Huji Lee answers your questions

One of our newest additions to the team, Huji Lee answered the next batch of questions. PS. Please welcome Huji. 🙂

Please tell us a bit about yourself.

I’m 27 (which probably makes the grandfather of the whole MyBB team), and I live in the United States. I’m a self-taught web developer with focus on Web 2.0 solutions developed using PHP and MySQL.

Besides MyBB, what are some of your hobbies?

Who said MyBB is a hobby?! Anyways, I used to play different musical instruments and listen to music a lot.

Who inspires you?

I’m not much an “inspiration” guy. In other words, everybody is an inspiration to me.

How long does it take you to fix the average bug with MyBB?

A few minutes.

What is your favourite type of music?

I listen to many kinds of music and I always want to keep myself open to new genres. You can find me listening to Bach, Metallica, Naruto (Japanese), Don Omar (Puerto Rican Reggaetón) and Lionel Richie in the same day!

Name an item that you one day wish to own.

If you asked this 15 years ago, my answer would definitely be a model helicopter! Right now, I’m thinking of an iPhone instead! 😉

If you didn’t discover MyBB, what do you think you’d be doing with your free time instead?

Coding for one of the other projects I dedicated my time to.

What program do you use to code in?

Notepad++ as my editor, an old version of Aqua Data Studio for some DB manipulations.

Which type of weather do you prefer?

I like it when the weather is cool.

How does it feel knowing that software you’ve played a part in is being used by people all around the world?

It brings excitement and responsibility.

Anything else you would like to add?

Some people ask me how is it that you only had less than 50 posts in the Community forums and you end up in the Developers team. I benefited from a MyBB based forum about a real issue in my life so I felt I owe MyBB team for making that possible; I talked to the lead developer Ryan Gordon and he figured I might be of assistance. If anybody who reads this also feels like he owes MyBB a favor, I think they should step forward too.

MyBB 1.6 Released

Today marks the 2 year anniversary since MyBB 1.4 was released. It is an honor to announce that today, we are releasing MyBB 1.6 Gold to the general public and that it is now available directly on the MyBB website.

MyBB 1.6 may be one small step for forum software, but it is one giant leap for MyBB. There are over 40 new features that have been built in to MyBB and countless tweaks, fixes, and performance optimizations since MyBB 1.4.

We’ve also updated the MyBB website to contain a feature tour of what is available in MyBB 1.6: http://www.mybb.com/features.

We recommend that all users upgrade to 1.6 so they can take advantage of the great new features in MyBB 1.6, but we recommend you plan your upgrade first. More information on upgrading and changes to templates, themes, plugins and languages can be found below.

Personally I’d also like to thank this community, for your everlasting support and for all of you who have been with us every step of the way. You’ve made this happen; MyBB is your forum software. Above all, I would like to thank every single team member who has made this journey with us. My debt to you is beyond measure. Thank you so much for the time, sweat, and effort you’ve given to this project and community. We are all grateful to you.

Ryan Gordon
MyBB Lead Developer


Upgrading from previous versions

You can update your copy of MyBB to 1.6 if you’re running MyBB 1.0 RC2 or onwards (which you should already be).

Be warned that with the following release:

  • Custom templates will need to be updated for this release via the “Find Updated Templates” tool in the MyBB 1.6 Administration Control Panel.
  • Most plugins and code modifications will need to be updated to work with MyBB 1.6. Make sure you disable your plugins before upgrading and make sure updated copies compatible with MyBB 1.6 are available.
  • Custom language packs from earlier versions will need to be updated as well.

Before you attempt to upgrade, ensure you have a database backup and a copy of the files currently in use on your board. This is so you can revert back to your earlier version if you need to or something goes horribly wrong with the upgrade process.

This is a moderately long upgrade process. Please make sure you don’t refresh pages whilst they’re loading, and don’t click the “Next” button more than once (if you don’t have JavaScript enabled). You should plan your upgrade before attempting to perform it.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process.

License

MyBB 1.6 is now distributed under the GNU LGPLv3 license. The only major difference between this license and the GNU GPLv3 license that MyBB has been licensed under since MyBB 1.4.2, is the ability for plugin and theme authors to have more freedom in the license they choose to distribute their work under.

To the average user, this change does not affect the way you use MyBB or run your forums. You do not need to change anything, you just need to make sure you comply with the terms and conditions set out via the GNU LGPL – which if you meet our current license agreement, you already do.

Theme and template changes

Several updates have been added to the theme which give you more control over the stylesheet and appearance of your forum and the new features. For this reason, your theme is updated to work with MyBB 1.6 during the upgrade process.

The same applies with templates; you’ll need to use the “Find Updated Templates” on any custom templates to update them due to the fact that many of them have been updated.

Language packs

Language packs also need to be updated as there are many changes in the language files. This includes addition of language strings and improving or updating of some current language strings.

Before you attempt to use any language pack with MyBB 1.6 you’ll need to ensure it has been updated accordingly to the changes made in the release.

Plugins

Most plugins can be updated with minimal changes. In most cases the version compatibility indicator can be updated safely within the plugin and it will work with MyBB 1.6 without further change. However, some plugins may require more extensive changes.

If you require assistance making your modification or theme compatible with MyBB 1.6 then please post in the appropriate code modifications or Template & Theme forum on http://community.mybb.com/

As of the release of 1.6, there are several plugins and themes immediately available for download from the MyBB Mods site and many more to come soon.

MyBB Merge System

As of this MyBB 1.6 release, a version of the MyBB Merge System compatible with MyBB 1.6 has been released on the MyBB website to the general public.

MyBB 1.4.14 Released – Maintenance Release

MyBB 1.4.14 is now available on the MyBB website and is a general maintenance release.

This release fixes a few reported issues with version released since 1.4.13 causing some incorrect functionality of MyBB. These bugs have been fixed to provide a more stable version of MyBB for public use. This will be the last maintenance release to the MyBB 1.4 series.

What’s added/changed in this version?

  • MyBB 1.4.14 is now fully compatible with PHP 5.3.
  • Attachment management now properly checks for the post key.

This release has been tested by our Software Quality Assurance group.

Information on upgrading, template changes and language changes can be found in the posts below.

Please note, that you do not need to run the upgrade script for this version.
There are no database schema changes in this version.

Upgrading from the 1.4 series

When upgrading from 1.4.13, you will not lose any custom themes, plugins or language packs which you may have installed.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process. You may download a ZIP archive of changed files here:

changed_files_1414.zip

You must then check for modified templates using the instructions below.

Upgrading from other versions

If you are upgrading from a version earlier than 1.2 then you will lose your custom themes, templates and language packs due to the number of changes between your version and the 1.2 series.

Before you attempt to upgrade, ensure you have a database backup and a copy of the files currently in use on your board. This is so you can revert back to your earlier version if you need to or something goes horribly wrong with the upgrade process.

Follow the general [Wiki: Upgrading] guide outlined on the MyBB Wiki to complete the upgrade process.

Changed files since MyBB 1.4.13

  • editpost.php
  • newreply.php
  • newthread.php
  • admin
    • modules
      • home
        • version_check.php
      • config
        • plugins.php
  • install
    • index.php
    • upgrade.php
    • resources
      • upgrade16.php
  • inc
    • class_core.php
    • init.php
    • function_serverstats.php
    • languages
      • english.php

* Red represents files that contain security updates
* Green represents new files added in this release

Bugs fixed since MyBB 1.4.13

  • #180 – PHP 5.3/6.0 Changes & Support
  • #630 – PHP 5.1+ generates “date_default_timezone_set” warning on every page
  • #959 – Magic Quotes Check
  • #1077 – Post key not checked for attachment management

Theme and template changes

There have been no template changes in this release.

Language file changes

There have been no language file changes in this release.

Plugins

All of your MyBB 1.4.x plugins will work correctly with 1.4.14 without any updates.

Official IRC Channel

The MyBB Group has had an IRC channel for several years hosted on irc.msgplus.net but it hasn’t been widely publicized for a long time and is only regularly used by a small number of people. Today we’re announcing something of a relaunch for the official MyBB IRC channel and with it our move to the Freenode network.

One of the main reasons for the move has to do with the fact that MyBB is now an open-source project. Freenode is a huge hub of open-source software groups and many well know projects maintain a presence there. By moving our channel onto the Freenode network we hope to add a new arm to our existing community whilst expanding our reach further into the wider open-source community. Also, since Freenode is quite a popular IRC network it’s possible the IRC users amongst you may already have an account registered there.

MyBB staff will be around some of the time but this is not an official support resource. Official support will remain to be solely available on the MyBB Community Forums. The IRC channel is intended as more of an informal place for users to come along and engage with other members of the community, although common sense rules will apply.

If you feel like coming along and joining us, you can do so by connecting your IRC client of choice to irc.freenode.net and joining #mybb. Alternatively a web-chat interface is available at http://webchat.freenode.net/.

Happy chatting.

Modifications policy changes, upcoming modification site upgrade, and more…

Hello,

Over the past several years we’ve listened to feedback from hundreds of members pertaining to our policies, or lack thereof, on plugins, modifications, and themes. This blog post will specifically address the changes we plan on implementing at our Official Community Forums and on our Official Modifications Site.

As most of you know, any plugin, code modification, theme, or graphics set on the MyBB modifications site are made available to you both free of charge and free of restriction in the sense and spirit of the open source community. We do this on a set of common ideals for which the MyBB Group believes will place this community in the right direction. To continue this effort we have decided to make some changes, outlined below. (If you have any questions, please first read this blog post to its entirety)

First are the changes we will be making to our policies on plugins, code modifications, and themes.

Policy Changes

  • Effective immediately, you will not be able to post new threads on modifications in the Releases forums of the Plugins & Code Modifications and Themes and Templates sections that are not provided on the MyBB Modifications Site. This does not affect threads that were there previously and can continue to be operated as normal.
  • As soon as the updates to the MyBB Modifications site are in place, the Releases forums of the Plugins & Code Modifications and Themes and Templates sections will be archived and new Release forums will be created which will be synchronized directly to the Official MyBB Modifications site. Once the old section has been archived, you will be able to continue to read your old threads but not continue to post or update them. This change is meant to start us off fresh.
  • As soon as the updates to the MyBB Modifications site are in place, the Discussion & Support forums will be archived and new Discussion & Support forums will be created to start off fresh with the new Releases forum. Essentially, it will be the Official Modifications Site Support Forum and we will begin to moderate it as such.
  • As soon as the updates to the MyBB Modifications site are in place, the Requests forum will be archived and will not be replaced by a new forum. We believe that the old system of requests creates a mindset of monetary value for these requests instead of intrinsic value. We hope that more people will create plugins for their own needs and release them to the community to benefit and as practice.
  • As soon as the updates to the MyBB Modifications site are in place, the Development forum will be more strict. We ask you only to post development discussions instead of items that are under development and won’t be available on the official MyBB Modifications site. We will ask the community to help us keep this forum in order by reporting threads and posts which don’t follow this guideline.
  • When MyBB 1.6 is released to the general public, the license will also be changed to LGPL. Further information about the difference between the GPL and the LGPL can be found below.
  • Between now and MyBB 2.0 we will also be working on a larger revamp of our modifications systems. Our aim to become the central and primary place where people go to get modifications and where developers go to submit them. More details on this are outlined further down in this blog post.

In summary, the MyBB Themes & Modifications sections of community forums have become a breeding ground for most everything but the Themes & Modifications sections for the MyBB Modifications Site. We are, in essence, taking it back to its original purpose.

Modification Site Upgrades and Changes

The policy amendments outlined above are the first step in a larger round of changes planned for the official modifications community, which will include the development of several enhancements and new features to the MyBB Mods website. A follow-up blog post will be made in the coming weeks outlining the planned changes in more detail but in the meantime here are a few areas in which you can expect to see changes in the future.

  • Automated release announcements (as detailed above)
  • Improvements to download organization and searching
  • Improvements to the submission validation procedure
  • New archiving features

The upcoming changes are based both on user feedback and our own ideas and visions for the future. We look forward to sharing more details with you soon.

Future plans for the modification system on MyBB.com

In the future, we plan to be providing a system where we support both commercial and non-commercial resources. Initial work would be submitted under an OSI-approved license – and, by using a promotion system involving user and quality ratings, can be upgraded to a commercial (or custom) license. This system would mean authors are encouraged to produce good plugins, provide upgrades and keep them up to date before gaining “Trusted Developer” status and the ability to provide commercial modifications through MyBB.com.

Modification Policy Changes FAQ

1. Will Paid Plugins or Themes be completely removed or banned?

No, they won’t. You will still be able to advertise them in your signature, post your MyBB sites in the Showcase forum, and provide services in the Requests/Services/Jobs forums. You will not be allowed to post threads in the Plugins & Code Modifications and Themes and Templates sections that are not/will not be on the MyBB Modifications Site.

2. Will the MyBB Modification Site allow paid modifications or non-GPL compatible licenses?

At this time we do not have any plans to allow either of these. We cannot allow non-GPL compatible licenses right now on the MyBB modifications site at this time and we have no plans to allow them. We have plans to eventually launch a central shop for these paid/proprietary modifications but with certain limitations and required processes, as outlined above.

3. So does that mean I cannot sell my MyBB modifications?

No, you are free to provide your own services in the Requests/Services/Jobs forum and sell your own modifications where ever you’d like outside of the MyBB Community Release Forums. These changes, apart from the upcoming license change, have nothing to do with the MyBB Software itself, just to the Plugins & Code Modifications and Themes and Templates sections on the MyBB Community Forums and the MyBB Modifications site.

In fact, the GNU/GPL allows you to sell your plugins for monetary value and we have no disagreement with that. When MyBB 1.6 comes, which will be on the LGPL, you will also be legally able to distribute or sell your modifications under non-GPL compatible licenses.

Please note that we will not be sending out C&D notices to those of you already distributing non-GPL-compatible derivative works (plugins, themes, or code modifications).

4. Can I still run paid plugins on my MyBB forum?

Yes, you definitely can. These changes will in no way effect your MyBB forum in any way. I can’t be any clearer when I say these changes, past the MyBB 1.6 license change, only affect specifically the MyBB Community Forums and the MyBB Modifications Site.

5. What is the difference between the GPL and the LGPL?
Wikipedia defines the main difference as follows: “The LGPL places copyleft restrictions on the program itself but does not apply these restrictions to other software that merely links with the program. There are, however, certain other restrictions on this software.”

What this basically means is that modifications (plugins, themes, code modifications, etc) created for MyBB will be able to released under proprietary licenses. This is not a change from our current stance, merely a clarification, or ‘fix’ if you will, to our previous license terms.

6. So what is the MyBB Group’s stance on using proprietary licenses on modifications?

We believe that proprietary licenses, while they have their uses, hinder the continued “innovation” mindset so we strongly discourage you to do this if you’re not a professional. There is certainly a place and a use for protecting your code from senseless redistribution if you have a good business plan, but it is only a good idea if you’re a professional who knows what they are doing and can provide the support, services, maintenance, and upgrades to their modifications.  We encourage you to evaluate the actual value of what you are thinking of selling before releasing a modification with a proprietary license.

7. Are these plans set in stone?

As the saying goes, plans are just plans and plans always change. While this does represent what the MyBB Group plans to do, we can never 100% ensure this is exactly how things will workout in the end.

Thank you for taking your time to read this exhaustive blog post.

Regards,
The MyBB Team

MyBB.com Thanks You

MyBB.com Donation Drive

Hi again folks.

Our recent donation drive to purchase the domain MyBB.com from another party who was domain parking was a great success. In just about a month we were able to raise $3,000 in donations from the general community and staff members. We would like to sincerely thank everyone for their donation, and as well as to those who helped spread the word.

Some of you may have noticed that we have been using the domain for a while before this announcement; this is because Chris Boulton added to his contribution in order to secure the domain before the offer expired. We left the donation drive running in order to pay Chris back for his added generosity and have been able to pay him back now that we’ve made the full amount intended.

There are a number of people we’d like to give a special thank you to; firstly to labrocca for communicating with the previous owner of the domain and offering the deal to us – and his huge pledge towards the domain! Secondly we thank Chris Boulton for his equally huge pledge and continued support towards the MyBB project.

And now those who donated…
(note that leaving your username was optional and only those who filled in the field can be listed)

Donators:

Polarbear541
Ryan Gordon
Timothy Bell
pkeod
Isaiah 53
n1tr0b
genuineparts
Frictional Games
Martin Sassenberg
Thomas Mann
Prtik
stoffer
Abu Sabah
v7web
topps
Adicted
John Briggs
djdubuque
bozonessinc
Joshua Mayer
R Hora
The_Game_Master
Rune Christensen
BitzDefender
Fluid Mantis
giuseppe.rondelli
southernsoapers
i88power88
gOOvER
Doug McComber
buanzo
Pirata Nervo
Menthix
Josh G
Genko Solutions
Dennis Tsang
Shedrock
GTOMEX
Alex597
lacomputerworld
orc_dragoon
Nickman
The Crasher
Leo Ghost
Scoutie44
sayravai
MattRogowski
MadMikeyB
glimmer.ch
Robert Trier
jessica77
BeeJay
zingiri
Tazfan
John Weet
Cipher 2009
siopk
telters
zoog
le.gentleman
gamerxgirl
Snowy
CynthiaL
georgia_tech_swagger
David Elliott
Darkmew
eden cory
FBI
leesester
laie_techie
Lukas Larsson
camgaertner
Angel Hernandez
Chris Ravenscroft
d3wlin
dyrer
justinhyns
YCMaker
labrocca
DAMINK & ftw community
Jeff Bryngelson
Gimgak
clk824
Starpaul20
Alex Smith
Blaxus
Kenneth King
gfn
Curt
SunGm_Team
luamilkshake
Martin Binder
Dragan Franjic
Slasher
ozanakkaya
Lukasz_n
Tomasz Gruca
Shane Elmore
elusive
sos_21tc
alirex
optech
CoolRunner82
Alan Crisp
Eduardo Carrillo
davey6
Jerzy Wrobel
Combined Science Center
derdemo
In2uitiv
SomeoneX
Bergersen AS
chishikinohito
michfrm
Lorenzo Van de Pol
terrymason
Timmooo
Viira
FrashMX
I Am Divine
KillerX3189
Trevor Smith
anumalas
Screach
MoDDeR
Tim Sampson
kab012345
Gothic
Lennart Sauter
Infranight
gimmezell
mynetx
Tobias schaffitzel
iHacker
d3wlin
Henrietta Richardson
KuJoe
Goggalor
karlitosway
Karl Falmbigl
StangsForSale.com
Nicholas Ilushko
Cohen
jkellz
Louis6321
iarspider
Disciple of Nagash
Tierney
beth
handeyman
Mr. Chinn
cableboy
Yang
magent
Audentio
_Undefined

Phew, what a list.

A huge Thank You to each and every one of you – and to those who donated as a community/group please make sure you pass the thanks along.

MyBB Group

(P.S. Please do note that we are still in the process of properly redirecting all the sites over to the new domain.)

MyBB 1.6 Beta Released

The MyBB Group is proud to release the first public beta of MyBB 1.6.  There are over 48 new features some of which we have featured in two of our previous blog postings (sneak previews: part 1, part 2).  In addition, there are a number of improvements and bug fixes.

MyBB 1.6 aims to provide a number of fresh new features to the 1.4.x code base.  We had backward compatibility in mind, and so most themes and modifications designed for 1.4.x should work with 1.6 with minimal changes.

Beta software

As this is still beta software, we expect there are going to be bugs, anomalies and other related issues.  Please report any bugs in our development tracker, with all the information you may find relevant (error verbatim, reproduction procedure, server software, browser, etc), and please search before posting.  At this time we do not recommend running this on a production forum.  It is highly recommended that you create backups of your files and database before attempting to use MyBB 1.6.

Support

The support team will be providing limited official support for the beta software. Our concentration for support will still be on our stable series, 1.4.x, so please be patient.  As usual, we can only provide support for assistance in using MyBB’s features.  We cannot provide support for customizations including plugins, modifications, and themes.

Download and further information

The MyBB 1.6 Beta can be downloaded here.  Please read our 1.6 FAQ as well.

Donation drive for a domain: MyBB.com

MyBB.com Donation Drive

Hi there folks.

What’s all this about?

For some time now the domain MyBB.com has been owned by another party and not used (also known as domain parking). Numerous attempts have been made to purchase the domain for the MyBB project, but the price has always been too far out of our reach.

It is not uncommon for 4 letter domains to be sold for upwards of $10,000 – in fact, when first approached, we were told they wanted $20,000 for MyBB.com. Thanks to labrocca, we now have a price that is much more feasible for us to obtain. A special deal is open just to the MyBB Group to get this domain, but the offer is not open indefinitely.

We need to raise $3,000 to secure the domain.

Why do we want this?

We’re glad you asked.

The MyBB.com domain will be beneficial to reach a larger audience who will see us as a striving project in need of recognition as the very competitive forum solution that we are.

MyBB.com is less effort to type in, and remember, than MyBBoard.net – which can be confusing. Is it MyBBoard or MyBBBoard? If it’s MyBBoard, is the software called MyB Board, or MyB?

When you try to recall a website’s domain, one of the hardest parts is the name and spelling, the next hardest is if it’s .com, .net, .org, etc. Most times we’ll try .com first – if we get the domain, you’d get us first try!

What have you done for me?

Over the years we have provided you with a forum solution that you’ve used for your hobbies, entertainment, leisure, business or maybe even a MyBB resource forum – whatever the case, we’ve been there with you every step of the way.

Where do we start?

Our staff members, labrocca and a few forum members have already expressed interest in donating an amount for the domain. Many thanks to Labrocca and Chris Boulton for already pledging $1,000 each, which brings down the donation goal to $3,000 but we’ll still be quite a bit off. Without our staff and valued members we would not be where we are today, and without you, we cannot advance into a new era. We’re counting on your donations to reach this goal.

Please consider how much you are able to donate towards our target, and if not, you can still assist us by spreading the word to your community or perhaps other MyBB users who may not know. Anything you can do will help us, and we are thankful for everything.

I’ve heard enough, I’m ready to get involved

We have setup a page on our website for the donation drive at our donation drive page. You may find all the information you need to donate there.

If you would like to spread the word we have created an image you may place in your signature that will show the progress of the donation drive. Just place this into your signature:

[url=http://mybboard.net/donation-drive/][img]http://mybboard.net/assets/images/donation_drive_sig.png[/img][/url]

If you would also like to put it into your website, here is the HTML code:

<div align="center"><a href="http://mybboard.net/donation-drive/"><img src="http://mybboard.net/assets/images/donation_drive_sig.png" alt="" /></a></div>

Thank you all in advance,
MyBB Group.

MyBB 1.4.13 Released – Security Patches to MyBB 1.4.12

MyBB 1.4.13 is now available on the MyBB website and is a patch to MyBB 1.4.12 which introduced two regressions related to the security updates in MyBB 1.4.12.

This release is to ensure that all users on 1.4.12 have the proper security patches applied to their forum.

Thank you to Pirata Nervo and Labrocca for alerting us of these issues and to Stefan Esser for assisting us in a patch for Issue #843.

What’s fixed in this version?

This update does not require running the upgrader.
There are no database schema, language string, or template changes in this version.

MyBB 1.4.12 to MyBB 1.4.13 Patch

This patch is only for users running MyBB 1.4.12. If you are running an older version of MyBB then please download MyBB 1.4.13 from the MyBB site and update to it using the general [Wiki: Upgrading] guide.

Please download the attached ZIP archive and replace the files in your forum directory with those from the ZIP archive.
changed_files_1413.zip

Alternatively, if you are running MyBB 1.4.11, you may follow the “MyBB 1.4.11 to MyBB 1.4.12 Patch” instructions in the MyBB 1.4.12 announcement and then apply the MyBB 1.4.12 to MyBB 1.4.13 patch above.

The following files were changed since the initial MyBB 1.4.12 release:

  • inc
    • datahandlers
      • post.php
    • functions.php
    • class_core.php

* Red represents files that contain security updates
* Green represents new files added in this release

Reporting MyBB security vulnerabilities

If you think you’ve found a vulnerability in MyBB, we advise you not to publicly post it on these forums or publicly release information about it elsewhere until we’ve had time to prepare and release a patch.

As always, you can send through security related messages on the MyBB website from the Contact Us page.

MyBB 1.2.14 Patch

All users of the 1.2.x series are urged to upgrade to the latest release of MyBB. (1.4.13) MyBB 1.2 is no longer being supported and security updates for the MyBB 1.2 series ceased as of January 1, 2010.

Thank you,
MyBB Team

MyBB 1.4.12 Released – Security & Maintenance Update

MyBB 1.4.12 is now available on the MyBB website and is a security and maintenance update to MyBB 1.4.11. This will be the last maintenance release of the MyBB 1.4 series. We will still continue to provide security updates for the MyBB 1.4 series.

This release is to ensure that all users on 1.4.11 have the latest fixes, and to patch two medium-risk security issues and a low risk security issue within MyBB.

Thank you to Stefan Esser and Labrocca for alerting us of these issues.

What’s fixed in this version?

  • #309 – Direct access of some files generates PHP errors
  • #374 – editpost editpost_start hook run twice
  • #466 – Last post date after custom merge
  • #556 – Wrong additional groups in ACP
  • #565 – Custom view in browse users error
  • #575 – Redundant Code in inc/class_parser.php
  • #583 – UTF8-conversion fails with PostgreSQL
  • #586 – Posts after updating the attachments of drafts
  • #592 – Forum subrscription displaying always the wrong image
  • #593 – Image upload
  • #594 – portal_pms template not getting cached
  • #597 – $yearsel not defined
  • #598 – Split thread – post icon
  • #604 – Make private event public
  • #606 – Server Statistics – Hostname and hosturl not working
  • #609 – Wrong first day of week in week view
  • #613 – Error is invalid smilie path is used
  • #618 – Alternating trows on profile page
  • #621 – global_pm_alert template typo dismis_notice
  • #622 – Reputation by a deleted user
  • #623 – Upgrade 1.1.18 -> 1.4.11
  • #627 – private_nomessages template not getting cached
  • #632 – Settings not selected if error appears
  • #634 – firstpost of copied thread set to 0
  • #643 – Missing field when fetching latest announcements into portal page
  • #647 – function generate_thumbnail generates warning
  • #650 – Status Icon of Forum not shown on Forum Subscription List
  • #660 – forumdisplay_rules not cached
  • #662 – member.php and $referrals
  • #672 – threadviews task won’t disable from settings change
  • #673 – Typo in member.lang.php $l[‘hide_dob’]
  • #678 – Hard-coded language string in /admin/modules/style/templates.php
  • #684 – Typo in postbit when ignoring users
  • #685 – Akismet “unmark” does not reduce number of “akismetstopped” field.
  • #688 – Old avatars are not deleted
  • #689 – Usercp.php + Modcp.php – XHTML 1.0 Problem ($bdaymonthsel)
  • #703 – Mass Mail Auto Generated Text Version
  • #716 – Error reads “[WRITE] Unable to slave database”, should be select
  • #720 – UTF8 conversion causes mysql error on blob/text fields
  • #722 – Group Join Requests From Guests
  • #727 – Converting a forum with threads to a category should be disallowed
  • #728 – Post Edit bypasses max. [img] MyCodes per Post
  • #749 – Portal “Since then, there have been:” counts unapproved threads and drafts
  • #750 – Theme importing ignored error
  • #759 – Stars are shown on user profile even if they are set to 0 for the group
  • #764 – attachment MyCode isn’t parsed in feeds
  • #774 – mysqli_pconnect function not exists
  • #778 – db reconstruction in inc/functions.php $config check fails
  • #791 – Ratings column of forum display ignores group settings
  • #794 – Badwords preg_quote fix
  • #802 – Stars are shown in Postbit even if they are set to zero and no image is linked
  • #809 – Unviewable threads showing on portal
  • #810 – Portal post shows smilies even when set not to in post
  • #812 – allow [img] in posts depends on MyCode being allowed
  • #816 – Duplicate htmlspecialchar in inc/functions_online.php
  • #821 – syndication.php errors
  • #822 – Use of $_POST in ./xmlhttp.php
  • #835 – MyBB, dl(), and PHP 5.3.x – no dl() in many 5.3.x releases
  • #836 – Debug code left in inc/class_mailhandler.php
  • #843 – Improvements to PHP’s mt_rand RNG seeding
  • #849 – We can set date of birth as future date
  • #852 – CSRF issue in usercp2.php
  • #862 – Rebuilding Attachment Thumbnails Plugin Hook Name
  • #870 – Missing warning messages
  • #871 – Datahandler merge ignores updating post message variable

This release has been tested by our Software Quality Assurance group.

This update does require running the upgrader.
There are database schema, language string, or template changes in this version.

MyBB 1.4.11 to MyBB 1.4.12 Patch

This patch is only for users running MyBB 1.4.11. If you are running an older version of MyBB then please download MyBB 1.4.12 from the MyBB site and update to it using the general [Wiki: Upgrading] guide.

Please download the attached ZIP archive and replace the files in your forum directory with those from the ZIP archive.
changed_files_1412.zip

A manual patch file is not being offered for this release due to the multitude of changes required to implement the security fix. We apologize for any inconvenience this causes.

The following files were changed since the initial MyBB 1.4.11 release:

  • announcements.php
  • calendar.php
  • captcha.php
  • editpost.php
  • forumdisplay.php
  • managegroup.php
  • member.php
  • modcp.php
  • newreply.php
  • newthread.php
  • portal.php
  • private.php
  • reputation.php
  • showthread.php
  • syndication.php
  • usercp.php
  • usercp2.php
  • xmlhttp.php
  • jscripts
    • inline_moderation.js
  • install
    • resources
      • mybb_theme.xml
      • upgrade16.php
  • admin
    • index.php
    • modules
      • forum
        • management.php
      • user
        • mass_mail.php
        • users.php
      • config
        • mod_tools.php
        • settings.php
        • smilies.php
      • tools
        • recount_rebuild.php
        • system_health.php
      • style
        • templates.php
        • themes.php
  • inc
    • class_core.php
    • class_custommoderation.php
    • class_mailhandler.php
    • class_moderation.php
    • class_parser.php
    • db_mysqli.php
    • functions.php
    • functions_image.php
    • functions_online.php
    • functions_serverstats.php
    • functions_upload.php
    • functions_user.php
    • init.php
    • plugins
      • akismet.php
    • languages
      • english
        • global.lang.php
        • member.lang.php
        • messages.lang.php
        • warnings.lang.php
        • admin
          • forum_management.lang.php
          • user_groups.lang.php
    • datahandlers
      • post.php
      • user.php
    • cachehandlers
      • eaccelerator.php
      • memcache.php
      • xcache.php

* Red represents files that contain security updates
* Green represents new files added in this release

Reporting MyBB security vulnerabilities

If you think you’ve found a vulnerability in MyBB, we advise you not to publicly post it on these forums or publicly release information about it elsewhere until we’ve had time to prepare and release a patch.

As always, you can send through security related messages on the MyBB website from the Contact Us page.

MyBB 1.2.14 Patch

All users of the 1.2.x series are urged to upgrade to the latest release of MyBB. (1.4.12) MyBB 1.2 is no longer being supported and security updates for the MyBB 1.2 series ceased as of January 1, 2010.

Thank you,
MyBB Team

Important Update: April 16, 2010

If you applied the MyBB 1.4.12 update before April 16, 2010 7:00 UTC we recommend you redownload the changed file package and reupdate the inc/functions.php file to your forum. The change fixes an issue identified in the previous hot patch relating to the random number generator. We are sincerely sorry for the inconvenience caused by this.

Thank you for your cooperation.