News:

Wondering if this will always be free?  See why free is better.

Main Menu

Please include the version of SMF you're using.

Started by dtm.exe, July 09, 2005, 03:01:46 AM

Previous topic - Next topic

dtm.exe

For faster diagnosis of any problems that you're experiencing with your SMF forum, we recommend that you include the version of SMF that you're running.  This also makes our jobs much easier.

So remember: the next time you post a support request, take a minute to include what version of SMF you're running .

rhizome

Good idea.
Maybe merge with Owdy's sticky?  otherwise this post is going to disappear

codenaught

I agree. Now that 1.1 is out, a lot has changed in terms of how to get to a certain place in the admin panel, so it would be a lot easier if we knew beforehand what version of SMF the person was using. Also maybe there is a known bug in SMF so and so.
Dev Consultant
Former SMF Doc Coordinator

dtm.exe

Quote from: rhizome on July 09, 2005, 07:06:12 AM
Good idea.
Maybe merge with Owdy's sticky?  otherwise this post is going to disappear

It doesn't have to be stickied.

Quote from: akabugeyes on July 09, 2005, 10:56:25 AM
I agree. Now that 1.1 is out, a lot has changed in terms of how to get to a certain place in the admin panel, so it would be a lot easier if we knew beforehand what version of SMF the person was using. Also maybe there is a known bug in SMF so and so.

More than a couple of my posts have been "What version of SMF are you running?".

-Dan The Man

Anglashed

Where can i see it, message me to my profile plz

I download already 4 things now

- Program to make my Forum Faster
- An Upgrade for my forum
- 30 more avaters for my Forum
- Dutch Language upgrade

dtm.exe

Quote from: Anglashed on September 12, 2005, 01:33:43 PM
Where can i see it, message me to my profile plz

I download already 4 things now

- Program to make my Forum Faster
- An Upgrade for my forum
- 30 more avaters for my Forum
- Dutch Language upgrade

Look at the bottom of your forum near the copyright.  What does it say next to "SMF".

Sys_ZERO

HELP!!! I CANT UPLOAD AVATARS :'( :'( :'( :'( :'( :'(

I'M USING SMF 1.0 BETA 1

^^Would something like that help :P

Sys_ZERO

Owdy

Quote from: Sys_ZERO on October 08, 2005, 04:00:50 AM
I'M USING SMF 1.0 BETA 1

If you use 1.0 BETA 1, i strongly suggest that you upgrade soon as possible :P
Former Lead Support Specialist

Tarvitsetko apua SMF foorumisi kanssa? Otan työtehtäviä vastaan, lue:http://www.simplemachines.org/community/index.php?topic=375918.0

Oldiesmann

Quote from: Anglashed on September 12, 2005, 01:33:43 PM
Where can i see it, message me to my profile plz

I download already 4 things now

- Program to make my Forum Faster
- An Upgrade for my forum
- 30 more avaters for my Forum
- Dutch Language upgrade

Look at the bottom of the page. It'll say "Powered by SMF {version}" (ie "Powered by SMF 1.1 RC1" or "Powered by SMF 1.0.5")

Benny Elgazar

Yeah but there are really alot of things on defrent?

dtm.exe


Trekkie101


Owdy

Former Lead Support Specialist

Tarvitsetko apua SMF foorumisi kanssa? Otan työtehtäviä vastaan, lue:http://www.simplemachines.org/community/index.php?topic=375918.0

Trekkie101

Quote from: Owdy on November 07, 2005, 02:21:30 PM
Quote from: Trekkie101 on November 07, 2005, 01:39:00 PM
Last edit by OIDanTheManIO?

:-\
Yes, that was his username then.
Shouldn't it relatively update in that case now that it's changed?

roxpace

For forums with public traffic, do not show your version of SMF there, that is only a smooth invitation for people to know your weaknesses, the more you tell about your server it will be just easier for any hacker to make a intrusion. Less information is good, a lot is bad.

:)
Always keep an eye on the latest from me at ...
http://www.jump-gate.com/

dtm.exe

Quote from: roxpace on January 03, 2006, 04:24:40 PM
For forums with public traffic, do not show your version of SMF there, that is only a smooth invitation for people to know your weaknesses, the more you tell about your server it will be just easier for any hacker to make a intrusion. Less information is good, a lot is bad.

:)

Uhh, that's not true at all.  If there are no vulnerabilities in the version, why not mention it?  www.redandwhitekop.com uses an RC2 CVS, this website uses an RC2 CVS.  They are safe, I can assure you.

roxpace

If a hacker finds a weakness in any kind of code, do you really think they will announce it ?  Never ! They will take advantage of that bug to make intrusion into other systems for fun or/and profit or glory.

SMF will never be a safe product in order that you can guarantee people out there to 100% that it's safe, and as long that risc exists there, it will always be a potential risc.

Remember, it is all up to how administrators (or so called admins) will install this SMF on their server, also how their server is setuped. The big thing is not just if SMF is weak as a product, but if for example a new release of PHP or Apache together with SMF could open up a new hole. So the best safe thing is always to demand some certain versions of products which this product is dependent of, but some is impossible to control so we have to live in a unsure world. But the life will be less easy for the hackers if they do not know how to enter a system at once, let them try with many methods and in that way they reveal themself and a good admin can make them automatically ignored by the system/router/firewall.

Always keep an eye on the latest from me at ...
http://www.jump-gate.com/

Grudge

I don't believe hiding the version will make any difference. 90% of the time a weakness in one version of the software was in all the earlier ones anyway. As far as keeping software secure there is only one way, patch regularly and subscribe to places to hear annoucements about new releases. Basically, if you haven't updated your forum and you're not running the latest release, you're screwed regardless of whether or not you put the version number in the footer.

Most of this idea of version number purely comes because of the phpBB trojen that searched googled for version numbers. Now phpBB have removed the version number, if someone finds another exploits and has a script to exploit it they won't bother looking for the version number, they'll just look for "phpBB". The fact is, a script will take a second  to exploit a server, so even if they only get 1% on the right version that's still 50 an hour - before you even take into account the wave effect. Telling people to remove version numbers just give people a false sense of security - which is, without doubt, the worst kind.
I'm only a half geek really...

Fizzy

#18
Roxspace,
Have you suffered a hack yourself?

I ask because I noticed that you are using a forum at

http://www.jump-gate.com/forum/

Powered by phpBB © 2001, 2005 phpBB Group



Just because you can break in to a Ford doesn't mean you can also break in to a Renault with the same key ;)
"Reality is merely an illusion, albeit a very persistent one." - A.E.


Grudge

phpBB don't put version numbers in their software anymore. Each to their own I guess.
I'm only a half geek really...

Advertisement: