Simple Machines announces the release of SMF 1.1.10 and 2.0 RC1.2, addressing a few vulnerabilities found in SMF 1.1.9 and 2.0 RC1-1. Also for those still using the SMF 1.0.x branch, an upgrade to 1.0.18 was released. We strongly recommend that all users upgrade as soon as possible.
Please note that SMF 2.0 RC1.2 is not the second release candidate for SMF 2.0, but merely a security-updated version of the first release candidate. RC2 is not quite ready yet, and the new Curve theme is still scheduled for SMF 2.0 RC2, as announced earlier. For more information read the latest developers blog entry (http://www.simplemachines.org/community/index.php?topic=321718.0) about progress towards RC2's release.
Users running 2.0 RC1 will need to upgrade to 2.0 RC1-1 BEFORE upgrading to 2.0 RC1.2.
Upgrade automatically by visiting your administration center, where a notice will be displayed prompting you to upgrade. Click the link, confirm the changes and your forum will be up to date again. Additionally, you can upgrade using the package manager by downloading the attached patch, uploading it to the package manager, and applying it as prompted. For help with this refer to the Package Manager (http://docs.simplemachines.org/index.php?board=49.0;sort=subject) section of the Online Manual (http://docs.simplemachines.org/).
If you cannot upgrade using the package manager, please follow the instructions posted in the Online Manual (http://docs.simplemachines.org) about installing (http://docs.simplemachines.org/index.php?board=2.0;sort=subject) and upgrading (http://docs.simplemachines.org/index.php?board=3.0;sort=subject). If you experience a session verification error when inputting FTP details for updating process, please see this (http://www.simplemachines.org/community/index.php?topic=278824.0) topic.
It may be necessary to apply the upgrade manually if mod conflicts mean that you cannot install the patch through the package manager. Instructions for doing this can be found on this page (http://custom.simplemachines.org/upgrades/) for all versions.
Finally - please do not use this topic for any support requests. You will get a much more prompt response by visiting the relevant support board!
Regards,
Simple Machines
Great news... Thanks!
SMF 1.1.10xxxx will come ? :)
Quote from: GliG on July 14, 2009, 08:52:28 PM
SMF 1.1.10xxxx will come ? :)
That's under probability, this is just a security update :).
-[n3rve]
Congrats
Perfect.. :)
Thanks..
I was just on SMF For Free's forum noticing it was 1.1.10, I was expecting a later release though.
Thanks!!!!
thanks ;)
Updated XD. Thanks!
Thanks guys!
Just a lil note, i was using 2.0 RC1-1 and it does not, i repeat does not warn users to update and shows all ok
i manually updated and now shows 2.0 RC 1.2 in red
Another forum i admin was running 1.1.9 and it did prompt to update to 1.1.10 and both current and smf versions showing fine.
(https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fh.imagehost.org%2F0941%2Fsmf1110.jpg&hash=7113b9ca30467111b5fcc1e49269e8ed422c3fdc)
(https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fh.imagehost.org%2F0706%2Fsmf20rc12.jpg&hash=9d0781a36aa5bd9e4faa21d704cb8df44812441e)
Just for clarification.
Excellent, thanks for the update! 8)
Thank You ;)
Thanks team. :)
Woot
Quote from: Dermot on July 14, 2009, 09:59:36 PM
Just a lil note, i was using 2.0 RC1-1 and it does not, i repeat does not warn users to update and shows all ok
i manually updated and now shows 2.0 RC 1.2 in red
Another forum i admin was running 1.1.9 and it did prompt to update to 1.1.10 and both current and smf versions showing fine.
(https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fh.imagehost.org%2F0941%2Fsmf1110.jpg&hash=7113b9ca30467111b5fcc1e49269e8ed422c3fdc)
(https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fh.imagehost.org%2F0706%2Fsmf20rc12.jpg&hash=9d0781a36aa5bd9e4faa21d704cb8df44812441e)
Just for clarification.
That just means that the scheduled task for retrieving the latest JS files from SMF hasn't run... I have two test installs that it properly prompted for updating after I forced the scheduled task to run.
updated !!! no probs
but i was really expecting 1.2 this time :(
Might want to update this forum ;) :)
Nice!
Great work
Very good news w00t!
Great job!
Hey congrats... :D
Thanks!!!
Thanks !! ;)
Thanks for the security fix.
Thanks for the beta tester for identifying the security hole.
Thanks guys.
Thankin you :)
Good news this, and thanks to the devs ;)
Quote from: GliG on July 14, 2009, 08:52:28 PM
SMF 1.1.10xxxx will come ? :)
Yess :D
Thanks SMF Team.
Nice and good work
thank you
thanks! great job, updating... :P
Where can one find the details on what was fixed?
We're having other issues (which I am not mentioning here) and we need to know if the changes will have any impact with our problems.
Grazie,
Cal
Quote from: Cal O'Shaw on July 15, 2009, 01:28:53 AM
Where can one find the details on what was fixed?
Check the changelog posted on the download page.
it's udpate for Ii frame atack?
iframe attack?
Quote from: Motoko-chan on July 15, 2009, 01:41:57 AM
iframe attack?
yes >:( day by day i have in index.php, index_template.php, language file
Quoteok
chmod file 644 password chagne many time, delete k*bate* user
Edit: Removed live link.
Quote from: lukasino on July 15, 2009, 01:53:23 AM
Quote from: Motoko-chan on July 15, 2009, 01:41:57 AM
iframe attack?
yes >:( day by day i have in index.php, index_template.php, language file
Quote<iframe src="hxxp://__removed__.ru:8080/index.php" width=135 height=105 style="visibility: hidden"></iframe>
chmod file 644 password chagne many time, delete k*bate* user
You're better off posting in the support boards. This is not a support topic.
As for the patch, good job all :)
Edit: Removed live link.
There seems to be an issue with the downloads page, the "update" zips contain the same as the "upgrade" zips.
Nice! 1.1.10 is OK :-)
Thanks...
When I started to upgrade from 1.1.9 --> 1.1.10
./Sources/ManageRegistration.php - Test unsuccessful
./Sources/Packages.php - Test unsuccessful
./Sources/PersonalMessage.php - Test unsuccessful
./Sources/Register.php - Test unsuccessful
I use SMF from 2007, but for the first time I have a problem with upgrade.
:(
Have you ever done manual mod installs? :) This can be done the same way.
Simply install the update, and then manually edit the failed files according to the instructions
here http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_1.0.18_1.1.10-2.0-RC1.2.zip;smf_version=1.1.9
If you need further help, open up a support topic - as this is not for support. :)
Thank you
Quote from: delial on July 15, 2009, 04:24:50 AM
When I started to upgrade from 1.1.9 --> 1.1.10
./Sources/ManageRegistration.php - Test unsuccessful
./Sources/Packages.php - Test unsuccessful
./Sources/PersonalMessage.php - Test unsuccessful
./Sources/Register.php - Test unsuccessful
I use SMF from 2007, but for the first time I have a problem with upgrade.
:(
See: http://www.simplemachines.org/community/index.php?topic=324190
Further support concerns regarding the upgrade should be posted at Install and Upgrade Help (http://www.simplemachines.org/community/index.php?board=10.0)
-[n3rve]
Nice work devs :)
Congrats
awsome work :)
welldone guys..
ThanKs! ;)
Quote from: GliG on July 14, 2009, 08:52:28 PM
SMF 1.1.10xxxx will come ? :)
Any future security or bugfix update would be 1.1.11+ ;)
Thank you !
I have been waithing for a while !!!!
Thank you
Nice job ;)
When i go to upgrade.php,
It gives me this :
QuoteThe upgrader found some old or outdated files.
Please make certain you uploaded the new versions of all the files included in the package.
Click here to try again.
What to do ?
Quote from: Ben K on July 15, 2009, 09:48:28 AM
When i go to upgrade.php,
It gives me this :
QuoteThe upgrader found some old or outdated files.
Please make certain you uploaded the new versions of all the files included in the package.
Click here to try again.
What to do ?
i have same problem :( need solution
Quotei have same problem need solution
And soon, my forum is down while i am updating it. >:(
Thanks for update guys, good job!
Thanks........... I started from Smf 1.1.4 and Now it comes to Ver 1.1.10................
sağolun varolun kardeşim. (Thanks.)
The CAPTCHA looks more effective for keeping out spammers on 1.1.10. Nice one. lol
Welldone guys :D
Quote from: Ben K on July 15, 2009, 09:53:08 AM
Quotei have same problem need solution
And soon, my forum is down while i am updating it. >:(
Quote from: captanmeto on July 15, 2009, 09:51:19 AM
Quote from: Ben K on July 15, 2009, 09:48:28 AM
When i go to upgrade.php,
It gives me this :
QuoteThe upgrader found some old or outdated files.
Please make certain you uploaded the new versions of all the files included in the package.
Click here to try again.
What to do ?
i have same problem :( need solution
This is not a support topic. Please post in the support boards. Your site shouldn't be down if you have made a backup before making any changes.
Nice work Devils!!!
QuoteThis is not a support topic. Please post in the support boards. Your site shouldn't be down if you have made a backup before making any changes.
Sorry, but bug have already bin fixed.
Thank you SMF !
Thanks for info, great work!
Thanks, will update when I can.
thanks
Thanks SMF developers.
Many thanks to the SMF team!
Updated without any problems, Thanks! :D
Updated without any problems, Thanks! 8)
The upgrade via the package manager went smoothly, apart from having to remove the date the SVN package was generated in the version. :P
Great job everyone! Another successful version released :)
Tried installing by clicking on update and got an error it was empty. Downloaded and tried updating with package manager, again failed, package was empty. Tried a manual install, again package is empty. Extracted file but it was empty. This was for both updates from 1-1-9 to 1-1-10 and 2-1-1 to 2-1-2
Updated my forum from 1.1.8 - 1.1.9 - 1.1.10 successfully...!
Thanks for the updates..!
Great job..!
Quote from: Bionic Rooster on July 16, 2009, 01:19:09 AM
Tried installing by clicking on update and got an error it was empty. Downloaded and tried updating with package manager, again failed, package was empty. Tried a manual install, again package is empty. Extracted file but it was empty. This was for both updates from 1-1-9 to 1-1-10 and 2-1-1 to 2-1-2
For support, go to the support section :P
Thanks for info, great work
Quote from: Yigal on July 16, 2009, 01:41:46 AM
Quote from: Bionic Rooster on July 16, 2009, 01:19:09 AM
Tried installing by clicking on update and got an error it was empty. Downloaded and tried updating with package manager, again failed, package was empty. Tried a manual install, again package is empty. Extracted file but it was empty. This was for both updates from 1-1-9 to 1-1-10 and 2-1-1 to 2-1-2
QuoteFor support, go to the support section (https://www.simplemachines.org/community/Smileys/simple/tongue.gif)
Thank you for that, but I was not looking for support, I was stating my experience in trying to install a file reported as empty in all aspects of the instruction on how to install.
Well Done all smf staff for doing this! So Fast!
Now I am waiting for smf 1.1.11 (https://www.simplemachines.org/community/Smileys/simple/tongue.gif)
Great!
Good Work :)
Only a problem..
in check version, 2 files not update for smf 1.1.x
QuoteManageAttachments.php 1.1.10 1.1.9
Subs-Auth.php 1.1.10 1.1.6
Thanks for the catch, this has been fixed.
Awesome, congratz for the new version :)
I noticed you said that if you are running 2.0 RC1 you need to update to 2.0 RC1-1 before going to 2.0 RC1-2.
If case anybody needs it where would you find 2.0 RC1-1 now that it has been removed from the download page?
Quote from: α¢αηѕ on July 17, 2009, 04:13:58 AM
If case anybody needs it where would you find 2.0 RC1-1 now that it has been removed from the download page?
Directly from the adminCP of a RC1 installation, or from http://custom.simplemachines.org/upgrades/
Quote from: α¢αηѕ on July 17, 2009, 04:13:58 AM
If case anybody needs it where would you find 2.0 RC1-1 now that it has been removed from the download page?
Or you can update from 2.0 RC 1 to 2.0 RC1-1 using the information on the original announcement of 2.0 RC1-1 (http://www.simplemachines.org/community/index.php?topic=311899.0)
In the opening post, where the file list shows as -
* modified_1-0-17_1-0-18.zip (44.16 KB - downloaded 73 times.)
* modified_1-1-9_1-1-10.zip (118.36 KB - downloaded 874 times.)
* modified_2-0-RC1-1_2-0-RC1-2.zip (64.38 KB - downloaded 465 times.)
* smf_patch_1.0.18_1.1.10-2.0-RC1.2.zip (10.13 KB - downloaded 87 times.)
Could someone please explain use of the word "modified" in the file name.
Does this mean
- it is to be used on a modified SMF install
- it is to be used on modified themes
- the file itself is modified after all the problems with package manager failing auto-install
or is it something else entirely?
(I'm still getting the empty file error reported by many users - this is the first time I've ever had such an issue with and SMF upgrade, and it's got me completely stumped).
Gaz
The modified name is a list of instructions on modifying the files to suit - generally using the smf_patch file will work better.
Download it to your PC, then use the Download Packages tab and Upload the package to the server.
If it persists please open a support topic in the 1.x Support board.
modified includes only the files that changed between the releases. Be careful with this as any mods you have instead could be lost by using these files.
Thanks for clarifying that for everyone, SleePy, I thought it was a list of mods to make.
The tar.bz2 (http://download.simplemachines.org/index.php?thanks;filename=smf_2-0-rc1-2_install.tar.bz2) version of the full install package on the downloads page (http://download.simplemachines.org/) is incomplete (It's only 162KB).
Quote from: Uqqeli on July 17, 2009, 02:03:13 PM
The tar.bz2 (http://download.simplemachines.org/index.php?thanks;filename=smf_2-0-rc1-2_install.tar.bz2) version of the full install package on the downloads page (http://download.simplemachines.org/) is incomplete (It's only 162KB).
Confirmed, thanks. Have flagged this up :)
Yay!
Thanks :P
This is great news, I've been waiting for these to come out, can't wait until SMF 2.0 RC2 is released to the public aswell as curve, any ideas on when those will be released?
Thanks but i have a problem :(
This query:
ALTER TABLE smf_smileys
ORDER BY LENGTH(code) DESC;
Caused the error:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'LENGTH(code) DESC' at line 2
Quote from: worldce01 on July 18, 2009, 08:37:46 AM
Thanks but i have a problem :(
This query:
ALTER TABLE smf_smileys
ORDER BY LENGTH(code) DESC;
Caused the error:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'LENGTH(code) DESC' at line 2
http://docs.simplemachines.org/index.php?topic=1079.0 :)
Quote from: H on July 18, 2009, 09:08:23 AM
Quote from: worldce01 on July 18, 2009, 08:37:46 AM
Thanks but i have a problem :(
This query:
ALTER TABLE smf_smileys
ORDER BY LENGTH(code) DESC;
Caused the error:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'LENGTH(code) DESC' at line 2
http://docs.simplemachines.org/index.php?topic=1079.0 :)
Thanks:) There is no problem now...
Hopefully smf gets better :)
QuoteHopefully smf gets better
The only thing in SMF is that there is some bugs, that's it :)
whats great about this release is the problem was found before any sites or such could promote the issue, just shows how good dev team is.
The empty file thing hasn't been fixed yet though. I tried again to install the patch and it says the file is empty, I tried downloading the file to my pc and the file is empty.
Thx!
Quote from: Bionic Rooster on July 18, 2009, 11:56:29 PM
The empty file thing hasn't been fixed yet though. I tried again to install the patch and it says the file is empty, I tried downloading the file to my pc and the file is empty.
Thats because thats a host issue, not an smf bug. Probably with either chmod permission, chown, or your host has disallowed the functions to 'get' a package. (eg free/cheap shared host)
Instead of trying to download the file inside smf, download the patch attached to this topic, then upload it inside your smf.
This is the best software going :D
I know its late but congrates SMF team!!
In my first post on this "empty file" issue I said I had downloaded the file and ftp'd it to my smf folder as instructed. ftp uploaded also reported file empty. I uncompressed the file on my hd and guess what? File empty. As for server not allowing the upload from smf, I have no trouble with other files so why this one in particular? All required folder have rw turned on so that's not it either.
I have 5 forums running on the same server. 1 is 1.1.9 the others are the RC2.1.1
update for 1.1.9 to 1.1.10 worked fine. rc2-2 reports empty file.
Quote from: Electro-X- on July 19, 2009, 07:46:42 AM
I know its late but congrates SMF team!!
Yeah abit late but you know its allways nice to hear a congrates :)
Manual update wen't smoothly and the problem I had since last release with avatar uploading was fixed. Great!
thanks for smf :)
Quote from: Bionic Rooster on July 19, 2009, 09:19:37 AM
In my first post on this "empty file" issue I said I had downloaded the file and ftp'd it to my smf folder as instructed. ftp uploaded also reported file empty. I uncompressed the file on my hd and guess what? File empty. As for server not allowing the upload from smf, I have no trouble with other files so why this one in particular? All required folder have rw turned on so that's not it either.
I have 5 forums running on the same server. 1 is 1.1.9 the others are the RC2.1.1
update for 1.1.9 to 1.1.10 worked fine. rc2-2 reports empty file.
Hey, i'm having the same problem :( I've only just got RC1-1 working 1.2 is just empty file...
Thanks !! :)
Did they fix the upgrade problem that people had when upgrading from 1.1.9 to 2.0RC1-1 with this release where people couldn't upgrade because of a certain English.utf file not being available in the upgrade package...
im trying to install 2.0 RC1.2 but package manager isnt working how do i install manual
@ShadoWind This release is a security release only.
@evolution25 http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_1.0.18_1.1.10-2.0-RC1.2.zip;smf_version=2.0%20RC1-1 (http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_1.0.18_1.1.10-2.0-RC1.2.zip;smf_version=2.0%20RC1-1)
Nice work team!
Glad to see the security is always our priority :)
lol @ bug [1170], 2007 :P
Can we get the change log portion relating to the current change posted in these announcement threads. Just the part relating to the current build would be fine. Would save having to download the whole thing each time just to check.
I have been really, REALLY busy lately, but just wanted to drop a quick note to say that the upgrade to 1.1.10 on my heavily modded site went flawlessly. Good work.
Help! I upgraded yesterday from 1.1.9 to 1.1.10!
Now guests can't read threads. All the setting are correct, but they can only see the front page of the forum and the Board list
Any help? Please? :(
Quote from: mystery-ak on July 21, 2009, 01:41:51 PM
Help! I upgraded yesterday from 1.1.9 to 1.1.10!
Now guests can't read threads. All the setting are correct, but they can only see the front page of the forum and the Board list
Any help? Please? :(
Post either in Install and Upgrade Board or the 1.x Section please as it will probably get you support faster there then it will here.
thx and good job :)
Good work guys!
Thanks to the Makers of SMF for the constant upgrading of the forums to stop nasties :D
can someone please help me i dont know how to install it manuall 2.0 RC1-1 to 2.0 RC1.2
Ask in the support forum, not here!
I think it might be an idea to close this thread as the amount of off-topic support questions is just to much.
Yeah... for the first time ever, I also was not able to automatically install an update, most tests were unsuccessful. Installed manually. Thank you for the update, the more secure the better. ;)
Keep it up :)
How does one update the database, I can't read my posts at all
"Quote"
Table 'pippin2_com.smf_ip_lookup' doesn't exist
File: /customers/pippin2.com/pippin2.com/httpd.www/klub/Sources/Profile.php
Line: 3213
Note: It appears that your database may require an upgrade. Your forum's files are currently at version SMF 1.1.10, while your database is at version 1.1.6. The above error might possibly go away if you execute the latest version of upgrade.php."/Quote"
Quote from: Pippin_Mariane on July 24, 2009, 08:23:15 AM
How does one update the database, I can't read my posts at all
"Quote"
Table 'pippin2_com.smf_ip_lookup' doesn't exist
File: /customers/pippin2.com/pippin2.com/httpd.www/klub/Sources/Profile.php
Line: 3213
Note: It appears that your database may require an upgrade. Your forum's files are currently at version SMF 1.1.10, while your database is at version 1.1.6. The above error might possibly go away if you execute the latest version of upgrade.php."/Quote"
Use the support boards, this isn't a support topic :)
But, as the error says, just run upgrade.php (i.e. go to
yourforums.com/upgrade.php)
Ohhhhhh I did and THEN this error came up lol :P - Most of it was unable to install as the above people says .. and I am not a technic minded person so I am all lost ..
ggrrrrr.. those letters man !!!!
I mean.... I did upgrade .. and then all this happened.....
Firstly, it is best to post this in a new support topic. This is an announcement thread :)
Just a quick reply - there's no such SMF table as smf_ip_lookup by default. This suggests your error is being caused by a mod you installed. Upload fresh SMF files (from the download page) and running upgrade.php again will fix this error (but also uninstall any mods you have), and/or contacting the mod author will also help.
Thanks for your help
You're welcome. :)
Locking topic.
For support, please use the conveniently labeled support boards.