It is my pleasure to announce the long-awaited release of FluxBB version 1.5.8.
Security fix
This release fixes a minor security issue in install.php. The installer could be tricked into loading and executing any file named install.php. Abuse of this vulnerability could have only been possible in combination with other security issues that would have allowed an attacker to create files with that name.
If you want to stay on the safe side no matter what, just delete your install.php file by hand or do it from the admin panel after the upgrade.
Anti-spam addons
As a special present, we made it super-easy to install anti-spam modifications by providing a few hooks where these modifications can hook into. All you will need to do to install this new generation of anti-spam tools is to copy one or two files into certain folders of your FluxBB installation. We hope this change encourages the community to create a broad range of more diverse antispam tools, so that spammers will hit unpredictable obstacles when targetting FluxBB. As an example, I have created a modification that adds Google's new reCAPTCHA system to your registration page. Expect more documentation in the next days.
Other highlights
The new version also brings some security hardening, fine-tuning, several small features and usability improvements to your forum. Here's a list of the highlights:
Everything else can be found in the full changelog.
I am very grateful for the following community members due to their help and support in getting this version ready: adaur, altjo, Askelon, chris98, GeonoTron2000, jmleroux, Pierre, quy, seven, Studio384, Visman and 123.
Also, a big thanks to the High-Tech Bridge Security Research Lab for their responsible cooperation in getting the vulnerability fixed.
So, go ahead and download the new version on the downloads page. You can find patches on the upgrade page. As always, don't forget to make a backup of both your files and your database before the upgrade.
Thank you for using FluxBB!
