SMF 1.1.13, SMF 2.0 RC4 Security Patch, and SMF 2.0 Release Candidate 5

[Illori]

there are never package manager upgrades for RC releases only gold release upgrades.

[Owdy]

why is there no upgrad http://custom.simplemachines.org/upgrades/ from 2.0 RC4 to RC5 ??

Please find this patch here: SMF 2.0 RC4 Security Patch.

[Illori]

that is not an upgrade to RC5 it is just a security patch that keeps your version at RC4

[Owdy]

True.

[mariusfv]

Hi,

I was update from 1.1.11 to 1.1.12 and now I download(Large upgrade & Small update) and both of them via admin-> package manager on upload give me the error: The package you tried to upload either is not a valid package or has become corrupted.  What to do ?

[Arantor]

Neither the large nor the small update downloads are for the package manager. Please see: Upgrading SMF

[krick]

Most spamming systems are zombies - infected end-user computers being controlled. Until ISPs start shutting off connections to the millions of zombies out there until they are cleaned, we'll continue to have problems. Combine with the re-use of IPs via dynamic assignment, and it's difficult to block a single computer without causing large collateral damage.

Instead of paying IPS for the privilege, get httpBL for SMF running. It even works on the 1.1 series. It should make a noticeable dent in your problem. The only catch is that you need to set up a honeypot for the project, but contributing to the cause is a small price to pay and actually a very good thing.

I'm running the 1.1 series (patiently waiting for 2.0 final).

I've tried almost every mod to prevent spammers including reCAPTCHA for SMF and Stop Forum Spam.

However, the single mod that had the most effect was Anti-Spam Verification Questions for SMF.

In my registration settings, I use the following...

1) Member Activation - this requires the potential spammers to use a real email address.
2) Medium complexity verification image - probably doesn't do a lot, but it's one more layer of protection/annoyance.
3) Verification question - this the key to stopping most spammers.

The hardest part about #3 is coming up with a question that is difficult for spammers to solve, yet easy for someone signing up for your forum.  I suggest that you avoid math questions.  Much of the spam on my site comes from Russia and/or China, so having a math question just makes it easier for someone who may not speak English.

On SMF forum on my site, tankadin.com, I use the following question...

"Answer this question...   Tank + Paladin = ?"

...which I think is sufficiently obscure, yet most visitors to my site should know the answer.


I've thought about adding some text to the registration page that says something like...

"If you can't figure out the answer to the verification question, please email me at xxxxx @ tankadin.com for a hint."

...but it doesn't seem necessary so far.

[Nick Whetstone]

Thanks for the release. Great job to the Devs.

[Forum Guy]

RC5 is still not mod_security compliant - still bolts the method not implemented error in admin panel (view attachments)!

Will this be fixed in the final version?

[Nolt]

Great job guys

[Mr. Jinx]

Thanks for the special rc4 security patch.

[Joshua Dickerson]

RC5 is still not mod_security compliant - still bolts the method not implemented error in admin panel (view attachments)!

Will this be fixed in the final version?

Can you report that as a bug with as much information as is needed?

[Mari-chi]

I must copy my Japanese language file when a final version is released.Because,SMF have not complete japanese file yet.

Hence why I only have English on my forum, too. :/ Having complete translations of Japanese and Korean would be much more convenient. Actually, I don't think it's even translated to Korean. o.o

[Joshua Dickerson]

You can talk with Relyana about assisting with the translations.

[青山 素子]

If you can help in the translation effort, please do! There are instructions on how to help contribute in this very board.

[Mari-chi]

I'd love to and was even considering it, but this line put me off a bit: "you can spend a significant amount of time on translating". Hmm. I guess I'll send an e-mail and find out just how much time that is.

Thanks for the tip, guys.

[SlammedDime]

FYI - The news scroller at the top of the forum needs to be updated with the proper versions...

[青山 素子]

The amount of time you invest in helping with translations is up to you.

[Rokambole]

Thanks for the update.

Only a cuestion, When SMF release the final version:
The final upgrade (2.0 RC5 to 2.0 Final) will be in a auto-package like 1.1.12 to 1.1.13  versions, or I will need to use the upgrade.php file ?

I'm not an expert, and I suffer every time I have to move or replace something in the file manager of my forum...
and... you never know when will be a good day to upgrade your forum when you're using 000webhost... 
I love the  upgrades by autopackages . 

Thanks again

[IchBin™]

Patches are never made while the product is in beta or RC versions to upgrade to the next release. Once SMF2 goes final, then you will see patches for any sub-sequent release for that version. You will have to run the upgrade package when the SMF2 final version comes out.