1.5.1 Final Is Out!

[firewired]

Upgraded and it was a painless experience. Now that we've been online for several days, we've started receiving complaints from members who are getting logged out automatically. I turned on the cookie mod but that seems to have had no effect. Clearing cookies worked for some members but others claim that nothing's changed. Any suggestions?

[I, Brian]

Clearing cookies certainly seems like a good idea - I've just installed and found that I can log on as 2 IDs simulataneously! (thought I'd better test member functions).

If I remember right, this was a constant bugbear in the beta stages - the solution involves the actual path name being carefully stated in the Settings.php. In other words, http://www.domainname.com rather than http://domainname.com, or vice versa, according to how your forum is linked. The cookies didn't like both formats being used.

Hm, hope I'm not commenting too far over my head.

[[Unknown]]

Please post in the Other Help board if you have any cookie problems..

I, Brian, your attachments directory is not set properly in Installed 'Mods' Settings and Options.

-[Unknown]

[Gere]

Some of my users complain that YaBBC buttons do not work and that the new pic is displayed with threads they have already read.
What could be wrong?

[David]

Some of my users complain that YaBBC buttons do not work and that the new pic is displayed with threads they have already read.
What could be wrong?

Make sure ubbc.js is uploaded in ASCII.

[I, Brian]

Ah - thanks for that. I hadn't set up the absolute path:

/home/ID/public_html/yabbse/attachments

It's always the little details I trip over with.

Firewired - I just had someone report the same problem, but then I realised that I hadn't changed the cookie name. Figure that must have sorted it. Any use?

[Dataforce]

when upgrading, will mods installed be lost ?

I'm guessing so yes ?

[[Unknown]]

when upgrading, will mods installed be lost ?

I'm guessing so yes ?

Yes, all mod installations will be lost.

-[Unknown]

[MI_Fred]

Yo. Thanks for a new version, sorta. I am the kind that integrates yabb on his site and then gets some work to do after another new version... well, was it wise to change the password encryption and cookie serialization and was there any reason at all? MD5 might be stronger sure, with that I can live with. But with the cookie, ouch.  

I have several files using the old RC type login, with the members name serialized in instead of his id. It's not encouraging to do this switching all the time. I chose YaBB in the first place since php-nuke handles too much of the work and leaves little for the web designer, phpBB itself is sluggish... sigh. You are a pain  

In advance, can you give me a hint which of the above will change into what the next time around?  

[David]

In advance, can you give me a hint which of the above will change into what the next time around?  

Next version is Trinity which is a complete rewrite so who knows what exactly will change.

[[Unknown]]

As a patch, you could use a query to get the membername.... that is:
SELECT memberName FROM yabbse_members WHERE ID_MEMBER=$cookiedID LIMIT 1;

The reason for the ID is partly because using it means that even if a hacker gets your cookie, there isn't a whole mess of things he could do with it.... unless he knew your ID_MEMBER.... and it's much harder that way.  (and since these are script kiddies, mostly.....)

Using the ID_MEMBER is also safer and better.  It should kill any "getting logged in as other user" problems, as well as make YaBB SE faster.  Don't forget - using a query on the ID_MEMBER is much faster than the memberName.

-[Unknown]

[MI_Fred]

Ooh, Trinity, sounds exciting. Ok obviously it would be hard to adapt to that.

And for the patch, that's what I came up with too. There's just a few lines in the script which confuse, as it is not mine. I mostly learn from others work   I might seek for help.

Yeah, them kiddies. I do acknowledge that. I even didn't insert my site addy here when I registered some time ago... but still the next day our "mother"site got hacked with a mailbomb script attached to a post. Gone are the days of free attaching unfortunately (and the civilian clothes of that hacker for an undetermined time  ). It was just spooky.  

Thanks anyho.

[Swatdog]

Ooh, Trinity, sounds exciting. Ok obviously it would be hard to adapt to that.

And for the patch, that's what I came up with too. There's just a few lines in the script which confuse, as it is not mine. I mostly learn from others work   I might seek for help.

Oh, crap... Freddy here we go.

Yeah, them kiddies. I do acknowledge that. I even didn't insert my site addy here when I registered some time ago... but still the next day our "mother"site got hacked with a mailbomb script attached to a post. Gone are the days of free attaching unfortunately (and the civilian clothes of that hacker for an undetermined time  ). It was just spooky.  

Thanks anyho.

Yep. Very true. Hackers should really die for hacking. Or atleast be put in jail with 'no bail' for a 20-30 years.

[Jumpydude]

  Okay, help needed  I downloaded the 1.51 upgrade zip file since I have 1.50 currently installed.  I did everything exactly as the install readme says except for some reason the zip file didn't have a settings.php file etc.  Not sure if this may be the problem.  The upgrade.php worked fine with the settings.php that was on the board.
 My problem is that I can log in to the board but the second I try to do anything ie. profile or especially admin, it will say i don't have access and at the top, I am a Guest.  Apparently logging me off.  Any help would be greatly appreciated

[[Unknown]]

 Okay, help needed  I downloaded the 1.51 upgrade zip file since I have 1.50 currently installed.  I did everything exactly as the install readme says except for some reason the zip file didn't have a settings.php file etc.  Not sure if this may be the problem.  The upgrade.php worked fine with the settings.php that was on the board.
 My problem is that I can log in to the board but the second I try to do anything ie. profile or especially admin, it will say i don't have access and at the top, I am a Guest.  Apparently logging me off.  Any help would be greatly appreciated

Please:
- post further support requests in the support boards.
- provide a link and version numbers.  (PHP, MySQL, etc.)
- check your Settings.php.  Make sure it has a line that starts with $cookiename.

-[Unknown]