MyBB Community Forums

MyBB 1.0 PR2 Update (Rev: 686)
As an update to 1.0 PR2 and our ongoing effort to providing you with a stable discussion forum we're releasing an updated set of files to fix alot of the issues reported in PR2 along with some related security issues.

As of now the MyBB release has been updated on the MyBB site: http://www.mybboard.net

Upgrading Your Forums
If you're already running MyBB 1.0 PR2 (Not RC4) then simply download the attached zip archive and upload the contents to your board into their respective directories.

Please also see the note regarding template changes at the bottom of this post.

Changes/Bugs Fixed

• Fixed potential XSS (Cross Site Scripting) bug related to forumdisplay.php (Thanks to robokoder)
  
• Fixed potential SQL injection with birthdays and help documents (Thanks to Animal)
  
• Fixed issue where spiders were not correctly allocated to group and could therefore possibly have access to all forums with no permissions.
  
• #3550 Smilie display order not being saved
  
• #3617 Smilie 'get more' link not showing
  
• #3628 Smiles not being updated when modified
  
• #3623 Firefox using stored username/password in User Editor
  
• #3615 When importing a theme, if upload unsuccessful it gives unlink error
  
• #3581 The default board timezone is not correctly used for guests
  
• #3603 "Back to Top" link selects the logo
  
• #3590 Updating user in Admin CP causes last post username to be empty
  
• #3584 implode error on user profiles for invalid time spent online
  
• #3577 Upgrade from RC4 causes unknown reason column when banning a user
  
• #3554 Cookie domain setting no longer working
  
• A few other issues discovered internally or through our beta testers discussion forum
  

Changed Files
/

• forumdisplay.php
  
• newthread.php
  
• member.php
  
• private.php
  
• misc.php
  
• usercp.php
  
• rss.php
  

admin/

• admin/adminfunctions.php
  
• admin/global.php
  
• admin/smilies.php
  
• admin/themes.php
  
• admin/users.php
  

inc

• inc/class_session.php
  
• inc/functions.php
  
• inc/functions_upload.php
  
• inc/languages/english/admin/themes.lang.php
  

install/

• install/resources/mybb_theme.xml
  
• install/resources/mysql_db_inserts.php
  
• install/resources/upgrade3.php
  
• install/upgrade.php
  

Note: There have been minor template changes in this update: If you have modified your templates and can live without the small updates made feel free to carry on as you were before. We'll be providing a list of changed templates when we release 1.0.

If you wish to revert your templates download the attached "update-templates.php" which will recreate your templates based off the ones in install/resources/mybb_theme.xml (which must exist before running the script). [attached script will be back soon - for users who have downloaded it, please do not run it]