YaBB SE 1.5.2

[David]

Added the updated files this morning in safe mode.

Perhaps not too soon - my Chronicles site was hacked about an hour later.

The hacker appears just to have replaced my homepage index.php file with the hacker's own index.html file. The forum was untouched.

I guess that means my Chronicles site must be important, now?  

Thanks for the update folks - suddenly had a wake-up call on the issue of internet security.

If you are willing I would be interested in looking at your apache logs. [email protected]

[I, Brian]

What are the chances it was a hole in one of the YaBB scripts that let the hacker through?

[David]

What are the chances it was a hole in one of the YaBB scripts that let the hacker through?

If you were running 1.5.2 then there are no known security holes in YaBBSE.  Also sounds like some script kiddie who wouldn't go out on a limb to pour over the code and find a hole.  Ultimitly the access logs will tell you what happened.

[I, Brian]

CPanel seems screwed this morning - cannot back-up forum databse.

I'll e-mail what log I have, but I'm not sure if it's a valid file. After all, if I cannot access my db files.

[adams]

If I upgrade from 1.5.0 to 1.5.2 will my 1.5.0 still be able to use the database? I've done some mods to the yabbse code and would want to make sure I got 1.5.2 running smoothly before doing the change over....

Perhaps its best if I make a backup of the database first....

[I, Brian]

I'm getting errors in my log of "/yabbse/index.htm" and
"yabbse/index.html".

It appears to be in my own IP range, so I'm wondering if there's a command somewhere in the updated files trying to open the wrong file name?  


[EDIT - the issue about the military base is solved - someone on WebhostingTalk.com testing for vulnerabilities after I was hacked - thread here.

[David]

If I upgrade from 1.5.0 to 1.5.2 will my 1.5.0 still be able to use the database? I've done some mods to the yabbse code and would want to make sure I got 1.5.2 running smoothly before doing the change over....

Perhaps its best if I make a backup of the database first....

Yes, ALWAYS backup first.

I think you can use the upgrade package to go from 1.5.0 to 1.5.2.  If not then first upgrade to 1.5.1.

[malmklang]

This is sooo tiresome!!
Every update/upgrade/whatever I make, I have to manually go through all sources to remove 100s of <font size="2"> and such.
After all, that's what this "new" thing out there is for, css !!
Where can I get a complete mod package, listing all changes that needs to be made to all sources?
I wanna do this update/upgrade manually so that I don't have to do the font thing all over again.
It's not just font size="2", its also font size=\"2\" and so on... rather hard to use search and replace to get rid of all these things, while also removing the closing font tags too, I wanna keep the closing font tags that must be there, but loose those in regards to those size attributs I'm losing.

Oh, this is my only complaint, and it might even seem small to many of you
Otherwise this is a great forum software and a great community

[Gobalopper]

Don't worry next release will fix all that.

[Spaceman-Spiff]

Added the updated files this morning in safe mode.

Perhaps not too soon - my Chronicles site was hacked about an hour later.

The hacker appears just to have replaced my homepage index.php file with the hacker's own index.html file. The forum was untouched.

I guess that means my Chronicles site must be important, now?  

Thanks for the update folks - suddenly had a wake-up call on the issue of internet security.

what does that index.html say?
something like this?

[Jay1025]

Please I would like to get current..could someone please tell me what updates I have to do to get current on 1.5.2?  What updates and in what order...I love the product have been using it for only 2 weeks.

[Douglas]

Okay, get the 1.5.1 update (NOT the upgrade) version and run that, then get the 1.5.2 update (NOT the upgrade) version and run that.  You should be all set.  If you need any more help, post in the Installation Help folder or feel free to PM me.  

You can find both of these versions in the forum listing right above this page (News From the YaBB SE Team).

[Owdy]

This is sooo tiresome!!
Every update/upgrade/whatever I make, I have to manually go through all sources to remove 100s of <font size="2"> and such.
After all, that's what this "new" thing out there is for, css !!
Where can I get a complete mod package, listing all changes that needs to be made to all sources?
I wanna do this update/upgrade manually so that I don't have to do the font thing all over again.
It's not just font size="2", its also font size=\"2\" and so on... rather hard to use search and replace to get rid of all these things, while also removing the closing font tags too, I wanna keep the closing font tags that must be there, but loose those in regards to those size attributs I'm losing.

I agree. html and php files should be in differend files, not mixed.... Somekind "html-template" system or something

[Douglas]

Don't worry next release will fix all that.

 ::applauds::

Oh, and don't ask when, folks, Trinity will be done when it's done.  ::grins::

[Spaceman-Spiff]

I agree. html and php files should be in differend files, not mixed.... Somekind "html-template" system or something

just wait for TSP, it kicks ass