phpBB 2.0.11 released - Critical update

[admin]

All users using old version of phpBB must upgrade to new version of phpBB.

We've have had and continue to receive reports based on a bugtraq email submitted by the "howdark.com" group. Please do not report these issues to us, not by PM, email nor via our security tracker.

The two "sql injection" issues are not sql injection issues, nothing can be done with them at all due to type casting (strings are forced to an integer type). The group admit this themselves but persist in claiming they are sql injection issues. The "solution" they give contains semantically incorrect SQL (you do not enclose values for integer field types in quotes).

For more info, visit

http://www.howdark.com

Download new version of phpBB at

http://www.phpbb.com/downloads.php

[emptyspace]

dear admin... what about BBtoNuke... how can I update it?

anyway.. can you please provide step by step update phpbb from 2.0.10 to 2.0.11

[DDLForce]

Upgrade from previous stable (released) versions of phpBB 2

If you are currently using a stable release of phpBB 2 updating to this version is straightforward. You would have downloaded one of three packages and your choice determines what you need to do. Please Note: That before upgrading we heavily recommend you do a full backup of your database and existing phpBB2 source files! If you are unsure how to achieve this please ask your hosting provider for advice.

MySQL Users Please Note: Changes introduced in 2.0.4 may increase the size of your database, more specifically the search_wordmatch table. There are other changes in that release which are designed to reduce the database size. However these additional changes may not apply to all types of forum (particularly non-English boards). While any increases will be relatively small compared to the overall database size it may be an issue for some users. In particular users on hosting plans which limit database size and where the database is near that limit.


Full package

If you have downloaded the full package you should follow the same general upgrade path as for "Upgrade from previous Release Candidate versions of phpBB 2". The exception to this being the need to switch or update styles. In addition there is generally little need to visit the admin panel (though it is adviseable).


Changed files only

This package contains a number of archives, each contains the files changed from a given release to 2.0.11. You should select the appropriate archive for your current version, e.g. if you currently have 2.0.10 you should select the phpBB-2.0.10_to_2.0.11.zip/tar.gz file.

The directory structure has been preserved enabling you (if you wish) to simply upload the contents of the archive to the appropriate location on your server, i.e. simply overwrite the existing files with the new versions. Do not forget that if you have installed any Mods these files will overwrite the originals possibly destroying them in the process. You will need to re-add Mods to any affected file before uploading.

As for the other upgrade procedures you should run install/update_to_210.php after you have finished updating the files. This will update your database schema and data (if appropriate) and increment the version number.


Patch file

The patch file is probably the best solution for those with many Mods or other changes who do not want to re-add them back to all the changed files. To use this you will need command line access to a standard UNIX type patch application.

A number of patch files are provided to allow you to upgrade from previous stable releases. Select the correct patch, e.g. if your current version is 2.0.10 you need the phpBB-2.0.10_to_2.0.11.patch. Place the correct patch in the parent directory containing the phpBB 2 core files (i.e. index.php, viewforum.php, etc.). With this done you should run the following command: patch -cl -d [PHPBB DIRECTORY] -p1 < [PATCH NAME] (where PHPBB DIRECTORY is the directory name your phpBB Installation resides in, for example phpBB2, and where PATCH NAME is the relevant filename of the selected patch file). This should complete quickly, hopefully without any HUNK FAILED comments.

If you do get failures you should look at using the Changed files only package to replace the files which failed to patch, please note that you will need to manually re-add any Mods to these particular files. Alternatively if you know how you can examine the .rej files to determine what failed where and make manual adjustments to the relevant source.

You should of course delete the patch file (or files) after use. As for the other upgrade procedures you should run install/update_to_210.php after you have finished updating the files. This will update your database schema and data (if appropriate) and increment the version number.

Get ChangedFiles here

http://puzzle.dl.sourceforge.net/sourceforge/phpbb/phpBB-2.0.11-files.zip

Get PatchFiles here

http://puzzle.dl.sourceforge.net/sourceforge/phpbb/phpBB-2.0.11-patch.zip

[elliot]

Thanks. Its new now!

[mypebypeidelt]

christian louboutin shoes cheap Rather amusing information Certainly. I agree with told all above. Let's discuss this question. I join. And I have faced it. Let's discuss this question. Here or in PM. Christian Louboutin Sandals sale Who to you it has told? Willingly I accept. In my opinion it is actual, I will take part in discussion. Quite right! It is excellent idea. It is ready to support you. What charming question Christian Louboutin 1:1 Grade Women's Leather Flat Shoes

[NoimbAccinc]

discount louis vuitton handbags It is interesting. Prompt, where I can read about it? I think, that you are not right. Let's discuss. Write to me in PM, we will communicate. I apologise, but, in my opinion, you are not right. I am assured. Monogram Petit Bucket How will order to understand? It agree, very good information It has no analogues? I better, perhaps, shall keep silent Louis Vuitton 1:1 Grade Epi Leather Pouchette - Peachblow