic view.

Upgrading is, as always, recommended. Visit 
http://www.usebb.net/downloads/ for downloads. Information about 
upgrading is available in the docs/index.html document.

The "PHP Zend_Hash_Del_Key_Or_Index vulnerability", also known as the 
"unset() vulnerability", is NOT a problem in UseBB itself but a weakness 
that existed in PHP until version 4.4.3 and 5.1.4. If you run a 
vulnerable PHP version, it is recommended to update UseBB. For more 
information, see 
http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html.

This release is also the first one to distribute new "changed files 
packages" containing only the changed files since the previous release. 
For more info, see the docs/index.html document.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0.1 released

[UseBB T. <co...@us...>]

The UseBB Team is happy to announce version 1.0.1 of the light and Open
Source PHP/MySQL bulletin board package "UseBB".

Version 1.0.1 is a minor bug fix release. Changes include but are not
limited to:
- fixed various bugs discovered since 1.0 final;
- minor enhancements to the search engine's results;
- default template is now also XHTML valid with new windows enabled.

Upgrading is, as always, recommended. Visit
http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document.

This is also the first release where we distribute a diff/patch file to
easily upgrade altered or modded versions of UseBB 1.0. There is also a
list of changed files in this release. See the docs/index.html file for
more info.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0 released

[UseBB T. <co...@us...>]

The UseBB Team is happy to announce the final version 1.0 of the light
and Open Source PHP/MySQL bulletin board package "UseBB".

This final version fixes a number of bugs found since 1.0 RC3, adds some
small feature enhancements and improvements to the default template.

Upgrading is, as always, recommended. Visit
http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document.

---

The UseBB Project has its roots in 2002 with the development of a
personal message board system "SBBS". A year later, the UseBB project
was founded on 22 October 2003. With the current release, we have
finally reached the stable 1.0 version we have been working on as long
as since February 2004. After over two years of development, we have
completed our goal to build a light, easy-to-use and safe Open Source
PHP/MySQL forum application for small communities.

However, our work does not end here. Since March 2005, we have been
planning our next version, 2.0, to incorporate advanced functionality
and an easier object oriented framework while retaining and even
increasing the simplicity of our product. UseBB 2.0, powered by PHP 5,
will be available at earliest in 2007, together with the launch of our
complete new website and community forum. For more information, check
out the development section at http://usebb.sourceforge.net/.

What concerns UseBB 1.0, we will keep releasing bug fix releases (1.0.x)
as long as there is a fair number of PHP 4 users to serve.

At this point, the only thing that rests for me to say is a big thank
you to all the people who helped us with reporting bugs, giving bug
fixes, bringing up new features and fresh ideas and of course all the
people who are using our product. Last but not least, thanks to
SourceForge.net for hosting file releases and CVS.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] UseBB 1.0 RC3 released

[UseBB T. <co...@us...>]

The UseBB Team is happy to announce version 1.0 RC3 of the light and
Open Source PHP/MySQL bulletin board package "UseBB".

Version 1.0 RC3 is the third release candidate of the completed version
1.0. Changes include but are not limited to:
- a few bug fixes throughout the board;
- possibility to easily disable the XHTML content-type.

Upgrading is, as always, recommended. Visit
http://www.usebb.net/downloads/ for downloads. Information about
upgrading is available in the docs/index.html document.

We would like people to test this version as much as possible, and to
report bugs to the community forums.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] Resources Website: UseBB Zone

[UseBB T. <co...@us...>]

Yesterday, a new unofficial UseBB resources website has opened its
doors. Thanks to Gaia, you can submit and download all the latest
modifications, templates, graphics, etc at UseBB Zone. They are also
still looking for valuable contributors to join the team. If you are
interested, see http://usebbzone.com/forums/topic.php?id=19.

http://usebbzone.com

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net

[UseBB-Announce] CVS services changes

[UseBB T. <co...@us...>]

Recently, our file/CVS host SourceForge.net migrated their CVS services
to new hardware/software. This change has its effect on the way CVS can
be accessed for our project. Details follow below.

Anonymous CVS access: the anoncvs host name changed from
cvs.sourceforge.net to usebb.cvs.sourceforge.net. If you download CVS
sources with the original CVS client or graphical clients such as
TortoiseCVS, please update it.
Web interface: the web interface using ViewCVS has been replaced by a
new and always updated ViewVC powered web interface. It can be accessed
at http://usebb.cvs.sourceforge.net/usebb/UseBB/.

Other CVS services (our CVS tarballs and mailing list) remain untouched
and working. For more info about CVS, see our CVS info page:
http://usebb.sourceforge.net/cvs/. Please note, this information only
applies to UseBB 1. UseBB 2 will be available on Subversion instead of CVS.

-- 
Regards,
Dietrich Moerman
UseBB Project Manager
http://www.usebb.net