FluxBB 1.4.1 released

Franz · 2010-07-21 22:23:05

We have just released FluxBB 1.4.1, our first maintenance release of our 1.4 branch. This fixes a few minor bugs as well a an XSS vulnerability in search.php. We also fixed a bug in viewtopic.php with SQLite that rendered the page unusable in some cases.

In detail, this release fixes:

XSS vulnerability in search.php
viewtopic.php unstable in SQLite
Update script incorrectly depending on a latin1 connection
Insufficient input validation in admin_users.php
Wrong post time in delete.php
CSS issue in Opera 10.6 and Chrome
Undefined index notice in post.php
New BBCodes were not removed from search words
Number of rows in database still showed all the rows in the database, not just the FluxBB-related ones
Notice error in plugin menu
Comment typo in example plugin
Problems censoring words containing non-latin characters

We also made some usability enhancements:

Only show censoring in moderator menu when moderators are privileged accordingly
Display the censoring status (enabled / disabled) on the censoring page for admins
Hide incompleted fields in profile page
Nicer error messages for signature length limit errors

Because we had planned more improvements for 1.4.1, which were postponed due to the security issue, there will be a 1.4.2 version fairly soon. This release will also address a bug in the update script that can cause problems if there are multiple users with very similar usernames. Do not forget to make backups of your files and, more importantly, your database, before any upgrade!
My personal recommendation for anybody who still hasn't updated their 1.2.* board is to wait for 1.4.2 so that the process of upgrading is simpler and only has to be done once.

There are no known security issues in FluxBB 1.2.22.

Note: There were some minor changes to the language files which means that all language packs other than the English one have to be updated.

As always, you can download the release on the downloads page. A patch file to simplify upgrading a modded installation of FluxBB can be found in the release folder.

hussam · 2010-07-21 23:07:14

Congrats on release

ehtime · 2010-07-22 03:26:55

Good job. Thanks!

Otomatic · 2010-07-22 08:28:59

Hello,

Good job ! Will we have a hdiff file ?

Last edited by Otomatic (2010-07-22 08:51:58)

adaur · 2010-07-22 08:50:25

Good job! But I'd like to know, like Otomatic, if we will have a hdiff or not... I worked a lot in FluxBB 1.4.0 and I must update my forum manually, but it is impossible for the moment .

daris · 2010-07-22 09:10:52

Do you mean this?

Otomatic · 2010-07-22 09:29:16

Hello,

Not a "patch" file but a hdiff like this that was here

http://fi.fluxbb.org/download/releases/1.2.22/hdiff/hdiff-fluxbb-1.2.21_to_fluxbb-1.2.22.html

That was a html file that see two parts
- 1 - On the left the old lines
- 2 - On the right the modified or added or suppressed lines with different colors

Because I don't know how (or with what ?) « read » and understand patch file.

Franz · 2010-07-22 09:30:22

I'll generate one for you in an hour or so.

adaur · 2010-07-22 09:31:30

Because I don't know how (or with what ?) « read » and understand patch file.

The patch only works with a Linux distribution, AND if the lines are not modified... Because it is based on the lines' number.

Franz wrote:

I'll generate one for you in an hour or so.

Thank you in advance !

Last edited by adaur (2010-07-22 09:33:10)

Franz · 2010-07-22 10:59:13

Ok, hdiff is uploaded to the release folder:
http://fluxbb.org/files/downloads/relea … 1.4.1.html

François · 2010-07-22 11:24:22

Thanks for the hdiff

Would it be possible to generate them for the every next releases ? Many people have modified board and used them to upgrade

Reines · 2010-07-22 11:26:07

Should be. We did have an automated release script which would package the releases then generate a patch and hdiff, though since moving to Git we haven't got around to rewriting it, so 1.4.0 and 1.4.1 have been packaged manually and I didn't think to do the hdiffs.

Franz · 2010-07-22 12:07:25

Yeah, I think I'll sit down to fix it before the release of 1.4.2. Creating the hdiff did help to find out a way...

Otomatic · 2010-07-22 13:24:50

Franz wrote:

Creating the hdiff did help to find out a way...

Thank you very much. Vielen Dank.

KzL31 · 2010-07-22 15:12:06

thx for the hdiff

Spiky · 2010-07-22 18:51:38

Hi,
A "error" in the hdiff because the page is iso 8859-1 by default:

fluxbb-1.4.1/admin_reports.php

63: $post_id = ($cur_report['pid'] != '') ? '<span>Ã‚Â» <a href="viewtopic.php?pid='.$cur_report['pid'].'#p'.$cur_report['pid'].'">Post #'.$cur_report['pid'].'</a></span>' : '<span>Ã‚Â» '.$lang_admin_reports['Deleted'].'</span>';

Last edited by Spiky (2010-07-22 18:57:32)

trakman · 2010-07-30 04:24:05

how does one upgrade using the patch files?
or would another way be to download and extract the new version on top of the old one and browse to the index and it will prompt for upgrade??

Franz · 2010-07-30 07:01:46

You are only supposed to update using the patch file, if you have a heavily modified board and don't want to reinstall all these modifications. Else it works just as you described.

If you have a modified board and just want to apply the changes by hand, take a look at the hdiff.

Reines · 2010-07-30 08:27:49

Spiky wrote:

A "error" in the hdiff because the page is iso 8859-1 by default

Actually it's whatever your browser defaults to, which in my case is UTF-8 You are right though, it should be specified. I'll see if I can modify the hdiff tool to do it.

Reines · 2010-07-31 15:24:39

Reines wrote:

Spiky wrote:
A "error" in the hdiff because the page is iso 8859-1 by default
Actually it's whatever your browser defaults to, which in my case is UTF-8 You are right though, it should be specified. I'll see if I can modify the hdiff tool to do it.

and done

Spiky · 2010-08-01 02:14:55

Reines wrote:

Reines wrote:
Spiky wrote:
A "error" in the hdiff because the page is iso 8859-1 by default
Actually it's whatever your browser defaults to, which in my case is UTF-8 You are right though, it should be specified. I'll see if I can modify the hdiff tool to do it.
and done

Thank you for the change.

Forums

#1 2010-07-21 22:23:05

FluxBB 1.4.1 released

#2 2010-07-21 23:07:14

Re: FluxBB 1.4.1 released

#3 2010-07-22 03:26:55

Re: FluxBB 1.4.1 released

#4 2010-07-22 08:28:59

Re: FluxBB 1.4.1 released

#5 2010-07-22 08:50:25

Re: FluxBB 1.4.1 released

#6 2010-07-22 09:10:52

Re: FluxBB 1.4.1 released

#7 2010-07-22 09:29:16

Re: FluxBB 1.4.1 released

#8 2010-07-22 09:30:22

Re: FluxBB 1.4.1 released

#9 2010-07-22 09:31:30

Re: FluxBB 1.4.1 released

#10 2010-07-22 10:59:13

Re: FluxBB 1.4.1 released

#11 2010-07-22 11:24:22

Re: FluxBB 1.4.1 released

#12 2010-07-22 11:26:07

Re: FluxBB 1.4.1 released

#13 2010-07-22 12:07:25

Re: FluxBB 1.4.1 released

#14 2010-07-22 13:24:50

Re: FluxBB 1.4.1 released

#15 2010-07-22 15:12:06

Re: FluxBB 1.4.1 released

#16 2010-07-22 18:51:38

Re: FluxBB 1.4.1 released

#17 2010-07-30 04:24:05

Re: FluxBB 1.4.1 released

#18 2010-07-30 07:01:46

Re: FluxBB 1.4.1 released

#19 2010-07-30 08:27:49

Re: FluxBB 1.4.1 released

#20 2010-07-31 15:24:39

Re: FluxBB 1.4.1 released

#21 2010-08-01 02:14:55

Re: FluxBB 1.4.1 released

Board footer