Unclassified NewsBoard News

News: 2009-09-20

Sun, 20 Sep 2009 12:00:00

A complete features list is now available.

Changelog: 2009-08-08

Sat, 08 Aug 2009 12:00:00

Updated clientinfo.lib.php with more current browsers and operating systems

News: 2009-06-06

Sat, 06 Jun 2009 12:00:00

Today’s update features a few security fixes that have recently been published on the web. It is highly recommended to upgrade to this version as soon as possible. Changes »

Changelog: 2009-06-06

Sat, 06 Jun 2009 12:00:00

This update features a few security fixes that have recently been published on the web. It is highly recommended to upgrade to this version as soon as possible. You may however not be affected by some of the bugs depending on your server configuration.
Improved protection against register_globals hacks in common.lib.php
Fixed a file disclosure bug in rss.inc.php
Fixed a local file inclusion bug in the template runtime library
Fixed an SQL injection bug in the database library
Many thanks to the nice person who pointed me to the report. Not so many thanks to the person who published those findings without notifying me first. (At least his description was very helpful.)

Changelog: 2009-04-02

Thu, 02 Apr 2009 12:00:00

Fixed a bug in register.inc.php with immediate validation.

Changelog: 2009-03-01

Sun, 01 Mar 2009 12:00:00

~~Fixed PHP-generated JavaScript files in the design directory (specified correct content type and allowed expiration and transfer compression)~~
Removed .php extension from design JavaScript files so that they’re no longer processed through PHP, which wasn’t really necessary anyway. (See forum thread) Warning: This may have impact on custom designs which should be updated accordingly. Often renaming the files in the js/ subdirectory from *.js.php to *.js is sufficient.
Fixed a bug in Apache rewrite rules (See forum thread)
Fixed e-mail address validation (See forum thread)
Using board’s timezone configuration for log entries (See forum thread)

Changelog: 2009-02-15

Sun, 15 Feb 2009 12:00:00

Unrecognised dependency of the PHP calendar extension removed. (See forum thread)

Changelog: 2008-11-22

Sat, 22 Nov 2008 12:00:00

A warning message is displayed when you’re editing another user’s post. Warning: Translation file “posteditor” has been updated. Template file “posteditor” has been updated. (See forum thread)
The board-wide message informing about an active board lock that is always displayed after a clean installation of the system, now points directly down to the relevant option in its link. Warning: Template file “controlpanel_security” has been updated. If you won’t update this, the link only points to the page and not to the option, so nothing will change. Anyway, if you’ve already installed the board, you’re likely to know where that option is so this may not be too interesting for you.
Changed link icon tooltip in the forums list from “Add new forum” to “Add new subforum” in de and en translations. Warning: Translation file “common” has been updated. Minor change though, small usability issue.
Added a note in the text of a registration confirmation e-mail to make clearer that the link should only be clicked if the recipient has registered on this forum, to avoid misuse. Warning: Translation file “mail” has been updated. Minor change though, irrelevant for normal operation.

Changelog: 2008-08-04

Mon, 04 Aug 2008 12:00:00

When a user changes his e-mail address, it is required to be validated before it can be used to send messages to. Until then, the last validated address is used. (It currently brings one issue though: A user is normally banned by revoking the “Members” group membership. By changing the e-mail address and following the validation, this group is automatically added again. Banning users is thus less effective...) Warning: Translation file “controlpanel” has been updated. Template file “controlpanel_account” has been updated. The database schema will be upgraded by the install script.

Changelog: 2008-07-31

Thu, 31 Jul 2008 12:00:00

Fixed a PHP warning in clientinfo.lib.php line 123

Changelog: 2008-07-06

Sun, 06 Jul 2008 12:00:00

Fix: Users could not be renamed by only changing the character casing in their name, this would trigger the “name is already used” error message.

Changelog: 2008-06-21

Sat, 21 Jun 2008 12:00:00

Added configuration option “url_overview” which can be set to be used for the short URL link to the overview page (default is “forum”). See the UnbLink function for details. You need to alter the .htaccess file to use another short URL for that page!

Changelog: 2008-05-31

Sat, 31 May 2008 12:00:00

Fix: When following a link from Google with a search query with multiple subsequent space characters, the search term highlighting in ABBC had locked up the process. In that case, the web server was busy for PHP’s maximum execution time and the client didn’t get to see the forum page. The fix was only a single line in abbc.lib.php.

Changelog: 2008-03-12

Wed, 12 Mar 2008 12:00:00

Jabber plain authentication doesn’t require SSL anymore. (See forum thread)

Changelog: 2008-03-07

Fri, 07 Mar 2008 12:00:00

Added option “default_users_sort” to select a default user list sorting. Possible values are currently: id, name, regdate, location, posts (See forum posting)

Changelog: 2008-03-05

Wed, 05 Mar 2008 12:00:00

Titied up a bit the forumlist.html template. Warning: Template file “forumlist.html” has been updated. Without these changes, the forum advanced options may be missing.
Added template parameters: isOwn and isHot (See forum thread)
Fixed incorrect icon title naming (See forum thread)

Changelog: 2008-03-02

Sun, 02 Mar 2008 12:00:00

Fixed double urlencode() for users’ location link (See forum thread)
Changed default user location lookup link from Map24 to Google Maps. This doesn’t affect update installations. The new link is “http://maps.google.com/maps?q=%s”.

Changelog: 2008-02-29

Fri, 29 Feb 2008 12:00:00

Added the session URL key as a requirement to add or edit postings or announcements. This is the first of a series of Cross-Site Request Forgery countermeasures that were bugging me on one of my forums. Warning: Template files “posteditor.html” and “postlist.html” have been updated. Without these changes, nobody can submit postings or announcements anymore! Watch out for the added in the forms.
Added a HTTP Referer header check for each form handler that requires a URL key to be present. This is also a CSRF countermeasure and about any security you can get about it. The referer is only compared against the domain and only if it is present at all. (Some network or privacy filters may remove that header from HTTP requests so that this kind of attack cannot be detected.)

Changelog: 2008-02-15

Fri, 15 Feb 2008 12:00:00

Fixed a minor bug with cookie paths that was introduced in 2008-02-03’s new cookie path code. Only relevant if your board is running on the domain’s root directory, not in a subdirectory, and you haven’t set a cookie path in your board configuration. (See forum thread) – Only session.lib.php file changed.

Changelog: 2008-02-03

Sun, 03 Feb 2008 12:00:00

Added configuration option ‘cookie_path’ to specify the path to be used for session and auto-login cookies set through UNB. This now defaults to the URL path of the UNB installation. (See forum thread)
Added special search link “open topics” that finds all topics that are not closed. (See forum thread) Warning: Translation file “search” has been updated. (Older translations won’t show the new link, but it still works e.g. for bookmarks.)
Cleaned up some markup. (See forum thread) Warning: Template file “announcelist.html” has been updated.
Fixed typo in “main.html” template file. (See forum thread)
Fixed bug in forum editing template part. Now a forum can only be made a category or web link, if there are no threads in it because they would get lost. (Not really lost, but hidden.) See forum thread from previous item.
Fixed a typo in “forumlist_edit.html” template file. Again, see above thread.
Fixed thread view counter: Now also counts guest hits again. (See forum thread)