phpBB 2.0.7 gereleased

[mosymuis]

Net een uur geleden is phpBB 2.0.7 online geplaatst, een nieuwe versie die het vooral moet hebben van bugfixes. Opnieuw wordt gezegd dat dit de laatste nieuwe versie zal zijn tot phpBB 2.0.2, maar ik denk niet dat dat realistisch is aangezien ze nog continu nieuwe bugs ontdekken.

Sinds 2.0.6d is er nauwelijks iets veranderd, als je nog 2.0.6 of een oudere versie draait wordt het aangeraden om up te graden omdat je dan alle security bugfixes in 1 keer binnen hebt. Lees het changelog hier.

Download de nieuwe release hier:

Full:
http://prdownloads.sourceforge.net/phpb ... p?download
Changed files:
http://prdownloads.sourceforge.net/phpb ... p?download
Patch file:
http://prdownloads.sourceforge.net/phpb ... p?download

[DaMnNaTiOn]

Wordt weer upgrade tijd
(Hoeveel versies komen wel nog niet )

[Erulezz]

FF een vraagje , hoe moet je upgraden dan??

[DaMnNaTiOn]

Zelf de patch file, en de geëdite files vergelijken met je eigen files en de nieuwe code toevoegen

Zo doe ik het tenminste

[Erulezz]

?

[Luuk]

Hebben ze niet een bestand waar alles in staat en wat je dan moet wijzigen, zoals een mod install bestand

[mosymuis]

phpBBhacks.com maakt die altijd;
http://www.phpbbhacks.com/tutorials/204to205.html
http://www.phpbbhacks.com/tutorials/205to206.html

Maar voor 2.0.7 is er nog geen tuturial beschikbaar.

[Erulezz]

Jammer...

[Luuk]

Ik wacht nog wel even , heb er te veel mods voor geinstalleerd om alles opnieuw te gaan doen.

[DaMnNaTiOn]

Ok, mijn forum is nu 2.0.7
(Niet heel veel fixes, van 2.0.4 naar 2.0.5 was veel meer werk )

[Nick V]

en dmanation veel verschil?.. of kan iok beter bij 2.06 blijven met me gemodde gedoe?...

[mosymuis]

en dmanation veel verschil?.. of kan iok beter bij 2.06 blijven met me gemodde gedoe?...

Lees het changelog... het gaat voornamelijk om bugfixes, vaak veiligheids gerelateerd. Praktisch merk je dus geen verschil.

[Nick V]

had k gelezen :thumb: maar misschien dat het snllr is of iets anders wat best opvalt

[PetraK]

Stomme vraag misschien hoor, maar is het nu ook mogelijk de templates te gebruiken die we dan zegmaar standaard gebruiken voor de "oude"verise ?

En is het ook mogelijk de database van 2.0.6 in te voeren?
gewoon even wat vraagjes hoor

Ik ga binnekort van server veranderen, misschien dan gelijk met de 07 starten, dus vandaar de vraagjes

[chris]

ik had ff wat tijd over dus heb ik ff een mod gemaakt om over te stappen naar 2.0.7.

find = gewoon net zoals in een echte mod 'vinden'
replace with = net zoals in een echte mod 'vervang met'

als je alles wat hieronder hebt uitgevoerd moet je het bestand update_to_207.php in de map install zetten en uitvoeren

als je hieronder nog ergens een foutje ziet, zeg het ff dan edit ik mijn bericht

/groupcp.php


find:

Code: Selecteer alles

$sql_in = '';
  					for($i = 0; $i < count($members); $i++)
  					{
 						$sql_in .= ( ( $sql_in != '' ) ? ', ' : '' ) . $members[$i];
  					}
  
  					if ( isset($HTTP_POST_VARS['approve']) )

replace with:

Code: Selecteer alles

$sql_in = '';
  					for($i = 0; $i < count($members); $i++)
  					{
 						$sql_in .= ( ( $sql_in != '' ) ? ', ' : '' ) . intval($members[$i]);
  					}
  
  					if ( isset($HTTP_POST_VARS['approve']) )

includes/bbcode.php

find:

Code: Selecteer alles

$bbcode_tpl['url3'] = str_replace('{DESCRIPTION}', '\\2', $bbcode_tpl['url3']);
  
  	$bbcode_tpl['url4'] = str_replace('{URL}', 'http://\\1', $bbcode_tpl['url']);
 	$bbcode_tpl['url4'] = str_replace('{DESCRIPTION}', '\\5', $bbcode_tpl['url4']);
  
  	$bbcode_tpl['email'] = str_replace('{EMAIL}', '\\1', $bbcode_tpl['email']);

replace with:

Code: Selecteer alles

$bbcode_tpl['url3'] = str_replace('{DESCRIPTION}', '\\2', $bbcode_tpl['url3']);
  
  	$bbcode_tpl['url4'] = str_replace('{URL}', 'http://\\1', $bbcode_tpl['url']);
 	$bbcode_tpl['url4'] = str_replace('{DESCRIPTION}', '\\3', $bbcode_tpl['url4']);
  
  	$bbcode_tpl['email'] = str_replace('{EMAIL}', '\\1', $bbcode_tpl['email']);

find:

Code: Selecteer alles

$replacements[] = $bbcode_tpl['img'];
  
  	// matches a [url]xxxx://www.phpbb.com[/url] code..
 	$patterns[] = "#\[url\]([\w]+?://.*?[^ \"\n\r\t<]*?)\[/url\]#is";
  	$replacements[] = $bbcode_tpl['url1'];
  
  	// [url]www.phpbb.com[/url] code.. (no xxxx:// prefix).
 	$patterns[] = "#\[url\]((www|ftp)\.([\w\-]+\.)*?[\w\-]+\.[a-z]{2,4}(:?[0-9]*?/[^ \"\n\r\t<]*)?)\[/url\]#is";
  	$replacements[] = $bbcode_tpl['url2'];
  
  	// [url=xxxx://www.phpbb.com]phpBB[/url] code..
 	$patterns[] = "#\[url=([\w]+?://.*?[^ \"\n\r\t<]*?)\](.*?)\[/url\]#is";
  	$replacements[] = $bbcode_tpl['url3'];
  
  	// [url=www.phpbb.com]phpBB[/url] code.. (no xxxx:// prefix).
 	$patterns[] = "#\[url=((www|ftp)\.([\w\-]+\.)*?[\w\-]+\.[a-z]{2,4}(:?[0-9]*?/[^ \"\n\r\t<]*)?)\](.*?)\[/url\]#is";
  	$replacements[] = $bbcode_tpl['url4'];
  
  	// [email]user@domain.tld[/email] code..

replace with:

Code: Selecteer alles

$replacements[] = $bbcode_tpl['img'];
  
  	// matches a [url]xxxx://www.phpbb.com[/url] code..
 	$patterns[] = "#\[url\]([\w]+?://[^ \"\n\r\t<]*?)\[/url\]#is";
  	$replacements[] = $bbcode_tpl['url1'];
  
  	// [url]www.phpbb.com[/url] code.. (no xxxx:// prefix).
 	$patterns[] = "#\[url\]((www|ftp)\.[^ \"\n\r\t<]*?)\[/url\]#is";
  	$replacements[] = $bbcode_tpl['url2'];
  
  	// [url=xxxx://www.phpbb.com]phpBB[/url] code..
 	$patterns[] = "#\[url=([\w]+?://[^ \"\n\r\t<]*?)\](.*?)\[/url\]#is";
  	$replacements[] = $bbcode_tpl['url3'];
  
  	// [url=www.phpbb.com]phpBB[/url] code.. (no xxxx:// prefix).
 	$patterns[] = "#\[url=((www|ftp)\.[^ \"\n\r\t<]*?)\](.*?)\[/url\]#is";
  	$replacements[] = $bbcode_tpl['url4'];
  
  	// [email]user@domain.tld[/email] code..

find:

Code: Selecteer alles

// matches an "xxxx://yyyy" URL at the start of a line, or after a space.
  	// xxxx can only be alpha characters.
  	// yyyy is anything up to the first space, newline, comma, double quote or <
 	$ret = preg_replace("#(^|[\n ])([\w]+?://.*?[^ \"\n\r\t<]*)#is", "\\1<a href=\"\\2\" target=\"_blank\">\\2</a>", $ret);
  
  	// matches a "www|ftp.xxxx.yyyy[/zzzz]" kinda lazy URL thing
  	// Must contain at least 2 dots. xxxx contains either alphanum, or "-"
  	// zzzz is optional.. will contain everything up to the first space, newline, 
  	// comma, double quote or <.
 	$ret = preg_replace("#(^|[\n ])((www|ftp)\.[\w\-]+\.[\w\-.\~]+(?:/[^ \"\t\n\r<]*)?)#is", "\\1<a href=\"http://\\2\" target=\"_blank\">\\2</a>", $ret);
  
  	// matches an email@domain type address at the start of a line, or after a space.
  	// Note: Only the followed chars are valid; alphanums, "-", "_" and or ".".

replace with:

Code: Selecteer alles

// matches an "xxxx://yyyy" URL at the start of a line, or after a space.
  	// xxxx can only be alpha characters.
  	// yyyy is anything up to the first space, newline, comma, double quote or <
 	$ret = preg_replace("#(^|[\n ])([\w]+?://[^ \"\n\r\t<]*)#is", "\\1<a href=\"\\2\" target=\"_blank\">\\2</a>", $ret);
  
  	// matches a "www|ftp.xxxx.yyyy[/zzzz]" kinda lazy URL thing
  	// Must contain at least 2 dots. xxxx contains either alphanum, or "-"
  	// zzzz is optional.. will contain everything up to the first space, newline, 
  	// comma, double quote or <.
 	$ret = preg_replace("#(^|[\n ])((www|ftp)\.[^ \"\t\n\r<]*)#is", "\\1<a href=\"http://\\2\" target=\"_blank\">\\2</a>", $ret);
  
  	// matches an email@domain type address at the start of a line, or after a space.
  	// Note: Only the followed chars are valid; alphanums, "-", "_" and or ".".

/includes/functions_post.php

find:

Code: Selecteer alles

$match_tag = trim($allowed_html_tags[$i]);
  					if (preg_match('#^<\/?' . $match_tag . '[> ]#i', $hold_string))
  					{
 						$tagallowed = (preg_match('#^<\/?' . $match_tag . ' .*?(style[\t ]*?=|on[\w]+[\t ]*?=)#i', $hold_string)) ? false : true;
  					}
  				}

replace with:

Code: Selecteer alles

$match_tag = trim($allowed_html_tags[$i]);
  					if (preg_match('#^<\/?' . $match_tag . '[> ]#i', $hold_string))
  					{
 						$tagallowed = (preg_match('#^<\/?' . $match_tag . ' .*?(style[ ]*?=|on[\w]+[ ]*?=)#i', $hold_string)) ? false : true;
  					}
  				}

find:

Code: Selecteer alles

}
  		}
  
 		if (!$end_html || ($end_html != strlen($message) && $tmp_message != ''))
  		{
  			$tmp_message .= preg_replace($html_entities_match, $html_entities_replace, substr($message, $end_html + 1));
  		}

replace with:

Code: Selecteer alles

}
  		}
  
 		if ($end_html != strlen($message) && $tmp_message != '')
  		{
  			$tmp_message .= preg_replace($html_entities_match, $html_entities_replace, substr($message, $end_html + 1));
  		}

/includes/functions_search.php

find:

Code: Selecteer alles

if ( $match_sql != '' )
  		{
 			$sql = "INSERT IGNORE INTO " . SEARCH_MATCH_TABLE . " (post_id, word_id, title_match) 
  				SELECT $post_id, word_id, $title_match  
  					FROM " . SEARCH_WORD_TABLE . " 
  					WHERE word_text IN ($match_sql)"; 

replace with:

Code: Selecteer alles

if ( $match_sql != '' )
  		{
 			$sql = "INSERT INTO " . SEARCH_MATCH_TABLE . " (post_id, word_id, title_match) 
  				SELECT $post_id, word_id, $title_match  
  					FROM " . SEARCH_WORD_TABLE . " 
  					WHERE word_text IN ($match_sql)"; 

/includes/usercp_register.php

find:

Code: Selecteer alles

{
  	include($phpbb_root_path . 'includes/usercp_avatar.'.$phpEx);
  
 	$avatar_category = ( !empty($HTTP_POST_VARS['avatarcategory']) ) ? $HTTP_POST_VARS['avatarcategory'] : '';
  
  	$template->set_filenames(array(
  		'body' => 'profile_avatar_gallery.tpl')

replace with:

Code: Selecteer alles

{
  	include($phpbb_root_path . 'includes/usercp_avatar.'.$phpEx);
  
 	$avatar_category = ( !empty($HTTP_POST_VARS['avatarcategory']) ) ? htmlspecialchars($HTTP_POST_VARS['avatarcategory']) : '';
  
  	$template->set_filenames(array(
  		'body' => 'profile_avatar_gallery.tpl')

login.php

find:

Code: Selecteer alles

if( $session_id )
  					{
 						$url = ( !empty($HTTP_POST_VARS['redirect']) ) ? $HTTP_POST_VARS['redirect'] : "index.$phpEx";
  						redirect(append_sid($url, true));
  					}
  					else

replace with:

Code: Selecteer alles

if( $session_id )
  					{
 						$url = ( !empty($HTTP_POST_VARS['redirect']) ) ? htmlspecialchars($HTTP_POST_VARS['redirect']) : "index.$phpEx";
  						redirect(append_sid($url, true));
  					}
  					else

find:

Code: Selecteer alles

}
  				else
  				{
 					$redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ? $HTTP_POST_VARS['redirect'] : '';
  					$redirect = str_replace('?', '&', $redirect);
  
  					$template->assign_vars(array(

replace with:

Code: Selecteer alles

}
  				else
  				{
 					$redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ? htmlspecialchars($HTTP_POST_VARS['redirect']) : '';
  					$redirect = str_replace('?', '&', $redirect);
  
  					$template->assign_vars(array(

find:

Code: Selecteer alles

}
  		else
  		{
 			$redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ? $HTTP_POST_VARS['redirect'] : "";
  			$redirect = str_replace("?", "&", $redirect);
  
  			$template->assign_vars(array(

replace with:

Code: Selecteer alles

}
  		else
  		{
 			$redirect = ( !empty($HTTP_POST_VARS['redirect']) ) ? htmlspecialchars($HTTP_POST_VARS['redirect']) : "";
  			$redirect = str_replace("?", "&", $redirect);
  
  			$template->assign_vars(array(

find:

Code: Selecteer alles

if (!empty($HTTP_POST_VARS['redirect']) || !empty($HTTP_GET_VARS['redirect']))
  		{
 			$url = (!empty($HTTP_POST_VARS['redirect'])) ? $HTTP_POST_VARS['redirect'] : $HTTP_GET_VARS['redirect'];
  			redirect(append_sid($url, true));
  		}
  		else

replace with:

Code: Selecteer alles

if (!empty($HTTP_POST_VARS['redirect']) || !empty($HTTP_GET_VARS['redirect']))
  		{
 			$url = (!empty($HTTP_POST_VARS['redirect'])) ? htmlspecialchars($HTTP_POST_VARS['redirect']) : htmlspecialchars($HTTP_GET_VARS['redirect']);
  			redirect(append_sid($url, true));
  		}
  		else

find:

Code: Selecteer alles

}
  	else
  	{
 		$url = ( !empty($HTTP_POST_VARS['redirect']) ) ? $HTTP_POST_VARS['redirect'] : "index.$phpEx";
  		redirect(append_sid($url, true));
  	}
  }

replace with:

Code: Selecteer alles

}
  	else
  	{
 		$url = ( !empty($HTTP_POST_VARS['redirect']) ) ? htmlspecialchars($HTTP_POST_VARS['redirect']) : "index.$phpEx";
  		redirect(append_sid($url, true));
  	}
  }

posting.php

find:

Code: Selecteer alles

{
  	if ( !empty($HTTP_POST_VARS[$param]) || !empty($HTTP_GET_VARS[$param]) )
  	{
 		$$var = ( !empty($HTTP_POST_VARS[$param]) ) ? $HTTP_POST_VARS[$param] : $HTTP_GET_VARS[$param];
  	}
  	else
  	{

replace with:

Code: Selecteer alles

 {
  	if ( !empty($HTTP_POST_VARS[$param]) || !empty($HTTP_GET_VARS[$param]) )
  	{
 		$$var = ( !empty($HTTP_POST_VARS[$param]) ) ? htmlspecialchars($HTTP_POST_VARS[$param]) : htmlspecialchars($HTTP_GET_VARS[$param]);
  	}
  	else
  	{

find:

Code: Selecteer alles

FROM " . VOTE_USERS_TABLE . "  
  				WHERE vote_id = $vote_id 
  					AND vote_user_id = " . $userdata['user_id'];
 			if ( !($result = $db->sql_query($sql)) )
  			{
  				message_die(GENERAL_ERROR, 'Could not obtain user vote data for this topic', '', __LINE__, __FILE__, $sql);
  			}
  
 			if ( !($row = $db->sql_fetchrow($result)) )
  			{
  				$sql = "UPDATE " . VOTE_RESULTS_TABLE . " 
  					SET vote_result = vote_result + 1 

replace with:

Code: Selecteer alles

FROM " . VOTE_USERS_TABLE . "  
  				WHERE vote_id = $vote_id 
  					AND vote_user_id = " . $userdata['user_id'];
 			if ( !($result2 = $db->sql_query($sql)) )
  			{
  				message_die(GENERAL_ERROR, 'Could not obtain user vote data for this topic', '', __LINE__, __FILE__, $sql);
  			}
  
 			if ( !($row = $db->sql_fetchrow($result2)) )
  			{
  				$sql = "UPDATE " . VOTE_RESULTS_TABLE . " 
  					SET vote_result = vote_result + 1 

/search.php

find:

Code: Selecteer alles

}
  	else
  	{
 		if ( intval($search_id) )
  		{
  			$sql = "SELECT search_array 
  				FROM " . SEARCH_TABLE . " 

replace with:

Code: Selecteer alles

}
  	else
  	{
 		$search_id = intval($search_id);
 		if ( $search_id )
  		{
  			$sql = "SELECT search_array 
  				FROM " . SEARCH_TABLE . " 

/templates/subSilver/index_body.tpl

find:

Code: Selecteer alles

<table cellspacing="3" border="0" align="center" cellpadding="0">
    <tr> 
 	<td width="20" align="center"><img src="templates/subSilver/images/folder_new.gif" alt="{L_NEW_POSTS}"/></td>
  	<td><span class="gensmall">{L_NEW_POSTS}</span></td>
  	<td>&nbsp;&nbsp;</td>
 	<td width="20" align="center"><img src="templates/subSilver/images/folder.gif" alt="{L_NO_NEW_POSTS}" /></td>
  	<td><span class="gensmall">{L_NO_NEW_POSTS}</span></td>
  	<td>&nbsp;&nbsp;</td>
 	<td width="20" align="center"><img src="templates/subSilver/images/folder_lock.gif" alt="{L_FORUM_LOCKED}" /></td>
  	<td><span class="gensmall">{L_FORUM_LOCKED}</span></td>
    </tr>
  </table>

replace with:

Code: Selecteer alles

<table cellspacing="3" border="0" align="center" cellpadding="0">
    <tr> 
 	<td width="20" align="center"><img src="templates/subSilver/images/folder_new_big.gif" alt="{L_NEW_POSTS}"/></td>
  	<td><span class="gensmall">{L_NEW_POSTS}</span></td>
  	<td>&nbsp;&nbsp;</td>
 	<td width="20" align="center"><img src="templates/subSilver/images/folder_big.gif" alt="{L_NO_NEW_POSTS}" /></td>
  	<td><span class="gensmall">{L_NO_NEW_POSTS}</span></td>
  	<td>&nbsp;&nbsp;</td>
 	<td width="20" align="center"><img src="templates/subSilver/images/folder_locked_big.gif" alt="{L_FORUM_LOCKED}" /></td>
  	<td><span class="gensmall">{L_FORUM_LOCKED}</span></td>
    </tr>
  </table>

/viewforum.php

find:

Code: Selecteer alles

if ( !empty($HTTP_POST_VARS['topicdays']) || !empty($HTTP_GET_VARS['topicdays']) )
  {
 	$topic_days = ( !empty($HTTP_POST_VARS['topicdays']) ) ? $HTTP_POST_VARS['topicdays'] : $HTTP_GET_VARS['topicdays'];
  	$min_topic_time = time() - ($topic_days * 86400);
  
  	$sql = "SELECT COUNT(t.topic_id) AS forum_topics 

replace with:

Code: Selecteer alles

if ( !empty($HTTP_POST_VARS['topicdays']) || !empty($HTTP_GET_VARS['topicdays']) )
  {
 	$topic_days = ( !empty($HTTP_POST_VARS['topicdays']) ) ? intval($HTTP_POST_VARS['topicdays']) : intval($HTTP_GET_VARS['topicdays']);
  	$min_topic_time = time() - ($topic_days * 86400);
  
  	$sql = "SELECT COUNT(t.topic_id) AS forum_topics 

/viewtopic.php

find:

Code: Selecteer alles

if( !empty($HTTP_POST_VARS['postdays']) || !empty($HTTP_GET_VARS['postdays']) )
  {
 	$post_days = ( !empty($HTTP_POST_VARS['postdays']) ) ? $HTTP_POST_VARS['postdays'] : $HTTP_GET_VARS['postdays'];
  	$min_post_time = time() - (intval($post_days) * 86400);
  
  	$sql = "SELECT COUNT(p.post_id) AS num_posts

replace with:

Code: Selecteer alles

if( !empty($HTTP_POST_VARS['postdays']) || !empty($HTTP_GET_VARS['postdays']) )
  {
 	$post_days = ( !empty($HTTP_POST_VARS['postdays']) ) ? intval($HTTP_POST_VARS['postdays']) : intval($HTTP_GET_VARS['postdays']);
  	$min_post_time = time() - (intval($post_days) * 86400);
  
  	$sql = "SELECT COUNT(p.post_id) AS num_posts

find:

Code: Selecteer alles

//
  if ( !empty($HTTP_POST_VARS['postorder']) || !empty($HTTP_GET_VARS['postorder']) )
  {
 	$post_order = (!empty($HTTP_POST_VARS['postorder'])) ? $HTTP_POST_VARS['postorder'] : $HTTP_GET_VARS['postorder'];
  	$post_time_order = ($post_order == "asc") ? "ASC" : "DESC";
  }
  else

replace with:

Code: Selecteer alles

//
  if ( !empty($HTTP_POST_VARS['postorder']) || !empty($HTTP_GET_VARS['postorder']) )
  {
 	$post_order = (!empty($HTTP_POST_VARS['postorder'])) ? htmlspecialchars($HTTP_POST_VARS['postorder']) : htmlspecialchars($HTTP_GET_VARS['postorder']);
  	$post_time_order = ($post_order == "asc") ? "ASC" : "DESC";
  }
  else

[mosymuis]

Ik heb nog niet na kunnen gaan of alles klopt, maar iig puik werk chris!! :thumb::thumb::thumb:

[PetraK]

ik had ff wat tijd over dus heb ik ff een mod gemaakt om over te stappen naar 2.0.7.

find = gewoon net zoals in een echte mod 'vinden'
replace with = net zoals in een echte mod 'vervang met'

als je alles wat hieronder hebt uitgevoerd moet je het bestand update_to_207.php in de map install zetten en uitvoeren

als je hieronder nog ergens een foutje ziet, zeg het ff dan edit ik mijn bericht

Ff wat tijd over? Jeetje ... Knap hoor!

[Daniel]

bergrijp het niet echt hellemaal hoe en waar moet je dat invoeren???
en moet je dat dan weer instraleren? als je het gedounload hebt?

[DaMnNaTiOn]

Als je een nieuwe phpBB versie hebt gedownload dan hoef je natuurlijk de files niet de editen

[Daniel]

is die automatic al erop als ik hem gedounload heb of moet ik het nog uploden?? en is het ook al NL??