New patch for Yse 1.5.5

[Jeff Lewis]

We have been notified of a small hole in YSE and as a result we have posted a patch on the downloads page.

There are two options to correct this. You can use BoardMOD to install the mod file or you can replace the default Post.php and ModifyMessage.php with the version in the download.

A special thanks to our Spanish users for this notification.

A direct link is: http://www.yabbse.org/1_5_5_b_patch.zip

Also, a reminder that this site will close down March 31st and users are encouraged to convert to our new project located at http://www.simplemachines.org where all of our development efforts have been focused on for some time now.

[7summits]

Hey Jeff,

I could not find

Code Select Expand

$quotemsg = $quote;
in post.php
just

Code Select Expand

      $quotemsg = empty($quote) ? '' : (int) $quote;


is that what you meant to past the new code before?

Thanks,
7summits

[Jeff Lewis]

Ugh sorry, I got a bit overzealous there. I posted the existing patch in this new one. I have updated the download and only ModifyMessage.zip needs to be changed if you've already installed the previous patch.

[lbyard]

I am a bit confused...  I downloaded what was at the link in your first post.  It has ModifyMessage.php in it.  You mention Post.php  and a previous patch?  Larry

[TerjeViken]

I have replace the default ModifyMessage.php with the ModifyMessage.php. Then I got this msg with the versjon test:

"The most recent version of ModifyMessage.php is YaBB SE 1.5.4 while your version is YaBB SE 1.5.5b."

I hope its correct done..

regard and thanks from
Terje

[Winters]

Same here, so I'm guessing it's alright and the Version check has got it wrong...

Hey Jeff, thanks for the patch. I did it manually. Just a notice, my Board mod kept searching for ModifyMessage.php in the root directory, not in Sources.

[Jeff Lewis]

That is correct the version check is wrong.

While we're trying to keep patches out, the development time just isn't being devoted to YSE anymore since it's closing down. Therefore, the version checker is out of whack, our apologies.

[Ayeka]

...Also, a reminder that this site will close down March 31st and users are encouraged to convert to our new project located at http://www.simplemachines.org where all of our development efforts have been focused on for some time now.

I have a silly question:  How are we supposed to convert when SMF hasn't even been released to the general public yet?  Or will it be released before March 31st?

[Jeff Lewis]

Naturally one would think it would be released before that date.

Unknown just updated my largest site to it this week.

http://www.tmlfans.ca/forums

Basically, thre will be an alternative before YSE closes down.

[MagstaBanane]

i hope there will be a non-beta version and charter membership will not be required to download...?

[Peter Duggan]

To answer these questions for the umpteenth time:

1. Of course there'll be a non-beta version sometime.
2. Charter membership will not be required to download the *public* beta.
3. The public beta should be released before this site closes.
4. No final version can be released till the public beta and release candidates have been properly tested.

[[Unknown]]

i hope there will be a non-beta version and charter membership will not be required to download...?

There are numerous topics stating that this will be the case.

-[Unknown]

[homie]

So whats the estimate of SMF being released to regular members

[BusteD]

there seem to b a new vuln in the yaBBSE,
can u guys patch it,
it seems pretty serious

I have seen some other guys providing a patch,

[Jeff Lewis]

We patched any known ones to us...if you know of another, PM one of the admin/developers.