PhpBB 2.0.15 Released. Critical Update!

[Redleg]

phpBB 2.0.15 has been released, and it includes a critical update!

Here's the critical bug fix:

In includes/bbcode.php

Find:

{ 
   global $lang, $bbcode_tpl;

After, add:

   $text = preg_replace('#(script|about|applet|activex|chrome):#is', "\\1:", $text);

Find:

 */ 
function make_clickable($text) 
{

After, Add:

   $text = preg_replace('#(script|about|applet|activex|chrome):#is', "\\1:", $text);

More info about the rest of the changes in here:
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=288194

And changes for modded boards here:
http://www.phpbb.com/phpBB/viewtopic.php?t=288165

 

[hotrod12]

Thanks for sharing. Hopefuly their olympus release will prevent them from having to release security fixes every month.

 

[se]

thanx for the update

 

[alegend]

thanks for sharing :tu:

 

[G_Gekko]

good to know

 

[StudioWorks]

Thank you - I dont use phpBB but it's great to have people like you on the boards to keep us informed. Added to reputation

 

[subnet_rx]

yep, getting tired of these monthly updates. It's definitely hard on boards that have a lot of mods. Thanks for the heads up.

 

[StudioWorks]

Well you can always buy a professional forum .. if you can aford it :D

:wave:

 

[df-sean]

Anyone using and older version of phpBB should really upgrade right now! I've seen several phpBB boards get hacked lately -- this is probably one of the most critical upgrades ever for phpBB.

 

[hotrod12]

Yeah they had an important bb code fix that they posted in the announcement on their forum but it is always best to upgrade as soon as you can.