MyBB 1.2.3 Released

[Chris Boulton]

Happy Valentines Day!

And on this day full of love and happiness we're releasing an update to the MyBB 1.2 series. MyBB 1.2.3 is now available on the MyBB website and is a general maintenance release as well as a security update release that patches two recently discovered low-medium threat vulnerabilities.

Over 80 bugs were identified with MyBB 1.2.2 through bug report submissions, beta testing and internal analysis. These bugs have been fixed to provide a more stable version of MyBB for public use.

Information on upgrading, template changes and language changes can be found in the posts below. MyBB 1.1.x patches can also be found below.

If for some reason you cannot immediately update to this release:
We recommend applying the attached manual patch instructions for the two vulnerabilities found in MyBB 1.2.2. You should only consider this a temporary solution and make the effort to upgrade to 1.2.3 as soon as possible.

To patch your 1.2.2 to fix these vulnerabilities please follow the following instructions:

  mybb_122_sql_xss_fix.txt (Size: 1.25 KB / Downloads: 1,910)

[Chris Boulton]

Upgrading from the 1.2 series
When upgrading from 1.2, you will not lose any custom themes, plugins or language packs which you may have installed.

Before you attempt to upgrade, ensure you have a database backup and a copy of the files currently in use on your board. This is so you can revert back to your earlier version if you need to or something goes horribly wrong with the upgrade process.

Follow the general [Wiki: Upgrading] (Broken link, head over to docs.mybb.com instead) guide outlined on the MyBB Wiki to complete the upgrade process. You may download a ZIP archive of changed files here:

  mybb_123_changed_files.zip (Size: 396.17 KB / Downloads: 2,588)

(Don't forget to also run the upgrader)

You must then check for modified templates using the instructions in the next post.

Upgrading from other versions
If you are upgrading from a version earlier than 1.2 then you will lose your custom themes, templates and language packs due to the number of changes between your version and the 1.2 series.

Before you attempt to upgrade, ensure you have a database backup and a copy of the files currently in use on your board. This is so you can revert back to your earlier version if you need to or something goes horribly wrong with the upgrade process.

Follow the general [Wiki: Upgrading] (Broken link, head over to docs.mybb.com instead) guide outlined on the MyBB Wiki to complete the upgrade process.

Changed files since MyBB 1.2.2

• admin/
  • adminoptions.php
    
  • dbtools.php
    
  • forums.php
    
  • global.php
    
  • index.php
    
  • maintenance.php
    
  • settings.php
    
  • templates.php
    
  • usergroups.php
    
  • users.php
    
• archive/
  • global.php
    
• inc/
  • datahandlers/
    • post.php
      
    • user.php
      
  • languages/
    • english.php
      
    • english/
      • admin/
        • dbtools.lang.php
          
        • templates.lang.php
          
      • online.lang.php
        
      • usercp.lang.php
        
  • class_core.php
    
  • class_datacache.php
    
  • class_feedgeneration.php
    
  • class_moderation.php
    
  • class_parser.php
    
  • class_session.php
    
  • class_templates.php
    
  • db_mysql.php
    
  • db_mysqli.php
    
  • functions.php
    
  • functions_upload.php
    
  • functions_user.php
    
• install
  • resources/
    • language.lang.php
      
    • mybb_theme.xml
      
    • mysql_db_tables.php
      
    • settings.xml
      
    • upgrade7.php
      
    • upgrade8.php
      
  • index.php
    
  • upgrade.php
    
• jscripts/
  • editor.js
    
  • inline_edit.js
    
• calendar.php
  
• captcha.php
  
• editpost.php
  
• forumdisplay.php
  
• global.php
  
• managegroup.php
  
• member.php
  
• misc.php
  
• newreply.php
  
• newthread.php
  
• online.php
  
• portal.php
  
• private.php
  
• report.php
  
• reputation.php
  
• showteam.php
  
• showthread.php
  
• syndication.php
  
• usercp.php
  
• xmlhttp.php
  

[Chris Boulton]

Theme and template changes
Using the "Find Updated" link under the "Templates" section in the Admin CP you can find a list of the templates that have changed in this release that you've got one or more custom copies of.

After identifying changed templates using the tool you can either revert your custom template to the default (delete it) or use the "diff" tool to perform a difference analysis on your custom template and the default.

Since MyBB 1.2.2 the following templates have been changed. "Revert required" indicates that for this template to work correctly with MyBB 1.2.3 you'll either need to revert it to the default or modify your custom template to include the changes in the default. If a revert is not required your custom version of the template should work perfectly fine.

• header
  
• header_welcomeblock_member
  
• headerinclude
  
• index_loginform - Revert Required
  
• member_register_agreement - Revert Required
  
• misc_smilies_popup_smilie - Revert Required
  
• report_error
  
• reputation_vote
  
• portal_announcement - Revert Required
  
• usercp_avatar_gallery - Revert Required
  

Language packs changes
Since MyBB 1.2.2 the following language files have had changes to them:

• admin/dbtools.lang.php
  
• admin/templates.lang.php
  
• online.lang.php
  
• usercp.lang.php
  

Either update your language packs to include the changes in these files or revert to the standard English language pack.

Plugins
Your MyBB 1.2.x plugins will work correctly with 1.2.3 without any updates.

[Chris Boulton]

MyBB 1.1.8 Patch
This patch is only for users running MyBB 1.1.8 or any release of the MyBB 1.1 series.

Please download "mybb_181_sql_xss_patch_14022007.txt" attached to this post and follow the manual patching instructions.

Please note all users of the 1.1.x series are urged to upgrade to the latest release of MyBB (1.2.3) as support for 1.1.8 is soon to end.


  mybb_118_sql_xss_fix_20070214.txt (Size: 1.25 KB / Downloads: 869)

[Chris Boulton]

Discuss this announcement

[Dennis Tsang]

Please note when you upgrade from 1.2.x series, you need to run the upgrader script (install/upgrade.php). Apparently we didn't make that clear enough.