SMF 1.1.9 and 2.0 RC1-1 released

[mirahalo]

Congrats! 

weeeeeeeeeeeeee !!!!!

* 130860 is happy !!!!

[klumy]

thanks!

[fals]

Same here - everything seems to work 100% - I had to manually edit a few files. 

Code Select Expand

<search for>
            $parts[$i] = preg_replace('~\[([/]?)(list|li|table|tr|td)([^\]]*)\]~ie', '\'[$1\' . strtolower(\'$2\') . \'$3]\'', $parts[$i]);
</search for>
This line dosnt exist in my $sourcedir/Subs-Post.php

Only one downside - attached images cant have the same filename anymore

[kat]

No problems, here....

Good work, Dev team!

[MissyNL]

Perfect Job!!!  Installed without problems..... All the VOLENTEERS at SMF!! THANK YOU!!

[L'AltroWeb]

Great work
Thank'u very much

[Jez]

Thanks all for your great work!

[zipper306]

Thank you guys for all you do 

[haito]

thanks for SMF...
thanks for your hardwork...
nice^^b

[Leemy]

Thanks! Upgraded no problem.  Will be re-instating attachments and avatars.

[phpMyTony]

Yes!! Nice one!

[FragaCampos]

Congratulations SMF team

[@L3]

Thanx!

[青山 素子]

Many thanks to the developers who worked very hard on this patch. It's possibly the most complex security patch released for SMF.

[Geri Lx]

Congrats and thanks for the hard work!
SMF team rules!

[Joe N]

That was flipping quick!

Felt like yesterday smf 1.1.8 was released lol

I installed it. Got this error

Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type   Action   Description
1.   Execute Modification   smf_1-1-8_to_1-1-9_patch.mod   Modification parse error
2.   Execute Modification   smf_1-1-9_can_fail.xml   Modification parse error
3.   Execute Modification   -   Modification parse error
4.   Execute Code   updateDatabase.php

[(.:Al-Pacino:.)]

Many thanks to the developers who worked very hard on this patch. It's possibly the most complex security patch released for SMF.

Wow...

SMF FTW!!

[CPOMorty]

A perfectly smooth upgrade, as expected. 

[Snowy]

I can't upgradde from the package manager so I did this:

1) Download the package to your local PC and extract it into files.
2) Using an FTP client create a new directory in your "Packages" folder, in this example you may call it "shout".
3) Upload all the files from the extracted package to this directory.
4) Go back to the package manager browse page and the package will be automatically found by SMF.

But SMF doesn't find the smf_2-0-rc1-1_update folder I created in the packages directory.

[aED]

Can someone explain what the patch actually fixes? 

We were advised to turn off attachments and avatar uploads etc.  Does this fix the problem, and can we now turn them back on?

Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?



I also have a little problem  the upgrade link is not showing in the admin panel?