Simple Machines Community Forum

Simple Machines => News and Updates => Topic started by: Norv on February 11, 2011, 03:16:35 PM

Title: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on February 11, 2011, 03:16:35 PM
Greetings,

Simple Machines announces the immediate public release of SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 RC5.

This version is a security release, and it is strongly advised that all users upgrade to this release as it contains a few security and privacy fixes in both SMF 2.0 and SMF 1.1.

At this time, legal matters related to the upcoming license changes have prevented us from making a final release of SMF 2.0. While 2.0 RC4 has proved to be relatively stable, there have been several issues found and fixed since its release. Therfore, it has been deemed prudent to make another release candidate available for testing.

The 2.0 RC5 fixes are beneficial and recommended. However as the upgrade process is a hassle for some administrators a security-only patch for RC4 is also being made available. This patch only contains the security fixes, for admins who wish to secure their RC4 forum but may not want to do a complete upgrade. It is a simple package that can be installed quickly via the SMF package manager and should not break any existing RC4 themes and mods.
Please find this patch here: SMF 2.0 RC4 Security Patch (http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip).

We believe 2.0 RC5 to be free of significant problems. It should be given the same treatment as any other Release Candidate, and will be subjected to continued testing.

Main points of this 2.0 release include:
Several security-related fixes.
Mail management fixed.
Issues with international forums characters.
Unread replies and topics core functionalities issues were fixed.
A few administration features issues were fixed.
New integration hooks features introduced in RC4 were fixed.
Many other fixes and improvements.

The changelog is available on the usual downloads page: http://download.simplemachines.org/

Please do not use this topic for support requests. You will get a much quicker and better response by posting in the relevant support board.

Regards,

Simple Machines
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Looking on February 11, 2011, 03:19:12 PM
Thanks for fixing those.

What legal issues with 2.0? Will SMF still be free?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: qtime on February 11, 2011, 03:23:32 PM
Thanks, like to see the changes
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: CountryLady on February 11, 2011, 03:23:47 PM
Thanks for this, especially the explanation regarding the delay in SMF 2 going Gold.

Communication is a wonderful thing. :)

Again Thank You, ALL~!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Akyhne on February 11, 2011, 03:25:31 PM
Well done team.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Antes on February 11, 2011, 03:25:41 PM
Nice to see RC5 :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on February 11, 2011, 03:26:26 PM
Looking,
SMF will always be free.

Please take a look at:
Simple Machines forms as an NPO (http://www.simplemachines.org/community/index.php?topic=402014.0)

:)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Owdy on February 11, 2011, 03:34:59 PM
Good job guys. Thanks for this.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: JBlaze on February 11, 2011, 03:52:32 PM
Will SMF still be free?

http://www.simplemachines.org/about/whyfree.php
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sonficyus on February 11, 2011, 03:54:19 PM
Thank you for everything.

Too beatiful.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Innbound on February 11, 2011, 03:55:03 PM
Quote
An Error Has Occurred!
The package you are trying to download or install is either corrupt or not compatible with this version of SMF.

  Attempted to upgrade from within the Administration Center in v 1.1.12 (a fairly vanilla install might I add).
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: JBlaze on February 11, 2011, 03:57:07 PM
This topic is not to be used for support. Please post in your appropriate boards.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sharks on February 11, 2011, 03:58:40 PM
I just saw this update when visiting the admin panel in my forum and when i checked here, no announcement had yet been made. :)

I don't understand why a change in licence is preventing the release of 2.0 final. Shouldn't a change in licence be able to be made quickly and easily if properly planned in advance? 5 years and 2.0 final is still baking... Honestly, i think it's just a clever way for the developers to say that the final version is not yet ready! Packing my non-existent admin hopes until 2012! LOL

But i greatly appreciate the efforts put into the fixes. I will definitely upgrade to 1.1.13 but i don't know if a 2.0 RC6 might be out later on, given the very unusual trend on SMF, so i'll just stick to my RC4 to avoid unnecessary work in re-installing all my modifications, manual edits and themes. With such a huge amount of time (as my brother made 2 kids in that same development time. LOL) i can only hope (for the sake of this software's reputation!) that when 2.0 gold is finally out, it won't be too buggy, if at all.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: wwwserfer on February 11, 2011, 04:04:25 PM
Thank you for your work! :) *Thumbs up*
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Innbound on February 11, 2011, 04:06:25 PM
This topic is not to be used for support. Please post in your appropriate boards.
Not asking for support nor am I expecting it. I've been using SMF since 2005 and I've posted 5 times, total. Do you still feel like upping you count to more over 10,000 posts by stating the obvious? 
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sharks on February 11, 2011, 04:08:50 PM
This topic is not to be used for support. Please post in your appropriate boards.
Not asking for support nor am I expecting it. I've been using SMF since 2005 and I've posted 5 times, total. Do you still feel like upping you count to more over 10,000 posts by stating the obvious? 
LOL. I think JBlaze might have misread your post. Or maybe not. :D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: enik on February 11, 2011, 04:09:59 PM
Nice work thanks dev's  ;)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: JBlaze on February 11, 2011, 04:12:58 PM
@Innbound, I was replying to sonficyus's post, not yours, and it's also a general reminder that no support will be given in this topic.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Yağız... on February 11, 2011, 04:14:07 PM
I think someone forget the update package for SMF 1.1.13 :P
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 11, 2011, 04:16:01 PM
So umm where do I find the security patch?

Do not feel like taking the hassle of upgrading after almost killing Firefox and QuickTime...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Bancherd on February 11, 2011, 04:17:30 PM
Thank you.   :D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sonficyus on February 11, 2011, 04:18:51 PM
JBlaze OK. I want to say just: SMF developers thinks to us as This Update releasing.

This works must more professinally.

I edited to my older message.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Matthew K. on February 11, 2011, 04:23:46 PM
Uhm no? SMF 2.0 RC5 is basically 2.0 final, yes there are a few bugs left, but the main thing causing the delay is the legal stuff with licensing which is taking time. Really, I'm sorry, but people just need to be patient, the devs are working hard.

If you don't believe it, just look at the changelogs.
I just saw this update when visiting the admin panel in my forum and when i checked here, no announcement had yet been made. :)

I don't understand why a change in licence is preventing the release of 2.0 final. Shouldn't a change in licence be able to be made quickly and easily if properly planned in advance? 5 years and 2.0 final is still baking... Honestly, i think it's just a clever way for the developers to say that the final version is not yet ready! Packing my non-existent admin hopes until 2012! LOL

But i greatly appreciate the efforts put into the fixes. I will definitely upgrade to 1.1.13 but i don't know if a 2.0 RC6 might be out later on, given the very unusual trend on SMF, so i'll just stick to my RC4 to avoid unnecessary work in re-installing all my modifications, manual edits and themes. With such a huge amount of time (as my brother made 2 kids in that same development time. LOL) i can only hope (for the sake of this software's reputation!) that when 2.0 gold is finally out, it won't be too buggy, if at all.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 11, 2011, 04:24:18 PM
JBlaze OK. I want to say just: SMF developers thinks to us as This Update releasing.

This works must more professinally.

I edited to my older message.
They are all volunteers.

PS I was just about to release a security/bugfix update for MAP3 :P
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sonficyus on February 11, 2011, 04:24:50 PM
I think someone forget the update package for SMF 1.1.13 :P

Certainly...  ;D ;D ;D


Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Bigguy on February 11, 2011, 04:27:26 PM
Nice work everyone. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joomlamz on February 11, 2011, 04:31:48 PM
good work thank you
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: lucas-ruroken on February 11, 2011, 04:33:07 PM
Good news ;)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Crime on February 11, 2011, 04:48:07 PM
Nice work. Thank you SMF
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 11, 2011, 04:56:13 PM
So umm where do I find the security patch?

Do not feel like taking the hassle of upgrading after almost killing Firefox and QuickTime...

Did you see the first post? lol

Good job Team. One step closer!!!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 11, 2011, 04:59:14 PM
So umm where do I find the security patch?

Do not feel like taking the hassle of upgrading after almost killing Firefox and QuickTime...

Did you see the first post? lol

Good job Team. One step closer!!!
Didn't feel like reading it either :P

I was like "OH I SEE DOWNLOAD... UP TO THE DOWNLOAD PAGE!!!"
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Dzonny on February 11, 2011, 04:59:41 PM
Cheers! :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: c23_Mike on February 11, 2011, 05:06:04 PM
Hi there!

Great work!
Wait now for gold! Go on with license change!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Dejv on February 11, 2011, 05:44:05 PM
Thanks!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: CoreISP on February 11, 2011, 06:11:05 PM
Quote
Uhm no? SMF 2.0 RC5 is basically 2.0 final.

Not necesarily, but hopefully...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Matthew K. on February 11, 2011, 06:13:59 PM
Well, technically speaking no. But there are so few bugs left that it is SOOO close.
Quote
Uhm no? SMF 2.0 RC5 is basically 2.0 final.

Not necesarily, but hopefully...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 11, 2011, 06:14:33 PM
Well, technically speaking no. But there are so few bugs left that it is SOOO close.
Quote
Uhm no? SMF 2.0 RC5 is basically 2.0 final.
Not necesarily, but hopefully...
Just that stupid license >:(
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: grafitus on February 11, 2011, 07:00:49 PM
An unexpected release. I hope this will be good.

Thanks!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: b4pjoe on February 11, 2011, 07:02:28 PM
So, can we take from this that the final release is no where near being released? sigh

And yes, thanks to the developers for their hard work but this announcement is not good news.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on February 11, 2011, 07:07:43 PM
We hope to improve our release process and speed, and we will see what comes.

At the moment, as several security issues were fixed in SMF 1.1.12 and SMF 2.0 RC4, they absolutely need to be available to the community.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on February 11, 2011, 07:15:58 PM
I don't understand why a change in licence is preventing the release of 2.0 final. Shouldn't a change in licence be able to be made quickly and easily if properly planned in advance? 5 years and 2.0 final is still baking... Honestly, i think it's just a clever way for the developers to say that the final version is not yet ready! Packing my non-existent admin hopes until 2012! LOL

You assume that the license change had been planned well in advance and that things were straightened. You would be seriously wrong. While there had been license change discussions for multiple years, including work on an OSI-compatible license based on the current one, the decision to tie a license change with the release of 2.0 appears to have been made fairly recently as far as i can tell. Only about a year ago, at most.

Combine that short of a time with the need to get signoff from all historical contributors (or at least major efforts to contact contributors) as there was no central copyright holder (CLAs have also recently been passed out to prevent this situation in the future) with the pegging of the 2.0 release on the finalization of the non-profit group and you get a huge cluster****** blocking any release.

Personally, I'd release 2.0 already with the old license and migrate to a new license as soon as it becomes possible rather than holding up an actual production release because of disfunction. Of course, that would probably cause even further schism and bull****** to fly around. Basically, the release table for 2.0 is ******ed because of politics.


So, can we take from this that the final release is no where near being released? sigh

Who knows. The release of 2.0 is tied to a lot of political bull****** and the NPO stuff is still not finalized as far as I know (no announcements on that yet and quite a bit of dodging the question). RC5 would otherwise probably have been the final release if it wasn't for the crack-addled plans.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: b4pjoe on February 11, 2011, 07:23:12 PM
Personally, I'd release 2.0 already with the old license and migrate to a new license as soon as it becomes possible rather than holding up an actual production release because...

I agree with this wholeheartedly.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: -=[Vyorel]=- on February 11, 2011, 07:24:13 PM
Nice work. Thank you! :o
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: grafitus on February 11, 2011, 07:28:48 PM
Yep, exactly what I need! Integration hooks for permissions!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Matthew K. on February 11, 2011, 07:31:32 PM
That is great!
Yep, exactly what I need! Integration hooks for permissions!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: BryanD on February 11, 2011, 07:40:06 PM
glad to see this another step towards final :)

and this reminds me

/me shoots Norv
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: JBlaze on February 11, 2011, 08:09:27 PM
/me shoots Runic
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: FfdG on February 11, 2011, 08:15:29 PM
Where are the changed files? Ever counted the files in "Small update"? Your update package sucks again.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 11, 2011, 08:36:03 PM
Where are the changed files? Ever counted the files in "Small update"? Your update package sucks again.

Care to look in the changelog? What sucks about a security update? And even if you couldn't find any info on that at this site, what's so hard about running a diff?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Antechinus on February 11, 2011, 08:41:54 PM
About the only files that would not be changed in RC5 are images. All php files have at least had the version number updated. That's the only change in some of them but a lot have other changes too. If you want to speed up the FTP upload process you can assume that no images have to be uploaded. That should save a fair amount of time.

ETA: Ich Bin, not all admins know how to run a diff. Some of them are very new to website management and coding.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: FfdG on February 11, 2011, 09:06:48 PM
Care to look in the changelog? What sucks about a security update? And even if you couldn't find any info on that at this site, what's so hard about running a diff?
Vice versa. What's so hard in bundling a set of files? I don't want more than 1000 files, Smileys, unchanged Themes and periodically changed empty lines before EOF. Diff is nice but I still have to build my own patch.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on February 11, 2011, 09:25:26 PM

What sucks about a security update?

I think the security update is great. It made one of my sites so secure there are no longer any members in the database and no one can register. Plenty secure now  :o
Thank the good Lord for backups.
 
Edit : Just used the large upgrade and all is well again  ;)  Good job people.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: ~DS~ on February 11, 2011, 10:15:39 PM
/me foresee RC6...

/me runs away
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Bolt™ on February 11, 2011, 10:18:01 PM
Nice but I just finley got my forum updated to SMF 4 and am sticking to it
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 11, 2011, 10:20:06 PM

Vice versa. What's so hard in bundling a set of files? I don't want more than 1000 files, Smileys, unchanged Themes and periodically changed empty lines before EOF. Diff is nice but I still have to build my own patch.

You don't have to build a patch. A security patch was provided. So it's not necessary to do the large upgrade. I could understand a full patch being made in a final version update. I don't think we have ever done patches for updates when in RC.

Nice but I just finley got my forum updated to SMF 4 and am sticking to it

At least make sure you install the security patch then.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on February 11, 2011, 10:22:47 PM
This time, the upgrade is completely optional, in order to benefit from the security fixes: please feel free to find those fixes only in the RC4 Security Patch.
http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip

It won't be a full upgrade, but it will secure your forum, therefore it is highly recommended, and you can of course stick with RC4, while taking advantage of the security fixes.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Matthew K. on February 11, 2011, 10:57:54 PM
Not gonna happen.
/me foresee RC6...

/me runs away
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: kingkingston on February 11, 2011, 11:49:45 PM
I think someone forget the update package for SMF 1.1.13 :P
1.1 brand would almost be dead
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: AmaZulu on February 12, 2011, 12:10:38 AM
I've been using version 1.1 for about 5 years now. By next month I will be using IP.Board and giving them $$$ for the privilege. I wish I could stay with SMF and contribute the money here, but RC5?

Come on. It's just software, not the goddamn declaration of independence. >:(
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: N3lson on February 12, 2011, 02:42:35 AM
Thank you
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: ApplianceJunk on February 12, 2011, 03:20:46 AM
Thank you!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on February 12, 2011, 03:21:45 AM
I've been using version 1.1 for about 5 years now. By next month I will be using IP.Board and giving them $$$ for the privilege. I wish I could stay with SMF and contribute the money here, but RC5?

Come on. It's just software, not the goddamn declaration of independence. >:(
If you are using 1.1, why are you worried about 2.0? 1.1 is still maintained, and works just fine, and we are not too long from 2.0 final either.
Care to look in the changelog? What sucks about a security update? And even if you couldn't find any info on that at this site, what's so hard about running a diff?
Vice versa. What's so hard in bundling a set of files? I don't want more than 1000 files, Smileys, unchanged Themes and periodically changed empty lines before EOF. Diff is nice but I still have to build my own patch.
You don't want to hassle with RC updates, but have _chosen_ to use RC versions - Tough luck.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: AmaZulu on February 12, 2011, 03:26:25 AM
There are several features that are in 2.0 that I really need to use and cannot wait for any longer. I won't use RC software on my site. Too risky.

I have found that IPB has all the features I need and will definitely see my community grow.

BTW, there seems to be serious problems with spam registrations on SMF 1.1.*. Nearly every person I know using it has been flooded with them in the past few months. This should be a major priority for SMF.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: impreza on February 12, 2011, 03:41:50 AM
Everything nice to have updated - done by hand. Thank you for the updates
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sharks on February 12, 2011, 03:44:07 AM
I've been using version 1.1 for about 5 years now. By next month I will be using IP.Board and giving them $$$ for the privilege. I wish I could stay with SMF and contribute the money here, but RC5?

Come on. It's just software, not the goddamn declaration of independence. >:(

LOL. So many people think alike in these hard times for SMF users... When 2.0 finally comes out, i guess the few left will probably just go "meh" and move on. :D In fact, i've just been to IPB a few days ago and inquired about their licence and the conversion process from SMF. IPB is my best option as well.

Let's be honest, RC5 is just another way of stalling the whole thing until the end of 2011 or 2012.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Robert. on February 12, 2011, 03:45:49 AM
Thankyou and congratulations. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on February 12, 2011, 03:46:01 AM
Let's be honest, RC5 is just another way of stalling the whole thing until the end of 2011 or 2012.
No it's not - It was a must do release, and Final just could not have been release just yet.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 12, 2011, 03:48:18 AM
Congratulations, Developers! :D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Antechinus on February 12, 2011, 03:56:59 AM
Let's be honest, RC5 is just another way of stalling the whole thing until the end of 2011 or 2012.

No, it is very definitely not that. Far from it.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on February 12, 2011, 04:03:03 AM
BTW, there seems to be serious problems with spam registrations on SMF 1.1.*. Nearly every person I know using it has been flooded with them in the past few months. This should be a major priority for SMF.

There are spammer problems with nearly every platform. It's an economic issue, not a technological one. Right now, you can hire humans to solve 1000 image verification puzzles for $1 US. If you use only the built-in protection of the platform, you'll run into problems because a widely-used platform will be targeted for mass automated attacks. Using this human backing, even good services like reCAPTCHA become useless as you have actual humans solving them and allowing spammers to bypass your protections.

The only way to avoid spam is to combine custom technological measures with human monitoring. You have to make your site uneconomical as a target. Using a combination of reCAPTCHA (blocks older automated tools that only work on the default verification), custom question/answer items (standard in 2.0, modification for 1.1), and http:BL, I've had spam registrations and comments drop on my forums from a flood (only the SMF verification) to a handful a week (implemented reCAPTCHA and question/answer) to one or two a month (added http:BL for SMF). Those few are actual humans and there is no real protection against that other than monitoring.


Let's be honest, RC5 is just another way of stalling the whole thing until the end of 2011 or 2012.

Not really. It's a stop-gap because the team has decided to tie the release of the software with a political process that began very late in the development cycle. It's ******ing stupid, but it's what they decided. If this wasn't the case, it is likely that RC5 would have been an actual gold release. Instead, they further alienate what little passionate community members they have with total bull******.

I would have just released 2.0 under the old license and then made a point release under a new license when the license work was complete rather than let the popularity languish and seed doubt of viability of the project. It wouldn't be too difficult to also re-release the older points with the new license at a later time if they really wanted to.

Instead, the software is being held hostage to legal antics from a last-minute decision. Typical.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Antechinus on February 12, 2011, 04:20:54 AM
And that is about as accurate as Shark's guess. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sharks on February 12, 2011, 04:25:39 AM
From the admin panel of my SMF 1.1.12, i see this mini-bug:

SMF 1.1.13, 2.0 RC4 security patch and SMF 2.0 RC5 released on November 01, 2010, 12:14:21 PM

SMF 2.0 RC4 and SMF 1.1.12 released on November 01, 2010, 12:14:21 PM

Note that the date for the current release is the same as the previous release.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Mari-chi on February 12, 2011, 04:27:19 AM
Congrats on the release. :3

Decided to install the security patch first before I decide whether I want to to an upgrade to RC5 or not... It's going to be a major headache. T_T
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: b4pjoe on February 12, 2011, 04:46:06 AM
And that is about as accurate as Shark's guess. :)

Maybe you (or anyone in the know) could enlighten everyone with the real truth then? If you don't want all these theories bandied about maybe some real facts might quell some of the unrest.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sharks on February 12, 2011, 05:07:49 AM
And that is about as accurate as Shark's guess. :)

Maybe you (or anyone in the know) could enlighten everyone with the real truth then? If you don't want all these theories bandied about maybe some real facts might quell some of the unrest.
Let me know when you get a proper answer to that. I could use some enlightenment on what is really going on with SMF myself.
I wouldn't be surprised if all that mess just translated into a paid forked venture, since the SMF team is so historically unstable.

Some of the team members are saying:
No it's not - It was a must do release, and Final just could not have been release just yet.

Others are saying:
Uhm no? SMF 2.0 RC5 is basically 2.0 final

And some are even running away...
/me foresee RC6...

/me runs away

LOL. Seriously, WTF?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: AmaZulu on February 12, 2011, 05:22:44 AM

There are spammer problems with nearly every platform. It's an economic issue, not a technological one. Right now, you can hire humans to solve 1000 image verification puzzles for $1 US. If you use only the built-in protection of the platform, you'll run into problems because a widely-used platform will be targeted for mass automated attacks. Using this human backing, even good services like reCAPTCHA become useless as you have actual humans solving them and allowing spammers to bypass your protections.

The only way to avoid spam is to combine custom technological measures with human monitoring. You have to make your site uneconomical as a target. Using a combination of reCAPTCHA (blocks older automated tools that only work on the default verification), custom question/answer items (standard in 2.0, modification for 1.1), and http:BL, I've had spam registrations and comments drop on my forums from a flood (only the SMF verification) to a handful a week (implemented reCAPTCHA and question/answer) to one or two a month (added http:BL for SMF). Those few are actual humans and there is no real protection against that other than monitoring.

Not really. It's a stop-gap because the team has decided to tie the release of the software with a political process that began very late in the development cycle. It's ******ing stupid, but it's what they decided. If this wasn't the case, it is likely that RC5 would have been an actual gold release. Instead, they further alienate what little passionate community members they have with total bull******.

I would have just released 2.0 under the old license and then made a point release under a new license when the license work was complete rather than let the popularity languish and seed doubt of viability of the project. It wouldn't be too difficult to also re-release the older points with the new license at a later time if they really wanted to.

Instead, the software is being held hostage to legal antics from a last-minute decision. Typical.

My team and I are now approving all registrations manually. However, in my investigations with IPB I see that they have a service to help build a database of IP's and ranges used by spammers. Eventually they'll run out of IP's (we hope :)).

Personally I think it's a crying shame that something so banal as a license change is going to chase so many users away from what was a great piece of software.

FWIW I'd still like to thank those members of the development team who have helped make this software. It's changed my life for the better. But, I have to move on. I can't be waylaid indefinitely and there are many of us who share the same disappointment that you couldn't release a stable 2.0 at least a year ago already.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 12, 2011, 05:46:02 AM
Congrats on the release. :3

Decided to install the security patch first before I decide whether I want to to an upgrade to RC5 or not... It's going to be a major headache. T_T
Upgrading seriously is no headache.

I did it now on two forums and everything was done smoothly.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sharks on February 12, 2011, 05:54:00 AM
Congrats on the release. :3

Decided to install the security patch first before I decide whether I want to to an upgrade to RC5 or not... It's going to be a major headache. T_T
Upgrading seriously is no headache.

I did it now on two forums and everything was done smoothly.

Upgrading to yet another RC is no hassle, unless you are using custom themes, modifications and have made manual edits or personal tweaks to your RC4 forums... which pretty much makes upgrading a real PITA, as it is an unnecessary loss of time and energy for admins, since 2.0 final will require as much work when it's released.
My SMF forums will stay freezed at RC4 until 2.0 final is released, or until i move out of this endless and hopeless loop completely, and convert to IPB.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 12, 2011, 05:56:53 AM
Congrats on the release. :3

Decided to install the security patch first before I decide whether I want to to an upgrade to RC5 or not... It's going to be a major headache. T_T
Upgrading seriously is no headache.

I did it now on two forums and everything was done smoothly.

Upgrading to yet another RC is no hassle, unless you are using custom themes, modifications and have made manual edits or personal tweaks to your RC4 forums... which pretty much makes upgrading a real PITA, as it is an unnecessary loss of time and energy for admins, since 2.0 final will require as much work when it's released.
Old themes (from RC3) were still compatible with RC5 when I upgraded. This will not apply to all themes, though.

Mods need to be reinstalled but no loss of data. Luckily (else my site would have a BIIG problem if Adk Portal has lost it's data).
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: [SiNaN] on February 12, 2011, 06:13:48 AM
For those who find it difficult to do a large upgrade; there is the RC4 security patch you can use, which only includes the security fixes.

For those who are confused because of various theories; the ones with the team badges would know the best.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 12, 2011, 06:21:10 AM
Well, I will use the Upgrade package.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: FfdG on February 12, 2011, 06:55:26 AM
Vice versa. What's so hard in bundling a set of files? I don't want more than 1000 files, Smileys, unchanged Themes and periodically changed empty lines before EOF. Diff is nice but I still have to build my own patch.

You don't have to build a patch. A security patch was provided. So it's not necessary to do the large upgrade. I could understand a full patch being made in a final version update. I don't think we have ever done patches for updates when in RC.
I don't care about the 2.0RCn. I just want a package of the changed¹ files for the stable 1.1.x version. No "small update" with over 1000 files, no "patch" in dumb package manager format and no hidden attachments in announcement posts.

¹ The ones with significant differences. Not the ones with nicer whitespaces.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: dcmouser on February 12, 2011, 07:24:07 AM
Thank you.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: DoctorMalboro on February 12, 2011, 07:26:45 AM
Well done guys, any need to update mods?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: MaXiForum.cz on February 12, 2011, 07:31:18 AM
Thank you for SMF 2.0 RC4 Security Patch Team ;-)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 12, 2011, 07:37:50 AM
Vice versa. What's so hard in bundling a set of files? I don't want more than 1000 files, Smileys, unchanged Themes and periodically changed empty lines before EOF. Diff is nice but I still have to build my own patch.

You don't have to build a patch. A security patch was provided. So it's not necessary to do the large upgrade. I could understand a full patch being made in a final version update. I don't think we have ever done patches for updates when in RC.
I don't care about the 2.0RCn. I just want a package of the changed¹ files for the stable 1.1.x version. No "small update" with over 1000 files, no "patch" in dumb package manager format and no hidden attachments in announcement posts.

¹ The ones with significant differences. Not the ones with nicer whitespaces.
What you are requesting is already done; the small update package.

If you do not like that then that's your loss.

And the ""patch" in dump package manager format" also does what you want without uploading update packages.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Owdy on February 12, 2011, 08:24:12 AM
Not really. It's a stop-gap because the team has decided to tie the release of the software with a political process that began very late in the development cycle. It's ******ing stupid, but it's what they decided. If this wasn't the case, it is likely that RC5 would have been an actual gold release. Instead, they further alienate what little passionate community members they have with total bull******.

I would have just released 2.0 under the old license and then made a point release under a new license when the license work was complete rather than let the popularity languish and seed doubt of viability of the project. It wouldn't be too difficult to also re-release the older points with the new license at a later time if they really wanted to.

Instead, the software is being held hostage to legal antics from a last-minute decision. Typical.
I am so glad that your are not Project manager anymore.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: charlottezweb on February 12, 2011, 08:52:49 AM
Can someone help me understand why a version number matters?  What's the difference between a piece of software being labelled "version 2.0" and "version 2.0 RC 12,000" if they are identical code-wise?

I just don't get all the people who won't run an RC package just because it's labelled "RC."  Stability isn't a factor people.  It's just a number unless I'm missing something.  You'd seriously go through the trouble of changing platforms based on that?  Surely I'm missing something here...   ???
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Owdy on February 12, 2011, 09:51:22 AM
Can someone help me understand why a version number matters?  What's the difference between a piece of software being labelled "version 2.0" and "version 2.0 RC 12,000" if they are identical code-wise?
I agree!

Heres tutorial how to get SMF 2.0 gold.

1. upgrade to RC5
2. open  index.php in your forums root with FTP
3. find:
Code: [Select]
$forum_version = 'SMF 2.0 RC5';4. replace:
Code: [Select]
$forum_version = 'SMF 2.0';5. Save.

Done.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: rd on February 12, 2011, 09:54:01 AM
Thanks for the latest release!

Got a lot of upgrading to do -.-"
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: iGhost on February 12, 2011, 09:57:55 AM
While it's great to see another update, it's a shame that the final 2.0 version seems to be being further delayed. I'm wondering roughly how long this licensing process is going to take?

The RC is usable, yes, but many developers of addons and bridges are reluctant to update their software until the final is released. - Hence many are stuck with 1.x until the final is released.

It's that "It's only in RC, so I'll update this bridge once the final is out" attitude which tends to cause problems if you want to integrate SMF with any other software.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on February 12, 2011, 10:02:30 AM
Perhaps because the 2.0 Gold release removes the liability disclaimer
 Note: As this is in development, we do not recommend running SMF 2.0 RC5 on a production site.
A lot of dedicated long time users who have spent long hours on making their forums they way they like it are scared off by this. This has been stated in several posts of late. They are tired of the long production time (what ever the reason) and want the reassurance of a stable release which would be 2.0 Gold and the removal of this disclaimer before they attempt an update. I'm sure the mod and theme authors are at their wits end too because for every RC they are required to make changes to support the RC. I've seen many good mods fall and are no longer supported or fixed for RC's because of this. Theme production and updates have like wise fallen off.
 
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on February 12, 2011, 10:07:50 AM
RR: And we have already stated the reason that 2.0 final is not out yet.
However, your data on theme and mod issues is somewhat flawed since almost every mod and theme made for RC3 or higher will work on RC3, RC4 and RC5 (and final)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on February 12, 2011, 10:15:26 AM
RR: And we have already stated the reason that 2.0 final is not out yet.
However, your data on theme and mod issues is somewhat flawed since almost every mod and theme made for RC3 or higher will work on RC3, RC4 and RC5 (and final)

Curious that you have centered me out for your reply when many others have expressed the same points of view. Read the posts before mine. I'm appreciative that on this occassion you were actually civil and didn't simply dismiss my contribution by calling me a Troll again.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sharks on February 12, 2011, 10:16:30 AM
I've seen many good mods fall and are no longer supported or fixed for RC's because of this. Theme production and updates have like wise fallen off.
Pieces of SMF and its team have been falling all over the place throughout its 5-years development time. By now, SMF is clearly just a pale shadow of what it once was. 2.0 RC6 will further prove this dying breed, when it comes out in a few months. As for 2.0 gold, it's probably going to be for Christmas, so as to get more traffic in here, when the few developers left need to reap extra money from the ads on the site.

Not really. It's a stop-gap because the team has decided to tie the release of the software with a political process that began very late in the development cycle. It's ******ing stupid, but it's what they decided. If this wasn't the case, it is likely that RC5 would have been an actual gold release. Instead, they further alienate what little passionate community members they have with total bull******.

I would have just released 2.0 under the old license and then made a point release under a new license when the license work was complete rather than let the popularity languish and seed doubt of viability of the project. It wouldn't be too difficult to also re-release the older points with the new license at a later time if they really wanted to.

Instead, the software is being held hostage to legal antics from a last-minute decision. Typical.
I am so glad that your are not Project manager anymore.
I wonder why he was fired from the team... Possibly because he was fed up with all the drama and started telling the truth about what was really going on behind-the-scenes. Actually, we can't even call it that any more, as the whole community must be aware by now that something is seriously wrong with the way things are being managed here. The point being, when 2.0 final is eventually released, there won't be much left of this community to keep it afloat. Most of the modification developers have already stopped coming to this site, with some being away since a year or more! SMF is being set up on a self-destruction path, right before our eyes.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: rejetto on February 12, 2011, 10:48:51 AM
i'm not sure this is the right place. In case, i'm sorry and please move me to the right place.
i tried to upgrade an almost-empty 2.0 RC4 on sqlite, to RC5.
unpacked, then ran upgrade.php
it hangs at step 17.
then i try to re-run the upgrade, it starts from step 18 and hangs again.
then i try to re-run, and this time it starts from step 1 and hangs at step 17. Loop to previous line of this post.

I opened the sqlite file and it appears as both steps 17 and 18 were done (indexes were created and others deleted).

If no solution comes i'll revert to RC4 and apply the simple fix.
Thank you.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 12, 2011, 10:49:52 AM
Heres tutorial how to get SMF 2.0 gold.

1. upgrade to RC5
2. open  index.php in your forums root with FTP
3. find:
Code: [Select]
$forum_version = 'SMF 2.0 RC5';4. replace:
Code: [Select]
$forum_version = 'SMF 2.0';5. Save.

Done.


This can break mods compatibility.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Owdy on February 12, 2011, 10:55:09 AM
This can break mods compatibility.
How? What mod checks after installation what version SMF is? And if you install mod, you can simulate any SMF version you want in package manager.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on February 12, 2011, 11:12:53 AM
However, your data on theme and mod issues is somewhat flawed since almost every mod and theme made for RC3 or higher will work on RC3, RC4 and RC5 (and final)

From my personal experience with RC4, none, I repeat, none of the mods or theme I used with RC3 cleanly installed using the "Emulation" method. They all required author updates to install and work properly with RC4.
If you attend the "Support" folder there are many occasions where people have been told to use the "Emulation" method where some have worked but many more have resulted in requests for help because they unwittingly installed un-updated mods and themes that botched their sites. In fact many have been advised by support staff and others to ask the author to update their mods or themes to work with RC4. The authors reply? They no longer support the theme or mod for RC's and are waiting for a stable release.
 
My hat is off to all those authors who diligently update their projects shortly after a new RC release. They are the ones who are dedicated to seeing that users are taken care of and are the continued supporters of SMF. Kudos guys and girls.
 
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: zipper306 on February 12, 2011, 11:17:26 AM
Thanks, like to see the changes
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: vbgamer45 on February 12, 2011, 11:18:08 AM
I have updated about 90% of my mods already to RC5 changes are very minor if anything from RC4 to RC5.
There are very few bugs left in the bug tracker right now and this is very close to the final version of SMF and most mod/theme developers are already supporting SMF 2.0.

I have seen a lot of positive movement in the last two months on the mod development with the addition of better/more integration hooks. Mod developers are able to make most changes to SMF without modifying the core of SMF which leads to better support for themes and multiple mods installed at one time.  This is really going to have a big impact on development.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Eudemon on February 12, 2011, 12:15:13 PM
there are little bugs occur after i upgraded to rc4
been waiting for rc5, thank you for ur great work
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: jkdove on February 12, 2011, 12:35:35 PM
Much appreciated
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on February 12, 2011, 01:05:16 PM
RR... and yet I have installed more than 40 mods into an rc5 forum with no errors at all
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Oldiesmann on February 12, 2011, 01:34:07 PM
Also, for those who don't think RC releases are stable, we've been running 2.0 on www.seniorsandfriends.org since the site started and have had no major issues. The only reason it's still RC3 is that I haven't had time to upgrade it yet - I've been busy and the forum is active at all hours of the day, so it's difficult to find a time to upgrade it.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on February 12, 2011, 01:35:17 PM
RR... and yet I have installed more than 40 mods into an rc5 forum with no errors at all

And I have installed at least that many if not more in the 25 SMF 2.0 RC4 forums I have that did not install emulating RC3 without error. Which makes your claim no more invalid than mine. Mute point to all those in the support board having the same problems.
 
On the other hand, using mods and themes that are SMF2.0 RC4 compliant, I have had no issues what so ever.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 12, 2011, 02:13:03 PM
SMF and it's Team are the most stable I have seen it in years. And while I certainly agree that the release of SMF2 is LONG over due, this is just something we are paying the price for. It was a big learning curve for SMF over the last few years. Things happened and decisions were made that we all have had to live and learn with. But I can tell you from experience and from being on the Team before and after the big breakup, that SMF is and will be in a far better place than it was before. Checks and balances have been put into place to keep things from happening like that again. The unfortunate part is that most of the things that have been changed to better this situation can't start happening until we get the current issues dealt with. One of them being the license change. And if anyone has done anything with lawyers, you know how painful that can be. We are patiently waiting for this process to end. Believe you me, we want to release SMF2 final REALLY REALLY BAD! Development for future versions is going to change significantly in how it was done so that we can push out faster releases. It's unfortunate that you (the community) have had to pay the price for our mistakes in waiting patiently for the final release, but rest assured we are doing everything we can to get this done. Nobody to blame but ourselves, we just hope you will bear with us a little longer so we can get this process finished.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: GQCritic on February 12, 2011, 03:04:48 PM
Thank you for your hard work, SMF Team!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on February 12, 2011, 04:22:00 PM
My team and I are now approving all registrations manually. However, in my investigations with IPB I see that they have a service to help build a database of IP's and ranges used by spammers. Eventually they'll run out of IP's (we hope :)).

Most spamming systems are zombies - infected end-user computers being controlled. Until ISPs start shutting off connections to the millions of zombies out there until they are cleaned, we'll continue to have problems. Combine with the re-use of IPs via dynamic assignment, and it's difficult to block a single computer without causing large collateral damage.

Instead of paying IPS for the privilege, get httpBL for SMF (http://custom.simplemachines.org/mods/index.php?mod=2155) running. It even works on the 1.1 series. It should make a noticeable dent in your problem. The only catch is that you need to set up a honeypot for the project, but contributing to the cause is a small price to pay and actually a very good thing.


I am so glad that your are not Project manager anymore.

I'm glad too. I don't think I'd be able to stand locking a waiting and long-delayed release to a political issue that could take several months more to resolve. It would be much better to get it out and then re-license at the first chance after that part was straightened out.


I wonder why he was fired from the team... Possibly because he was fed up with all the drama and started telling the truth about what was really going on behind-the-scenes. Actually, we can't even call it that any more, as the whole community must be aware by now that something is seriously wrong with the way things are being managed here.

I wasn't fired, I resigned (I assume you were talking about me?). After a fairly disastrous attempt to straighten the project around and enact internal fixes before even trying to do a whole corporate switchover (fix the foundation before you start messing with other things), those left on the team called for resignation of all current project managers. Although the problems then may not have been solely caused by me, I felt that the right thing to do was one last act of leadership and assume some responsibility and resign from my position.

I know a bit about some of what's going on simply through knowing the motion of things before I left and piecing together a few things said publicly with my historical knowledge. That is all.

What's sad is that the big move made by the current team was supposed to remove any single person from a position of power. The funny thing is, prior to when I resigned, there were three project managers. Decisions required a majority of agreement, meaning at least two of those three needed to agree. It was designed so that a single person couldn't dictate things. Now there is only a single project manager. Maybe the power was spread further down, but the structure has gone from having three people at the top deciding to a single person deciding. That means that even more now than before a single person holds the power. Note that this isn't about the corporate structure, which is more-or-less independent of the everyday team stuff.


I do agree that development progress seems to have improved on SMF, and applaud the team for managing that. I simply worry that the internal issues still aren't fixed and the cart is being placed before the horse on changes.

Oh well, what do my opinions matter? I'm just a muck-raking power-hungry asshole like Owdy seemed to imply.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Antechinus on February 12, 2011, 04:29:15 PM
Quote
Now there is only a single project manager. Maybe the power was spread further down, but the structure has gone from having three people at the top deciding to a single person deciding.

No, it hasn't. You really are out of the loop, Michael. The power is actually spread amongst the Team Leads. They can use their majority vote to override the PM if they deem it necessary.

The way it actually works is this: the Team Leads (all of them) comprise what is known as the Steering Committee for the SMF forum project. Major decisions can be made by the PM in an emergency, but only in line with what has already been laid out by the SC. If the PM makes a decision that is out of line the SC can overrule him.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on February 12, 2011, 04:34:26 PM
Yep, might not be perfect still, but power is more evenly spread and balanced than ever before.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Livewire1 on February 12, 2011, 04:40:08 PM
Thanks Devs!!

Upgraded No probs....

Cheers  ;D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on February 12, 2011, 04:42:42 PM
No, it hasn't. You really are out of the loop, Michael. The power is actually spread amongst the Team Leads. They can use their majority vote to override the PM if they deem it necessary.

The way it actually works is this: the Team Leads (all of them) comprise what is known as the Steering Committee for the SMF forum project. Major decisions can be made by the PM in an emergency, but only in line with what has already been laid out by the SC. If the PM makes a decision that is out of line the SC can overrule him.

Well, that's good. At least there hasn't been consolidation in the manner it seemed. Maybe it would be worthwhile to make some posts or even a site page on the team structure? It would help answer questions on who to contact and maybe even provide some insight into how decisions are made.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Antechinus on February 12, 2011, 04:47:26 PM
Yes we probably should knock up something to explain things better. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Owdy on February 12, 2011, 05:06:02 PM
I'm just a muck-raking power-hungry asshole like Owdy seemed to imply.
I have sayd this many times before, don't put words in my mouth. Thanks.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on February 12, 2011, 05:19:34 PM
updates to the about section are pending the legal completion as well.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on February 12, 2011, 05:38:31 PM
updates to the about section are pending the legal completion as well.

Curious, why wcould a definition of structure and contacts not be updated until after pending legal completion?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: laetabi on February 12, 2011, 05:56:00 PM
Congrats on the security fix... things seem to be moving along nicely.

Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: shspvr on February 12, 2011, 06:16:24 PM
Nice work thanks
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: chep on February 12, 2011, 06:19:54 PM
Road Rash, You're kind of like road rash on this topic.  I couldn't think of a more fitting name. Don't take that in such a way that I dislike you though. You have made some valid points. I tend to agree with you especially so on this multiple RC candidates and updates of mods and themes. I was considering updating a couple of themes which I did but was disappointed with the multiple releases which came. I wasn't disappointed at SMF. It's free, and it's volunteers doing the real work. My hat is off to them. This drama regarding the licensing stinks. That is, if in fact it is what is holding it up. Anyway, I'll use free forum software but it doesn't mean I am a slouch or leech. I use SMF because it has good features and I like it. It's frustrating to wait this long. I'll continue to have faith that a final release will happen before too long.

I don't believe SMF is on a self destructive path as suggested. I believe that time has actually passed and the workers are going through rough waters and continuing to forge along. At a slower pace than some people would prefer I suppose, but that does not equate to currently being on such a course. I just have not seen any evidence that a course was set which is self destructive, either intentionally or not.

Good to see the RC release but still holding out for gold.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on February 12, 2011, 06:49:54 PM
There was a time when its course was very self destructive, but I suspect the true level of danger wasn't clear to most people here. Most teamies and former teamies will be acutely aware of it, though.

There has been a lot of change this last year, and while I have my own bones of contention over the way things have gone, there's no doubt that RC5/RC4 security release is a good thing. The pace has been fairly frantic in the last few weeks, and what's holding it up is legal matters. I think, though, I'm right in saying that there's absolutely no doubt the legal matters *must* be completed before final, rather than going final then doing a licence change. I'm not going to enter into the debate as to why I think that's the case, because it's frankly unnecessary at this stage.

God knows I've done my fair share of calling people out on things, and been dramatic when it seemed nothing else would do. But I'm pleased to see RC5, pleased to see the issues I've reported being fixed (even if not necessarily the way I dealt with them in my own situation), pleased to see that progress is happening, and for once I'm going to ask that the ******ing stop - the more time spent ******ing about stuff that you're not in the loop over is more time spent delaying final and the inevitable move to 2.1 that comes after it.

I have my own reservations about that too, but right now that doesn't matter, I have enough faith in the team to actually move things forward in the short term where it really matters, and that they'll deal with the long term matters in similar fashion. ******ing about it isn't going to make it happen any quicker, either, and if the long release cycle bothers you, do something about it. Bug test it as hard as you can, find every nuance that doesn't work as expected, and get it reported so it can be fixed. If you can, try and find a solution too. That's what we can all do, should we be so inclined, to getting things moving here - while the legal stuff is fixed in the background, and hopefully when the code's finally polished and gleaming and ready to be deserving of the title of final, so too will the legal stuff be dealt with.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Ryan2320 on February 12, 2011, 06:58:35 PM
Thank you Guys!

Will be updating and moving to 2.0RC5!

Really glad it is moving forward!

Ryan
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Saibamen on February 12, 2011, 07:06:55 PM
Where is templates changes from RC4? (line by line)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on February 12, 2011, 07:14:22 PM
What, RC4 to RC4 patch, or RC4 to RC5? The former you can see in the patch file, the latter you can readily do a diff between RC4 install and RC5 install.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Saibamen on February 12, 2011, 07:22:41 PM
I want update my theme from RC3 to RC4, then from RC4 to RC5. Where is the changes? (like in phpBB)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on February 12, 2011, 07:24:18 PM
Many changes, which is why there isn't a simple list of them anywhere.

Grab the full install of those (see the archived section on the download area), then run a diff tool like WinMerge between them. Like I already said.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 12, 2011, 07:30:07 PM
I want update my theme from RC3 to RC4, then from RC4 to RC5. Where is the changes? (like in phpBB)

If you follow Arantor's advice you'd be better doing a diff on the differences between RC3 and RC5. Winmerge or BeyondCompare are a great tool for doing this.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NISHIKI on February 12, 2011, 07:30:21 PM
Where is templates changes from RC4? (line by line)

I want it, too.I must copy my Japanese language file when a final version is released.Because,SMF have not complete japanese file yet.



Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 12, 2011, 07:51:47 PM
Template changes for RC4 to RC5 attached.
 Including the files that only have the version change at top.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: lucb1e on February 12, 2011, 08:43:20 PM
Changelog from 1.13 seems broken, WinRAR says 'damaged archive or unknown format'.

Edit: From 2.0 RC 5 as well. Other zips, also SMF upgrade zips, open fine though so it has to be the file.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: chep on February 12, 2011, 08:43:49 PM
Ichbin, I'm with you. This little Road Rash IS a troll. He just sent me an annoying message "Chep shot". It is amazing the lengths people go in order to create chaos from nothingness.. He's like a 10 year old on crack. I've seen rocks which are more useful than this troll. Anyway...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on February 12, 2011, 09:46:14 PM
I want it, too.I must copy my Japanese language file when a final version is released.Because,SMF have not complete japanese file yet.

I sent you a PM on this comment about contributing to the official language files. Please do read the PM and consider contributing.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: gisfreak on February 12, 2011, 11:42:23 PM
yahooo, upgrading now, thanx :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Rattler on February 13, 2011, 02:46:14 AM
my auto-upgrade from 1.1.12 to 1.1.13 has failed tests in two files, where do we find the manual upgrade instructions?

Thanks,

Rattler
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on February 13, 2011, 02:48:03 AM
Please find them here:
1.1.12 to 1.1.13 edits (http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_1.0.21_1.1.13.tar.gz;smf_version=1.1.12)

If you may have further problems, please consider asking in Support boards, you will get better help there. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Rattler on February 13, 2011, 03:19:20 AM
Please find them here:
1.1.12 to 1.1.13 edits (http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_1.0.21_1.1.13.tar.gz;smf_version=1.1.12)
Thanks, thats what I was looking for!

Rattler
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Burridge on February 13, 2011, 04:03:29 AM
I upgraded two boards to RC5 from RC4(without the security fix) with no problems or hindrance. Thanks team.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: klumy on February 13, 2011, 07:37:49 AM
nice one, hope final will come soon
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NISHIKI on February 13, 2011, 07:44:22 AM
Template changes for RC4 to RC5 attached.
 Including the files that only have the version change at top.

Thank you so much!!!

I understand your(team) hard work now. :o
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: mkress on February 13, 2011, 08:09:11 AM
why is there no upgrad http://custom.simplemachines.org/upgrades/ from 2.0 RC4 to RC5 ??

 :(
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on February 13, 2011, 08:10:45 AM
there are never package manager upgrades for RC releases only gold release upgrades.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Owdy on February 13, 2011, 09:16:38 AM
why is there no upgrad http://custom.simplemachines.org/upgrades/ from 2.0 RC4 to RC5 ??

 :(

Please find this patch here: SMF 2.0 RC4 Security Patch (http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip).
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on February 13, 2011, 11:00:11 AM
that is not an upgrade to RC5 it is just a security patch that keeps your version at RC4
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Owdy on February 13, 2011, 11:04:30 AM
True.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: mariusfv on February 13, 2011, 11:49:54 AM
Hi,

I was update from 1.1.11 to 1.1.12 and now I download(Large upgrade & Small update) and both of them via admin-> package manager on upload give me the error: The package you tried to upload either is not a valid package or has become corrupted.  What to do ?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on February 13, 2011, 11:54:52 AM
Neither the large nor the small update downloads are for the package manager. Please see: Upgrading SMF (http://docs.simplemachines.org/index.php?board=3.0;sort=subject)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: krick on February 13, 2011, 02:52:43 PM

Most spamming systems are zombies - infected end-user computers being controlled. Until ISPs start shutting off connections to the millions of zombies out there until they are cleaned, we'll continue to have problems. Combine with the re-use of IPs via dynamic assignment, and it's difficult to block a single computer without causing large collateral damage.

Instead of paying IPS for the privilege, get httpBL for SMF (http://custom.simplemachines.org/mods/index.php?mod=2155) running. It even works on the 1.1 series. It should make a noticeable dent in your problem. The only catch is that you need to set up a honeypot for the project, but contributing to the cause is a small price to pay and actually a very good thing.


I'm running the 1.1 series (patiently waiting for 2.0 final).

I've tried almost every mod to prevent spammers including reCAPTCHA for SMF (http://custom.simplemachines.org/mods/index.php?mod=1044) and Stop Forum Spam (http://custom.simplemachines.org/mods/index.php?mod=1519).

However, the single mod that had the most effect was Anti-Spam Verification Questions for SMF (http://custom.simplemachines.org/mods/index.php?mod=1516).

In my registration settings, I use the following...

1) Member Activation - this requires the potential spammers to use a real email address.
2) Medium complexity verification image - probably doesn't do a lot, but it's one more layer of protection/annoyance.
3) Verification question - this the key to stopping most spammers.

The hardest part about #3 is coming up with a question that is difficult for spammers to solve, yet easy for someone signing up for your forum.  I suggest that you avoid math questions.  Much of the spam on my site comes from Russia and/or China, so having a math question just makes it easier for someone who may not speak English.

On SMF forum on my site, tankadin.com (http://www.tankadin.com/forum/), I use the following question...

"Answer this question...   Tank + Paladin = ?"

...which I think is sufficiently obscure, yet most visitors to my site should know the answer.


I've thought about adding some text to the registration page that says something like...

"If you can't figure out the answer to the verification question, please email me at xxxxx @ tankadin.com for a hint."

...but it doesn't seem necessary so far.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Nick Whetstone on February 13, 2011, 04:36:08 PM
Thanks for the release. Great job to the Devs. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Forum Guy on February 13, 2011, 04:38:26 PM
RC5 is still not mod_security compliant - still bolts the method not implemented error in admin panel (view attachments)!

Will this be fixed in the final version?

Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Nolt on February 13, 2011, 05:11:48 PM
Great job guys ;)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Mr. Jinx on February 13, 2011, 05:27:25 PM
Thanks for the special rc4 security patch.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on February 13, 2011, 06:50:03 PM
RC5 is still not mod_security compliant - still bolts the method not implemented error in admin panel (view attachments)!

Will this be fixed in the final version?


Can you report that as a bug with as much information as is needed?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Mari-chi on February 13, 2011, 07:13:14 PM
I must copy my Japanese language file when a final version is released.Because,SMF have not complete japanese file yet.

Hence why I only have English on my forum, too. :/ Having complete translations of Japanese and Korean would be much more convenient. Actually, I don't think it's even translated to Korean. o.o
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on February 13, 2011, 07:19:05 PM
You can talk with Relyana about assisting with the translations.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on February 13, 2011, 07:19:26 PM
If you can help in the translation effort, please do! There are instructions on how to help contribute in this very board.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Mari-chi on February 13, 2011, 07:24:55 PM
I'd love to and was even considering it, but this line put me off a bit: "you can spend a significant amount of time on translating". Hmm. I guess I'll send an e-mail and find out just how much time that is.

Thanks for the tip, guys. :D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: SlammedDime on February 13, 2011, 07:31:58 PM
FYI - The news scroller at the top of the forum needs to be updated with the proper versions...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on February 13, 2011, 07:32:15 PM
The amount of time you invest in helping with translations is up to you.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Rokambole on February 13, 2011, 11:26:03 PM
Thanks for the update.

Only a cuestion, When SMF release the final version:
The final upgrade (2.0 RC5 to 2.0 Final) will be in a auto-package like 1.1.12 to 1.1.13  versions, or I will need to use the upgrade.php file ?

I'm not an expert, and I suffer every time I have to move or replace something in the file manager of my forum...
and... you never know when will be a good day to upgrade your forum when you're using 000webhost...  :P
I love the  upgrades by autopackages .  :-[

Thanks again
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 13, 2011, 11:42:34 PM
Patches are never made while the product is in beta or RC versions to upgrade to the next release. Once SMF2 goes final, then you will see patches for any sub-sequent release for that version. You will have to run the upgrade package when the SMF2 final version comes out.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: laetabi on February 14, 2011, 02:04:44 AM
Thanks Ichbin, having used SMF since Sep 2008, I've only ever used RC versions of 2.0 and having experimented with a load of mods and custom edits each upgrade has been quite a task. If releases after Final are via package manager that will make things sooooo much simpler.

Get those lawyers to pull their fingers out and go gold ;)

Thanks for all the efforts of everyone involved. Truly a fantastic piece of software given it is produced by volunteers around the globe.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Bikken on February 14, 2011, 02:43:21 AM
Good work guys. Thanks
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: willemjan on February 14, 2011, 02:49:13 AM
Thanks!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: ahrasis on February 14, 2011, 03:30:02 AM
Another useful delay i supposed  :P
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: FfdG on February 14, 2011, 06:33:56 AM
Vice versa. What's so hard in bundling a set of files? I don't want more than 1000 files, Smileys, unchanged Themes and periodically changed empty lines before EOF. Diff is nice but I still have to build my own patch.

You don't have to build a patch. A security patch was provided. So it's not necessary to do the large upgrade. I could understand a full patch being made in a final version update. I don't think we have ever done patches for updates when in RC.
I don't care about the 2.0RCn. I just want a package of the changed¹ files for the stable 1.1.x version. No "small update" with over 1000 files, no "patch" in dumb package manager format and no hidden attachments in announcement posts.

¹ The ones with significant differences. Not the ones with nicer whitespaces.
What you are requesting is already done; the small update package.
No, it's not. Over 1000 unchanged files are not "a package of the changed¹ files". Is it that hard?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 14, 2011, 08:06:09 AM
Template changes for RC4 to RC5 attached.
 Including the files that only have the version change at top.


What about the CSS changes?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: KVL on February 14, 2011, 09:20:43 AM
Thank you very much for your work! :) Updated is successfully! :)

Many thanks! :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 14, 2011, 11:10:17 AM
Template changes for RC4 to RC5 attached.
 Including the files that only have the version change at top.


What about the CSS changes?

Download Winmerge. Open both the css files from both versions of SMF. Winmerge will highlight any changes made for you. Doing a diff like that is not hard.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: TurtleKicker on February 14, 2011, 01:30:02 PM
/me foresee RC6...

/me runs away

Not gonna happen.

At one point we were told there wouldn't be an RC3.

Then we were told that RC3 would be the last before final.

Then RC4 appeared, and we were told RC4 would be the last before final.

Now we have RC5...

I'm beyond complaining...  my forum is basically screwed at this point anyway, even the themer for my site relaunch I had lined up has given up on SMF in the 1+ years I've kept them on-hold, waiting for a stable base to work with. And I've not found someone to replace them (request for paid help in appropriate board still has no replies after over a month, and I wasn't being cheap). SMF 2 will come when it comes and I'll just have to wait until then to see if I can salvage anything from the remains of my forum. I'm just saying that there's a bad track-record for making any claims about there not being another RC. ;)

That said... I'm glad things are improving (it seems?)... albeit at a snail's pace. Progress is good, and if nothing else RC5's release proves that things aren't at a standstill. We'll just have to see if it's enough to save the community. I'd like nothing more for SMF to have the glory and momentum it did when I first chose it as the basis for my site.

Hell, I'd pay $100+ for SMF at this point if it'd bring it up to 2011 forum expectations and get 2.0 final here faster. And on top of that I'd pay $100+ for a custom theme if there was anyone interested enough in making SMF themes anymore to make the one I want. It's not about the money. (Of course, start throwing too much cash at SMF and you have to question why you don't just go with a commercial forum like IPB to begin with...)

Can someone help me understand why a version number matters?  What's the difference between a piece of software being labelled "version 2.0" and "version 2.0 RC 12,000" if they are identical code-wise?

I just don't get all the people who won't run an RC package just because it's labelled "RC."  Stability isn't a factor people.  It's just a number unless I'm missing something.  You'd seriously go through the trouble of changing platforms based on that?  Surely I'm missing something here...   ???

No easy update package to 2.0 final and beyond, requiring full reinstall each time. My transition to 2.0 will be painful enough as it is. I don't want to do it multiple times to get to 2.0-final.

For what it's worth: the 1.1.13 update installed cleanly for me without any issues. Thanks. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 14, 2011, 01:49:49 PM
Download Winmerge. Open both the css files from both versions of SMF. Winmerge will highlight any changes made for you. Doing a diff like that is not hard.


Thank you! That will help me for sure! ;)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on February 14, 2011, 02:17:43 PM
sremick, what makes upgrading so painful for you?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: digitalsolo on February 14, 2011, 02:20:42 PM
My update from 2.0 RC3 to 2.0 RC4 went (relatively) painless, and the fact that I can apply a security package is fantastic news, as I wasn't really feeling up to doing all that testing (you guys do test all your mods/functions on a test forum BEFORE you upgrade, right? ;)) again so soon.

Update package went in no problem.     Thanks for all the hard work guys, SMF is doing very well for me.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: TurtleKicker on February 14, 2011, 02:22:13 PM
sremick, what makes upgrading so painful for you?

I have a large number of mods and many conflicted and so required extensive manual edits.

I've learned much in my time with SMF and so will document better in the future, but regardless doing a full reinstall of all my mods and manual edits is not something I'm looking forward to having to do any more than absolutely necessary.

There's also the issue that a custom theme needs a stable foundation and it seems the stuff that affects themes keeps changing with each RC. If I'm going to pay for a custom theme I'd rather not have to re-pay for RC2... then RC3... RC4... RC5... RC6... RC7... final... etc. Of course, maybe a theme designer would be willing to contract in all updates until final... but that'd require finding a theme designer, and doesn't address the other issue.

So on 1.1.x I remain. *sigh*
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Matthew K. on February 14, 2011, 02:23:50 PM
I am almost positive there won't be another RC...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Paracelsus on February 14, 2011, 03:59:13 PM
Flawless update and nice comment from Norv on the status quo, thank you! ;D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 1Chope on February 14, 2011, 07:26:23 PM
Good Job.Congrats.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: xrunner on February 14, 2011, 07:38:36 PM
Installed easy. Most mods still installed afterwards without updates.

Thanks.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: BoastMyRide on February 14, 2011, 07:39:50 PM
As usual, another hassle-free upgrade...

Great work guys!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NISHIKI on February 14, 2011, 10:30:21 PM
I want it, too.I must copy my Japanese language file when a final version is released.Because,SMF have not complete japanese file yet.

I sent you a PM on this comment about contributing to the official language files. Please do read the PM and consider contributing.

I will join.
But,Please remember,I am beginner. :-[   I just study SMF....
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: islam2hamy on February 15, 2011, 12:30:20 AM
good work all
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Snowy on February 15, 2011, 08:37:30 AM
Thank you soooooo much for the patch. Upgrades are tedious for me, so these easy to install security patches are extremely beneficial.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Robert. on February 15, 2011, 09:49:59 AM
Just updated my test forum to RC5. :) Nice work, team. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 15, 2011, 10:18:12 AM
I updated my forum! It's working great! :D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: klumy on February 15, 2011, 12:43:29 PM
what's new in RC5?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on February 15, 2011, 12:45:50 PM
read the changelog.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: comedorsamus on February 15, 2011, 02:40:53 PM
Quote
for admins who wish to secure their RC4 forum but may not want to do a complete upgrade
YEEEEESSS! Thanks for that! :)

And since I'm here, let me ask something. I'm currently using RC4 with a language package, but I have modified some of them (a few lines and .php files still in english), would an upgrade overwrite those files or maybe create some kind of incompatibility?

Thanks!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 15, 2011, 02:47:08 PM
Quote
for admins who wish to secure their RC4 forum but may not want to do a complete upgrade
YEEEEESSS! Thanks for that! :)

And since I'm here, let me ask something. I'm currently using RC4 with a language package, but I have modified some of them (a few lines and .php files still in english), would an upgrade overwrite those files or maybe create some kind of incompatibility?

Thanks!
As long as they aren't the default english files you are fine :)

But the RC4 security patch will not change the language files as far as I am aware.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on February 15, 2011, 03:05:33 PM
what's new in RC5?
read the changelog.
The first post in this topic explains.

Quote
Main points of this 2.0 release include:
Several security-related fixes.
Mail management fixed.
Issues with international forums characters.
Unread replies and topics core functionalities issues were fixed.
A few administration features issues were fixed.
New integration hooks features introduced in RC4 were fixed.
Many other fixes and improvements.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: D3N1553 on February 15, 2011, 08:00:33 PM
Im not so happy about it,  I'm feeling I've been waiting too long for final release :/ XD I stopped the activity in my forum since the beginning of 2009 because I thought 2.0 would mean a significant change and It would be a matter of weeks to become final, so I thought "Well, It would ok to wait a little so my efforts editing the website wouldnt be insignificant since 2.0 will be such a change"...  but a year passed :( and then I thought devs would give us a nice christmas gift on december 2010...well, at least a new year's surprise. But no :( Its February 2011 and all I get is a RC5 XD ... Im not angry or anything, but 5 years seem too long for any kind of project, free, open source or whatever @.@

Now 2.0 seems old for me.  I know that many people will dislike my comment, but we have HTML5, CSS3 and other technologies that are becoming more important in web development...  and I dont imagine myself waiting 10 years more for 3.0 and start using some of them.

Sorry if Im being disrespectful or too ignorant
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on February 15, 2011, 08:09:22 PM
D3N1553, everyone, including the team, feels the same way.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: BÉLVI® on February 16, 2011, 12:55:05 AM
Since I upgraded my forum to 2.0RC5 and I come to inform everyone that the only bug was found that Wysiwyg button to view does not change the code using.

for now it's just that

thanks
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on February 16, 2011, 09:32:06 AM
Now 2.0 seems old for me.  I know that many people will dislike my comment, but we have HTML5, CSS3 and other technologies that are becoming more important in web development...  and I dont imagine myself waiting 10 years more for 3.0 and start using some of them.

Sorry if Im being disrespectful or too ignorant

I completely agree, D3N1553. We do not intend to have such slow pace of releases as we did the last years, and we are working on it.

Since I upgraded my forum to 2.0RC5 and I come to inform everyone that the only bug was found that Wysiwyg button to view does not change the code using.

for now it's just that

thanks

Can you please explain what do you mean exactly? Eventually, can you post a bug report in the Bug Reports (http://www.simplemachines.org/community/index.php?board=137.0) board with as many details as possible about your forum?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: [SiNaN] on February 16, 2011, 09:55:18 AM
Really, we want to release this thing more than anyone else does in this world.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: CaptainKirk on February 16, 2011, 12:58:03 PM
Really, we want to release this thing more than anyone else does in this world.

Which "world" would that be? 
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on February 16, 2011, 12:58:40 PM
Really, we want to release this thing more than anyone else does in this world.

Which "world" would that be? 
The world where we love to hear complaints like this, and that is why we hold off the release.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: CaptainKirk on February 16, 2011, 01:32:49 PM
Really, we want to release this thing more than anyone else does in this world.

Which "world" would that be? 
The world where we love to hear complaints like this, and that is why we hold off the release.

Figures.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: twig/al on February 16, 2011, 01:34:18 PM
Great job SMF... I don't mind the wait... Just get it right when it finally is released...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on February 16, 2011, 01:36:57 PM
Really, we want to release this thing more than anyone else does in this world.

Which "world" would that be? 
The world where we love to hear complaints like this, and that is why we hold off the release.

Figures.
Seriously though, you do understand we'd very much want to release already - partially just because we don't like to be pushed continuesly, and we don't like to see people complaining about this, and we would love to give straight answers to avoid it - but we can't, and we too think it's been too long already, and would like to move on with the project as well. It shouldn't be that hard to see, that we really really want to have a final released soon.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: KensonPlays on February 16, 2011, 03:00:31 PM
I thought you weren't going to release a RC5?! I thought GOLD was going to come before then  :o :-\
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on February 16, 2011, 03:03:02 PM
This version is a security release

...

At this time, legal matters related to the upcoming license changes have prevented us from making a final release of SMF 2.0.

...

Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Fiery on February 16, 2011, 03:19:22 PM
Nice work devs!  :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: BÉLVI® on February 16, 2011, 09:29:22 PM
Since I upgraded my forum to 2.0RC5 and I come to inform everyone that the only bug was found that Wysiwyg button to view does not change the code using.

for now it's just that

thanks
Quote
Can you please explain what do you mean exactly? Eventually, can you post a bug report in the Bug Reports (http://www.simplemachines.org/community/index.php?board=137.0) board with as many details as possible about your forum?


Well I do not know right to express myself as I am Brazilian and I do not speak English I'm using google to be able to communicate with you, the more this problem in the text editor toggle View

at least not in my forum and it worked before the upgrade was normal.

It is the first time I'm posting in the forum smf always do my own adjustments just wanted to report this BUG.

Thanks
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: kidzior on February 17, 2011, 02:44:47 AM
Great update!
Can't wait for final version.  ;D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: diablo3x.dk on February 17, 2011, 04:03:38 AM
Great work. Nice job, devs! My forum was under heavy bot attack causing members to get logged out all the time. RC5 fixed it. Had to do some package edits, though. Nothing serious.

I'm not gonna complain about you not releasing 2.0 Final. Has not even crossed my mind. I think everybody should realize that you do whatever you can, to get 2.0 Final out. People need to remember the fact that developing SMF actually is not your full time job - though it seems like you put a lot of time in this project. By now we should indeed have confidence that 2.0 is in good hands. Take your time. No rush.

So I'm gonna stay positive and just thank you for your hard work - looking forward to 2.0 Final :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: raden on February 17, 2011, 04:15:54 AM
Thank you for your hard work the SMF team

SMF 2.0 hopefully quickly released.

keep the spirit ...!!!! :) :) :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: gisfreak on February 17, 2011, 04:56:30 AM
I'm not gonna complain about you not releasing 2.0 Final. Has not even crossed my mind. I think everybody should realize that you do whatever you can, to get 2.0 Final out. People need to remember the fact that developing SMF actually is not your full time job - though it seems like you put a lot of time in this project. By now we should indeed have confidence that 2.0 is in good hands. Take your time. No rush.
So I'm gonna stay positive and just thank you for your hard work - looking forward to 2.0 Final :)

+1 for this  ;D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: YO_zhik on February 17, 2011, 09:17:59 AM
It's a great news! How I can be notified if next release is coming out?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on February 17, 2011, 09:40:48 AM
keep your eyes on this board and on the announcements in the admin section of your forum.
Or keep track of us on Twitter and/or Facebook.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: becometa on February 17, 2011, 09:57:29 AM
Is this was the announcement declaration?  ;D
keep your eyes on this board and on the announcements in the admin section of your forum.
Or keep track of us on Twitter and/or Facebook.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 17, 2011, 10:02:18 AM
Is this was the announcement?  ;D


What do you mean?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: becometa on February 17, 2011, 10:03:15 AM
A declaration?
Nvm :D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: YO_zhik on February 17, 2011, 10:20:59 AM
keep your eyes on this board and on the announcements in the admin section of your forum.
Or keep track of us on Twitter and/or Facebook.
This is'nt right way to publish announcements. Not for me.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on February 17, 2011, 10:29:14 AM
???

we publish in the section listed as "News and Updates", which is displayed on our homepage.
We post in Twitter and Facebook.
There is even a copy of the announcement and link to this thread in your forum's admin page.
When we publish a package update for the released versions, it appears in SMF admin and the package manager

You can sign up to be "Notified" of any new posts in this board.

I am confused over what you consider the "right way to publish announcements for [you]"?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: becometa on February 17, 2011, 10:57:12 AM
No, you poorly understand my post :D

I just wanted to tell a joke, that your message is possible harbinger of 2.0 Gold release date(ex. this month - keep your eyes on twitter!)
As I said, nevermind.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Ashley S on February 17, 2011, 02:10:30 PM
Good job guys.
Keep it up :).
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: KensonPlays on February 17, 2011, 04:40:55 PM
... SMF 3.0 anyone? (with time travel powers :P)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: YO_zhik on February 17, 2011, 04:41:01 PM
???

we publish in the section listed as "News and Updates", which is displayed on our homepage.
We post in Twitter and Facebook.
There is even a copy of the announcement and link to this thread in your forum's admin page.
When we publish a package update for the released versions, it appears in SMF admin and the package manager

You can sign up to be "Notified" of any new posts in this board.

I am confused over what you consider the "right way to publish announcements for [you]"?
I does not have account for facebook/twitter/whatever. Why - it's another topic.

I does not use SMF for me.

And yes, I've  only one way get to be notified - subscribe all new posts in this board and filter it. But this does not make my mail-server happy.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on February 17, 2011, 04:58:26 PM
And yes, I've  only one way get to be notified - subscribe all new posts in this board and filter it. But this does not make my mail-server happy.

Just use RSS to be notified with new topics. You'll then only get the occasional notice. If you really love e-mail, there are several no-cost RSS-to-email services.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: SleePy on February 17, 2011, 07:21:22 PM
I does not have account for facebook/twitter/whatever. Why - it's another topic.

I does not use SMF for me.

And yes, I've  only one way get to be notified - subscribe all new posts in this board and filter it. But this does not make my mail-server happy.

Shouldn't be too hard, just set your profile to "Instantly - Only for the first unread reply".  You will only get notifications again after you view the topic.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sharks on February 17, 2011, 11:48:37 PM
... SMF 3.0 anyone? (with time travel powers :P)
3.0? LOL. It's not going to happen in my lifetime. Probably in the next century.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: SabreOfParadise on February 18, 2011, 05:40:25 AM
Update to SMF 1.1.13:
smf_1-1-13_german

The file Admin.german.php had the wrong version (1.1 instead of 1.1.13) which caused the version check to mark the file red although I have updated it.

Edit: Btw.: Has an email been sent for this update? (If yes, I'm afraid it got stuck in a SPAM filter)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: KidCactus on February 18, 2011, 12:32:39 PM
I'm running 1.1.12 and can't update to 1.1.13, ./Sources/Search.php fails. :-\ Any ideas?

Edit: Never mind, copied Search.php from 1.1.12 install package and then 1.1.13 could be applied. Hm, I wonder what I had changed in Search.php then...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Robert. on February 18, 2011, 01:45:13 PM
Quote
Please do not use this topic for support requests. You will get a much quicker and better response by posting in the relevant support board.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: abraamz on February 18, 2011, 06:47:14 PM
First of all congratulations to everyone that worked for smf 2.0 for this fine and free piece of software.
Secondly if 2.0 final is close in terms of code and not so close in terms of license, the focus of the dev team is on 2.1, on 3.0 or on something else?
And last a request. Since everything was slow, myself (and i think many people) would like to see more frequent updates about whats happening, whats next etc. People have waited long for "when its ready". I believe that regular updates about whats moving (or not) should be made weekly or monthly (or every x days), to give the community the feeling that smf is moving on and its not standing still, waiting for laywers.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on February 18, 2011, 06:48:12 PM
The focus for the team is still on 2.0.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: MadMick on February 18, 2011, 11:41:11 PM
keep your eyes on this board and on the announcements in the admin section of your forum.
Or keep track of us on Twitter and/or Facebook.
This is'nt right way to publish announcements. Not for me.

Ummm, so what?, you think they should send out 248,118 emails each time there is an update or a patch, get real. If you are an SMF admin, as soon as you log into the admin section a red banner pops up saying your version is out of date and to "click here to update".

There are announcements made in this section and you can subscribe to that as mentioned and set it to only notify you of the first post.

The fact that probably nine tenths of the email addresses on here are fake, expired or changed since the member joined should tell you that a mass email is just not going to happen. As the admin of my own forum, I never use the mass email function for that reason alone.

If you are really concerned as an admin, then check here regularly, either that or just STFU and use different software  ::)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on February 19, 2011, 12:09:33 AM
Actually, mass emails are / have been done sometimes as well, but those are way slower than any alternatives, since like mentioned the amount of outgoing mail then is huge, and may take days to process..
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: infyquest on February 19, 2011, 12:19:56 AM
where is the upgrade file for 1.1.13 from 1.1.12, I cannot find it (smf_patch_1.0.21_1.1.13_1.tar.gz)
Send me the link via PM
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on February 19, 2011, 12:23:18 AM
A) Your SMF Admin panel. B) Dowloads -> Updates (I think; didn't check). C) Cust.site -> Updates. D) linked in this topic.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 19, 2011, 12:59:47 AM
If you are really concerned as an admin, then check here regularly, either that or just STFU and use different software  ::)

Wow, ease up man. It's just the internet.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Bigguy on February 19, 2011, 06:28:43 PM
Any new easter eggs in this version or will there be at all in 2.0 gold. ???
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Antechinus on February 19, 2011, 06:31:53 PM
No to both.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on February 19, 2011, 06:50:07 PM
Should there be? :D

Or... should we tell if there are? *ponders*
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 19, 2011, 07:14:29 PM
Should there be? :D

Or... should we tell if there are? *ponders*
Yes there should be... but don't tell!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on February 19, 2011, 08:04:42 PM
How about cleaner more readable code instead of easter eggs?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Antechinus on February 19, 2011, 08:05:38 PM
Now there's a novel concept.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on February 20, 2011, 01:14:08 AM
Software without Easter eggs is just wrong IMO.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Robert. on February 20, 2011, 03:30:56 AM
Easter eggs are cool :P
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on February 20, 2011, 04:00:48 AM
Software without Easter eggs is just wrong IMO.
/me agrees
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 20, 2011, 04:57:13 AM
Easter Eggs are great! I can't imagine SMF without them. 
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Anglis on February 20, 2011, 01:38:31 PM
Not sure why can't I upload this patch. I was always using upload as a package option, but now out of a sudden it gives me this error message:

Quote
Could not upload package, please check directory permissions!
I haven't changed anything, haven't moved host - any ideas what could possibly cause this?

I am also not able to update it automatically due of

Quote
Forbidden

You don't have permission to access /index.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache mod_fcgid/2.3.6 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at www.mydomainname.com Port 80
I guess this message I am getting due of the fact that my server doesn't support apache mod which has to be enabled in order to use automatic forum update?

Is there a way around this? I am hosting my forum on one of the hostgator accounts.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on February 20, 2011, 01:39:32 PM
Please open a topic in the relevant support board, this is NOT a support thread.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Anglis on February 20, 2011, 01:40:50 PM
Please open a topic in the relevant support board, this is NOT a support thread.
Roger that!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Dr.Plutyyon on February 21, 2011, 12:01:37 AM
hello,how download RC4 forum?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on February 21, 2011, 05:53:40 AM
it is not recommended to use RC4 on new installs, RC5 is released.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on February 21, 2011, 11:53:54 AM
hello,how download RC4 forum?

If you need it to fix something you can get it from the downloads page by clicking on the archive link in the left menu. As was mentioned though, highly recommended that you upgrade as soon as possible.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on February 21, 2011, 01:46:29 PM
If you don't want to upgrade then install the Security Patch. 
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Northtech on February 23, 2011, 07:53:20 AM
Code: [Select]
[url=http link]http link[/url] - underline: ok

[ftp=ftp link]ftp link[/ftp] - underline: ?

[email=email link]email link[/email] - underline: ?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on February 23, 2011, 07:55:47 AM
Northtech if you have a support issue please open a topic in the relevant support board, this is not a support thread.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: mannyRUA on February 26, 2011, 02:24:36 AM
I'm not gonna complain about you not releasing 2.0 Final. Has not even crossed my mind. I think everybody should realize that you do whatever you can, to get 2.0 Final out. People need to remember the fact that developing SMF actually is not your full time job - though it seems like you put a lot of time in this project. By now we should indeed have confidence that 2.0 is in good hands. Take your time. No rush.

So I'm gonna stay positive and just thank you for your hard work - looking forward to 2.0 Final :)

One of the better comments in this topic.

Thanks to all involved for the update.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: TheMortician4 on February 28, 2011, 03:27:15 PM
Northtech if you have a support issue please open a topic in the relevant support board, this is not a support thread.

Okay, So where is or do we have a support thread for this, as I still can not pload the patch or the upgrade without a corruption error message
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Bigguy on February 28, 2011, 03:34:11 PM
in the relevant support board, this is not a support thread.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on February 28, 2011, 03:51:49 PM
As in, go to the right board and start a new topic. Your question was already split off into a new topic once before, please ask there!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: TheMortician4 on March 02, 2011, 12:07:07 PM
As in, go to the right board and start a new topic. Your question was already split off into a new topic once before, please ask there!

link?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 02, 2011, 12:15:04 PM
Which version of SMF, since there's a board for 1.x Support and a board for 2.x Support...?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on March 02, 2011, 12:16:33 PM
As in, go to the right board and start a new topic. Your question was already split off into a new topic once before, please ask there!

link?

All you have to do is look on the board index under the category called "Support".
http://www.simplemachines.org/community/index.php#c3
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: SlammedDime on March 02, 2011, 12:34:30 PM
/me thinks it's time to just lock this topic...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sjambi on March 04, 2011, 01:07:10 PM
Hi, I've just join the forum.
We use SMF at work, and I've recently upgraded to smf 1.1.13.
I'm wondering if I need to install smf 2.0 RC4 or RC5.
What is the difference between smf 1.1.x and smf 2.0?
Is smf 2.0 another package or it's extended to smf 1.1?

Appreciate you help!
Sahar

Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on March 04, 2011, 01:08:35 PM
SMF 2.0 is a whole new version of SMF. It have more features than SMF 1.1.x.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sjambi on March 04, 2011, 01:24:40 PM
Thanks, for immediate response.
So, my question now is ..
How can I upgrade from smf 1.1.x to smf 2.0 RC5 while keeping my old mysql database?
Thanks!
Sahar
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on March 04, 2011, 01:27:09 PM
Using the large upgrade, you can simply overwrite all yiur existing files, and run upgrade.php to get your database up to date as well. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on March 04, 2011, 01:55:48 PM
Here you can find apsolute everything about upgrade.

Upgrading SMF (http://docs.simplemachines.org/index.php?board=3.0;sort=subject)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: sjambi on March 04, 2011, 03:44:47 PM
Thank you so much for help.
Now I can decide what release I need.
I really need to have smf 2.0 RC5 with more security patches, but I prefer to wait until it becomes fully stable.
We still have problems with receiving many spam user requests daily.  I hope this problem will end with smf 2.0 RC5.

Thanks again!
Sahar
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on March 04, 2011, 04:30:58 PM
That is a constant battle to be fought sjambi.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on March 04, 2011, 08:28:10 PM
I'd recommend SMF 2 RC5.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Bolt™ on March 06, 2011, 05:43:59 AM
Nice but I just finley got my forum updated to SMF 4 and am sticking to it
Quote
At least make sure you install the security patch then.


Yes I have installed that.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Tjati on March 08, 2011, 01:24:15 PM
Are there any sql changes done from RC4 to RC5?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: SlammedDime on March 08, 2011, 01:37:42 PM
Nope.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Tjati on March 08, 2011, 01:55:16 PM
Wrong! I found some:

Code: [Select]
REPLACE INTO forum_settings
(`variable`, `value`)
VALUES
('cal_maxyear', '2020');

ALTER TABLE forum_calendar
CHANGE title title varchar(255) NOT NULL default '';

ALTER TABLE forum_calendar_holidays
CHANGE title title varchar(255) NOT NULL default '';

UPDATE forum_membergroups
SET group_type = group_type + 1
WHERE group_type > 0
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 08, 2011, 01:58:46 PM
Firstly, that last one isn't for RC4 to RC5, it's in case a previous change wasn't applied.

The calendar change is just to reset an option many forgot to reset, and the calendar changes only make a column wider rather than new columns, and they don't have to be run unless you need the wider space. There are no new columns or new tables though which is what I think Dime was confirming.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on March 08, 2011, 04:19:06 PM
Are there any sql changes done from RC4 to RC5?
Why did you ask if you're going to answer your own question... in a rude manner?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: TheMortician4 on March 08, 2011, 07:19:44 PM
Which version of SMF, since there's a board for 1.x Support and a board for 2.x Support...?
Issue Resolved
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: HecKel on March 12, 2011, 07:43:37 AM
SMF is getting like GMail..., stabled but still beta, and with a lot of people using it :)

It's a shame how politics can stuck a great software...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on March 12, 2011, 09:29:01 AM
Somebody is dragging their feet, it normally takes 5 business days to transfer from a LLC to an NPO. In the case where releases are required a 30 day notice is standard.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: TheMortician4 on March 12, 2011, 11:54:11 AM
I Love this software, and the support has been stellar, I do not like vbulletin, and quite frankly, none of the others are as well supported as well as customizable.

SMF will remain the best free system I have yet to see and I have been around since BBS's. The free exchange of information and software was the motto for RBBS back in the early 80's when PC's first hit the market.  SMF has punched through the competition, while still maintaining that same message. For me, and with this economy the way it is today, it allows us lesser fortunate to make an impact on the .net and deliver great content with a prize winning package.


Keep up the great work guys....!!!!
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 12, 2011, 12:05:33 PM
Somebody is dragging their feet, it normally takes 5 business days to transfer from a LLC to an NPO. In the case where releases are required a 30 day notice is standard.

I won't get into it, but suffice to say it is a lot more complex than a simple asset transfer.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on March 12, 2011, 04:33:07 PM
I won't get into it either but going from LLC to NPO is not as complex as you believe or have been told.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 12, 2011, 04:44:55 PM
I won't get into it either but going from LLC to NPO is not as complex as you believe or have been told.

Normally it wouldn't be. This is not a normal case.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on March 12, 2011, 04:44:56 PM
RR... once again you are commenting on things which you actually know nothing about
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on March 12, 2011, 04:56:58 PM
RR... once again you are commenting on things which you actually know nothing about

Kindred, once again you assume more than you know. You have no clue what experience I have had in the corporate world in the past 80 years.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Bigguy on March 12, 2011, 04:58:33 PM
But you have know idea what is going on with THIS transfer. That's the important part. If you knew you would not be saying what you are.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on March 12, 2011, 06:43:09 PM
exactly.

I don't care what experience you migth have or have had...    you know absolutely nothing about this situation and every time you try to sound smart or tell us how things "should be" you just dig yourself a deeper hole.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: klumy on March 13, 2011, 07:50:44 AM
is RC5 the last version before final?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on March 13, 2011, 08:13:28 AM
is RC5 the last version before final?

Ideally, but it depends on how long it takes to convert to NPO.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: klumy on March 13, 2011, 09:55:28 AM
what is NPO?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Robert. on March 13, 2011, 09:56:05 AM
Non Profit Organisation ;)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Masterd on March 13, 2011, 12:00:35 PM
http://en.wikipedia.org/wiki/Nonprofit_organization (http://en.wikipedia.org/wiki/Nonprofit_organization)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Michele on March 13, 2011, 11:25:04 PM
I Love this software, and the support has been stellar, I do not like vbulletin, and quite frankly, none of the others are as well supported as well as customizable.

SMF will remain the best free system I have yet to see and I have been around since BBS's. The free exchange of information and software was the motto for RBBS back in the early 80's when PC's first hit the market.  SMF has punched through the competition, while still maintaining that same message. For me, and with this economy the way it is today, it allows us lesser fortunate to make an impact on the .net and deliver great content with a prize winning package.


Keep up the great work guys....!!!!

OMG, I haven't heard the name of RBBS in a long time... I started my BBS with that, but eventually switched to PCBoard... and yeah, SMF is the best I've seen... been with it since it was YaBBSE.

Nice to see someone else remembers RBBS!
Have fun, Michele
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: morean51 on March 14, 2011, 12:44:02 AM
thank you very much
good work
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Clara Listensprechen on March 14, 2011, 01:32:19 PM
I Love this software, and the support has been stellar, I do not like vbulletin, and quite frankly, none of the others are as well supported as well as customizable.

SMF will remain the best free system I have yet to see and I have been around since BBS's. The free exchange of information and software was the motto for RBBS back in the early 80's when PC's first hit the market.  SMF has punched through the competition, while still maintaining that same message. For me, and with this economy the way it is today, it allows us lesser fortunate to make an impact on the .net and deliver great content with a prize winning package.


Keep up the great work guys....!!!!

OMG, I haven't heard the name of RBBS in a long time... I started my BBS with that, but eventually switched to PCBoard... and yeah, SMF is the best I've seen... been with it since it was YaBBSE.

Nice to see someone else remembers RBBS!
Have fun, Michele

You're not alone. In addition, I remember FIDO, WWIV, RIME, Un'I, Wildcat, Spitfire, Silly Little Mail Reader, Blue Wave and those ubiquitous QWK packets. Good times. :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: jestism on March 14, 2011, 07:00:59 PM
is RC5 the last version before final?

Ideally, but it depends on how long it takes to convert to NPO.

OK.. not trying to be a "Smart A".... First I love SMF forum software and have been running the 1.1.x version for my forum for 3 years. (over 12K members, over 14K threads, over 230K posts, database size over 1.1 gig, and over 5,865,472 attachments.

What I want to ask (because I have been waiting to upgrade until the Version 2 was no longer a "beta") is can I consider, based on your comment (not on a commitment) that 2.0 RC5 is considered stable enough for a production/live forum. (as you can see I have a lot at risk if it doesn't go well or is unstable)

I apologize in advance if the wording of this question offends anyone, as that is not intended. I am only trying to get/have a "warm-fuzzy" feeling about the 2.0 RC5 before putting my forum at risk.

Thank-you for all you guys do and all of your hard work.
Mike
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Joshua Dickerson on March 14, 2011, 07:06:53 PM
I consider RC5 to be very stable. If it wasn't, it wouldn't be running on this website.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Road Rash Jr. on March 14, 2011, 07:43:48 PM
I have 25 "production" forums running SMF 2.0 RC5 in various configurations. Nothing is broke and they are all stable IMHO.
Before you make the upgrade you will want to assure that all your mods and themes are compatable because if they are not, they can cause problems.
 
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Clara Listensprechen on March 14, 2011, 08:19:17 PM
...Before you make the upgrade you will want to assure that all your mods and themes are compatable because if they are not, they can cause problems.
 
That's exactly the beef I have with it. All the cool mods work only on other versions. :P
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 14, 2011, 08:38:12 PM
And most mods for RC3 will work on RC5 without much fuss and virtually all RC4 mods will work - version emulate is your friend.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on March 14, 2011, 09:10:17 PM
Honestly, I don't know any 1.1.x mod that I can imagine installing that doesn't exist as either a mod or a feature on 2.0...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Clara Listensprechen on March 14, 2011, 09:35:59 PM
And most mods for RC3 will work on RC5 without much fuss and virtually all RC4 mods will work - version emulate is your friend.
My board's 2RC2. Yeah--already been down that road. ;)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: netsmith2012 on March 15, 2011, 03:41:05 PM
I would like to see the release notes for 1.1.13 but I can't find them.
Do they exist ?
thank you.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on March 15, 2011, 03:59:49 PM
Change log is on the downloads page.
http://download.simplemachines.org/
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: netsmith2012 on March 15, 2011, 07:49:52 PM
I did look there before posting. I don't see change logs on the download page.
And I even downloaded the zip file for the 1.1.13 file and did not see it in there (I may have not known what file name to look for)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on March 15, 2011, 08:02:37 PM
bottom of that page links you to http://download.simplemachines.org/index.php?thanks;filename=smf_1-1-13_changelog.txt
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Siirist on March 18, 2011, 06:16:10 AM
Quote
by Offline Norv     * Lead Developer     * SMF Super Hero
However as the upgrade process is a hassle for some administrators a security-only patch for RC4 is also being made available. This patch only contains the security fixes, for admins who wish to secure their RC4 forum but may not want to do a complete upgrade. It is a simple package that can be installed quickly via the SMF package manager and should not break any existing RC4 themes and mods.
Please find this patch here: SMF 2.0 RC4 Security Patch.

I must be cursed.
Didn't work.
There is not a parse for it, to allow a manual install.
Hmmm.
Thanks in advance for any assistance that might be offered.
Take Care,
Cloud
PS Ubber cool, can't attach the screen shot of the failure.
Told you I am cursed.
Here are the words
"The package you are trying to download or install is either corrupt or not compatible with this version of SMF"
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 18, 2011, 06:33:59 AM
What, exactly, are you trying to parse?

The upgrade to RC5 itself cannot be parsed; it is not a mod style package. But the RC4 patch can be - http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_2.0-RC4_security.zip;smf_version=2.0%20RC4
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Siirist on March 18, 2011, 11:19:14 AM
What, exactly, are you trying to parse?

The upgrade to RC5 itself cannot be parsed; it is not a mod style package. But the RC4 patch can be - http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_2.0-RC4_security.zip;smf_version=2.0%20RC4

Sweet :D

Thanks Arantor. I will manually install the RC4 security patch.

Take Care,
Cloud
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: dzembak on March 23, 2011, 03:58:14 AM
I think someone forget the update package for SMF 1.1.13 :P
Does not work for me too on my 1.1.13
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on March 23, 2011, 03:59:08 AM
I think someone forget the update package for SMF 1.1.13 :P
Does not work for me too on my 1.1.13
What do you mean? I updated one 1.1.12 install through the admin panel link without any problems.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: dzembak on March 23, 2011, 05:01:39 AM
There is no [Install] button...
(https://www.simplemachines.org/community/proxy.php?request=http%3A%2F%2Fs61.radikal.ru%2Fi171%2F1103%2F25%2Fe310652b0c48.jpg&hash=83314d4d013df0bea8ea153790e3060a)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on March 23, 2011, 05:15:51 AM
That would be because that is the RC4 security patch - For 2.0 RC4. The update patch for 1.1.12 is called "SMF 1.0.21 / 1.1.13 Update"
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: dzembak on March 23, 2011, 05:32:43 AM
Quote from: LexArma
The update patch for 1.1.12 is called "SMF 1.0.21 / 1.1.13 Update"
Ups... It`s seems I just misunderstood... Is that security patch too? Please, post the link to it, if it is. Can find it...
My forum is hardly attacked by spamers lately, so I was looking for any update to solve it.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 23, 2011, 05:33:31 AM
1.1.13 contains the same patches for 1.1.x as the patch for 2.0 RC4 does in the 2.0 line.

It won't cure being attacked by spammers, nothing generic can - but there are combinations of mods you can try (like httpBL, Forum Firewall etc)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on March 23, 2011, 07:25:09 AM
in other words... it you are already running 1.1.13, you are all set.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: hectorf on March 24, 2011, 10:53:49 PM
I'm very impatient to see the SMF 2.0 final release!!

Do you have any guess/idea about the release date? If you don't, thanks anyway ;)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on March 25, 2011, 05:40:39 AM
there will be no release date "released" it will be released when it is ready to be released and not any sooner.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Eleglin on March 25, 2011, 06:33:50 AM
there will be no release date "released" it will be released when it is ready to be released and not any sooner.
I'm not sure this is a very serious response.

 Anyway I hope that in future:
 - future versions will come with a little more transparency.
 - that the prototypes will no longer remain as R.C. for X months (or years)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on March 25, 2011, 06:36:26 AM
that is a serious reply, smf does not set deadlines that are public. they also do not stick to deadlines that may be set as issues may come up. releases will be released when and if they are ready to happen, not when a date is set.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Eleglin on March 25, 2011, 07:03:50 AM
Problems can still occur. Even after the final release ... That is why patches exist.
 A date must be fixed at one time or another. If deadlines can not be required (3 years after the release of the first beta), it's still disturbing.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: petabyte on March 25, 2011, 07:08:35 AM
Problems can still occur. Even after the final release ... That is why patches exist.
 A date must be fixed at one time or another. If deadlines can not be required (3 years after the release of the first beta), it's still disturbing.

Illori's answer is the only answer you'll get from here.  It will not change.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on March 25, 2011, 07:16:16 AM
Problems can still occur. Even after the final release ... That is why patches exist.
 A date must be fixed at one time or another. If deadlines can not be required (3 years after the release of the first beta), it's still disturbing.

they may have a date but it will never be released to the public and they will not release if the code is not ready on a date they may have set. they will do things their way and there is no changing that. you will get the release when they are good and ready and not a day sooner.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Eleglin on March 25, 2011, 07:26:08 AM
Give an approximate date would allow users to organize for an update.
 Is it serious to let people refine their themes or their installations for the RC 5 if the final version is released 15 days later ?
 Personally, I find  thant a clear information - after 5 years of development and 3 years of beta / RC - would not be a bad thing. Informing users, is also a way of showing his interest for the community.

But this is only my point of view of course...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on March 25, 2011, 07:33:45 AM
and if smf did not keep to releasing on that date there will be a lot of upset people that have prepared to update on that day to now have nothing to do. the way things are done and not going to change.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on March 25, 2011, 07:33:57 AM
A date must be fixed at one time or another. If deadlines can not be required (3 years after the release of the first beta), it's still disturbing.
You are absolutely correct in that there should be a deadline when we have been working on a single release for so long - unfortunately with this particular release, we can not make deadlines and stick to them - because it is not up to the code being ready or not, but other things that must be handled before the release is made.
These things are being worked on, and progress is being made, but due to the nature of these things we can not realistically make deadlines for them to be handled.
They are handled as fast as possible, and how fast that is - no one really knows in advance.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: poolhall on March 25, 2011, 10:05:48 AM
They are handled as fast as possible, and how fast that is - no one really knows in advance.

I don't really want to offend the team but repeating this uhh-some-legal-matter-is-holding-us,-we-can't-really-know-when-is-done stuff does sound like bull******. Why can't the officers provide more particular information? Is it sensitive and can't be shared?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on March 25, 2011, 10:21:28 AM
Have you ever worked with Lawyers to transfer business assets and legal documents across state boundaries? Have you ever done it for a LCC or NPO where all people who work on the project can only do things in their spare time? Anyone who has ever worked with Lawyers knows how painful and arduous it can be. We are only waiting on the legal matters to end. An end is in site, but we certainly cannot give a date when we don't even know one ourselves.

If you'd like to further discuss your issues with the volunteers here, feel free to start a topic in chitchat or Site comments.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: poolhall on March 25, 2011, 02:39:21 PM
I've actually been working "with" lawyers for 16 years. I am also running SMF 2.0 on a large forum since 2008 doing this in my spare time, by the way, so I understand the nature of volunteer work very well and don't really wait for the final release. What I am talking about is lack of information on a particular matter.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on March 25, 2011, 02:42:59 PM
what information do you think there is?   as I (and several others) have clearly stated: We are waiting for the final, legal contract to complete the transfer of assets. What information is lacking from that statement?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: twig/al on March 25, 2011, 05:09:22 PM
Guys, I want 2.0 Gold as bad as anyone... It will be ready when things are final... It is not any of our business what the holdup is... I don't care and like I said it is none of MY business either... These people do a great job and I for one have no complaints... IF I were the one on the other end taking all the complaints about some of the things... I would lock the topic and tell everyone that they will be notified when it is ready... Then move on with other things that need to be done instead of answering the same old questions over and over again....

Now let me be clear, I am not a member of any SMF team, own stock or have any connections with SMF, other than being a loyal user...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: poolhall on March 25, 2011, 09:50:15 PM
what information do you think there is?   as I (and several others) have clearly stated: We are waiting for the final, legal contract to complete the transfer of assets. What information is lacking from that statement?
and what is so special about it that makes it impossible to estimate when it's done? I must be missing something, so please can you tell?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 25, 2011, 09:59:35 PM
From the time involved, I'd say that the contract has gone back and forth to get things amended on each side until both sides were happy; that's the normal reason legal contracts take time (certainly that was the case in the mortgage industry where I used to work)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on March 26, 2011, 01:03:15 AM
That, plus the fact that both ends have interested parties scattered around the country.

A simple hypotethical example:
If I owned and managed an LLC and an NPO, I would expect a transfer like this between them to happen in days max, with one lawyer, no problem - but if I owned only part of the NPO, and the rest of the ownership of both companies were scattered around the globe, it would ofcourse require more than one lawyer, and understandably more time to handle things so that no one is left with a bad taste in their mouth, and so that all owners of both sides have time to understand and actually agree to the terms of the transfer, and so that contracts can be mailed back and forth between the lawyers and the owners of both sides until everyone is satisfied with the end result.

One must remember that this is not a buy out, this is not your everyday corporate takeover, but at the same time this is not just an internal transfer of assets either. The LLC and the NPO have differing ownership.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on March 26, 2011, 01:06:49 PM
what information do you think there is?   as I (and several others) have clearly stated: We are waiting for the final, legal contract to complete the transfer of assets. What information is lacking from that statement?
and what is so special about it that makes it impossible to estimate when it's done? I must be missing something, so please can you tell?

If you can figure out how to put a date on someone's free time, or how about putting date on the mail system when things are getting mailed back and forth, or how about how long it takes a lawyer to do his part, or how about how long it takes to even get a hold of each party to get something done, or.... I think you get the point. How can you possibly put a date on anything involved?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on March 26, 2011, 05:28:32 PM
Anyway I hope that in future:
 - future versions will come with a little more transparency.
I completely agree. I can tell they will indeed come with more transparency, as long as I'm here. Probably, not a little more, but much more. (though that's in the eye of the beholder, too :)).

- that the prototypes will no longer remain as R.C. for X months (or years)
I hope the same, but there are no guarantees here. We are working on improving drastically many things, though, with the purpose of speeding up releases.

However, on clear dates promised, I can only echo what has been said before: no, we will not set strict dates, and as annoying as it may sound, SMF release policy has been and will be: when it is ready.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Green Day Portal on March 27, 2011, 04:51:22 AM
Congrats team :)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on March 27, 2011, 11:31:42 AM
Congrats team :)
^^ A bit late.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Green Day Portal on March 27, 2011, 01:23:52 PM
I rather prefer being late than never do it. :P
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: petabyte on March 27, 2011, 04:00:32 PM
Congrats team :)
^^ A bit late.

so?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: TurtleKicker on March 31, 2011, 01:54:34 PM
is RC5 the last version before final?

Well, RC2, RC3, and RC4 were all supposed to be the last before final... so take any answers with a grain of salt. ;)

Interesting retro offtopic... I used to run a Fidonet BBS...

can I consider, based on your comment (not on a commitment) that 2.0 RC5 is considered stable enough for a production/live forum. (as you can see I have a lot at risk if it doesn't go well or is unstable)
RC5 is pretty stable apparently but as it is not a final release, there won't be simple upgrade patches to RC6/final. It will require a full re-install, including a full reinstall of all your mods. The more mods and custom edits you have, the more time this will require.

This tidbit gets missed a lot in the recommending of betas/RCs for production use. A lot of users get burned by surprise when the next update comes, as they are accustomed to a simple automatic update process with SMF releases.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: dvance on March 31, 2011, 01:55:31 PM
and if smf did not keep to releasing on that date there will be a lot of upset people that have prepared to update on that day to now have nothing to do. the way things are done and not going to change.

And there's not a lot of upset people already? I think at least an IDEA of finals or updates would be better than "whatever it's ready" or "whenever we feel like it". Everyday in our lives we have to provide estimates. They are not hard dates, but they are estimates. Ya, some people may get annoyed or upset at "soft dates", but they just have to understand that "soft dates" are not deadlines. This being "kept in the dark" is beyond old and unacceptable.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on March 31, 2011, 01:57:49 PM
Quote
I think at least an IDEA of finals or updates would be better than "whatever it's ready" or "whenever we feel like it"

Except that happened once before with a previous release candidate, the date slipped due to real life stuff and there were a lot of people unhappy as a result - and only "the summer" was quoted. So no, the team will not commit to any time or date, not even approximately, because it has happened before and they know the result.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on March 31, 2011, 01:58:36 PM
smf 2.0 final will be released before the end of time, there you got a date to work from.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Norv on March 31, 2011, 03:04:29 PM
and if smf did not keep to releasing on that date there will be a lot of upset people that have prepared to update on that day to now have nothing to do. the way things are done and not going to change.

And there's not a lot of upset people already? I think at least an IDEA of finals or updates would be better than "whatever it's ready" or "whenever we feel like it". Everyday in our lives we have to provide estimates. They are not hard dates, but they are estimates. Ya, some people may get annoyed or upset at "soft dates", but they just have to understand that "soft dates" are not deadlines. This being "kept in the dark" is beyond old and unacceptable.

I understand. However, I'd point out that indeed, this way of doing is used in a number of open source projects, and is not used in others.
I can tell that we are working to improve our communication with the community for future SMF versions, for the community to be more aware of the status than from the bug tracker alone as it is today, and by that, less "in the dark" about what is going on and what to expect.
It won't happen over night, but I agree there is a problem here, currently, and I don't doubt it needs addressed better than it is today.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: HecKel on March 31, 2011, 04:46:48 PM
Quote
I think at least an IDEA of finals or updates would be better than "whatever it's ready" or "whenever we feel like it"

Except that happened once before with a previous release candidate, the date slipped due to real life stuff and there were a lot of people unhappy as a result - and only "the summer" was quoted. So no, the team will not commit to any time or date, not even approximately, because it has happened before and they know the result.

Sorry Arantor, but what's the difference between giving an estimated date and then people complaining and what is happening now? For what i can see, a lot of people are complaining even without an estimated date.

Regarding this new issue, the NPO license or whatever, I totally can understand, because it is out of your hands. But what about before that? As far as I know, we even don't have an idea of the roadmap that you have been following. Which new features? Which enhancements? etc. We have been kept in dark for a huge amount of time and what used to be topics (like this one) with a lot of people congratulating the team, people are starting to complain and a lot! This isn't pleasant, not only for you but also for us.

My community used to have a charter member account, we decided to subscribe it only to support the project, but after two years we realized that the development was too slow, the development feedback was a mirage even for the charter members and we started to feel that we were supporting a project that was neglecting its followers. Seriously, you should reconsider your policies regarding the community, they might have worked in the past, but now they are "deprecated" :(
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: IchBin™ on March 31, 2011, 04:50:46 PM
The difference is there's nothing to hold the Volunteers here responsible for. While there are grumbles about it taking so long, that is not the same as giving a date and missing it. Especially when things are changing in the future so that hopefully these things won't hold back the releases like they currently are. So it should be a moot point. In the future releases should be quicker. So the complaint you are comparing should disappear. Whereas the setting a date complaint won't disappear if missed.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Kindred on March 31, 2011, 08:01:27 PM
Well, you know what features are clouded, since 2.0 has been feature locked for a long time.

And even while we plan to improve e release timelines, we have no plans to ever promise release dates for the reasons specified above. ... And no, those reasons are not "deprecated"
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: RuanofWinter on April 02, 2011, 04:14:52 PM
You may pick two:

Cheap, Good, Fast.


You have selected Cheap and Good.

No you may not have fast, you may only pick two.

That is the nature of free open source software.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on April 03, 2011, 08:27:27 AM
You may pick two:

Cheap, Good, Fast.


You have selected Cheap and Good.

No you may not have fast, you may only pick two.

That is the nature of free open source software.
Okay, what is this for a post?

SMF is cheap (not even, it's free), it's good (better then any software I used...and I used alot) and it's fast.

That releases come a little later, what is the matter with that? As long as they are working great, there's no problem with that...
They are just volunteers.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: willemjan on April 04, 2011, 06:00:41 AM
No you may not have fast, you may only pick two.

SMF will indeed be slow on an crappy server. But look at the page loads here, you can't call that slow, can you?

Quote
Page created in 0.082 seconds with 6 queries.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Aleksi "Lex" Kilpinen on April 04, 2011, 06:03:09 AM
I think speed referred to dev speed and release cycle, not the end product ;)
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: xiamobaby123 on April 06, 2011, 05:03:09 AM
Itis very good.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: joey791 on April 07, 2011, 08:04:29 AM
I have never come here to knock any of you guys and have been helped by a few of the team, but I work in a deadline managed world and it doesnt matter what legal stuff is going on or whatever and I have to at least give my customers an estimate.

It would just be nice to know if its going to be a year or 5 years before 2.0 is ready to go.

and btw if it took paying for SMF to get this I would pay for it.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on April 07, 2011, 08:09:34 AM
You can't realistically expect an estimate from people doing things in their spare time.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on April 07, 2011, 10:54:08 AM
and btw if it took paying for SMF to get this I would pay for it.

Paying won't make the legal stuff go any faster.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: joey791 on April 07, 2011, 01:15:13 PM
You can't realistically expect an estimate from people doing things in their spare time.

I do it all the time Arantor

So theres no clue if we will see a final release in the next year?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Illori on April 07, 2011, 01:17:29 PM
this has been answered already in this thread, you will not get a direct answer.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Arantor on April 07, 2011, 02:09:41 PM
You can't realistically expect an estimate from people doing things in their spare time.

I do it all the time Arantor

So theres no clue if we will see a final release in the next year?

I only hope I never find myself creating things in my spare time for you then, because in my spare time, I have no guarantee how long I will spend on something.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on April 07, 2011, 02:44:33 PM
I have never come here to knock any of you guys and have been helped by a few of the team, but I work in a deadline managed world and it doesnt matter what legal stuff is going on or whatever and I have to at least give my customers an estimate.
That's your problem, then, if you work deadline managed. I suggest you to stop with that.

SMF cannot give times, not only because of the license changes, but also because people do it in their spare time, which can happen to come out differently each day, as this quote actually already says:

You can't realistically expect an estimate from people doing things in their spare time.

I do it all the time Arantor

So theres no clue if we will see a final release in the next year?

I only hope I never find myself creating things in my spare time for you then, because in my spare time, I have no guarantee how long I will spend on something.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: Robert. on April 07, 2011, 02:48:11 PM
Exactly. :) The team is doing it's best to get Final out as soon as possible. Someone on UBB said once "I prefer a slow, but good development rather than a rapid, bugfull development". So it's your choise: what do you prefer?
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: kat on April 07, 2011, 03:08:13 PM
We're just waiting for a single signature, to complete the transfer from the LLC to the NPO.

Until that transfer's completed, we're stuck where we are.

Unfortunately, the person whose signature we need, has been moving house.

As soon as that signature is obtained, SMF v2 will go "Final".

Nothing more that anyone can say, really.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: joey791 on April 07, 2011, 03:24:20 PM
Actually I enjoy my job so thats a moot point Yoshi

Aranator, you have to look at pass experiences, right now I'm interfacing a 10 school district in my spare time(the HVAC controls) if you ever learn OPC let me know, btw your bot killing mod worked very well on my site, I have no more members being logged out now.

Thats the issue with SMF, any question or anything turns into a drama show it seems and thats well documented over the web on any forum about forum software, I know yall have a lot going on, under pressure, etc., and I have dealt with some of you guys, questions are being asked cause we care, if I didn't care I would move on to some other forum software and never have asked anything of yall.

Also I would like to upgrade my theme, forum, and mods in one shot, so if it can happen in less than a year that gives me something to tell my community and for me to plan for.

Thanks K@ wish you would have been the first to reply to me, all I wanted to know ;D
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: joey791 on April 07, 2011, 03:26:59 PM
Exactly. :) The team is doing it's best to get Final out as soon as possible. Someone on UBB said once "I prefer a slow, but good development rather than a rapid, bugfull development". So it's your choise: what do you prefer?

The first public beta for 2.0 was in 2008, I prefer a little faster.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: feline on April 07, 2011, 03:40:37 PM
The team is doing it's best to get Final out as soon as possible.
More then 3 years is too long, that is fact.
But while the SMF director do nothing to acquire  new developer, the final is long away...
My 2 cent...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: NanoSector on April 07, 2011, 03:40:42 PM
Exactly. :) The team is doing it's best to get Final out as soon as possible. Someone on UBB said once "I prefer a slow, but good development rather than a rapid, bugfull development". So it's your choise: what do you prefer?

The first public beta for 2.0 was in 2008, I prefer a little faster.
/me makes a face as if he wants to say: Stuuuuuuuuupid

You like buggy software? Go for it.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: kat on April 07, 2011, 04:00:20 PM
But while the SMF director do nothing to acquire  new developer, the final is long away...
My 2 cent...

If we had God, himself, developing SMF, IT CAN'T BE RELEASED UNTIL THE TRANSFER IS COMPLETE!!!!

Sheesh...
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: joey791 on April 07, 2011, 05:27:31 PM
Exactly. :) The team is doing it's best to get Final out as soon as possible. Someone on UBB said once "I prefer a slow, but good development rather than a rapid, bugfull development". So it's your choise: what do you prefer?

The first public beta for 2.0 was in 2008, I prefer a little faster.
/me makes a face as if he wants to say: Stuuuuuuuuupid

You like buggy software? Go for it.

Wow name calling, thats mature
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: 青山 素子 on April 07, 2011, 07:04:01 PM
The problem here is that the current team behind SMF has pinned the release date on the transfer of assets to a different corporation (instead of, ya know, releasing it under the old corporation for now...) and a changed license under the new corporation (instead of using the existing, though flawed, license for one more release). One of the signers of the transfer documents is currently involved in a house move (at least, that's what was said earlier here) and can't sign the paperwork until after the move.

It's kinda difficult to place a date and time when the release of 2.0 final is dependent on both people that do this as a hobby, and the back-and-forth of legal things.
Title: Re: SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5
Post by: SleePy on April 07, 2011, 10:25:45 PM
Thank you for your responses, kudos and comments.  If you need support for SMF, please locate the appropriate support board to do so.