Simple Machines Community Forum

Simple Machines => News and Updates => Topic started by: Compuart on May 20, 2009, 08:22:19 PM

Title: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Compuart on May 20, 2009, 08:22:19 PM
Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, addressing a few vulnerabilities found in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.

It should be noted that SMF 2.0 RC1-1 is not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. The new Curve theme is still scheduled for SMF 2.0 RC2, as announced (http://www.simplemachines.org/community/index.php?topic=293556.0) earlier.

To upgrade, use the package manager to upgrade to either 1.1.9 or 2.0 RC1-1, depending on your version. Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Users still running the SMF 1.0.x branch can upgrade to SMF 1.0.17 via the same procedure.

If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual (http://docs.simplemachines.org) about installing (http://docs.simplemachines.org/index.php?board=2.0;sort=subject) and upgrading (http://docs.simplemachines.org/index.php?board=3.0;sort=subject). If you experience a session verification error when inputting FTP details for updating process, please see this (http://www.simplemachines.org/community/index.php?topic=278824.0) topic.

It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page (http://custom.simplemachines.org/upgrades/) for all versions.

Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!

Regards,
Simple Machines

 
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: mcblaber on May 20, 2009, 08:42:19 PM
Great work developers! :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Fustrate on May 20, 2009, 08:45:42 PM
/me applauds :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Amacythe on May 20, 2009, 08:52:26 PM
Congrats!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Trekkie101 on May 20, 2009, 08:53:13 PM
Nice! :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Kill Em All on May 20, 2009, 08:54:14 PM
Yay. All we need now is the official release of 2.0!   ;D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JBlaze on May 20, 2009, 08:59:30 PM
Very nice work to all who contributed. I think a round of beer is on the house tonight :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Maxtor on May 20, 2009, 09:06:26 PM
nice work! i hope to work with my mods :P
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: foxit2007 on May 20, 2009, 09:07:21 PM
good job. thanks

foxit2007
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: aldo on May 20, 2009, 09:08:13 PM
Good job ^_^ All updated...
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: alex30 on May 20, 2009, 09:11:13 PM
Going to update now, thanks!  ;D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Antechinus on May 20, 2009, 09:16:38 PM
Good stuff. Champers all round. :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: M-DVD on May 20, 2009, 09:19:03 PM
Good, now there is a new method to encrypt the names of the attachments not predictable as the previous one.

Good work :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Antechinus on May 20, 2009, 09:20:55 PM
Ok, we have one patch and four zips. I think an explanation might help.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Nibogo on May 20, 2009, 09:23:24 PM
Great work! Thanks :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Mick. on May 20, 2009, 09:40:44 PM
Thank you guys for all you do :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Crasy on May 20, 2009, 09:43:21 PM
Very nice work to all who contributed. I think a round of beer is on the house tonight :)

You deserve a round yourself buddy.

Great work to all who were involved.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Daniel15 on May 20, 2009, 09:44:04 PM
Nice work :)
Time to update my forums soon :P

Quote
Ok, we have one patch and four zips. I think an explanation might help.
First one is a package installable via the Package Manager, used via automatic updates. The other three are archives of the modified files.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: 4Kstore on May 20, 2009, 09:59:19 PM
Thanks!!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Sarge on May 20, 2009, 10:03:17 PM
Yay!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JimM on May 20, 2009, 10:11:58 PM
Yessss!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: ApplianceJunk on May 20, 2009, 10:37:15 PM
All updated ok to SMF 1.1.9 @ ApplianceJunk.com :)

Thanks!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JayBachatero on May 20, 2009, 10:47:09 PM
http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: catfished on May 20, 2009, 10:51:22 PM
Thanks a bunch. I updated all 4 boards in about 2 minutes. Kudos to SMF! I was really waiting for this one for obvious reasons. ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tiribulus on May 20, 2009, 10:56:40 PM
EXCELLENT !!!

Good work. I managed to somehow not get hit by this hack, but of course did this upgrade anyway. I had to work around some SP code in index.php, but went fine.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Sarge on May 20, 2009, 11:00:15 PM
http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released

You beat me to it :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: TheListener on May 20, 2009, 11:02:03 PM
 :(

Had an index php error.

Will have to wait for one of the tech boys.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: charlottezweb on May 20, 2009, 11:10:35 PM
Nice work ladies and gents!  :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: metallica48423 on May 20, 2009, 11:11:19 PM
Added a digg link
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Sarge on May 20, 2009, 11:16:04 PM
Added a digg link

Jay already did.

http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: [unplugged] on May 20, 2009, 11:16:14 PM
Very nice. Flawless upgrade. Thank you all.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: metallica48423 on May 20, 2009, 11:24:26 PM
Added a digg link

Jay already did.

http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released

Yes, and I added it to the original post :P
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tiribulus on May 20, 2009, 11:25:43 PM
:(

Had an index php error.

Will have to wait for one of the tech boys.

If you're using Simple Portal, have a look at that thread.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: windrider on May 20, 2009, 11:29:30 PM
Package manager doesn't seem to want to work and it isn't seeing the file when upload it manually.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Sarge on May 20, 2009, 11:30:47 PM
Package manager doesn't seem to want to work and it isn't seeing the file when upload it manually.

Please start a new topic in the respective support board. :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: busterone on May 20, 2009, 11:34:05 PM
Good job everyone.  :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Stallyon on May 20, 2009, 11:58:10 PM
Awesome work on these security patches!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Yahmez on May 21, 2009, 12:01:45 AM
Package manager doesn't seem to want to work and it isn't seeing the file when upload it manually.
This happened to me too. I had to do the edits manually. Thanks SMFers for a much needed security patch!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: RoarinRow on May 21, 2009, 12:21:36 AM
Awesome, thank you!   8)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: catfished on May 21, 2009, 12:26:55 AM
:(

Had an index php error.

Will have to wait for one of the tech boys.

If you're using Simple Portal, have a look at that thread.

I'm using Simple Portal on two of my boards but I didn't have any problems with the update. Is there something I should check? If so, what thread are you referring to?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Filipina on May 21, 2009, 12:29:02 AM
Awesome thanks.. 60 Mods and the upgrade is complete...  I had to do a manual on index.php and Subs-Members.php but I am not complaining. I feel a lot safer now and thanks for all the hard work :) 
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: mashby on May 21, 2009, 12:41:05 AM
Rock and/or roll...Thank you, SMF Team!
:)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: M@nNiak on May 21, 2009, 12:41:48 AM
upgrading right now! thanks.  ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Sabre™ on May 21, 2009, 01:02:07 AM
Great work team! (http://www.getsmile.com/emoticons/energizer-smileys-51935/friends1.gif)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: roco on May 21, 2009, 01:09:05 AM
THX really (http://poligon.ricoroco.com/fora/smf/Smileys/classic/oklaski.gif)

and really good job (http://poligon.ricoroco.com/fora/smf/Smileys/classic/drinks.gif)

r.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: sAce on May 21, 2009, 01:25:22 AM
more than 100 mods, and upgraded without a problem :) and installed 2 new mods as well rock on guys
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: TheListener on May 21, 2009, 01:27:06 AM
Now I have recovered from how many mods you mention what the heck are they?

Thought 60 was a lot.  :o
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JBlaze on May 21, 2009, 01:28:04 AM
Now I have recovered from how many mods you mention what the heck are they?

Thought 60 was a lot.  :o

Try having 148 with no errors :P
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: TheListener on May 21, 2009, 01:30:04 AM
 :o

All I can say to that is:

Show Off
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JBlaze on May 21, 2009, 01:31:39 AM
:o

All I can say to that is:

Show Off

Wasn't my forum though. :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: TheListener on May 21, 2009, 01:32:47 AM
Suppose you want me to let ya off then!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: IACS_CM on May 21, 2009, 01:41:07 AM
Nice Work.

No issues here re upgrading.

Thanks
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: ATICE on May 21, 2009, 02:06:34 AM
I got only two errors during installation...

./Sources/Subs-Post.php
&
./Sources/Display.php

Test Failed...

Should I manually install these?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: mrtrc266 on May 21, 2009, 02:08:46 AM
WOOOHOOOO!!! Heavily Modded and it went as smooth as silk.
 
Thank you very much SMF Team, keep up the great work!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JBlaze on May 21, 2009, 02:14:41 AM
I got only two errors during installation...

./Sources/Subs-Post.php
&
./Sources/Display.php

Test Failed...

Should I manually install these?

This topic is not for support. Please post a topic in your respective version's support board.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: MoHsEn F on May 21, 2009, 02:25:27 AM
Good job , thanks
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: TheListener on May 21, 2009, 02:36:20 AM
Sorted it by uninstalling the portal upgrading then reinstalling the portal.

Phew.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Jorin on May 21, 2009, 02:38:51 AM
Thank you very much. That was real fast!  :)

Is the change in index.english.php important? I ask because we use a german formal variation of the language files and when I compare the language file with WinMerge all rows are different (english <-> german) and I can't find a new line or new text.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Fustrate on May 21, 2009, 02:53:03 AM
The newlines might have changed from CRLF -> LF or LF -> CRLF... might need to check for that.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Jorin on May 21, 2009, 03:00:22 AM
Thanks, but there are no new lines, hm? Only some changes in text?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: lurkalot on May 21, 2009, 03:04:27 AM
Can someone explain what the patch actually fixes? 

We were advised to turn off attachments and avatar uploads etc.  Does this fix the problem, and can we now turn them back on?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tanks on May 21, 2009, 03:10:47 AM
Upgrade was problem free even with a tons of mods installed.

Thanks :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: riker on May 21, 2009, 03:23:45 AM
Does anyone know when RC2 is out and how long has the smf 2.0 project been worked on now ?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Electro-X- on May 21, 2009, 03:30:44 AM
YAY!!! I thought its gonna be 2.0RC2 cuz I want the curve theme. Anyway good job developers of simple machines!!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: riker on May 21, 2009, 03:32:46 AM
YAY!!! I thought its gonna be 2.0RC2 cuz I want the curve theme. Anyway good job developers of simple machines!!
At this stage I just want a theme that works.  I dropped back to IE7 last night and noticed other thigns in the cpanel that didn't work so had to use a different browser again
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: HecKel on May 21, 2009, 03:33:09 AM
I know this is not a support topic, but I think I should warning you / asking you about this.

I have two forums with RC1, one test forum and one  really community. Now...

I ONLY have the upgrade link in the test forum, and NOTHING in the "real" forum (sorry, but in the morning my English is worse than ever...), why this happens?

Another thing, I tried to upgrade the test forum, and I have got an message saying the packages is empty. This is suppose to happen?
Does anyone know when RC2 is out and how long has the smf 2.0 project been worked on now ?

The answer is: When its ready :) (and I am not joking, this is really the answer)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: riker on May 21, 2009, 04:24:53 AM
Quote
The answer is: When its ready :) (and I am not joking, this is really the answer)

That was a complete and utter waste of time and no one likes a back seat driver either.  Anyway by the time SMF 2.0 is final I'm sure Mybb and Phpbb will new versions out!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: (.:Al-Pacino:.) on May 21, 2009, 04:25:08 AM
Does this Patch fix the avataruploadhack of krisbarteo?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Dzonny on May 21, 2009, 04:28:08 AM
Very nice job guys, i'm glad this is finally released... :D
Congrats!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: ScopeXL on May 21, 2009, 04:30:33 AM
Nice update, always enjoy seeing security vulnerabilities fixed :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Marcus Forsberg on May 21, 2009, 04:30:47 AM
Great work! :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Jorin on May 21, 2009, 04:31:05 AM
Does this Patch fix the avataruploadhack of krisbarteo?

I think that's what this fix is made for.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Powerbob on May 21, 2009, 04:33:48 AM
Well done guys 8)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: (.:Al-Pacino:.) on May 21, 2009, 04:36:03 AM
ok!

Now my Users can upload finally tehir avatars!!!

THX SMF!

It RulEzZZ :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Fustrate on May 21, 2009, 04:38:21 AM
Quote
The answer is: When its ready :) (and I am not joking, this is really the answer)

That was a complete and utter waste of time and no one likes a back seat driver either.  Anyway by the time SMF 2.0 is final I'm sure Mybb and Phpbb will new versions out!
so the quality of the forum is based on how often new releases are made?

Regarding your above post, work on RC2+Curve slowed down and even stopped while we worked on this patch. Which would you rather have - an exploited forum, or Curve? Rest assured, work is starting right back up again. We want to get RC2+Curve out as soon as possible, but we want to make sure you get something that works, not just a pretty dud ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: stevie1001 on May 21, 2009, 04:44:57 AM
thank you for the good work!

Steve
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Antechinus on May 21, 2009, 04:56:21 AM
Upgrade went smooth as silk on my modified site. Had one failure on Sources/PackageGet.php but on checking the file in Winmerge the failure was only caused by a bit of whitespace anyway. Pushed the button and it's all good. :)

Quote
The answer is: When its ready :) (and I am not joking, this is really the answer)
That was a complete and utter waste of time and no one likes a back seat driver either.  Anyway by the time SMF 2.0 is final I'm sure Mybb and Phpbb will new versions out!

Riker, you already know that SMF does not give release dates. Things like this series of hacks requiring a quick and effective solution are one of the reasons why release dates aren't given. You never know when something will come out of nowhere and force you to drop everything and deal with the new problem. HecKel gave you exactly the same answer that you know you would get from any SMF team member. What did you expect him to say?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Jorin on May 21, 2009, 04:57:04 AM
Regarding your above post, work on RC2+Curve slowed down and even stopped while we worked on this patch. Which would you rather have - an exploited forum, or Curve?

I want amostly secure and stable forum. Not as many RCs as possible in a very short time.  :)

Thanks to the team again for the fast reaction.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Vincent Volmer on May 21, 2009, 04:57:38 AM
Perfect!

Thanks for the good work!!

Vincent
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 21, 2009, 05:14:34 AM
Can someone explain what the patch actually fixes? 

We were advised to turn off attachments and avatar uploads etc.  Does this fix the problem, and can we now turn them back on?
Yes, the aim of this patch was to fix those security flaws - hence it should now be completely safe to turn your attachments and avatars back on :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: lurkalot on May 21, 2009, 05:37:29 AM
Can someone explain what the patch actually fixes? 

We were advised to turn off attachments and avatar uploads etc.  Does this fix the problem, and can we now turn them back on?
Yes, the aim of this patch was to fix those security flaws - hence it should now be completely safe to turn your attachments and avatars back on :)

Thankyou Tristan, and thanks to the team for fixing the issue. ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: grafitus on May 21, 2009, 05:49:36 AM
Thanks.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: babjusi on May 21, 2009, 05:53:00 AM
Good work :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Naerth on May 21, 2009, 06:09:52 AM
Hello i have this message when i want do the update

my version :
Infos sur la version:
Votre version du forum: SMF 1.1.8
Version courante de SMF: SMF 1.1.9



Erreur lors de l'installation du paquet
Au moins une erreur a été rencontrée lors d'un test d'installation de ce paquet. Il est vivement recommandé que vous ne continuiez pas son installation à moins d'être sûr de ce que vous faites et que vous avez fait très récemment une copie de sauvegarde de votre forum et de votre base de données. Cette erreur peut être causée entre autre par un conflit avec le paquet que vous tentez d'installer et un autre paquet que vous avez précédemment installé, une erreur dans le paquet lui-même, un paquet qui requiert un autre paquet que vous n'avez pas encore installé, ou un paquet écrit pour une autre version de SMF.


Actions d'installation pour "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
L'installation de ce paquet effectuera les actions suivantes :
   Type    Action    Description
1.    Appliquer la modification    ./index.php    Réussite du test
2.    Appliquer la modification    ./Sources/Display.php    Réussite du test
3.    Appliquer la modification    ./Sources/Load.php    Réussite du test
4.    Appliquer la modification    ./Sources/ManageAttachments.php    Réussite du test
5.    Appliquer la modification    ./Sources/PackageGet.php    Réussite du test
6.    Appliquer la modification    ./Sources/Post.php    Réussite du test
7.    Appliquer la modification    ./Sources/Profile.php    Réussite du test
8.    Appliquer la modification    ./Sources/QueryString.php    Réussite du test
9.    Appliquer la modification    ./Sources/Security.php    Échec du test
10.    Appliquer la modification    ./Sources/Subs.php    Réussite du test
11.    Appliquer la modification    ./Sources/Subs-Graphics.php    Réussite du test
12.    Appliquer la modification    ./Sources/Subs-Members.php    Réussite du test
13.    Appliquer la modification    ./Sources/Subs-Post.php    Réussite du test
14.    Appliquer la modification    ./Themes/default/ManageAttachments.template.php    Réussite du test
15.    Appliquer la modification    ./Themes/default/Recent.template.php    Réussite du test
16.    Appliquer la modification    ./Themes/babylon/Recent.template.php    Réussite du test
17.    Appliquer la modification    ./Themes/classic/Recent.template.php    Réussite du test
18.    Appliquer la modification    ./Themes/default/languages/index.english.php    Réussite du test
19.    Appliquer la modification    ./attachments/.htaccess    Réussite du test
20.    Appliquer la modification    ./index.php    Réussite du test
21.    Appliquer la modification    ./Sources/Display.php    Réussite du test
22.    Appliquer la modification    ./Sources/Load.php    Réussite du test
23.    Appliquer la modification    ./Sources/Post.php    Réussite du test
24.    Appliquer la modification    ./Sources/Profile.php    Réussite du test
25.    Appliquer la modification    ./Sources/Security.php    Réussite du test
26.    Appliquer la modification    ./Sources/Subs.php    Réussite du test
27.    Appliquer la modification    ./Sources/Subs-Graphics.php    Réussite du test
28.    Appliquer la modification    ./Sources/Subs-Members.php    Réussite du test
29.    Appliquer la modification    ./Sources/Subs-Post.php    Réussite du test
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: babjusi on May 21, 2009, 06:11:18 AM
Please, use the support board if you get any errors during the update/upgrade of your forum.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Spiritwarrior on May 21, 2009, 06:12:56 AM
Good work! I'll update when I can.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: mr.EMi on May 21, 2009, 06:38:45 AM
Thank you Guys !!

but a i have an error in automatic upgrade please can you help me ??
 
Quote

You don't have permission to access /forum/index.php on this server.
 
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

or tell me how can i upgrade manually ???
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Aleksi "Lex" Kilpinen on May 21, 2009, 06:41:37 AM
Huraa, and a big thank you to all involved in the making of this release :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Caelum on May 21, 2009, 06:43:23 AM
Yayness; thanks folks :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Samker on May 21, 2009, 06:46:55 AM

Also, thanks from SCF Community...
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Sudhakar Arjunan on May 21, 2009, 06:51:36 AM
Thanks for this great update Compuart & Team.

Though i understand there is some security fix made.

But any logs of what is been updated from 2.0RC1 to 2.0RC1-1.

----------- update ......

I have got a detailed not here http://www.simplemachines.org/community/index.php?topic=290609.0
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Arebias on May 21, 2009, 07:16:32 AM

"Why do you use SMF?"

This is why. You guys are fast and really on top of things.

Thanks!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Antes on May 21, 2009, 07:18:14 AM
VVGJ :D Checking Lang Files ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Minare on May 21, 2009, 07:38:24 AM
Thank you.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: crash56 on May 21, 2009, 07:50:52 AM
Thank you!!  Went into place without so much as a hiccup.  The members are ecstatic to have their custom avatars back.  I'm ecstatic to have a secure forum again. 

To every one of the developers who dropped everything in order to issue a secure, bug-free fix ... THANK YOU!!  You ROCK!!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: a10 on May 21, 2009, 07:57:27 AM
 :) Smooth upgrade from 1.1.8. Thanks.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: islam2hamy on May 21, 2009, 08:07:15 AM
good news!!
but i am still waiting the RC2
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: GazOutEast on May 21, 2009, 08:21:23 AM
Thanks guys

Refused to install from Package Manager download (some twaddle about permissions and a temp directory) so I save to disk, uploaded manually and applied it - it went straight in without errors

Anyone know if gives me additional functionality or if it's just back-end code security fixes?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Trekkie101 on May 21, 2009, 08:27:58 AM
Thanks guys

Refused to install from Package Manager download (some twaddle about permissions and a temp directory) so I save to disk, uploaded manually and applied it - it went straight in without errors

Anyone know if gives me additional functionality or if it's just back-end code security fixes?
Just code fixes :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Hiver101 on May 21, 2009, 08:50:34 AM
My heavily modified forum site is still working after the update! Thanks for the hard work!

thegamershive.net
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: mirahalo on May 21, 2009, 09:00:09 AM
Congrats! 

weeeeeeeeeeeeee !!!!!

/me is happy !!!!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: klumy on May 21, 2009, 09:19:07 AM
thanks!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: fals on May 21, 2009, 09:35:53 AM
Same here - everything seems to work 100% - I had to manually edit a few files.  :)
Code: [Select]
<search for>
            $parts[$i] = preg_replace('~\[([/]?)(list|li|table|tr|td)([^\]]*)\]~ie', '\'[$1\' . strtolower(\'$2\') . \'$3]\'', $parts[$i]);
</search for>
This line dosnt exist in my $sourcedir/Subs-Post.php

Only one downside - attached images cant have the same filename anymore
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: kat on May 21, 2009, 10:07:14 AM
No problems, here....

Good work, Dev team!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: MissyNL on May 21, 2009, 10:17:42 AM
Perfect Job!!!  Installed without problems..... All the VOLENTEERS at SMF!! THANK YOU!! (http://www.bimeiden.nl/Smileys/default/hailing.gif)

(http://www.bimeiden.nl/Smileys/default/kusje2.gif)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: L'AltroWeb on May 21, 2009, 10:28:01 AM
Great work :)
Thank'u very much ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Jez on May 21, 2009, 10:32:39 AM
Thanks all for your great work! :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: zipper306 on May 21, 2009, 10:34:05 AM
Thank you guys for all you do  :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: haito on May 21, 2009, 10:52:58 AM
thanks for SMF...
thanks for your hardwork...
nice^^b
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Leemy on May 21, 2009, 11:12:49 AM
Thanks! Upgraded no problem.  Will be re-instating attachments and avatars.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: phpMyTony on May 21, 2009, 11:49:28 AM
Yes!! Nice one! :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: FragaCampos on May 21, 2009, 12:00:04 PM
Congratulations SMF team ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: @L3 on May 21, 2009, 12:14:44 PM
Thanx! ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: 青山 素子 on May 21, 2009, 12:49:09 PM
Many thanks to the developers who worked very hard on this patch. It's possibly the most complex security patch released for SMF.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Geri Lx on May 21, 2009, 12:51:29 PM
Congrats and thanks for the hard work!
SMF team rules! :)

Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Joe N on May 21, 2009, 12:59:56 PM
That was flipping quick!

Felt like yesterday smf 1.1.8 was released lol

I installed it. Got this error

Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type   Action   Description
1.   Execute Modification   smf_1-1-8_to_1-1-9_patch.mod   Modification parse error
2.   Execute Modification   smf_1-1-9_can_fail.xml   Modification parse error
3.   Execute Modification   -   Modification parse error
4.   Execute Code   updateDatabase.php
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: (.:Al-Pacino:.) on May 21, 2009, 01:12:27 PM
Many thanks to the developers who worked very hard on this patch. It's possibly the most complex security patch released for SMF.

Wow...

SMF FTW!!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: CPOMorty on May 21, 2009, 01:18:08 PM
A perfectly smooth upgrade, as expected.  ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Snowy on May 21, 2009, 01:19:00 PM
I can't upgradde from the package manager so I did this:

1) Download the package to your local PC and extract it into files.
2) Using an FTP client create a new directory in your "Packages" folder, in this example you may call it "shout".
3) Upload all the files from the extracted package to this directory.
4) Go back to the package manager browse page and the package will be automatically found by SMF.

But SMF doesn't find the smf_2-0-rc1-1_update folder I created in the packages directory.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: aED on May 21, 2009, 01:19:25 PM
Can someone explain what the patch actually fixes? 

We were advised to turn off attachments and avatar uploads etc.  Does this fix the problem, and can we now turn them back on?

Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?



I also have a little problem  the upgrade link is not showing in the admin panel?

Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Crime on May 21, 2009, 01:26:09 PM
thanks a lot smf team. we are upgrading
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Aleksi "Lex" Kilpinen on May 21, 2009, 01:26:41 PM
Can someone explain what the patch actually fixes? 

We were advised to turn off attachments and avatar uploads etc.  Does this fix the problem, and can we now turn them back on?

Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?



I also have a little problem  the upgrade link is not showing in the admin panel?


Run all the maintanance options, and it should pop up ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: haktanir2 on May 21, 2009, 01:29:07 PM
Thank you, installed with no problems. :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Joe N on May 21, 2009, 01:29:47 PM
Please

I installed it. Got this error

Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type   Action   Description
1.   Execute Modification   smf_1-1-8_to_1-1-9_patch.mod   Modification parse error
2.   Execute Modification   smf_1-1-9_can_fail.xml   Modification parse error
3.   Execute Modification   -   Modification parse error
4.   Execute Code   updateDatabase.php
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: SleePy on May 21, 2009, 01:57:37 PM
Only one downside - attached images cant have the same filename anymore

Not true. All attachments use a unique hash and id. So you do not have to worry about that.

Joe N and everyone else,
Please use our support forums
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: 青山 素子 on May 21, 2009, 02:19:39 PM
Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?

The core security issue also existed in our 2.0 code. I don't personally know of any compromised sites that were running that edition, but it's best to be safe.

Also, the announcement doesn't say so, but I believe we also released a patch for the legacy 1.0 series as well.




I also have a little problem  the upgrade link is not showing in the admin panel?


[/quote]
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: cuacosa on May 21, 2009, 02:35:49 PM
Joe N   -   I´ve the same error, please SOS..SOS..

I installed it. Got this error

Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type   Action   Description
1.   Execute Modification   smf_1-1-8_to_1-1-9_patch.mod   Modification parse error
2.   Execute Modification   smf_1-1-9_can_fail.xml   Modification parse error
3.   Execute Modification   -   Modification parse error
4.   Execute Code   updateDatabase.php
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Joe N on May 21, 2009, 02:37:10 PM
I had exalcly the same thing. Upload it to your ftp
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: blondeamon on May 21, 2009, 02:39:09 PM
Fast and perfect updating...i <3 SMF!!

Keep up the good work against those security glitches!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: tamasir on May 21, 2009, 02:39:47 PM
Thank you guys for all you do :D
tamasir~
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: cuacosa on May 21, 2009, 02:53:48 PM
Joe N   -


Uploaded by FTP to my directory packages & try to instal &   I´ve the same error, please SOS..SOS..

Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type   Action   Description
1.   Execute Modification   smf_1-1-8_to_1-1-9_patch.mod   Modification parse error
2.   Execute Modification   smf_1-1-9_can_fail.xml   Modification parse error
3.   Execute Modification   -   Modification parse error
4.   Execute Code   updateDatabase.php

Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: fals on May 21, 2009, 02:55:37 PM
Only one downside - attached images cant have the same filename anymore

Not true. All attachments use a unique hash and id. So you do not have to worry about that.


Well, its true - on my forum after todays update.
I have testet, uploaded a file called avatars-popup.jpg, then made a reply and try upload same file again:

Quote
An Error Has Occurred!                         Sorry! There is already an attachment with the same filename as the one you tried to upload. Please rename the file and try again.
(http://img200.imageshack.us/img200/392/errorvvj.jpg) (http://img200.imageshack.us/my.php?image=errorvvj.jpg)

The uploaded file itself does have a hashed filename (when i tjek via FTP), but i still get the above error.
(http://img194.imageshack.us/img194/4954/filenames.jpg) (http://img194.imageshack.us/my.php?image=filenames.jpg)

Should i start a new tread on my problem or does anyone else experience the same ?




Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Aleksi "Lex" Kilpinen on May 21, 2009, 02:56:40 PM
Should i start a new tread on my problem or does anyone else experience the same ?
You should definitely start a new topic on this - I just tried on 1.1.9 and I can upload as many test.gif's I want.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: qtime on May 21, 2009, 04:41:56 PM
thanks, safety is most important!!!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Marcus Forsberg on May 21, 2009, 04:52:10 PM
Joe N and cuacosa, please use our supportboards.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Pяηѕѕ LF on May 21, 2009, 05:11:20 PM
Hello,

Can I delete the old update packages on my packages list simply to click to "delete" ?

If I delete the old update, can I have any problems ?

Could you tell me more about this please. Thanks.


11.     SMF 1.0.16 / 1.1.8 Update       
33.     SMF 1.0.15 / 1.1.7 Update         
47.     SMF 1.0.12 / 1.1.4 / 2.0 b1.1 Update 
48.     SMF 1.0.14 / 1.1.6 Update         
57.     SMF 1.0.13 / 1.1.5 / 2.0 b3.1 Update     
 
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Magicjax on May 21, 2009, 05:14:02 PM
When I click the link in my Admin panel that it tells me to click to upgrade. I get a 404 error page.

Here's the link location it takes me to.

http://magictalk.com/forum/index.php?action=pgdownload;auto;package=http://custom.simplemachines.org/mods/downloads/smf_patch_1.0.17_1.1.9_2.0-RC1-1.zip;sesc=7e63e22aac9a461991c87594d9d5917c

What causes this and what should I do?

Thanks
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: tooman on May 21, 2009, 05:17:06 PM
nice

thx
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: NukeGaming on May 21, 2009, 05:18:55 PM
great work developers and congratulations.

I already update my forum to 1.1.9


CHEERS    ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: kkattfish on May 21, 2009, 05:20:31 PM
thank you very much!  worked with no glitches for me from 1.1.8 to 1.1.9
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: n00x on May 21, 2009, 06:20:30 PM
Great Work! Thanks  :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Astra_200 on May 21, 2009, 07:07:40 PM
Thanks for the update patch.

I tried to install patch from admin warning page but got..

Although the package was downloaded to the server it appears to be empty. Please check the Packages directory, and the "temp" sub-directory are both writable. If you continue to experience this problem you should try extracting the package on your PC and uploading the extracted files into a subdirectory in your Packages directory and try again. For example, if the package was called shout.tar.gz you should:
1) Download the package to your local PC and extract it into files.
2) Using an FTP client create a new directory in your "Packages" folder, in this example you may call it "shout".
3) Upload all the files from the extracted package to this directory.
4) Go back to the package manager browse page and the package will be automatically found by SMF.

Went here - http://www.simplemachines.org/community/index.php?action=dlattach;topic=311899.0;attach=99153
Uploaded patch and installed as a normal mod. No problems at all.

Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: poolhall on May 21, 2009, 07:59:01 PM
I'm using SMF 2.0 and user under the name krisbarteo did register at the forums on May 15; however, for some reason all forum files remained untouched.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Fustrate on May 21, 2009, 08:00:46 PM
I'm using SMF 2.0 and user under the name krisbarteo did register at the forums on May 15; however, for some reason all forum files remained untouched.
That's a good thing :) make sure you upgrade to RC1-1, though, so he doesn't have an opportunity to do it in the future.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: WIZARD87 on May 21, 2009, 08:03:12 PM
Perfect ...BRAVO !!!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Mr_White on May 21, 2009, 08:20:56 PM
Thanks. This is really a good work!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: 3wasef on May 21, 2009, 08:33:13 PM
Thanx a lot  :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: aED on May 21, 2009, 09:12:42 PM
OK update finished! with no problems! Thanks
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: dcmouser on May 21, 2009, 10:32:34 PM
Thank you for the update.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: ErnieB on May 21, 2009, 10:38:08 PM
Upgraded but alot of people have lost their avatars and get an error when trying to do them again. Also global moderator gets an error when trying to delete topics although they have permission to do so????

When they try to do their pic they get


'Please try again. If you come back to this error screen, report the error to an administrator.


im using 1.1.9
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Splooge on May 21, 2009, 10:58:56 PM
SMF gets worse and worse everytime they upgrade. I think phpBB and Invision  are the way to go. SMF is getting pathetic.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JBlaze on May 21, 2009, 11:01:07 PM
Upgraded but alot of people have lost their avatars and get an error when trying to do them again. Also global moderator gets an error when trying to delete topics although they have permission to do so????

When they try to do their pic they get


'Please try again. If you come back to this error screen, report the error to an administrator.


im using 1.1.9

Please post a topic in the support boards as this is not a support topic.


SMF gets worse and worse everytime they upgrade. I think phpBB and Invision  are the way to go. SMF is getting pathetic.

Sorry you feel that way. We can't please everybody.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: hartiberlin on May 21, 2009, 11:01:14 PM
Hi,

I have just upgraded to SMF 2.0RC1-1

via the packetmanager and using the file

smf_patch_1.0.17_1.1.9_2.0-RC1-1.zip



Then it failed only this file

*    2.    Execute Modification    ./Sources/Display.php    Test failed

but I installed it anyway.


I have installed as Mods:

Admod 2.3.4
Sitemap 2.0
Download System 1.2.4
PortaMX 0.957r2
Pmx HighSlide for attachments 0.11


But now there is an error.
Now it cant show anymore any attachments...

http://www.overunity.de/index.php?action=dlattach;topic=146.0;attach=207



404 - Dateianhang nicht gefunden.

404 - file not found



Please help.
Many thanks
Regards, Stefan.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: candidosa2 on May 21, 2009, 11:17:50 PM
good job. thanks
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JBlaze on May 21, 2009, 11:20:14 PM
hartiberlin, please post a new topic in the support boards.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Anthony` on May 21, 2009, 11:27:40 PM
Thanks for another great version! ;D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Marius11 on May 22, 2009, 02:19:31 AM
its a good forum
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: hansdampf on May 22, 2009, 02:34:18 AM
Thanks for the update patch.

I tried to install patch from admin warning page but got..

Although the package was downloaded to the server it appears to be empty. Please check the Packages directory, and the "temp" sub-directory are both writable. If you continue to experience this problem you should try extracting the package on your PC and uploading the extracted files into a subdirectory in your Packages directory and try again. For example, if the package was called shout.tar.gz you should:
1) Download the package to your local PC and extract it into files.
2) Using an FTP client create a new directory in your "Packages" folder, in this example you may call it "shout".
3) Upload all the files from the extracted package to this directory.
4) Go back to the package manager browse page and the package will be automatically found by SMF.

Went here - http://www.simplemachines.org/community/index.php?action=dlattach;topic=311899.0;attach=99153
Uploaded patch and installed as a normal mod. No problems at all.


I got the same error and couldn't install from the backend with the link displayed. I also ensured that the "Packages" folder is writeable. I don't know what's meant by "temp" sub-directory since it didn't exist out of the box but I also created one and granted write permissions - didn't help either.

Anyway, your hint with downloading the patch and uploading it manually helped. Thanks.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tore29 on May 22, 2009, 07:14:14 AM
Updated successfully yesterday. :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: (.:Al-Pacino:.) on May 22, 2009, 07:47:18 AM
Updated without any bugs or Problems.

 :o ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Bancherd on May 22, 2009, 08:01:46 AM
Had smileys length-code problem, but worked fine after editing the sql-file and manually updated the database.

Thanks for the hard work.  :D
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: elwizard on May 22, 2009, 09:00:44 AM
Thank you so much. Glad to know this news ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: webou on May 22, 2009, 12:52:20 PM
Updated without any problem, thanks :).
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: smldmr on May 22, 2009, 02:55:02 PM
Do i need to upgrade my database manually, if i install the 1.1.9 from admin page on my forum?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Sarge on May 22, 2009, 03:03:01 PM
Do i need to upgrade my database manually, if i install the 1.1.9 from admin page on my forum?

No, the update from admin page does it automatically. And please use the support boards, this is just an announcement topic :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: geminiguy on May 22, 2009, 10:53:11 PM
Whew.... just realized the fix is in 1.1.9
Realized it just before I was ready to go through all the steps mentioned previously

 Thank you from Linux Graphics Users, to all the hard-working folks here at smf for all the work you do!!! YOU ROCK!!!! ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Kajol on May 23, 2009, 08:43:18 AM
I downloaded the smf_1-1-9_update.zip and loaded it up to the server. Do I still need the patch? There is no good documentation for that patch-thing.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 23, 2009, 09:12:34 AM
I downloaded the smf_1-1-9_update.zip and loaded it up to the server. Do I still need the patch? There is no good documentation for that patch-thing.
This isn't a support topic, however if you updated your forum manually and the version number is 1.1.9 (i.e. you upgraded fine), then there's no need for the patch.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: MultiformeIngegno on May 23, 2009, 11:15:09 AM
There's no possibility to upgrade from beta 4 with the package?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: 青山 素子 on May 23, 2009, 11:45:20 AM
There's no possibility to upgrade from beta 4 with the package?

To update from 2.0 Beta 4, use the 2.0 RC1-1 upgrade package in our downloads section and do a manual upgrade.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: chovy on May 23, 2009, 03:41:39 PM
I'm at 1.1.7 --- do I need to first patch to 1.1.8 and then 1.1.8 to 1.1.9 ?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 23, 2009, 03:54:00 PM
I'm at 1.1.7 --- do I need to first patch to 1.1.8 and then 1.1.8 to 1.1.9 ?
You can either do that, or download the 1.1.9 "Large upgrade" package and upgrade SMF manually.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: chovy on May 24, 2009, 01:37:17 AM
I'm at 1.1.7 --- do I need to first patch to 1.1.8 and then 1.1.8 to 1.1.9 ?
You can either do that, or download the 1.1.9 "Large upgrade" package and upgrade SMF manually.


I found it from the d/l page...but when I try to upload via web interface it says its' corrupt, I tried both .tar.gz and .zip:

An Error Has Occurred!
The package you tried to upload either is not a valid package or has become corrupted.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JimM on May 24, 2009, 01:58:12 AM
Please do not use this topic for support.  Post your issues in the appropriate support board.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: stog on May 24, 2009, 08:19:20 AM
updated to 1.19 many thx for your efforts
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: andypandy on May 24, 2009, 04:39:47 PM
Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, addressing a few vulnerabilities found in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.

It should be noted that SMF 2.0 RC1-1 is not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. The new Curve theme is still scheduled for SMF 2.0 RC2, as announced (http://www.simplemachines.org/community/index.php?topic=293556.0) earlier.

To upgrade, use the package manager to upgrade to either 1.1.9 or 2.0 RC1-1, depending on your version. Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Users still running the SMF 1.0.x branch can upgrade to SMF 1.0.17 via the same procedure.

If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual (http://docs.simplemachines.org) about installing (http://docs.simplemachines.org/index.php?board=2.0;sort=subject) and upgrading (http://docs.simplemachines.org/index.php?board=3.0;sort=subject). If you experience a session verification error when inputting FTP details for updating process, please see this (http://www.simplemachines.org/community/index.php?topic=278824.0) topic.

It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page (http://custom.simplemachines.org/upgrades/) for all versions.

Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!

Regards,
Simple Machines

 <script type=\"text/javascript\">digg_url = 'http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released';</script><script src=\"http://digg.com/tools/diggthis.js\" type=\"text/javascript\"></script>

Fantastic work guys! This is absolutely fantastic.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: bschhikara on May 24, 2009, 05:44:30 PM
I've just updated my forum from 2.0 Beta 4 to 2.0 RC1.1 using the upgrade. The upgrade worked okay and I can access all boards and menu links. but i am not able to access Admin menu link. It is showing following message:

Fatal error: Cannot redeclare template_siteintegrationsettings() (previously declared in pathtoforum/Sources/Load.php(1927) : eval()'d code:1969) in pathtoforum/Sources/Load.php(1927) : eval()'d code on line 1981

how can I access admin menu.

I do posted this in siteintegration mod as well. sorry for reposting (no reply 4 that on that post).

can anyone help me fixing this problem.

bhupender
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Linksquest on May 25, 2009, 08:30:23 AM
Nice Work SMF, keep It Up
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: thefley on May 25, 2009, 10:42:26 AM
Thanks it worked great!      where would I find just what the patch fixed and issues it addressed?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: alexandervba on May 25, 2009, 12:41:17 PM
what has changed lol?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 25, 2009, 12:51:31 PM
Thanks it worked great!      where would I find just what the patch fixed and issues it addressed?
The "modified.[versionnumber].zip" packages in the first post have just the files that are fixed :) And the modification lists all the specific code changes.

what has changed lol?
Read the first post, and look at the attachments. :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: SaltedW on May 25, 2009, 01:20:55 PM
Nice, I may open up a forum again, looks like the Gold will be round the corner soon way cool.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Col on May 25, 2009, 02:36:50 PM
Why did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: bschhikara on May 25, 2009, 02:44:52 PM
any help for my query..
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 25, 2009, 03:30:17 PM
any help for my query..
This isn't a support topic. Please use the support boards :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: metallica48423 on May 25, 2009, 03:42:44 PM
Quote
Why did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.

We have 170,000 emails to send out -- it can take some time to get through all of them :P
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: OutofOrder on May 25, 2009, 04:43:26 PM
Thank you very much for the "modified_..." attached files in the opening post. It's a very nice gesture for us with custom-modded boards :)
Makes it a lot easier to upgrade
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: MrKim on May 25, 2009, 07:42:29 PM
whoop de doo   I have been hacked and my sites are down.  I don't see the thrill.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: akameng on May 25, 2009, 08:07:00 PM
Thanks! Great Work....
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Kindred on May 25, 2009, 08:09:03 PM
bschhikara, this thread is not for support.
It looks like you have installed a mod twice.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Father Luke on May 25, 2009, 09:26:59 PM
Thank you!

- -
Okay,
Father Luke
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: apsara on May 25, 2009, 09:29:06 PM
 :) :)Applause. Great show. Thanks :) :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: LinK187 on May 25, 2009, 10:01:52 PM
No problems upgrading...but is there a change log? what has been changed/added/removed and why?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Argonaut on May 26, 2009, 01:59:54 AM
Good job!
Upgrade via packet-manager done in less than 20 seconds!

Thanks!




Why did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.

What should SMF do? Sending 170,000 handwritten letters? ;)

Take a regulary look into the admin-center of your forum. There you'll find a notice if an update is available and how to install it.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Fustrate on May 26, 2009, 02:36:07 AM
Quote
Why did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.

We have 170,000 emails to send out -- it can take some time to get through all of them :P
Plus, we just moved our servers and changed some stuff, so the server admin wanted to preside over everything to make sure nothing went wrong, and he wasn't available for the last few days. Everything seems to be running smoothly though :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: noelchiew on May 26, 2009, 03:04:05 AM
Sorry just a quick general question, after each update, is it ok to delete the old update packages? I have a list of update packages in my package manager list from 1.1.4 to 1.1.8 and I'm wondering if it is safe to do so or should I leave it there.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Col on May 26, 2009, 03:22:15 AM
Why did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.

What should SMF do? Sending 170,000 handwritten letters? ;)

No, 170,000 automated e-mails would surfice! :D
 
I appreciate that it will take some time, but even one e-mail per second would take only 2 days (and correct me if I'm wrong, but I would have thought e-mail can be sent out faster than this).

Quote
Take a regulary look into the admin-center of your forum. There you'll find a notice if an update is available and how to install it.

Well, I don't always check the admin area for security updates - I sometimes choose to not visit my forum at all! :o Though I do routinely check my e-mail! I just assumed that SMF would be in a rush to send out such notifications. ::) I receive other security notifications (from other websites) almost immediately. How many people have been hacked between the announcement here and receiving e-mail notification? Can the e-mail notifications be speeded up? If there are technical reasons why e-mail cannot be sent out faster than 1 e-mail every 2 seconds (assuming I was one of the last to be informed - it might be slower than this), I withdraw my remarks.
 
Glad to see there is a fix though.
 
whoop de doo   I have been hacked and my sites are down.  I don't see the thrill.

When were you hacked, Mr Kim?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Argonaut on May 26, 2009, 03:40:29 AM
Well, I've received the e-mail notification yesterday but have seen the information in the admin-center three or four days ago.

I'm sure, SMF has sent automated e-mails. But they told that they've moved their servers at the same time.
Nevertheless, in the past SMF has sent update-notifications just in time.


Quote
How many people have been hacked between the announcement here and receiving e-mail notification?

You can also ask how many people have been hacked in the months between release 1.1.8 and the update to 1.1.9  ;)

Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: MikeShinoda on May 26, 2009, 03:46:40 AM
Great work man! =)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Kindred on May 26, 2009, 05:50:12 AM
just a side note:  If you are the admin of a forum, it is your responsibility to check is regularly and to keep abreast of what issues, concerns and other announcements there are for the forum and the software.   We know that not everyone gets onto THIS forum every day, but you should be checking your own forum every day (at least)...   and we did send an announcement in the SMF admin announcements tool, as stated...

As yes, there is a distinct limit to the number of emails that a server will send at one time, so it takes a REAL amount of time to work through 170,000 emails.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Col on May 26, 2009, 07:21:19 AM
Hi Kindred,
 
Thanks for the reply.
 
Of course there is a distinct limit to the number of e-mails SMF can send out in a given amount of time - this is obvious to me. Is the limit 1 e-mail per 2 seconds or less? By publishing this notice, SMF are publishing this vulnerability to very many more people - it is inevitable that a few will enquire about the vulnerability, and some might use it, perhaps just for fun, on a SMF forum they don't like. Any kind of vulnerability should be kept as quiet as possible until there is a fix available, and then the fix published as wide and as speedily as possible. I just feel that 1 e-mail every 2 seconds or less is probably a lot slower than it need be - or am I missing something?
 
There are all sorts of reasons why I might not login to my forum. Sometimes I like break - not all forums are fun - some, like mine, tend to be stressful and hard work. However, like most people, I will continue to check my e-mail in case anything urgent pops up - like security vulnerabilities.
 
I was just surprised that it took four days for an e-mail to arrive about this. As it turns out, I had patched this vulnerability within a few hours of it being made available, but this would not have been the case if relying upon e-mail notifications of vulnerabilities. I think, if it is technically possible, e-mail notifications should be sent out more promptly than this. I assume it is possible since no one has stated that e-mails are being sent out at the upper limit of capacity (1 every 2 seconds or less, does seem slow to me).
 
This does not diminish all the hard work put in by the people at SMF. This is meant as feedback, as I think this an important issue.
 
I am not a coder, and have little knowledge of how servers function, so if it is not reasonably technically possible to send out these e-mails any more promptly, I unreservedly withdraw my comments and apologise for the distraction. If, however, it is very possible to send out these important notifications in a significantly shorter timeframe, I stand by my comments.
 
Thanks.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 26, 2009, 07:32:11 AM
By publishing this notice, SMF are publishing this vulnerability to very many more people - it is inevitable that a few will enquire about the vulnerability, and some might use it, perhaps just for fun, on a SMF forum they don't like. Any kind of vulnerability should be kept as quiet as possible until there is a fix available, and then the fix published as wide and as speedily as possible. I just feel that 1 e-mail every 2 seconds or less is probably a lot slower than it need be - or am I missing something?
The vulnerability is published whichever way SMF publishes the fixes. When applying the patch, the code changes can be seen. The modified files are also linked to this thread (first post). So it's reasonably impossible to hide the vulnerability. :) As for e-mail sending:
 
I am not a coder, and have little knowledge of how servers function, so if it is not reasonably technically possible to send out these e-mails any more promptly, I unreservedly withdraw my comments and apologise for the distraction. If, however, it is very possible to send out these important notifications in a significantly shorter timeframe, I stand by my comments.
There's no distraction/need for apology :) It's just that sending out 170,000 is a major deal - trying to send them out in the space of, say, one day wouldn't be possible and would probably crash the server trying to do this.

Secondly, sending them out in such a quick space of time could be seen as spam (obviously they wouldn't be since SMF is reputable/well-known; however sending out 170,000 e-mails in a short space of time could be flagged by some poor spam blacklists).

I guess the main point(s) is that the vulnerability can't really be hidden (since SMF is open sourse) - and so there's no real need to try and get the e-mails out as quickly as possible.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: nwsw on May 26, 2009, 08:38:00 AM
FYI: I used the smf_patch_1.0.17_1.1.9_2.0-RC1-1.zip patch to perform the update to our local server's working copy of SMF 1.1.8. The database update program has a bug in it which prevents the smfVersion varable from being updated.  It incorrectly adds two new variables, '0' and '1', to the smf_settings table, but fails to actually change the smfVersion variable.

Specifics:
The 'updateDatabase.php' program incorrectly uses the updateSettings function. The following line does not provide an associative array for the smfVersion assignment:

Code: [Select]
updateSettings(array('smfVersion', 'SMF ' . (isset($func['entity_fix']) ? '1.1.9' : '1.0.17')));

That line should be rewritten as an associative array:

Code: [Select]
updateSettings(array('smfVersion' =>  'SMF ' . (isset($func['entity_fix']) ? '1.1.9' : '1.0.17')));

The value of 'SMF 1.1.9' is also inconsistent with the fallback code that assigns '1.1.9' to the smfVersion (which makes more sense to me).
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: SoehnelS on May 26, 2009, 11:17:06 AM
Hello!

Thanks @all!


For users with problems I write my problems and solutions.
If it's the wrong place plese correct me - Thanks!

I've updated 1.1.8 -> 1.1.9 with manual update for the Display.php and the Subs-Post.php.

With the Display.php I've got an ugly error wich show me the column
"<looks like a hashvalue>" doesn't exists.

After some checking files I found the Problem:
In the old Display.php the releatRRRed Query looks (Line 964):
Code: [Select]
SELECT a.filename, a.ID_ATTACH, a.attachmentType, a.sizethe new one (original Line 958):
Code: [Select]
SELECT a.filename, a.ID_ATTACH, a.attachmentType, a.file_hash
So the following statement gives an hash instead  the filesize (Line 975):
Code: [Select]
list ($real_filename, $ID_ATTACH, $attachmentType, $size) = mysql_fetch_row($request);
I changed the query:
Code: [Select]
SELECT a.filename, a.ID_ATTACH, a.attachmentType, a.file_hash, a.sizeand the statement:
Code: [Select]
list ($real_filename, $ID_ATTACH, $attachmentType, $file_hash, $size) = mysql_fetch_row($request);
relevant Packages:
Attachments Download Permission
Attachments Mod

hth
Sven
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: feline on May 26, 2009, 02:14:34 PM
I think, there is a Bug in the upgrade for SMF2.0 if you are using multiple directorys.
See my post: http://www.simplemachines.org/community/index.php?topic=313229.msg2078430#msg2078430

Fel
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: nedla on May 26, 2009, 03:37:59 PM
nice work guys,, bring on the curve theme
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Hunnenkoenig on May 26, 2009, 05:12:38 PM
Is there a demo site for SMF 2.0?
Or a feature list?

Why is it better than 1xx?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: kat on May 26, 2009, 05:55:28 PM
I guess this is the demo site, as it's running v2.

It's only a release candidate, though.

It's not yet recommended for working fora.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: metallica48423 on May 26, 2009, 08:50:34 PM
We actually suspect there is a slight bug in email sending affecting the send rate.  Once we found out that it was sending much slower than it should have been, we started pushing the queue manually. 

Either way, we anticipate that it will take anywhere from 6 hours to 2 days depending on server loads, hits, and such, to actually send out the 170,000 emails, also accounting for all of the email notifications that go out in addition to these (which are on a scheduled task), it's quite a significant job.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: 青山 素子 on May 26, 2009, 09:56:04 PM
Either way, we anticipate that it will take anywhere from 6 hours to 2 days depending on server loads, hits, and such, to actually send out the 170,000 emails, also accounting for all of the email notifications that go out in addition to these (which are on a scheduled task), it's quite a significant job.

Don't forget that many major ISPs will rate-limit incoming mail from individual servers. Yahoo! is particularly bad about it, sometimes enforcing less than 100 messages an hour as a maximum.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: noelchiew on May 26, 2009, 11:25:06 PM
Sorry just a quick general question, after each update, is it ok to delete the old update packages? I have a list of update packages in my package manager list from 1.1.4 to 1.1.8 and I'm wondering if it is safe to do so or should I leave it there.
Sorry can't help but wonder iwhether my post was accidentally overlooked in the midst of all these discussion :) Appreciate it!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Aleksi "Lex" Kilpinen on May 27, 2009, 02:16:28 AM
You can delete them, as if you ever needed them - you could still get them from the archives here ;) Personally though, I'd recommend keeping the latest update, just in case.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: noelchiew on May 27, 2009, 02:38:23 AM
Ok that was what I thought too but needed confirmation. Thanks! :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Hunnenkoenig on May 27, 2009, 04:19:57 AM
I guess this is the demo site, as it's running v2.

Ah ok, I didn't pay attention. Thanks.
So I think, it doesn't have big changes in appearance :-)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Aleksi "Lex" Kilpinen on May 27, 2009, 04:25:42 AM
I guess this is the demo site, as it's running v2.

Ah ok, I didn't pay attention. Thanks.
So I think, it doesn't have big changes in appearance :-)
It will be bringing out a completely new theme, and some other layout changes as well, but nothing I'd call major for the user point of view, apart from the mentioned new theme ;)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 27, 2009, 04:26:27 AM
I guess this is the demo site, as it's running v2.

Ah ok, I didn't pay attention. Thanks.
So I think, it doesn't have big changes in appearance :-)
Well, actually:

Introducing the (upcoming) new default SMF theme - Curve! (http://www.simplemachines.org/community/index.php?topic=293556.0)

;D

This site is running on 2.0, however the new theme Curve hasn't been released to the public yet (it's still being worked upon and beta tested)

Check out some of the past announcements for new features that are upcoming in 2.0 :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: aED on May 27, 2009, 04:56:40 AM
Hey is that a spam post?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Aleksi "Lex" Kilpinen on May 27, 2009, 05:04:03 AM
Hey is that a spam post?
Yeah, they were. :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Col on May 27, 2009, 06:46:34 AM
We actually suspect there is a slight bug in email sending affecting the send rate.  Once we found out that it was sending much slower than it should have been, we started pushing the queue manually. 

Either way, we anticipate that it will take anywhere from 6 hours to 2 days depending on server loads, hits, and such, to actually send out the 170,000 emails, also accounting for all of the email notifications that go out in addition to these (which are on a scheduled task), it's quite a significant job.

It did seem slow to me.
 
From my reading around, it appeared reasonably technically possible to send out mail at a significantly higher rate, but I also note Motoko-chan's point about some ISPs (particularly webmail provideres) that impose limits, usually in the most unintelligent manner. I'm sure there must be a ridiculous number of notifications sent out from a forum the size of this place too.
 
Thanks for the explanation and update.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: SabreOfParadise on May 27, 2009, 10:00:07 AM
On my prod forum the update failed when using the Package Manager: No error occured, but the files were not updated and also nothing in the database.
It worked on my local test forum but I wasn't forced to use FTP there (why FTP? -> It's old and unsecure). If anything is wrong with my FTP settings I would expect an error message in SMF.

Ok, so I tried the file "modified_1-1-8_1-1-9.zip", but missed the "update.php" file. Then tried to use the "updateDatabase.php" from the patch package, but it didn't seem to do anything (blank page).

Now I'm confused if my SMF is correctly on version 1.1.9 or not.

The Administration Center says:
Quote
Forum version: SMF 1.1.9
Current SMF version: SMF 1.1.9
(more detailed)

If I click on "more detailed" the only template marked in red is:
index.german.php   1.1.5   1.1.9
[Edit: This is a template from a language pack, so no surprise here]

Curiously there is another template in another version than the "Current Version":
index.template.php   1.1.5 (Your Version)   1.1 (Current)

I have to say: I'm coming from phpBB 2 and this was my first SMF update, but the updates and corresponding documentation were easier with phpBB. The only downside were the time consuming manual adjustments for the different mods (which are already included in SMF 1.1.8 like sub forums, RSS support [doesn't really work currently at this forum] and attachments). But this SMF update took more time anyway (e.g. because I had to setup an FTP server).

Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: kuahara on May 27, 2009, 10:25:22 AM
Mine is not letting me upgrade.



Version Information:
Forum version: SMF 1.1.5
Current SMF version: SMF 1.1.9
(more detailed)



When I click on more detailed, it returns:

Fatal error: Call to a member function read() on a non-object in /home/kuaharac/public_html/autismwf_root/forum/Sources/Admin.php on line 731


It also never prompts me to upgrade in the admin panel.  My other forums prompted me for the upgrade and everything worked perfectly.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 27, 2009, 10:42:05 AM
Please use the support boards for getting support regarding the upgrade :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: SabreOfParadise on May 27, 2009, 10:58:15 AM
Please use the support boards for getting support regarding the upgrade :)

Did you address kuahara or me or both of us? ??? [I'm not sure if I need support, I would only like to know if my update worked]
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Tristan Perry on May 27, 2009, 11:05:25 AM
Please use the support boards for getting support regarding the upgrade :)

Did you address kuahara or me or both of us? ??? [I'm not sure if I need support, I would only like to know if my update worked]
I was only really addressing kuahara; sorry for the confusion :) I would say yes, that your forum would be upgraded fine if you uploaded all the files from the 1.1.9 modified zip file. Not sure if the database gets auto-upgraded or something, although as long as you don't get any SQL errors on your forums you can assume that the upgrade went fine.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: appleid on May 28, 2009, 08:45:27 PM
I just wanted to say, being new to this forum software, that I am amazed at how well it is put together. Quite a team. I have been running it on my site (1.1.8) for 4 months without a problem. Oh, I did my homework but I am not used to the smoothness that this software exhibits. I am truly amazed. Two days ago I updated to 1.1.9 through the Package and it was instantaneous. Not a hitch. I think this is rare. I am quite impressed.

I hope folks realize how good your team is at what they do. Your forum is wonderful also and I just wanted to say thanks. I am very grateful that you are here for us.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: ManuelFalque on May 29, 2009, 09:11:36 PM
Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, addressing a few vulnerabilities found in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.

It should be noted that SMF 2.0 RC1-1 is not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. The new Curve theme is still scheduled for SMF 2.0 RC2, as announced (http://www.simplemachines.org/community/index.php?topic=293556.0) earlier.

To upgrade, use the package manager to upgrade to either 1.1.9 or 2.0 RC1-1, depending on your version. Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Users still running the SMF 1.0.x branch can upgrade to SMF 1.0.17 via the same procedure.

If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual (http://docs.simplemachines.org) about installing (http://docs.simplemachines.org/index.php?board=2.0;sort=subject) and upgrading (http://docs.simplemachines.org/index.php?board=3.0;sort=subject). If you experience a session verification error when inputting FTP details for updating process, please see this (http://www.simplemachines.org/community/index.php?topic=278824.0) topic.

It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page (http://custom.simplemachines.org/upgrades/) for all versions.

Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!

Regards,
Simple Machines

 <script type=\"text/javascript\">digg_url = 'http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released';</script><script src=\"http://digg.com/tools/diggthis.js\" type=\"text/javascript\"></script>
No se si podré hacer esto, pero si no lo puedo hacer favor de retirar.
Para los usuarios de habla hispana
Máquinas simples anuncia la liberación de SMF 1.1.9 y 2.0 RC1-1, dirigiendo unas vulnerabilidades encontradas en SMF 1.1.8 y 2.0 RC1. Recomendamos encarecidamente que todos los usuarios se actualicen a la mayor brevedad posible.

Cabe señalar que SMF 2.0 RC1-1 no es la segunda versión candidata a SMF 2.0, sino que se limita a una garantía-versión actualizada de la primera versión candidata. La nueva curva de tema sigue siendo programado para SMF 2.0 RC2, tal como se anunció anteriormente.

Para actualizar, utilice el gestor de paquetes o bien para actualizar a 1.1.9 o 2.0 RC1-1, dependiendo de la versión. Simplemente visite su centro de administración, cuando un anuncio se muestra, lo que a actualización. Haga clic en el enlace, confirmar los cambios y su foro estar al día de nuevo. Los usuarios que siguen ejecutando la rama 1.0.x SMF puede actualizar a través de la SMF 1.0.17 mismo procedimiento.

Si no puede actualizar mediante el gestor de paquetes, por favor, siga las instrucciones publicadas en el manual en línea sobre la instalación y actualización. Si experimenta un período de sesiones de verificación de error al introducir datos de FTP para actualizar el proceso, por favor, consulte este tema.

Puede ser necesario aplicar la actualización manualmente si mod conflictos significa que usted no puede instalar el parche a través del gestor de paquetes. Instrucciones para hacer esto se puede encontrar en esta página para todas las versiones.

Por último - por favor no utilice este tema para cualquier tipo de apoyo solicitudes. Usted recibirá una respuesta mucho más rápida, visite el apoyo pertinente a bordo!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Father Luke on June 01, 2009, 01:33:08 AM
Translation?


And thanks again for the upgrade!

- -
Okay,
Father Luke
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: JBlaze on June 01, 2009, 02:12:55 AM
No se si podré hacer esto, pero si no lo puedo hacer favor de retirar.
Para los usuarios de habla hispana
Máquinas simples anuncia la liberación de SMF 1.1.9 y 2.0 RC1-1, dirigiendo unas vulnerabilidades encontradas en SMF 1.1.8 y 2.0 RC1. Recomendamos encarecidamente que todos los usuarios se actualicen a la mayor brevedad posible.

Cabe señalar que SMF 2.0 RC1-1 no es la segunda versión candidata a SMF 2.0, sino que se limita a una garantía-versión actualizada de la primera versión candidata. La nueva curva de tema sigue siendo programado para SMF 2.0 RC2, tal como se anunció anteriormente.

Para actualizar, utilice el gestor de paquetes o bien para actualizar a 1.1.9 o 2.0 RC1-1, dependiendo de la versión. Simplemente visite su centro de administración, cuando un anuncio se muestra, lo que a actualización. Haga clic en el enlace, confirmar los cambios y su foro estar al día de nuevo. Los usuarios que siguen ejecutando la rama 1.0.x SMF puede actualizar a través de la SMF 1.0.17 mismo procedimiento.

Si no puede actualizar mediante el gestor de paquetes, por favor, siga las instrucciones publicadas en el manual en línea sobre la instalación y actualización. Si experimenta un período de sesiones de verificación de error al introducir datos de FTP para actualizar el proceso, por favor, consulte este tema.

Puede ser necesario aplicar la actualización manualmente si mod conflictos significa que usted no puede instalar el parche a través del gestor de paquetes. Instrucciones para hacer esto se puede encontrar en esta página para todas las versiones.

Por último - por favor no utilice este tema para cualquier tipo de apoyo solicitudes. Usted recibirá una respuesta mucho más rápida, visite el apoyo pertinente a bordo!

Means

I do not know if I can do this, but if I do not favor withdrawal.
For Spanish-speaking users
Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, targeting a vulnerability in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.

Note that SMF 2.0 RC1-1 is the second release candidate for SMF 2.0, but is limited to a security-updated version of the first release candidate. The new curve issue remains scheduled for SMF 2.0 RC2, as announced earlier.

To upgrade, use the package manager or to upgrade to 1.1.9 or 2.0 RC1-1, depending on the version. Simply visit your local administration, where an ad is displayed, which will update. Click on the link to confirm your changes and stay up to date forum again. Users still running the 1.0.x branch you can upgrade to SMF via the SMF 1.0.17 same procedure.

If you can not upgrade using the package manager, please follow the instructions published in the online manual on the installation and upgrade. If you experience a session verification error when entering data to update the FTP process, please see this topic.

It may be necessary to apply the update manually if mod conflicts means you can not install the patch through the package manager. Instructions for doing this can be found on this page for all versions.

Finally - please do not use this topic for any support requests. You will receive a much faster response, please visit the relevant support board!
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: mirahalo on June 01, 2009, 12:16:24 PM
@ManuelFalque

we (the spanish users) have already a post anouncing the release:

http://www.simplemachines.org/community/index.php?topic=311913.0

but thanks for your efforts!

Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: Anglis on June 03, 2009, 03:52:54 PM
Quote
Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link,

Hello, just a quick question, every single time before i could easily update it via this links, but now it gives me this error? Has anyone got any clue why would that be ? :S

M SMF template is modified a lot, as well as i got my own language to it, so i don't wanna mess things up during manual update . :S

This is the error it gives to me, simply means can't open the page provided in that link?

Quote
Forbidden
You don't have permission to access /index.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: HelenaR on June 03, 2009, 11:01:44 PM
Sorry I am hickjacking this post - but for some reason I can't figure out how to make my own topic! 

I am a mod of a forum which used SM(F) and today I went to the forum but it took me to the main site page, and told me Error 404, when I clicked the forum button on the main site page it took me to the same thing Error 404 on the main page just a pop up.

The new version of SMF has not been downloaded as far as 740am when I left for work this morning.

I found that sometimes the main site works ie, all the buttons at the top, pic section info section BUT the forum not at all.

Anyone got any ideas as to why?

Thank you kindly & sorry again for not making my own post.

Helena
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: charlottezweb on June 03, 2009, 11:06:45 PM
Quote
Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!

You'll get a much faster response if you post to the support forums.  :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: bycn* on June 05, 2009, 12:46:45 PM
Congrats :)
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: teh_Krall on June 05, 2009, 02:19:52 PM
Is Curve available to charter members?
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: ethankcvds on June 05, 2009, 02:25:11 PM
Is Curve available to charter members?


Nope.
Title: Re: SMF 1.1.9 and 2.0 RC1-1 released
Post by: metallica48423 on June 05, 2009, 02:54:36 PM
I think it is about time to lock this up.  Thanks to all for the positive comments :)

If you require assistance with this update, please pay a visit to Install and Upgrade Help (http://www.simplemachines.org/community/index.php?board=10.0).

Thanks!