Doug Sisk answers your questions

Posted on December 8, 2009 by Chris Boulton

Sorry for the long delay, I’ve been busy with end of year school work. Doug was eager to answer his questions, getting back to me less than a day after I sent his questions to him.

Please tell us a bit about yourself.

I’m Doug Sisk and I live in the barren lands of South Dakota in the US. I started working with MyBB back in 2007 when I started doing web design. MyBB is what inspired me to learn PHP & MySQL, and by the end of 2008, I was on the MyBB Team. Besides MyBB, I’m the technical administrator for the Roller Coaster Simulator website RCTLounge, I own an Amusement Park Blog, Park Thoughts, and I do some projects through my personal company, amply named Doug Sisk Design. I’m a Junior in High School, and I’m very active in band, participating in Marching, Concert, and Jazz band. I play synthesizer in Marching, piano in Jazz, and percussion in Concert. I also enjoy dreaming about Roller Coasters, watching TV, and hanging out with friends.

I was on the SQA team from November 2008-2009, and I am now a developer. I will be assisting in bug fixing the upcoming 1.6 series, and I will be also developing features for the future 2.0 series.

What is your favourite gadget and why?

I don’t think I have a “favorite” gadget. I love my Computer, iPod Touch, and cell phone equally. The computer is where my work is, my iPod Touch has all the music and podcasts I enjoy, and my cell phone lets me keep in touch with friends. Between the iPod and cell phone though, I would choose the iPod as my favorite. It’s great being able to keep up with the stuff I follow online right from it. I watch a ton of Revision3 shows, mainly Diggnation, Tekzilla, and Film Riot. I occasionally watch Scam School from time to time.

Describe to us what it means to you to be on the MyBB team.

For me, being on the MyBB Team is a honor. This software is the best out there. There are very few free software programs out there that have the dedication and support like MyBB. It always amazes me how dedicated everyone is to the project for not being paid. For me, the payment is knowing that thousands of people have a way to communicate for free. It’s still hard for me to believe that I’m part of such a huge project.

What is your favourite feature of MyBB?

I really don’t know what my favorite feature in MyBB is. I’m sure I’ll have one come 2.0 series!

What is your dream career?

When I was younger, my dream career was to go into the Amusement Park Industry. However, as I’ve grown older, I’ve realized that it isn’t what I want to do everyday of my work life. I have done so well at web design and development, that it has already turned into a job rather than a hobby for me. I don’t think there are many people that can say they make money from their hobby!

Other than MyBB, what are some of your hobbies?

Other than MyBB, I spend time checking up on the websites I work with, and the rest of the websites I follow. I mainly check out Facebook, Twitter (@DougSD), and Digg. I also make my rounds looking at Web Design galleries and blogs to see what the trends are. When I’m not on computer, I’m usually listening to music (my favorite bands are Jack’s Mannequin and Something Corporate), playing piano, drumming, drawing random sketches of websites and things, or watching TV (my favorite shows are Mythbusters, The Office, and Late Night with Jimmy Fallon).

Where do you see yourself in 10 years time?

I have no clue where I’ll be in 10 years. Hopefully, I’ll be at a successful web design or marketing agency.

What is your favourite programming language?

PHP, as it’s the only language I know fluently. I have a brief knowledge of jQuery and Javascript, but it’s far from great. I’ve attempted to learn Ruby, but I gave up. Not my cup of tea.

Who inspires you?

The web design firm that has inspired me since I started in 2007 is Electric Pulp, South Dakota’s best web design firm. They always have outstanding designs. I get all my inspiration from viewing galleries. My favorite gallery I check weekly is Best Web Gallery. It really is nice to see the wide ranges of design types being used.

Anything else you would like to add?

I don’t really think I have much else to say. I think I got everything about me down. I’m not always one for giving out information online, but I don’t mind giving out a little about me.

MyBB 1.4.10 Released – Maintenance Release

Posted on December 1, 2009 by Chris Boulton

MyBB 1.4.10 is now available on the MyBB website and is a general maintenance release.

This release fixes several reported issues with version released since 1.4.8 causing some incorrect functionality of MyBB. These bugs have been fixed to provide a more stable version of MyBB for public use.

What’s added/changed in this version?

MyBB 1.4.10 is now compatible with PHP 5.3.
Server Statistics are now sent to MyBB at the end of installation for analytical purposes. This is of course anonymous, no confidential information is sent, and you may easily opt out if you wish.
… many other bug fixes

This release has been tested by our Software Quality Assurance group.

Information on upgrading, template changes and language changes can be found in the posts below.

Please note, that you need to run the upgrade script for this version.
This is so the templates may be updated.
There are no database schema changes in this version.

Upgrading from the 1.4 series

When upgrading from 1.4.9, you will not lose any custom themes, plugins or language packs which you may have installed.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process. You may download a ZIP archive of changed files here:

changed_files_1410.zip

You must then check for modified templates using the instructions below.

Upgrading from other versions

If you are upgrading from a version earlier than 1.2 then you will lose your custom themes, templates and language packs due to the number of changes between your version and the 1.2 series.

Before you attempt to upgrade, ensure you have a database backup and a copy of the files currently in use on your board. This is so you can revert back to your earlier version if you need to or something goes horribly wrong with the upgrade process.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process.

Changed files since MyBB 1.4.8

calendar.php
forumdisplay.php
global.php
managegroup.php
member.php
modcp.php
moderation.php
portal.php
private.php
search.php
stats.php
usercp.php
xmlhttp.php
admin

functions_themes.php
functions_view_manager.php

modules

home

credits.php

forum

attachments.php
management.php

style

templates.php
themes.php

config

mycode.php
plugins.php
settings.php

tools

backupdb.php
mailerrors.php
maillogs.php
tasks.php

user

admin_permissions.php
group_promotions.php
groups.php
mass_mail.php
users.php

install

index.php
upgrade.php
resources

language.lang.php
mybb_theme.xml
output.php
upgrade16.php

class_core.php
class_error.php
class_feedgeneration.php
class_moderation.php
class_parser.php
db_pdo.php
db_pgsql.php
functions.php
functions_forumlist.php
functions_online.php
functions_post.php
functions_search.php
functions_serverstats.php
functions_upload.php
init.php
3rdparty

diff

Diff.php

languages

english.php
english

datahandler_user.lang.php
modcp.lang.php

datahandlers

event.php
pm.php
user.php

cachehandlers

eaccelerator.php
memcache.php
xcache.php

tasks

backupdb.php
massmail.php
promotions.php

* Red represents files that contain security updates
* Green represents new files added in this release

Bugs fixed since MyBB 1.4.8

#180 – PHP 5.3/6.0 Changes & Support
#249 – Server statistics on installation
#297 – Old Credits Updated
#307 – Mysql Backups – keys not quoted
#308 – PostgreSQL error in Forum Management -> Edit Forum
#309 – Direct access of some files generates PHP errors
#310 – Multiple Smilies PHP Error
#311 – RSS Feed incorrect formatting
#318 – search_results_inlinemodcol Template Oversight
#319 – Forum announcements trow do not alternate
#320 – Mod-CP – Edit User & Birthday
#321 – Future mass mailings
#322 – HTML in forum names in 1.4.8
#323 – Delete a PM using the delete button
#324 – Maximum Length in Custom Profile Fields do not work
#332 – SQLite version
#333 – Captcha not shown if board is closed
#334 – Missing label tag
#335 – Board Statistics inconsistency
#336 – Profile Display Problem: usereputationsystem
#353 – ACP – group # of users when using additional groups bug
#354 – System mail log: Wrong multipage links
#355 – member.php custom profile fields alternating trow issue
#356 – Search finduserthreads problem with limit
#358 – PHP 5.3 my_number_format stats.php PHP warning
#359 – Selective delete system mail logs not working
#360 – capitalized LIMIT clause in db abstraction layer queries
#361 – Hard-coded language string in admin permissions page
#364 – Post not quoted from Reply button
#366 – Merged Accounts and Join Date
#367 – Who’s online do_addsubscription and removesubscriptions
#368 – Search PHP error
#369 – UserCP Ampersand in link not valid
#370 – Copy forum – forum can have no parent
#371 – Backup DB and Check File task enabling warning
#372 – Syndication: Atom and RSS different time
#373 – Buddy List doesn’t show invisible users as online
#381 – </tr> tag missing in template member_register_customfield
#382 – Email notification about errors not working
#383 – [PM] "Replied to" icon not shown if you replied to all recipients
#385 – "create new forum" generates postgresql error
#386 – multiple forums memcache bug
#387 – Custom Profile Fields using Check Boxes option forgets settings
#388 – Inline Thread Deletion and Reported Posts
#389 – thread views is stuck if php shutdown function not enabled.
#392 – postgres "Split Threads" SQL error
#394 – Naming an admin with special characters during installation doesn’t "work"
#400 – Profile Editing
#401 – Inline Moderation – do_multideleteposts
#411 – Highlighted search results..
#412 – Promotion bug
#414 – 1.4.6, pgsql, ‘move thread’ gives SQL error
#416 – Group Promotions not Working or ‘Broke’?
#417 – Unapproved threads post count
#423 – Users browsing a redirect forum
#426 – Problems with language changes in several areas…
#429 – MyBB Backups do not preserve NULL and whitespace
#441 – Deleting a copied thread deletes the attachments of the original thread too
#442 – Wrong dateline of split thread
#451 – Unread PM notice dissapears after editing options
#452 – Upgraded forums issue with themestylesheets cachefile column
#457 – Double Template Rows
#460 – Attachment search not working correctly
#462 – missing "replied to" at PM replied via draft
#463 – latest threads on portal page
#466 – Last post date after custom merge
#468 – Post count accepts minus numbers
#473 – unresetted variable in view manager
#476 – Subforum of password protected forum searchable
#479 – postgresql merge users error
#482 – There was a problem communicating with the mod version server.
#501 – Hidden fields in profiles and Moderators
#507 – Max password length
#511 – managegroup.php and displaygroup
#516 – Warning with custom profile field
#517 – Incomplete theme exports
#518 – Missing mod log entry
#521 – Display and sort by rating doesn’t work in PostgreSQL
#524 – Slight typo in ./inc/functions.php
#531 – Findguest/user search error
#532 – Email validation weakness
#533 – Admincp User Merge and Disabled Forum Postcount
#536 – Editing recurring event
#541 – Some in cases in error handler don’t work as expected
#547 – Warnings when adding a group promotion
#549 – Cannot edit bio

Theme and template changes

Using the “Find Updated” link under the “Templates” page in the Admin CP you can find a list of the templates that have changed in this release that you’ve got one or more custom copies of.

After identifying changed templates using the tool you can either revert your custom template to the default (delete it) or use the “diff” tool to perform a difference analysis on your custom template and the default.

“Revert required” indicates that for this template to work correctly with MyBB 1.4.8 you’ll either need to revert it to the default or modify your custom template to include the changes in the default. If a revert is not required your custom version of the template should work perfectly fine.

Template changes

Since MyBB 1.4.8 the following templates have had changes to them:

member_register_customfield
posticons
postbit_ignored

* Red represents the template must be updated or reverted to fix security problems

Language file changes

Since MyBB 1.4.8 the following language files have had changes to them:

datahandler_user.lang.php

Either update your language packs to include the changes in these files or revert to the standard English language pack.

Plugins

Most of your MyBB 1.4.x plugins will work correctly with 1.4.10 without any updates.

IMPORTANT Update: December 8th, 2009

Due to a regression introduced by a change between MyBB 1.4.9 and MyBB 1.4.10 if you downloaded the MyBB 1.4.10 package or update before December 7th, 2009, we are releasing a patch to fix this issue.

Open /admin/modules/style/templates.php and find near line 531:

// Only allow users to move non-default templates to stop them from being able to delete it! if($template['sid'] == "-2") { echo $form->generate_hidden_field("sid", "-2"); } else { $form_container->output_row($lang->template_set, $lang->template_set_desc, $form->generate_select_box('sid', $template_sets, $sid)); }

and replace with:

// Force users to save the default template to a specific set, rather than the "global" templates - where they can delete it if($template['sid'] == "-2") { unset($template_sets[-1]); }

$form_container->output_row($lang->template_set, $lang->template_set_desc, $form->generate_select_box('sid', $template_sets, $sid));

We apologize for this inconvenience!

MyBB 1.4.9 Released – Security Update

Posted on September 21, 2009 by Chris Boulton

MyBB 1.4.9 is a security update to the MyBB 1.4 series. It fixes 1 high risk security vulnerability and two low risk issues. We recommend everybody upgrades to this release immediately or patch their boards with the manual patching instructions below.

These vulnerabilities affects MyBB 1.4.8. MyBB 1.2 is also affected.

Thank you to endeavormac, frostschutz, and TheLinx for alerting us of these issues.

MyBB 1.4.8 to MyBB 1.4.9 Patch

This patch is only for users running MyBB 1.4.8. If you are running an older version of MyBB then please download MyBB 1.4.9 from the MyBB site and update to it.

Please download the attached ZIP archive and replace the files in your forum directory with those from the ZIP archive.

changed_files_1409.zip

If you wish to manually patch your board please download “mybb_1408_patches.txt” and follow the instructions in that file.

mybb_1408_patches.txt

Please Note: You do not have to run the upgrade script for this release.

Reporting MyBB security vulnerabilities

If you think you’ve found a vulnerability in MyBB, we advise you not to publicly post it on these forums or publicly release information about it elsewhere until we’ve had time to prepare and release a patch.

As always, you can send through security related messages on the MyBB website from the Contact Us page.

MyBB 1.2.14 Patch

Please follow step #1 in the mybb_1408_patches.txt file as listed above.

Please note all users of the 1.2.x series are urged to upgrade to the latest release of MyBB. (1.4.9) MyBB 1.2 is no longer being supported, though security updates for the MyBB 1.2 series will last through December 2009.

Updated Subversion Access Details

Posted on September 12, 2009 by Chris Boulton

As part of our recent (and emergency) server migration, we’ve just finished restructuring our development server (that hosts the MyBB Development Portal and Subversion repositories). As a result, if you’re checking out and working with our Subversion repositories, please be aware that the URLs for doing so have changed.

The new official Subversion repositories are as follows:

MyBB – http://svn.mybboard.net/mybb/
MyBB Merge System – http://svn.mybboard.net/mybb-import/
MyBB Modifications – http://svn.mybboard.net/mybb-modifications/

If you’ve already checked out a copy of MyBB using Subversion, you can switch your local copy to the new URL using the following command:
svn switch --relocate http://dev.mybboard.net/svn/mybb/ http://svn.mybboard.net/mybb

Please note that the old Subversion URLs will continue to work for the majority of users the time being. However, if you’re running Mac OS X, you’ll need to switch to the new URLs due to a bug with the Subversion client that ships with Mac OS X.

Ryan Gordon answers your questions

Posted on September 4, 2009 by Chris Boulton

Ryan Gordon was second to answer your questions, he must have thought they were bugs cause he had the answers the day after me asking them.

Tell us a bit about yourself

Hi, I’m Ryan Gordon, and I live in the Bay Area of California, USA. I’ve been on the MyBB team since April 2006, back in the days of MyBB 1.1. I’m currently an intern for a SQA position during my summers, and school during the school year. In my other time I run various websites, I work with my Robotics Club (helping get financing & partners, doing programming and occasionally mechanical or electrical jobs), and I also do some freelance and for-fun coding. I love playing soccer, and have played soccer for most of my life. In my free time I love talking and hanging out with friends, joking, gaming, and going to the movies.

Does your brother ever annoy you when you’re programming MyBB?

All the time 😦

What’s it like helping administrate the largest known MyBB forum, with over 4 million posts (NCAABBS)?

It’s definitely interesting. You learn a lot of what it takes to run an operation that big in terms of programming optimizations, security, and stability as well as managing it well.

Other than MyBB, what are some of your hobbies?

I love playing soccer in my spare time. I also am on a robotics club, and who would’ve guessed? I’m the main programmer.

How does an average day look for you?

Weekdays I wake up at 8:00am and get into work by 9:30am. I get off work at 5:00pm and drive myself through commute traffic back to home. At around 6:00pm I have my dinner and turn on the computer. During the next few hours, I try to enjoy a TV show or two on Hulu.com and talk to friends. Otherwise I am on the MyBB Community forums and my other various projects to check up on and do my job. I end up going to sleep anywhere between 10pm and 3am.
Weekends usually call for some relaxing, going to the movies or hanging out with friends, chores, et cetera. Of course, during the school year, my days are filled with assignments.

What is your favorite book?

I must admit, I was raised a Harry Potter fan. My closet however is filled with programming books, some half read, some my bibles, some I’ve scanned over. The Dan Brown books are also among my favorites.

What feature have you always wanted in MyBB but has not yet been included?

Automatic updates. That would be killer =) Will definitely be in MyBB 2.0

What is your favorite language, both programming and real languages?

PHP is definitely the language for me. English is also my favorite real language.

Is MyBB your only developing project on the internet or are you involved in others?

I do periodic work for clients (creating a website here and there), I also have my own RCT3 Fansite that I have co-owned and have continued to run for 4 years.

What initially attracted you to MyBB?

My first RCT3 Fansite ran a phpBB 2 forum. Me and the owner decided we wanted something with a little more functionality. At the same time, I had known and had been friends with Justin S., our now Lead Designer, who also ran a RCT3 Fansite and was looking for a better forum to replace phpBB 2 with. He found MyBB, and he linked me to it. It was definately a much better choice and we chose it. At the time this was going on, I was learning the basic web programming languages, including PHP. I put my PHP skills to the test by first creating plugins and soon after, I got hooked.

What is the most trouble you’ve ever been in?

That’s a hard question to answer. I would say some of the fights and tantrums me and my brother would use to have, would get us in lots of trouble.

What is your dream career?

I would say, owning and creating a theme park on the ranks of Disneyland/Great America has always been a dream of mine.

Anything else you want to add?

Just a few interesting facts about me I guess:
I hate California weather because I like it when it rains – It is peaceful, cleansing, and something different then the norm.
I program best at the late hours of the night, because I am not bothered by noises, people or issues much; it allows me to focus and get things done.
I have a knack for making people laugh with my jokes when I’m not in a working environment and I love to make people smile.

Justin S. answers your questions

Posted on August 30, 2009 by Chris Boulton

Justin S. is the first team member to have a go at answering questions, so be nice to him.

Tell us a bit about yourself

Hi, I’m Justin, and I live in Central Ohio, USA. I’ve been on the MyBB team since April 2006, back in the days of MyBB 1.1. I’m currently a junior in high school. In my free time, I run a roller coaster simulator fansite called RCTgo, and also do some web design through my portfolio, Belloman Design. I obviously love roller coasters, and I play the alto saxophone in my school’s jazz, concert, and marching bands.

How did you discover MyBB?

My experience with forums all began through the RollerCoaster Tycoon community, so it’s fitting that I found MyBB through one of those forums. I already had a bit of experience administrating forums when I discovered MyBB, as I had already created a forum of my own with InvisionFree. Anyway, at some point I had found a forum of Sebar’s (a notable member of the RCT community), which was running MyBB. I knew a bit about forum softwares at that point – notably vB, IPB, and phpBB – but had never heard of MyBB.

Eventually, I decided to check out the website, downloaded a copy of MyBB and installed it on my web hosting account. I fell in love instantly – even at PR2, it had just about everything I wanted, and was enough of an incentive to completely start over my forum with it. It’s been nearly four years since I discovered MyBB and I’m still in love with it.

Describe some of the roles you have taken on in the MyBB team

When I first became a member of the MyBB team, I was added alongside Ryan Gordon as one of the official MyBB Wiki managers. We were tasked with maintaining the wiki, ensuring all of the articles were of a high quality, and that all of the appropriate articles were there.

At some point, I was asked to redesign the MyBB website. A redesign had already been in progress, but we (the team) felt that it could use a bit of a “refresh.” I guess you could say that is where I began my role as designer.

For MyBB 1.4, I created the layouts for countless pages in the new MyBB Admin CP. I’d say roughly two-thirds of the layouts were done by me in HTML mockups. At the same time, I also wrote almost all of the wiki documentation for the new features and changes in MyBB 1.4, most noticeably rewriting nearly all of the wiki articles for the Admin CP.

Today, my roles are MyBB Lead Designer and Wiki Lead. I’m responsible for almost every new layout that goes into MyBB, as well as (on the side) making sure the Wiki is up to date and being well maintained.

Which program/tool do you enjoy using the most while designing the new layout and graphics for MyBB?

Pencil and paper go a long way when initially mocking up layouts. With an eraser in hand, I can easily brainstorm how I want a page laid out, as it often takes a bit of time to get something that’s “just right.” Another great thing about paper mockups is that they’re obviously strictly layout, not theme, which I think is important in early stages.

Recently, though, I’ve been using a program called Balsamiq Mockups, which is a fantastic tool that tries to imitate pencil and paper mockups. It’s really easy to get things looking exactly how I want them, and I think I’m going to be using it quite a bit more in the future.

Here are some pencil mockups that Justin did for 1.4.

How much time do you spend designing MyBB? Describe the process of being a designer of MyBB.

When I’m designing a new layout for MyBB, I’ll often start with a paper sketch or a mockup in Balsamiq Mockups, experimenting and fine tuning the layout to exactly how I think it should be. At this point, I’ll usually show it to Ryan Gordon, and finally to the rest of the MyBB staff for input. Once a decent amount of input has been received, I’ll typically open up a text editor and begin creating an HTML mockup, which gives the developers a clear picture of how I envision the layout to look. I’ll then do the same: show it to Ryan Gordon and finally to the rest of the staff for review. Finally, a developer will eventually come in and commit the feature, based on the mockups I created.

I do not keep track of how much time I spend on any particular design or on designing MyBB in general. I do it whenever I have free time.

What feature did you want MyBB to have that was never included?

Soft delete. As someone who is paranoid about deleting things, I would love to have the option to “delete” posts without actually deleting them. A lot of people suggest to simply unapprove posts that you want to keep but not delete, but that doesn’t work too well: it clutters up the moderation queue, and isn’t really what I consider unapproved posts to be for.

Other than MyBB, what are some of your hobbies?

Roller coasters, web design, architecture, band, and reading.

What do you have for breakfast each day?

I typically eat some combination of bagels, muffins, waffles, pancakes, French toast, and yogurt. I hardly ever skip breakfast.

What was the meaning behind your former username, Belloman?

I’m afraid I’m not going to answer this question. I always like to keep a few secrets about myself.

What was your favorite nursery rhyme?

I’m not sure if this is the proper title or if it was my favorite, but “It’s raining, it’s pouring,” comes to mind.

What is your dream career?

Architecture. I have always been in love with buildings and maps, and I think something related to architecture or engineering is a perfect fit for my interests.

Anything else you would like to add?

Being on the MyBB team has truly been a life-changing experience, and I don’t think I will ever regret joining the team. I’m also really looking forward to seeing what the future holds for MyBB – whatever it is, I’m sure it’ll be great!

Getting Involved: Development site opens

Posted on August 19, 2009 by Chris Boulton

For the past seven years, MyBB has had an ever-growing and changing community, and through it all the “MyBB Group” itself is still a small set of dedicated individuals. Up until now MyBB has been developed in a relatively private fashion. Recently, it seems as the tides have turned; we have realized that you want more: you want the cutting edge, you want to be more a part of the “Real MyBB”, and you want the best free forum software that free can buy. We’ve listened to your advice, and we are now pleased to announce the availability of public access to our development site, including access to the latest and greatest cutting edge MyBB!

What does this mean for you?

With the community more closely involved with MyBB’s development, we will be able to ensure releases are more stable and you will be able to get access to the latest bug fixes and features. We hope that by making our development site available and open to the public that more people will take an interest in MyBB and get involved!

How exactly do you get access?

The link to the development site is http://dev.mybboard.net/. This will give you direct access to our MyBB 1.4 repository, MyBB 1.6 repository including all the latest features and fixes. This will also be where you report bugs with MyBB and its related projects. We have generated detailed information on our Wiki’s revamped Development section: http://wiki.mybboard.net/index.php/Development. The Development section will be the best place to ask your questions and concerns regarding the site, SVN access, coding standards, and other procedures.

Please note that the MyBB group officially supports only the latest release series, as of writing, MyBB 1.4.x. Although you have access to the latest MyBB 1.6.x code, there may be partially-committed features which are broken. We do not recommend using the development “trunk” on production forums, and they will NOT be supported by the support staff here.

August 2009 – Staff addition

Posted on August 4, 2009 by Chris Boulton

We have many helpful members at MyBB’s community forums, and it’s great when one of them is willing to join the MyBB team.

Welcome our newest staff member

Kieran, more commonly known to you as Polarbear541, will be joining the Support Team. He’s been a MyBB user since the launch of 1.4 and is comfortable with the way it works and in customising it. Don’t be surprised to see him answering questions and pointing people in the right direction. Please make him feel welcome.

Applications are open

If you would like to be a part of one of the teams we have here at MyBB (development, support, SQA), please feel free to submit an application about yourself through our contact form. Tell us a little bit about yourself, what position you would fit into best, and any past experience related to web development. Good luck!

MyBB 1.4.8 Released – Maintenance & Security Release

Posted on June 26, 2009 by Chris Boulton

MyBB 1.4.8 is now available on the MyBB website and is a general maintenance and security release.

This release fixes several reported issues with version released since 1.4.6 causing some incorrect functionality of MyBB. These bugs have been fixed to provide a more stable version of MyBB for public use.

What’s added/changed in this version?

One Low XSS Vulnerability fixed in the Archive – This is tagged as low because it requires moderator permissions. This vulnerability was discovered and reported by frostschutz.
One Medium XSS vulnerabilities fixed in Attachments – This vulnerability was reported by frostschutz.
Please note that this patch will remove the ability to open some types of attachments directly in your browser (e.g. QuickTime Movies), and will instead ask you to download them.
… Several other bug fixes

This release has been tested by our Software Quality Assurance group.

MyBB 1.4.7 to MyBB 1.4.8 Patch

This patch is only for users running MyBB 1.4.7. If you are running any other version of the MyBB 1.4 series then please download MyBB 1.4.8 from the MyBB site and update to it.

If you wish to manually patch your board please download “mybb_1407_patches.txt” and follow the instructions in that file.

mybb_1407_patches.txt

The manual patch set instructions only fixes the security vulnerabilities and is only made available to temporarily secure your forum until you have time to run the complete upgrade.

Information on upgrading, template changes and language changes can be found in the posts below.

Please note, that you need to run the upgrade script for this version.
This is so the templates may be updated.
There are no database schema changes in this version.

Reporting MyBB security vulnerabilities

As always, you can send through security related messages on the MyBB website from the Contact Us page.

MyBB 1.2.14 Patch

Users running MyBB 1.2.14 or any previous release of the MyBB 1.2 series may use the same manual instructions provided in the “mybb_1407_patches.txt” attachment (excluding the version change).

Upgrading from the 1.4 series

When upgrading from 1.4.7, you will not lose any custom themes, plugins or language packs which you may have installed.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process. You may download a ZIP archive of changed files here:

changed_files_1408.zip

You must then check for modified templates using the instructions below.

Upgrading from other versions

If you are upgrading from a version earlier than 1.2 then you will lose your custom themes, templates and language packs due to the number of changes between your version and the 1.2 series.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process.

Changed files since MyBB 1.4.6

announcements.php
attachment.php
forumdisplay.php
global.php
member.php
report.php
search.php
sendthread.php
showthread.php
syndication.php
xmlhttp.php
install/
- resources/
  - mybb_theme.xml
archive/
- index.php
admin/
- inc/
  - functions_view_manager.php
- modules/
  - forum/
    - management.php
  - style/
    - templates.php
  - tools/
    - adminlog.php
  - config/
    - plugins.php
    - spiders.php
  - user/
    - admin_permissions.php
    - users.php
inc/
- class_core.php
- class_language.php
- class_moderation.php
- functions.php
- functions_search.php
- plugins/
  - akismet.php
- cachehandlers/
  - memcache.php
- languages/
  - english.php
  - english/
    - global.lang.php
    - admin/
      - config_spiders.lang.php
- datahandlers/
  - pm.php
  - post.php
  - user.php

* Red represents files that contain security updates
* Green represents new files added in this release

Bugs fixed since MyBB 1.4.6

#51407 – change permission for admin user
#51377 – Plugins with Admin CP Hooks run on Plugin Updates page
#51257 – Syndication.php MySQL Error (Limit Option) [R] [C-StefanT]
#51177 – [Archive] sticky lack htmlspecialchars_uni() escaping [C-StefanT]
#51054 – Archive – SQL bug fetching attachments/posts with abandoned thread [C-StefanT]
#50833 – Birthday without day [C-StefanT]
#50441 – Search Bug w/ “and” [R] [C-StefanT]
#50324 – Missing space character [R] [C-Michael S.]
#50323 – Missing </tr> in Template modcp_ipsearch_result [R] [C-Michael S.]
#50291 – Validation Issue [C-Chris W B.]
#50287 – Akismet plugin username link problem [C-StefanT]
#50240 – Ability to delete templates [C-Chris W B.]
#49888 – [typo] memcache.php [C-StefanT]
#49838 – [pgsql] Reporting posts in unmoderated forums [C-StefanT]
#49461 – [typo] inc/cachehandlers/memcache.php [C-StefanT]
#49898 – Template problem with announcements and no threads [C-StefanT]
#49276 – canviewthreads error problem [C-StefanT]
#49258 – Notification about new reported posts via PM [C-StefanT]
#49256 – Notification about new PM from MyBB Engine [R] [C-StefanT]
#49255 – [pgsql] Report posts [C-StefanT]
#49251 – [Typo] class_moderation.php (1.4.?) [R] [C-StefanT]
#49111 – Percent of total posts [R] [C-StefanT]
#48814 – config_spiders.lang.php overrides $lang->language [C-sayakb]
#48773 – Usergroup email limit off by one error [C-sayakb]
#48771 – Merged Account Reputation Issue
#48692 – announcement in password protected forum [C-sayakb]
#48670 – Find user posts – not displaying new posts (when hitting limit) [R]
#48668 – Displaying search results as posts for moderators [R] [C-StefanT]
#48603 – Bug? Admins cannot see user list
#48601 – [pgsql] SQL error if threads are moderated [C-StefanT]
#47745 – editpost.php issue with closed forums [R]

Theme and template changes

Using the “Find Updated” link under the “Templates” page in the Admin CP you can find a list of the templates that have changed in this release that you’ve got one or more custom copies of.

Template changes

Since MyBB 1.4.6 the following templates have had changes to them:

modcp_ipsearch_result
forumdisplay_announcements_announcement

* Red represents the template must be updated or reverted to fix security problems

Language file changes

Since MyBB 1.4.6 the following language files have had changes to them:

global.lang.php
admin/
- config_spiders.lang.php

Either update your language packs to include the changes in these files or revert to the standard English language pack.

Plugins

Most of your MyBB 1.4.x plugins will work correctly with 1.4 without any updates.

MyBB 1.4.7 Released – Security Update

Posted on June 15, 2009 by Chris Boulton

MyBB 1.4.7 is a security update to the MyBB 1.4 series. It fixes 1 high risk security vulnerability. We recommend everybody upgrades to this release immediately or patch their boards with the manual patching instructions below.

This vulnerability affects MyBB 1.4.6. MyBB 1.2 is not affected.

Thank you to Jesse Labrocca for alerting us of this vulnerability.

MyBB 1.4.6 to MyBB 1.4.7 Patch

This patch is only for users running MyBB 1.4.6. If you are running an older version of MyBB then please download MyBB 1.4.7 from the MyBB site and update to it.

Please download the attached ZIP archive and replace the files in your forum directory with those from the ZIP archive.

changed_files_1407.zip

If you wish to manually patch your board please download “mybb_1406_patches.txt” and follow the instructions in that file.

mybb_1406_patches.txt

Please Note: You do not have to run the upgrade script for this release.

Reporting MyBB security vulnerabilities

As always, you can send through security related messages on the MyBB website from the Contact Us page.

MyBB 1.2.14 Patch

MyBB 1.2 is not affected.

Please note all users of the 1.2.x series are urged to upgrade to the latest release of MyBB. (1.4.7) MyBB 1.2 is no longer being supported, though security updates for the MyBB 1.2 series will last through December 2009.