Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, addressing a few vulnerabilities found in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.
It should be noted that SMF 2.0 RC1-1 is
not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. The new Curve theme is still scheduled for SMF 2.0 RC2, as announced (http://www.simplemachines.org/community/index.php?topic=293556.0) earlier.
To upgrade, use the package manager to upgrade to either 1.1.9 or 2.0 RC1-1, depending on your version. Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Users still running the SMF 1.0.x branch can upgrade to SMF 1.0.17 via the same procedure.
If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual (http://docs.simplemachines.org) about installing (http://docs.simplemachines.org/index.php?board=2.0;sort=subject) and upgrading (http://docs.simplemachines.org/index.php?board=3.0;sort=subject). If you experience a session verification error when inputting FTP details for updating process, please see this (http://www.simplemachines.org/community/index.php?topic=278824.0) topic.
It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page (http://custom.simplemachines.org/upgrades/) for all versions.
Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!
Regards,
Simple Machines
Great work developers! :)
/me applauds :)
Congrats!
Nice! :D
Yay. All we need now is the official release of 2.0! ;D
Very nice work to all who contributed. I think a round of beer is on the house tonight :)
nice work! i hope to work with my mods :P
good job. thanks
foxit2007
Good job ^_^ All updated...
Going to update now, thanks! ;D
Good stuff. Champers all round. :D
Good, now there is a new method to encrypt the names of the attachments not predictable as the previous one.
Good work :)
Ok, we have one patch and four zips. I think an explanation might help.
Great work! Thanks :)
Thank you guys for all you do :D
Quote from: JBlaze on May 20, 2009, 08:59:30 PM
Very nice work to all who contributed. I think a round of beer is on the house tonight :)
You deserve a round yourself buddy.
Great work to all who were involved.
Nice work :)
Time to update my forums soon :P
QuoteOk, we have one patch and four zips. I think an explanation might help.
First one is a package installable via the Package Manager, used via automatic updates. The other three are archives of the modified files.
Thanks!!
Yay!
Yessss!
All updated ok to SMF 1.1.9 @ ApplianceJunk.com :)
Thanks!
http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released
Thanks a bunch. I updated all 4 boards in about 2 minutes. Kudos to SMF! I was really waiting for this one for obvious reasons. ;)
EXCELLENT !!!
Good work. I managed to somehow not get hit by this hack, but of course did this upgrade anyway. I had to work around some SP code in index.php, but went fine.
Quote from: JayBachatero on May 20, 2009, 10:47:09 PM
http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released
You beat me to it :D
:(
Had an index php error.
Will have to wait for one of the tech boys.
Nice work ladies and gents! :D
Added a digg link
Very nice. Flawless upgrade. Thank you all.
Quote from: TheListener on May 20, 2009, 11:02:03 PM
:(
Had an index php error.
Will have to wait for one of the tech boys.
If you're using Simple Portal, have a look at that thread.
Package manager doesn't seem to want to work and it isn't seeing the file when upload it manually.
Quote from: windrider on May 20, 2009, 11:29:30 PM
Package manager doesn't seem to want to work and it isn't seeing the file when upload it manually.
Please start a new topic in the respective support board. :)
Good job everyone. :)
Awesome work on these security patches!
Quote from: windrider on May 20, 2009, 11:29:30 PM
Package manager doesn't seem to want to work and it isn't seeing the file when upload it manually.
This happened to me too. I had to do the edits manually. Thanks SMFers for a much needed security patch!
Awesome, thank you! 8)
Quote from: Tiribulus on May 20, 2009, 11:25:43 PM
Quote from: TheListener on May 20, 2009, 11:02:03 PM
:(
Had an index php error.
Will have to wait for one of the tech boys.
If you're using Simple Portal, have a look at that thread.
I'm using Simple Portal on two of my boards but I didn't have any problems with the update. Is there something I should check? If so, what thread are you referring to?
Awesome thanks.. 60 Mods and the upgrade is complete... I had to do a manual on index.php and Subs-Members.php but I am not complaining. I feel a lot safer now and thanks for all the hard work :)
Rock and/or roll...Thank you, SMF Team!
:)
upgrading right now! thanks. ;)
Great work team! (http://www.getsmile.com/emoticons/energizer-smileys-51935/friends1.gif)
THX really (http://poligon.ricoroco.com/fora/smf/Smileys/classic/oklaski.gif)
and really good job (http://poligon.ricoroco.com/fora/smf/Smileys/classic/drinks.gif)
r.
more than 100 mods, and upgraded without a problem :) and installed 2 new mods as well rock on guys
Now I have recovered from how many mods you mention what the heck are they?
Thought 60 was a lot. :o
Quote from: TheListener on May 21, 2009, 01:27:06 AM
Now I have recovered from how many mods you mention what the heck are they?
Thought 60 was a lot. :o
Try having 148 with no errors :P
:o
All I can say to that is:
Show Off
Quote from: TheListener on May 21, 2009, 01:30:04 AM
:o
All I can say to that is:
Show Off
Wasn't my forum though. :)
Suppose you want me to let ya off then!
Nice Work.
No issues here re upgrading.
Thanks
I got only two errors during installation...
./Sources/Subs-Post.php
&
./Sources/Display.php
Test Failed...
Should I manually install these?
WOOOHOOOO!!! Heavily Modded and it went as smooth as silk.
Thank you very much SMF Team, keep up the great work!
Quote from: ATICE on May 21, 2009, 02:06:34 AM
I got only two errors during installation...
./Sources/Subs-Post.php
&
./Sources/Display.php
Test Failed...
Should I manually install these?
This topic is not for support. Please post a topic in your respective version's support board.
Good job , thanks
Sorted it by uninstalling the portal upgrading then reinstalling the portal.
Phew.
Thank you very much. That was real fast! :)
Is the change in index.english.php important? I ask because we use a german formal variation of the language files and when I compare the language file with WinMerge all rows are different (english <-> german) and I can't find a new line or new text.
The newlines might have changed from CRLF -> LF or LF -> CRLF... might need to check for that.
Thanks, but there are no new lines, hm? Only some changes in text?
Can someone explain what the patch actually fixes?
We were advised to turn off attachments and avatar uploads etc. Does this fix the problem, and can we now turn them back on?
Upgrade was problem free even with a tons of mods installed.
Thanks :)
Does anyone know when RC2 is out and how long has the smf 2.0 project been worked on now ?
YAY!!! I thought its gonna be 2.0RC2 cuz I want the curve theme. Anyway good job developers of simple machines!!
Quote from: Electro-X- on May 21, 2009, 03:30:44 AM
YAY!!! I thought its gonna be 2.0RC2 cuz I want the curve theme. Anyway good job developers of simple machines!!
At this stage I just want a theme that works. I dropped back to IE7 last night and noticed other thigns in the cpanel that didn't work so had to use a different browser again
I know this is not a support topic, but I think I should warning you / asking you about this.
I have two forums with RC1, one test forum and one really community. Now...
I ONLY have the upgrade link in the test forum, and NOTHING in the "real" forum (sorry, but in the morning my English is worse than ever...), why this happens?
Another thing, I tried to upgrade the test forum, and I have got an message saying the packages is empty. This is suppose to happen?
Quote from: riker on May 21, 2009, 03:23:45 AM
Does anyone know when RC2 is out and how long has the smf 2.0 project been worked on now ?
The answer is: When its ready :) (and I am not joking, this is really the answer)
Quote
The answer is: When its ready :) (and I am not joking, this is really the answer)
That was a complete and utter waste of time and no one likes a back seat driver either. Anyway by the time SMF 2.0 is final I'm sure Mybb and Phpbb will new versions out!
Does this Patch fix the avataruploadhack of krisbarteo?
Very nice job guys, i'm glad this is finally released... :D
Congrats!
Nice update, always enjoy seeing security vulnerabilities fixed :)
Great work! :)
Quote from: GOAT15 on May 21, 2009, 04:25:08 AM
Does this Patch fix the avataruploadhack of krisbarteo?
I think that's what this fix is made for.
Well done guys 8)
ok!
Now my Users can upload finally tehir avatars!!!
THX SMF!
It RulEzZZ :D
Quote from: riker on May 21, 2009, 04:24:53 AM
Quote
The answer is: When its ready :) (and I am not joking, this is really the answer)
That was a complete and utter waste of time and no one likes a back seat driver either. Anyway by the time SMF 2.0 is final I'm sure Mybb and Phpbb will new versions out!
so the quality of the forum is based on how often new releases are made?
Regarding your above post, work on RC2+Curve slowed down and even stopped while we worked on this patch. Which would you rather have - an exploited forum, or Curve? Rest assured, work is starting right back up again. We want to get RC2+Curve out as soon as possible, but we want to make sure you get something that works, not just a pretty dud ;)
thank you for the good work!
Steve
Upgrade went smooth as silk on my modified site. Had one failure on Sources/PackageGet.php but on checking the file in Winmerge the failure was only caused by a bit of whitespace anyway. Pushed the button and it's all good. :)
Quote from: riker on May 21, 2009, 04:24:53 AMQuoteThe answer is: When its ready :) (and I am not joking, this is really the answer)
That was a complete and utter waste of time and no one likes a back seat driver either. Anyway by the time SMF 2.0 is final I'm sure Mybb and Phpbb will new versions out!
Riker, you already know that SMF does not give release dates. Things like this series of hacks requiring a quick and effective solution are one of the reasons why release dates aren't given. You never know when something will come out of nowhere and force you to drop everything and deal with the new problem. HecKel gave you exactly the same answer that you know you would get from any SMF team member. What did you expect him to say?
Quote from: Fustrate on May 21, 2009, 04:38:21 AM
Regarding your above post, work on RC2+Curve slowed down and even stopped while we worked on this patch. Which would you rather have - an exploited forum, or Curve?
I want amostly secure and stable forum. Not as many RCs as possible in a very short time. :)
Thanks to the team again for the fast reaction.
Perfect!
Thanks for the good work!!
Vincent
Quote from: lurkalot on May 21, 2009, 03:04:27 AM
Can someone explain what the patch actually fixes?
We were advised to turn off attachments and avatar uploads etc. Does this fix the problem, and can we now turn them back on?
Yes, the aim of this patch was to fix those security flaws - hence it should now be completely safe to turn your attachments and avatars back on :)
Quote from: Tristan Perry on May 21, 2009, 05:14:34 AM
Quote from: lurkalot on May 21, 2009, 03:04:27 AM
Can someone explain what the patch actually fixes?
We were advised to turn off attachments and avatar uploads etc. Does this fix the problem, and can we now turn them back on?
Yes, the aim of this patch was to fix those security flaws - hence it should now be completely safe to turn your attachments and avatars back on :)
Thankyou Tristan, and thanks to the team for fixing the issue. ;)
Thanks.
Good work :)
Hello i have this message when i want do the update
my version :
Infos sur la version:
Votre version du forum: SMF 1.1.8
Version courante de SMF: SMF 1.1.9
Erreur lors de l'installation du paquet
Au moins une erreur a été rencontrée lors d'un test d'installation de ce paquet. Il est vivement recommandé que vous ne continuiez pas son installation à moins d'être sûr de ce que vous faites et que vous avez fait très récemment une copie de sauvegarde de votre forum et de votre base de données. Cette erreur peut être causée entre autre par un conflit avec le paquet que vous tentez d'installer et un autre paquet que vous avez précédemment installé, une erreur dans le paquet lui-même, un paquet qui requiert un autre paquet que vous n'avez pas encore installé, ou un paquet écrit pour une autre version de SMF.
Actions d'installation pour "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
L'installation de ce paquet effectuera les actions suivantes :
Type Action Description
1. Appliquer la modification ./index.php Réussite du test
2. Appliquer la modification ./Sources/Display.php Réussite du test
3. Appliquer la modification ./Sources/Load.php Réussite du test
4. Appliquer la modification ./Sources/ManageAttachments.php Réussite du test
5. Appliquer la modification ./Sources/PackageGet.php Réussite du test
6. Appliquer la modification ./Sources/Post.php Réussite du test
7. Appliquer la modification ./Sources/Profile.php Réussite du test
8. Appliquer la modification ./Sources/QueryString.php Réussite du test
9. Appliquer la modification ./Sources/Security.php Échec du test
10. Appliquer la modification ./Sources/Subs.php Réussite du test
11. Appliquer la modification ./Sources/Subs-Graphics.php Réussite du test
12. Appliquer la modification ./Sources/Subs-Members.php Réussite du test
13. Appliquer la modification ./Sources/Subs-Post.php Réussite du test
14. Appliquer la modification ./Themes/default/ManageAttachments.template.php Réussite du test
15. Appliquer la modification ./Themes/default/Recent.template.php Réussite du test
16. Appliquer la modification ./Themes/babylon/Recent.template.php Réussite du test
17. Appliquer la modification ./Themes/classic/Recent.template.php Réussite du test
18. Appliquer la modification ./Themes/default/languages/index.english.php Réussite du test
19. Appliquer la modification ./attachments/.htaccess Réussite du test
20. Appliquer la modification ./index.php Réussite du test
21. Appliquer la modification ./Sources/Display.php Réussite du test
22. Appliquer la modification ./Sources/Load.php Réussite du test
23. Appliquer la modification ./Sources/Post.php Réussite du test
24. Appliquer la modification ./Sources/Profile.php Réussite du test
25. Appliquer la modification ./Sources/Security.php Réussite du test
26. Appliquer la modification ./Sources/Subs.php Réussite du test
27. Appliquer la modification ./Sources/Subs-Graphics.php Réussite du test
28. Appliquer la modification ./Sources/Subs-Members.php Réussite du test
29. Appliquer la modification ./Sources/Subs-Post.php Réussite du test
Please, use the support board if you get any errors during the update/upgrade of your forum.
Good work! I'll update when I can.
Thank you Guys !!
but a i have an error in automatic upgrade please can you help me ??
Quote
You don't have permission to access /forum/index.php on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
or tell me how can i upgrade manually ???
Huraa, and a big thank you to all involved in the making of this release :)
Yayness; thanks folks :)
Also, thanks from SCF Community...
Thanks for this great update Compuart & Team.
Though i understand there is some security fix made.
But any logs of what is been updated from 2.0RC1 to 2.0RC1-1.
----------- update ......
I have got a detailed not here http://www.simplemachines.org/community/index.php?topic=290609.0
"Why do you use SMF?"
This is why. You guys are fast and really on top of things.
Thanks!
VVGJ :D Checking Lang Files ;)
Thank you.
Thank you!! Went into place without so much as a hiccup. The members are ecstatic to have their custom avatars back. I'm ecstatic to have a secure forum again.
To every one of the developers who dropped everything in order to issue a secure, bug-free fix ... THANK YOU!! You ROCK!!
:) Smooth upgrade from 1.1.8. Thanks.
good news!!
but i am still waiting the RC2
Thanks guys
Refused to install from Package Manager download (some twaddle about permissions and a temp directory) so I save to disk, uploaded manually and applied it - it went straight in without errors
Anyone know if gives me additional functionality or if it's just back-end code security fixes?
Quote from: GazOutEast on May 21, 2009, 08:21:23 AM
Thanks guys
Refused to install from Package Manager download (some twaddle about permissions and a temp directory) so I save to disk, uploaded manually and applied it - it went straight in without errors
Anyone know if gives me additional functionality or if it's just back-end code security fixes?
Just code fixes :)
My heavily modified forum site is still working after the update! Thanks for the hard work!
thegamershive.net
Congrats!
weeeeeeeeeeeeee !!!!!
/me is happy !!!!
thanks!
Same here - everything seems to work 100% - I had to manually edit a few files. :)
<search for>
$parts[$i] = preg_replace('~\[([/]?)(list|li|table|tr|td)([^\]]*)\]~ie', '\'[$1\' . strtolower(\'$2\') . \'$3]\'', $parts[$i]);
</search for>
This line dosnt exist in my $sourcedir/Subs-Post.php
Only one downside - attached images cant have the same filename anymore
No problems, here....
Good work, Dev team!
Perfect Job!!! Installed without problems..... All the VOLENTEERS at SMF!! THANK YOU!! (http://www.bimeiden.nl/Smileys/default/hailing.gif)
(http://www.bimeiden.nl/Smileys/default/kusje2.gif)
Great work :)
Thank'u very much ;)
Thanks all for your great work! :)
Thank you guys for all you do :)
thanks for SMF...
thanks for your hardwork...
nice^^b
Thanks! Upgraded no problem. Will be re-instating attachments and avatars.
Yes!! Nice one! :D
Congratulations SMF team ;)
Thanx! ;)
Many thanks to the developers who worked very hard on this patch. It's possibly the most complex security patch released for SMF.
Congrats and thanks for the hard work!
SMF team rules! :)
That was flipping quick!
Felt like yesterday smf 1.1.8 was released lol
I installed it. Got this error
Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type Action Description
1. Execute Modification smf_1-1-8_to_1-1-9_patch.mod Modification parse error
2. Execute Modification smf_1-1-9_can_fail.xml Modification parse error
3. Execute Modification - Modification parse error
4. Execute Code updateDatabase.php
Quote from: Motoko-chan on May 21, 2009, 12:49:09 PM
Many thanks to the developers who worked very hard on this patch. It's possibly the most complex security patch released for SMF.
Wow...
SMF FTW!!
A perfectly smooth upgrade, as expected. ;)
I can't upgradde from the package manager so I did this:
1) Download the package to your local PC and extract it into files.
2) Using an FTP client create a new directory in your "Packages" folder, in this example you may call it "shout".
3) Upload all the files from the extracted package to this directory.
4) Go back to the package manager browse page and the package will be automatically found by SMF.
But SMF doesn't find the smf_2-0-rc1-1_update folder I created in the packages directory.
Quote from: lurkalot on May 21, 2009, 03:04:27 AM
Can someone explain what the patch actually fixes?
We were advised to turn off attachments and avatar uploads etc. Does this fix the problem, and can we now turn them back on?
Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?
I also have a little problem the upgrade link is not showing in the admin panel?
thanks a lot smf team. we are upgrading
Quote from: aED on May 21, 2009, 01:19:25 PM
Quote from: lurkalot on May 21, 2009, 03:04:27 AM
Can someone explain what the patch actually fixes?
We were advised to turn off attachments and avatar uploads etc. Does this fix the problem, and can we now turn them back on?
Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?
I also have a little problem the upgrade link is not showing in the admin panel?
Run all the maintanance options, and it should pop up ;)
Thank you, installed with no problems. :)
Please
I installed it. Got this error
Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type Action Description
1. Execute Modification smf_1-1-8_to_1-1-9_patch.mod Modification parse error
2. Execute Modification smf_1-1-9_can_fail.xml Modification parse error
3. Execute Modification - Modification parse error
4. Execute Code updateDatabase.php
Quote from: fals on May 21, 2009, 09:35:53 AM
Only one downside - attached images cant have the same filename anymore
Not true. All attachments use a unique hash and id. So you do not have to worry about that.
Joe N and everyone else,
Please use our support forums
Quote from: aED on May 21, 2009, 01:19:25 PM
Does the exploit also works on 2.0 RC1? that's why you also released an update for 2.0 RC1?
The core security issue also existed in our 2.0 code. I don't personally know of any compromised sites that were running that edition, but it's best to be safe.
Also, the announcement doesn't say so, but I believe we also released a patch for the legacy 1.0 series as well.
I also have a little problem the upgrade link is not showing in the admin panel?
[/quote]
Joe N - I´ve the same error, please SOS..SOS..
I installed it. Got this error
Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type Action Description
1. Execute Modification smf_1-1-8_to_1-1-9_patch.mod Modification parse error
2. Execute Modification smf_1-1-9_can_fail.xml Modification parse error
3. Execute Modification - Modification parse error
4. Execute Code updateDatabase.php
I had exalcly the same thing. Upload it to your ftp
Fast and perfect updating...i <3 SMF!!
Keep up the good work against those security glitches!
Thank you guys for all you do :D
tamasir~
Joe N -
Uploaded by FTP to my directory packages & try to instal & I´ve the same error, please SOS..SOS..
Installations actions for "SMF 1.0.17 / 1.1.9 / 2.0 RC1 Update":
Installing this package will perform the following actions:
Type Action Description
1. Execute Modification smf_1-1-8_to_1-1-9_patch.mod Modification parse error
2. Execute Modification smf_1-1-9_can_fail.xml Modification parse error
3. Execute Modification - Modification parse error
4. Execute Code updateDatabase.php
Quote from: SleePy on May 21, 2009, 01:57:37 PM
Quote from: fals on May 21, 2009, 09:35:53 AM
Only one downside - attached images cant have the same filename anymore
Not true. All attachments use a unique hash and id. So you do not have to worry about that.
Well, its true - on my forum after todays update.
I have testet, uploaded a file called
avatars-popup.jpg, then made a reply and try upload same file again:
QuoteAn Error Has Occurred! Sorry! There is already an attachment with the same filename as the one you tried to upload. Please rename the file and try again.
(http://img200.imageshack.us/img200/392/errorvvj.jpg) (http://img200.imageshack.us/my.php?image=errorvvj.jpg)
The uploaded file itself does have a hashed filename (when i tjek via FTP), but i still get the above error.
(http://img194.imageshack.us/img194/4954/filenames.jpg) (http://img194.imageshack.us/my.php?image=filenames.jpg)
Should i start a new tread on my problem or does anyone else experience the same ?
Quote from: fals on May 21, 2009, 02:55:37 PM
Should i start a new tread on my problem or does anyone else experience the same ?
You should definitely start a new topic on this - I just tried on 1.1.9 and I can upload as many test.gif's I want.
thanks, safety is most important!!!
Joe N and cuacosa, please use our supportboards.
Hello,
Can I delete the old update packages on my packages list simply to click to "delete" ?
If I delete the old update, can I have any problems ?
Could you tell me more about this please. Thanks.
11. SMF 1.0.16 / 1.1.8 Update
33. SMF 1.0.15 / 1.1.7 Update
47. SMF 1.0.12 / 1.1.4 / 2.0 b1.1 Update
48. SMF 1.0.14 / 1.1.6 Update
57. SMF 1.0.13 / 1.1.5 / 2.0 b3.1 Update
When I click the link in my Admin panel that it tells me to click to upgrade. I get a 404 error page.
Here's the link location it takes me to.
http://magictalk.com/forum/index.php?action=pgdownload;auto;package=http://custom.simplemachines.org/mods/downloads/smf_patch_1.0.17_1.1.9_2.0-RC1-1.zip;sesc=7e63e22aac9a461991c87594d9d5917c
What causes this and what should I do?
Thanks
nice
thx
great work developers and congratulations.
I already update my forum to 1.1.9
CHEERS ;)
thank you very much! worked with no glitches for me from 1.1.8 to 1.1.9
Great Work! Thanks :D
Thanks for the update patch.
I tried to install patch from admin warning page but got..
Although the package was downloaded to the server it appears to be empty. Please check the Packages directory, and the "temp" sub-directory are both writable. If you continue to experience this problem you should try extracting the package on your PC and uploading the extracted files into a subdirectory in your Packages directory and try again. For example, if the package was called shout.tar.gz you should:
1) Download the package to your local PC and extract it into files.
2) Using an FTP client create a new directory in your "Packages" folder, in this example you may call it "shout".
3) Upload all the files from the extracted package to this directory.
4) Go back to the package manager browse page and the package will be automatically found by SMF.
Went here - http://www.simplemachines.org/community/index.php?action=dlattach;topic=311899.0;attach=99153
Uploaded patch and installed as a normal mod. No problems at all.
I'm using SMF 2.0 and user under the name krisbarteo did register at the forums on May 15; however, for some reason all forum files remained untouched.
Quote from: poolhall on May 21, 2009, 07:59:01 PM
I'm using SMF 2.0 and user under the name krisbarteo did register at the forums on May 15; however, for some reason all forum files remained untouched.
That's a good thing :) make sure you upgrade to RC1-1, though, so he doesn't have an opportunity to do it in the future.
Perfect ...BRAVO !!!
Thanks. This is really a good work!
Thanx a lot :D
OK update finished! with no problems! Thanks
Thank you for the update.
Upgraded but alot of people have lost their avatars and get an error when trying to do them again. Also global moderator gets an error when trying to delete topics although they have permission to do so????
When they try to do their pic they get
'Please try again. If you come back to this error screen, report the error to an administrator.
im using 1.1.9
SMF gets worse and worse everytime they upgrade. I think phpBB and Invision are the way to go. SMF is getting pathetic.
Quote from: ErnieB on May 21, 2009, 10:38:08 PM
Upgraded but alot of people have lost their avatars and get an error when trying to do them again. Also global moderator gets an error when trying to delete topics although they have permission to do so????
When they try to do their pic they get
'Please try again. If you come back to this error screen, report the error to an administrator.
im using 1.1.9
Please post a topic in the support boards as this is not a support topic.
Quote from: Splooge on May 21, 2009, 10:58:56 PM
SMF gets worse and worse everytime they upgrade. I think phpBB and Invision are the way to go. SMF is getting pathetic.
Sorry you feel that way. We can't please everybody.
Hi,
I have just upgraded to SMF 2.0RC1-1
via the packetmanager and using the file
smf_patch_1.0.17_1.1.9_2.0-RC1-1.zip
Then it failed only this file
* 2. Execute Modification ./Sources/Display.php Test failed
but I installed it anyway.
I have installed as Mods:
Admod 2.3.4
Sitemap 2.0
Download System 1.2.4
PortaMX 0.957r2
Pmx HighSlide for attachments 0.11
But now there is an error.
Now it cant show anymore any attachments...
http://www.overunity.de/index.php?action=dlattach;topic=146.0;attach=207
404 - Dateianhang nicht gefunden.
404 - file not found
Please help.
Many thanks
Regards, Stefan.
good job. thanks
hartiberlin, please post a new topic in the support boards.
Thanks for another great version! ;D
its a good forum
Quote from: Astral2000 on May 21, 2009, 07:07:40 PM
Thanks for the update patch.
I tried to install patch from admin warning page but got..
Although the package was downloaded to the server it appears to be empty. Please check the Packages directory, and the "temp" sub-directory are both writable. If you continue to experience this problem you should try extracting the package on your PC and uploading the extracted files into a subdirectory in your Packages directory and try again. For example, if the package was called shout.tar.gz you should:
1) Download the package to your local PC and extract it into files.
2) Using an FTP client create a new directory in your "Packages" folder, in this example you may call it "shout".
3) Upload all the files from the extracted package to this directory.
4) Go back to the package manager browse page and the package will be automatically found by SMF.
Went here - http://www.simplemachines.org/community/index.php?action=dlattach;topic=311899.0;attach=99153
Uploaded patch and installed as a normal mod. No problems at all.
I got the same error and couldn't install from the backend with the link displayed. I also ensured that the "Packages" folder is writeable. I don't know what's meant by "temp" sub-directory since it didn't exist out of the box but I also created one and granted write permissions - didn't help either.
Anyway, your hint with downloading the patch and uploading it manually helped. Thanks.
Updated successfully yesterday. :)
Updated without any bugs or Problems.
:o ;)
Had smileys length-code problem, but worked fine after editing the sql-file and manually updated the database.
Thanks for the hard work. :D
Thank you so much. Glad to know this news ;)
Updated without any problem, thanks :).
Do i need to upgrade my database manually, if i install the 1.1.9 from admin page on my forum?
Quote from: smldmr on May 22, 2009, 02:55:02 PM
Do i need to upgrade my database manually, if i install the 1.1.9 from admin page on my forum?
No, the update from admin page does it automatically. And please use the support boards, this is just an announcement topic :)
Whew.... just realized the fix is in 1.1.9
Realized it just before I was ready to go through all the steps mentioned previously
Thank you from Linux Graphics Users, to all the hard-working folks here at smf for all the work you do!!! YOU ROCK!!!! ;)
I downloaded the smf_1-1-9_update.zip and loaded it up to the server. Do I still need the patch? There is no good documentation for that patch-thing.
Quote from: Kajol on May 23, 2009, 08:43:18 AM
I downloaded the smf_1-1-9_update.zip and loaded it up to the server. Do I still need the patch? There is no good documentation for that patch-thing.
This isn't a support topic, however if you updated your forum manually and the version number is 1.1.9 (i.e. you upgraded fine), then there's no need for the patch.
There's no possibility to upgrade from beta 4 with the package?
Quote from: lorenzone92 on May 23, 2009, 11:15:09 AM
There's no possibility to upgrade from beta 4 with the package?
To update from 2.0 Beta 4, use the 2.0 RC1-1 upgrade package in our downloads section and do a manual upgrade.
I'm at 1.1.7 --- do I need to first patch to 1.1.8 and then 1.1.8 to 1.1.9 ?
Quote from: chovy on May 23, 2009, 03:41:39 PM
I'm at 1.1.7 --- do I need to first patch to 1.1.8 and then 1.1.8 to 1.1.9 ?
You can either do that, or download the 1.1.9 "Large upgrade" package and upgrade SMF manually.
Quote from: Tristan Perry on May 23, 2009, 03:54:00 PM
Quote from: chovy on May 23, 2009, 03:41:39 PM
I'm at 1.1.7 --- do I need to first patch to 1.1.8 and then 1.1.8 to 1.1.9 ?
You can either do that, or download the 1.1.9 "Large upgrade" package and upgrade SMF manually.
I found it from the d/l page...but when I try to upload via web interface it says its' corrupt, I tried both .tar.gz and .zip:
An Error Has Occurred!
The package you tried to upload either is not a valid package or has become corrupted.
Please do not use this topic for support. Post your issues in the appropriate support board.
updated to 1.19 many thx for your efforts
Quote from: Compuart on May 20, 2009, 08:22:19 PM
Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, addressing a few vulnerabilities found in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.
It should be noted that SMF 2.0 RC1-1 is not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. The new Curve theme is still scheduled for SMF 2.0 RC2, as announced (http://www.simplemachines.org/community/index.php?topic=293556.0) earlier.
To upgrade, use the package manager to upgrade to either 1.1.9 or 2.0 RC1-1, depending on your version. Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Users still running the SMF 1.0.x branch can upgrade to SMF 1.0.17 via the same procedure.
If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual (http://docs.simplemachines.org) about installing (http://docs.simplemachines.org/index.php?board=2.0;sort=subject) and upgrading (http://docs.simplemachines.org/index.php?board=3.0;sort=subject). If you experience a session verification error when inputting FTP details for updating process, please see this (http://www.simplemachines.org/community/index.php?topic=278824.0) topic.
It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page (http://custom.simplemachines.org/upgrades/) for all versions.
Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!
Regards,
Simple Machines
<script type=\"text/javascript\">digg_url = 'http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released';</script><script src=\"http://digg.com/tools/diggthis.js\" type=\"text/javascript\"></script>
Fantastic work guys! This is absolutely fantastic.
I've just updated my forum from 2.0 Beta 4 to 2.0 RC1.1 using the upgrade. The upgrade worked okay and I can access all boards and menu links. but i am not able to access Admin menu link. It is showing following message:
Fatal error: Cannot redeclare template_siteintegrationsettings() (previously declared in pathtoforum/Sources/Load.php(1927) : eval()'d code:1969) in pathtoforum/Sources/Load.php(1927) : eval()'d code on line 1981
how can I access admin menu.
I do posted this in siteintegration mod as well. sorry for reposting (no reply 4 that on that post).
can anyone help me fixing this problem.
bhupender
Nice Work SMF, keep It Up
Thanks it worked great! where would I find just what the patch fixed and issues it addressed?
what has changed lol?
Quote from: thefley on May 25, 2009, 10:42:26 AM
Thanks it worked great! where would I find just what the patch fixed and issues it addressed?
The "modified.[versionnumber].zip" packages in the first post have just the files that are fixed :) And the modification lists all the specific code changes.
Quote from: alexandervba on May 25, 2009, 12:41:17 PM
what has changed lol?
Read the first post, and look at the attachments. :)
Nice, I may open up a forum again, looks like the Gold will be round the corner soon way cool.
Why did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.
any help for my query..
Quote from: bschhikara on May 25, 2009, 02:44:52 PM
any help for my query..
This isn't a support topic. Please use the support boards :)
QuoteWhy did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.
We have 170,000 emails to send out -- it can take some time to get through all of them :P
Thank you very much for the "modified_..." attached files in the opening post. It's a very nice gesture for us with custom-modded boards :)
Makes it a lot easier to upgrade
whoop de doo I have been hacked and my sites are down. I don't see the thrill.
Thanks! Great Work....
bschhikara, this thread is not for support.
It looks like you have installed a mod twice.
Thank you!
- -
Okay,
Father Luke
:) :)Applause. Great show. Thanks :) :)
No problems upgrading...but is there a change log? what has been changed/added/removed and why?
Good job!
Upgrade via packet-manager done in less than 20 seconds!
Thanks!
Quote from: Col on May 25, 2009, 02:36:50 PMWhy did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.
What should SMF do? Sending 170,000 handwritten letters? ;)
Take a regulary look into the admin-center of your forum. There you'll find a notice if an update is available and how to install it.
Quote from: metallica48423 on May 25, 2009, 03:42:44 PM
QuoteWhy did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.
We have 170,000 emails to send out -- it can take some time to get through all of them :P
Plus, we just moved our servers and changed some stuff, so the server admin wanted to preside over everything to make sure nothing went wrong, and he wasn't available for the last few days. Everything seems to be running smoothly though :)
Sorry just a quick general question, after each update, is it ok to delete the old update packages? I have a list of update packages in my package manager list from 1.1.4 to 1.1.8 and I'm wondering if it is safe to do so or should I leave it there.
Quote from: Argonaut on May 26, 2009, 01:59:54 AM
Quote from: Col on May 25, 2009, 02:36:50 PMWhy did SMF only send out e-mail notification of this important update today? Fortunately, I was informed about this from another source, so I updated days ago.
What should SMF do? Sending 170,000 handwritten letters? ;)
No, 170,000 automated e-mails would surfice! :D
I appreciate that it will take some time, but even one e-mail per second would take only 2 days (and correct me if I'm wrong, but I would have thought e-mail can be sent out faster than this).
QuoteTake a regulary look into the admin-center of your forum. There you'll find a notice if an update is available and how to install it.
Well, I don't always check the admin area for security updates - I sometimes choose to not visit my forum at all! :o Though I do routinely check my e-mail! I just assumed that SMF would be in a rush to send out such notifications. ::) I receive other security notifications (from other websites) almost immediately. How many people have been hacked between the announcement here and receiving e-mail notification? Can the e-mail notifications be speeded up? If there are technical reasons why e-mail cannot be sent out faster than 1 e-mail every 2 seconds (assuming I was one of the last to be informed - it might be slower than this), I withdraw my remarks.
Glad to see there is a fix though.
Quote from: MrKim on May 25, 2009, 07:42:29 PM
whoop de doo I have been hacked and my sites are down. I don't see the thrill.
When were you hacked, Mr Kim?
Well, I've received the e-mail notification yesterday but have seen the information in the admin-center three or four days ago.
I'm sure, SMF has sent automated e-mails. But they told that they've moved their servers at the same time.
Nevertheless, in the past SMF has sent update-notifications just in time.
QuoteHow many people have been hacked between the announcement here and receiving e-mail notification?
You can also ask how many people have been hacked in the months between release 1.1.8 and the update to 1.1.9 ;)
Great work man! =)
just a side note: If you are the admin of a forum, it is your responsibility to check is regularly and to keep abreast of what issues, concerns and other announcements there are for the forum and the software. We know that not everyone gets onto THIS forum every day, but you should be checking your own forum every day (at least)... and we did send an announcement in the SMF admin announcements tool, as stated...
As yes, there is a distinct limit to the number of emails that a server will send at one time, so it takes a REAL amount of time to work through 170,000 emails.
Hi Kindred,
Thanks for the reply.
Of course there is a distinct limit to the number of e-mails SMF can send out in a given amount of time - this is obvious to me. Is the limit 1 e-mail per 2 seconds or less? By publishing this notice, SMF are publishing this vulnerability to very many more people - it is inevitable that a few will enquire about the vulnerability, and some might use it, perhaps just for fun, on a SMF forum they don't like. Any kind of vulnerability should be kept as quiet as possible until there is a fix available, and then the fix published as wide and as speedily as possible. I just feel that 1 e-mail every 2 seconds or less is probably a lot slower than it need be - or am I missing something?
There are all sorts of reasons why I might not login to my forum. Sometimes I like break - not all forums are fun - some, like mine, tend to be stressful and hard work. However, like most people, I will continue to check my e-mail in case anything urgent pops up - like security vulnerabilities.
I was just surprised that it took four days for an e-mail to arrive about this. As it turns out, I had patched this vulnerability within a few hours of it being made available, but this would not have been the case if relying upon e-mail notifications of vulnerabilities. I think, if it is technically possible, e-mail notifications should be sent out more promptly than this. I assume it is possible since no one has stated that e-mails are being sent out at the upper limit of capacity (1 every 2 seconds or less, does seem slow to me).
This does not diminish all the hard work put in by the people at SMF. This is meant as feedback, as I think this an important issue.
I am not a coder, and have little knowledge of how servers function, so if it is not reasonably technically possible to send out these e-mails any more promptly, I unreservedly withdraw my comments and apologise for the distraction. If, however, it is very possible to send out these important notifications in a significantly shorter timeframe, I stand by my comments.
Thanks.
Quote from: Col on May 26, 2009, 07:21:19 AMBy publishing this notice, SMF are publishing this vulnerability to very many more people - it is inevitable that a few will enquire about the vulnerability, and some might use it, perhaps just for fun, on a SMF forum they don't like. Any kind of vulnerability should be kept as quiet as possible until there is a fix available, and then the fix published as wide and as speedily as possible. I just feel that 1 e-mail every 2 seconds or less is probably a lot slower than it need be - or am I missing something?
The vulnerability is published whichever way SMF publishes the fixes. When applying the patch, the code changes can be seen. The modified files are also linked to this thread (first post). So it's reasonably impossible to hide the vulnerability. :) As for e-mail sending:
Quote from: Col on May 26, 2009, 07:21:19 AM
I am not a coder, and have little knowledge of how servers function, so if it is not reasonably technically possible to send out these e-mails any more promptly, I unreservedly withdraw my comments and apologise for the distraction. If, however, it is very possible to send out these important notifications in a significantly shorter timeframe, I stand by my comments.
There's no distraction/need for apology :) It's just that sending out 170,000 is a major deal - trying to send them out in the space of, say, one day wouldn't be possible and would probably crash the server trying to do this.
Secondly, sending them out in such a quick space of time could be seen as spam (obviously they wouldn't be since SMF is reputable/well-known; however sending out 170,000 e-mails in a short space of time could be flagged by some poor spam blacklists).
I guess the main point(s) is that the vulnerability can't really be hidden (since SMF is open sourse) - and so there's no real need to try and get the e-mails out as quickly as possible.
FYI: I used the smf_patch_1.0.17_1.1.9_2.0-RC1-1.zip patch to perform the update to our local server's working copy of SMF 1.1.8. The database update program has a bug in it which prevents the smfVersion varable from being updated. It incorrectly adds two new variables, '0' and '1', to the smf_settings table, but fails to actually change the smfVersion variable.
Specifics:
The 'updateDatabase.php' program incorrectly uses the updateSettings function. The following line does not provide an associative array for the smfVersion assignment:
updateSettings(array('smfVersion', 'SMF ' . (isset($func['entity_fix']) ? '1.1.9' : '1.0.17')));
That line should be rewritten as an associative array:
updateSettings(array('smfVersion' => 'SMF ' . (isset($func['entity_fix']) ? '1.1.9' : '1.0.17')));
The value of 'SMF 1.1.9' is also inconsistent with the fallback code that assigns '1.1.9' to the smfVersion (which makes more sense to me).
Hello!
Thanks @all!
For users with problems I write my problems and solutions.
If it's the wrong place plese correct me - Thanks!
I've updated 1.1.8 -> 1.1.9 with manual update for the Display.php and the Subs-Post.php.
With the Display.php I've got an ugly error wich show me the column
"<looks like a hashvalue>" doesn't exists.
After some checking files I found the Problem:
In the old Display.php the releatRRRed Query looks (Line 964):
SELECT a.filename, a.ID_ATTACH, a.attachmentType, a.size
the new one (original Line 958):
SELECT a.filename, a.ID_ATTACH, a.attachmentType, a.file_hash
So the following statement gives an hash instead the filesize (Line 975):
list ($real_filename, $ID_ATTACH, $attachmentType, $size) = mysql_fetch_row($request);
I changed the query:
SELECT a.filename, a.ID_ATTACH, a.attachmentType, a.file_hash, a.size
and the statement:
list ($real_filename, $ID_ATTACH, $attachmentType, $file_hash, $size) = mysql_fetch_row($request);
relevant Packages:
Attachments Download Permission
Attachments Mod
hth
Sven
I think, there is a Bug in the upgrade for SMF2.0 if you are using multiple directorys.
See my post: http://www.simplemachines.org/community/index.php?topic=313229.msg2078430#msg2078430
Fel
nice work guys,, bring on the curve theme
Is there a demo site for SMF 2.0?
Or a feature list?
Why is it better than 1xx?
I guess this is the demo site, as it's running v2.
It's only a release candidate, though.
It's not yet recommended for working fora.
We actually suspect there is a slight bug in email sending affecting the send rate. Once we found out that it was sending much slower than it should have been, we started pushing the queue manually.
Either way, we anticipate that it will take anywhere from 6 hours to 2 days depending on server loads, hits, and such, to actually send out the 170,000 emails, also accounting for all of the email notifications that go out in addition to these (which are on a scheduled task), it's quite a significant job.
Quote from: metallica48423 on May 26, 2009, 08:50:34 PM
Either way, we anticipate that it will take anywhere from 6 hours to 2 days depending on server loads, hits, and such, to actually send out the 170,000 emails, also accounting for all of the email notifications that go out in addition to these (which are on a scheduled task), it's quite a significant job.
Don't forget that many major ISPs will rate-limit incoming mail from individual servers. Yahoo! is particularly bad about it, sometimes enforcing less than 100 messages an hour as a maximum.
Quote from: noelchiew on May 26, 2009, 03:04:05 AM
Sorry just a quick general question, after each update, is it ok to delete the old update packages? I have a list of update packages in my package manager list from 1.1.4 to 1.1.8 and I'm wondering if it is safe to do so or should I leave it there.
Sorry can't help but wonder iwhether my post was accidentally overlooked in the midst of all these discussion :) Appreciate it!
You can delete them, as if you ever needed them - you could still get them from the archives here ;) Personally though, I'd recommend keeping the latest update, just in case.
Ok that was what I thought too but needed confirmation. Thanks! :)
Quote from: Kat on May 26, 2009, 05:55:28 PM
I guess this is the demo site, as it's running v2.
Ah ok, I didn't pay attention. Thanks.
So I think, it doesn't have big changes in appearance :-)
Quote from: Hunnenkoenig on May 27, 2009, 04:19:57 AM
Quote from: Kat on May 26, 2009, 05:55:28 PM
I guess this is the demo site, as it's running v2.
Ah ok, I didn't pay attention. Thanks.
So I think, it doesn't have big changes in appearance :-)
It will be bringing out a completely new theme, and some other layout changes as well, but nothing I'd call major for the user point of view, apart from the mentioned new theme ;)
Quote from: Hunnenkoenig on May 27, 2009, 04:19:57 AM
Quote from: Kat on May 26, 2009, 05:55:28 PM
I guess this is the demo site, as it's running v2.
Ah ok, I didn't pay attention. Thanks.
So I think, it doesn't have big changes in appearance :-)
Well, actually:
Introducing the (upcoming) new default SMF theme - Curve! (http://www.simplemachines.org/community/index.php?topic=293556.0)
;D
This site is running on 2.0, however the new theme Curve hasn't been released to the public yet (it's still being worked upon and beta tested)
Check out some of the past announcements for new features that are upcoming in 2.0 :)
Hey is that a spam post?
Quote from: metallica48423 on May 26, 2009, 08:50:34 PM
We actually suspect there is a slight bug in email sending affecting the send rate. Once we found out that it was sending much slower than it should have been, we started pushing the queue manually.
Either way, we anticipate that it will take anywhere from 6 hours to 2 days depending on server loads, hits, and such, to actually send out the 170,000 emails, also accounting for all of the email notifications that go out in addition to these (which are on a scheduled task), it's quite a significant job.
It did seem slow to me.
From my reading around, it appeared reasonably technically possible to send out mail at a significantly higher rate, but I also note Motoko-chan's point about some ISPs (particularly webmail provideres) that impose limits, usually in the most unintelligent manner. I'm sure there must be a ridiculous number of notifications sent out from a forum the size of this place too.
Thanks for the explanation and update.
On my prod forum the update failed when using the Package Manager: No error occured, but the files were not updated and also nothing in the database.
It worked on my local test forum but I wasn't forced to use FTP there (why FTP? -> It's old and unsecure). If anything is wrong with my FTP settings I would expect an error message in SMF.
Ok, so I tried the file "modified_1-1-8_1-1-9.zip", but missed the "update.php" file. Then tried to use the "updateDatabase.php" from the patch package, but it didn't seem to do anything (blank page).
Now I'm confused if my SMF is correctly on version 1.1.9 or not.
The Administration Center says:
QuoteForum version: SMF 1.1.9
Current SMF version: SMF 1.1.9
(more detailed)
If I click on "more detailed" the only template marked in red is:
index.german.php 1.1.5 1.1.9
[Edit: This is a template from a language pack, so no surprise here]
Curiously there is another template in another version than the "Current Version":
index.template.php 1.1.5 (Your Version) 1.1 (Current)
I have to say: I'm coming from phpBB 2 and this was my first SMF update, but the updates and corresponding documentation were easier with phpBB. The only downside were the time consuming manual adjustments for the different mods (which are already included in SMF 1.1.8 like sub forums, RSS support [doesn't really work currently at this forum] and attachments). But this SMF update took more time anyway (e.g. because I had to setup an FTP server).
Mine is not letting me upgrade.
Version Information:
Forum version: SMF 1.1.5
Current SMF version: SMF 1.1.9
(more detailed)
When I click on more detailed, it returns:
Fatal error: Call to a member function read() on a non-object in /home/kuaharac/public_html/autismwf_root/forum/Sources/Admin.php on line 731
It also never prompts me to upgrade in the admin panel. My other forums prompted me for the upgrade and everything worked perfectly.
Please use the support boards for getting support regarding the upgrade :)
Quote from: Tristan Perry on May 27, 2009, 10:42:05 AM
Please use the support boards for getting support regarding the upgrade :)
Did you address kuahara or me or both of us? ??? [I'm not sure if I need support, I would only like to know if my update worked]
Quote from: SabreOfParadise on May 27, 2009, 10:58:15 AM
Quote from: Tristan Perry on May 27, 2009, 10:42:05 AM
Please use the support boards for getting support regarding the upgrade :)
Did you address kuahara or me or both of us? ??? [I'm not sure if I need support, I would only like to know if my update worked]
I was only really addressing kuahara; sorry for the confusion :) I would say yes, that your forum would be upgraded fine if you uploaded all the files from the 1.1.9 modified zip file. Not sure if the database gets auto-upgraded or something, although as long as you don't get any SQL errors on your forums you can assume that the upgrade went fine.
I just wanted to say, being new to this forum software, that I am amazed at how well it is put together. Quite a team. I have been running it on my site (1.1.8) for 4 months without a problem. Oh, I did my homework but I am not used to the smoothness that this software exhibits. I am truly amazed. Two days ago I updated to 1.1.9 through the Package and it was instantaneous. Not a hitch. I think this is rare. I am quite impressed.
I hope folks realize how good your team is at what they do. Your forum is wonderful also and I just wanted to say thanks. I am very grateful that you are here for us.
Quote from: Compuart on May 20, 2009, 08:22:19 PM
Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, addressing a few vulnerabilities found in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.
It should be noted that SMF 2.0 RC1-1 is not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. The new Curve theme is still scheduled for SMF 2.0 RC2, as announced (http://www.simplemachines.org/community/index.php?topic=293556.0) earlier.
To upgrade, use the package manager to upgrade to either 1.1.9 or 2.0 RC1-1, depending on your version. Simply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Users still running the SMF 1.0.x branch can upgrade to SMF 1.0.17 via the same procedure.
If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual (http://docs.simplemachines.org) about installing (http://docs.simplemachines.org/index.php?board=2.0;sort=subject) and upgrading (http://docs.simplemachines.org/index.php?board=3.0;sort=subject). If you experience a session verification error when inputting FTP details for updating process, please see this (http://www.simplemachines.org/community/index.php?topic=278824.0) topic.
It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page (http://custom.simplemachines.org/upgrades/) for all versions.
Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!
Regards,
Simple Machines
<script type=\"text/javascript\">digg_url = 'http://digg.com/software/SMF_1_1_9_and_2_0_RC1_1_released';</script><script src=\"http://digg.com/tools/diggthis.js\" type=\"text/javascript\"></script>
No se si podré hacer esto, pero si no lo puedo hacer favor de retirar.
Para los usuarios de habla hispana
Máquinas simples anuncia la liberación de SMF 1.1.9 y 2.0 RC1-1, dirigiendo unas vulnerabilidades encontradas en SMF 1.1.8 y 2.0 RC1. Recomendamos encarecidamente que todos los usuarios se actualicen a la mayor brevedad posible.
Cabe señalar que SMF 2.0 RC1-1 no es la segunda versión candidata a SMF 2.0, sino que se limita a una garantía-versión actualizada de la primera versión candidata. La nueva curva de tema sigue siendo programado para SMF 2.0 RC2, tal como se anunció anteriormente.
Para actualizar, utilice el gestor de paquetes o bien para actualizar a 1.1.9 o 2.0 RC1-1, dependiendo de la versión. Simplemente visite su centro de administración, cuando un anuncio se muestra, lo que a actualización. Haga clic en el enlace, confirmar los cambios y su foro estar al día de nuevo. Los usuarios que siguen ejecutando la rama 1.0.x SMF puede actualizar a través de la SMF 1.0.17 mismo procedimiento.
Si no puede actualizar mediante el gestor de paquetes, por favor, siga las instrucciones publicadas en el manual en línea sobre la instalación y actualización. Si experimenta un período de sesiones de verificación de error al introducir datos de FTP para actualizar el proceso, por favor, consulte este tema.
Puede ser necesario aplicar la actualización manualmente si mod conflictos significa que usted no puede instalar el parche a través del gestor de paquetes. Instrucciones para hacer esto se puede encontrar en esta página para todas las versiones.
Por último - por favor no utilice este tema para cualquier tipo de apoyo solicitudes. Usted recibirá una respuesta mucho más rápida, visite el apoyo pertinente a bordo!
Translation?
And thanks again for the upgrade!
- -
Okay,
Father Luke
Quote from: ManuelFalque on May 29, 2009, 09:11:36 PM
No se si podré hacer esto, pero si no lo puedo hacer favor de retirar.
Para los usuarios de habla hispana
Máquinas simples anuncia la liberación de SMF 1.1.9 y 2.0 RC1-1, dirigiendo unas vulnerabilidades encontradas en SMF 1.1.8 y 2.0 RC1. Recomendamos encarecidamente que todos los usuarios se actualicen a la mayor brevedad posible.
Cabe señalar que SMF 2.0 RC1-1 no es la segunda versión candidata a SMF 2.0, sino que se limita a una garantía-versión actualizada de la primera versión candidata. La nueva curva de tema sigue siendo programado para SMF 2.0 RC2, tal como se anunció anteriormente.
Para actualizar, utilice el gestor de paquetes o bien para actualizar a 1.1.9 o 2.0 RC1-1, dependiendo de la versión. Simplemente visite su centro de administración, cuando un anuncio se muestra, lo que a actualización. Haga clic en el enlace, confirmar los cambios y su foro estar al día de nuevo. Los usuarios que siguen ejecutando la rama 1.0.x SMF puede actualizar a través de la SMF 1.0.17 mismo procedimiento.
Si no puede actualizar mediante el gestor de paquetes, por favor, siga las instrucciones publicadas en el manual en línea sobre la instalación y actualización. Si experimenta un período de sesiones de verificación de error al introducir datos de FTP para actualizar el proceso, por favor, consulte este tema.
Puede ser necesario aplicar la actualización manualmente si mod conflictos significa que usted no puede instalar el parche a través del gestor de paquetes. Instrucciones para hacer esto se puede encontrar en esta página para todas las versiones.
Por último - por favor no utilice este tema para cualquier tipo de apoyo solicitudes. Usted recibirá una respuesta mucho más rápida, visite el apoyo pertinente a bordo!
Means
I do not know if I can do this, but if I do not favor withdrawal.
For Spanish-speaking users
Simple Machines announces the release of SMF 1.1.9 and 2.0 RC1-1, targeting a vulnerability in SMF 1.1.8 and 2.0 RC1. We strongly recommend that all users upgrade as soon as possible.
Note that SMF 2.0 RC1-1 is the second release candidate for SMF 2.0, but is limited to a security-updated version of the first release candidate. The new curve issue remains scheduled for SMF 2.0 RC2, as announced earlier.
To upgrade, use the package manager or to upgrade to 1.1.9 or 2.0 RC1-1, depending on the version. Simply visit your local administration, where an ad is displayed, which will update. Click on the link to confirm your changes and stay up to date forum again. Users still running the 1.0.x branch you can upgrade to SMF via the SMF 1.0.17 same procedure.
If you can not upgrade using the package manager, please follow the instructions published in the online manual on the installation and upgrade. If you experience a session verification error when entering data to update the FTP process, please see this topic.
It may be necessary to apply the update manually if mod conflicts means you can not install the patch through the package manager. Instructions for doing this can be found on this page for all versions.
Finally - please do not use this topic for any support requests. You will receive a much faster response, please visit the relevant support board!
@ManuelFalque
we (the spanish users) have already a post anouncing the release:
http://www.simplemachines.org/community/index.php?topic=311913.0
but thanks for your efforts!
QuoteSimply visit your administration center, where a notice will be displayed, prompting you to upgrade. Click the link,
Hello, just a quick question, every single time before i could easily update it via this links, but now it gives me this error? Has anyone got any clue why would that be ? :S
M SMF template is modified a lot, as well as i got my own language to it, so i don't wanna mess things up during manual update . :S
This is the error it gives to me, simply means can't open the page provided in that link?
QuoteForbidden
You don't have permission to access /index.php on this server.
Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Sorry I am hickjacking this post - but for some reason I can't figure out how to make my own topic!
I am a mod of a forum which used SM(F) and today I went to the forum but it took me to the main site page, and told me Error 404, when I clicked the forum button on the main site page it took me to the same thing Error 404 on the main page just a pop up.
The new version of SMF has not been downloaded as far as 740am when I left for work this morning.
I found that sometimes the main site works ie, all the buttons at the top, pic section info section BUT the forum not at all.
Anyone got any ideas as to why?
Thank you kindly & sorry again for not making my own post.
Helena
Quote
Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!
You'll get a much faster response if you post to the support forums. :)
Congrats :)
Is Curve available to charter members?
I think it is about time to lock this up. Thanks to all for the positive comments :)
If you require assistance with this update, please pay a visit to Install and Upgrade Help (http://www.simplemachines.org/community/index.php?board=10.0).
Thanks!