Topic: SMF 2.0.4 and 1.1.18 critical security patches released

[JonezJeA]

Question: is it safe to remove the 2.0.3 patch from the package manager after the 2.0.4 patch is installed?

[mashby]

Question: is it safe to remove the 2.0.3 patch from the package manager after the 2.0.4 patch is installed?

Yes.

[Arantor]

NO IT IS NOT.

You can *delete* the patch provided you do NOT uninstall it. (Deleting the package will just remove the uninstall instructions. If you uninstall it, the vulnerabilities will be returned, regardless of whether the 2.0.4 patch is installed or not)

[JonezJeA]

NO IT IS NOT.

You can *delete* the patch provided you do NOT uninstall it. (Deleting the package will just remove the uninstall instructions. If you uninstall it, the vulnerabilities will be returned, regardless of whether the 2.0.4 patch is installed or not)

I won't uninstall it
I'm not one of those idiots x)

[mashby]

Remove=delete

[Arantor]

We should not be blasé about this.

How often do we tell people not to delete things but to uninstall them first? This happens... what... once a week that we have to deal with someone who's deleted a mod without uninstalling.

[mashby]

Yes, for that I am sorry. Wasn't clear enough. At least JonezJeA understood remove wasn't uninstall.

[pacefalu]

I am new to managing a website forum.  I am using version SMF 2.0.4 and I am trying to down load and install the patches...  I have gone to the down load area but can not find where the security patches are and how to down load and install...  I only see third party updates...  Is there a button I can press that will simply down load and install my security patches...

All so I am getting the "Unable to verify referring url. Please go back and try again." error message and I have search your community and have been told about the url values have to match exactly...  How do I check this information and how do I correct it...  I have been through all of the options in the admin area...  I would like to apologize for the newbie requests, but I am at the end of my rope.

[Gary]

You're running 2.0.4, you do not need to update.