vBulletin 3.0.8 Release Discussion

[Kier]

Please use this thread to discuss the release of vBulletin 3.0.8.

Do not use this thread to report bugs, as it's likely they will be missed. If you believe you have found a bug, please file a report in the Bug Tracker (http://www.vbulletin.com/forum/bugs.php).

Also please do not post support requests here, these should be posted in the Support Forum or open a support ticket.

Have fun.

[nuckolsc]

Cool.. Gonna be upgrading today.

Good work

[ManagerJosh]

Commited as always! Nice Kier :)

[Moparx]

thanks guys :)
ill be updating soon

[Colin F]

Unexpected, but thank you guys.

[rossco_2005]

This really was unexpected.
If we're planning to upgrade to 3.5 as soon as it comes out, would you recomend upgrading to 3.0.8 from 3.0.7 anyway? Keeping in mind I have a lot of hacks to redo if i upgrade...

[]SK[]

Woopeh, upgraded. Tnx.

[Antivirus]

Got all excited when i logged into my CP today, but it wasn't 3.5, it was 3.0.8. Still it's great to get any upgrades, thanks for all the hard work VB people!

[sparknote_s]

So let me get this straight...

All of the .php files that are changed will not change any of the modifications I have made to templates, correct?

And all of the changes to templates just rearrange the <title> tag and $headinclude?

What do I do to upgrade, and ensure I DO NOT change the modifications to the templates?

[Floris]

Just a small note to everybody wondering:

If you run 3.0.x and you don't want to upgrade to 3.0.8 because you feel 3.5.0 stable is close then at least patch your 3.0.x with the files from the announcement. This will fix the minor security issues, and that's always a good thing.

If you run 3.5.0 (beta or rc) you do not have to take any action, you can not use the patch files and you can't run the 3.0.8 upgrade files, nor can you downgrade to 3.0.8. The issues from 3.0.7 are fixed in 3.5.0 RC 1. So you do not have to worry.

[feldon23]

Somebody put this in the User Manual or Announcement or something:


If you have not changed any of your PHP files in your currently running vBulletin, then you can safely upload the new 3.0.8 PHP files to your server. Any PHP files that you have modified in the course of modifying vBulletin with hacks, add-ons, etc. will require special treatment. Depending upon the extent of your changes, you can run a virgin copy of 3.0.7 and virgin copy of 3.0.8 through a file comparison tool to see what changed from 3.0.7 to 3.0.8 and then reflect those changes in your modified 3.0.7 files. Every PHP file that you alter in the course of customizing and extending vBulletin increases the complexity and hassle of forum maintenance.

vBulletin 3.5 allows many, but not all, plug-ins to be performed without altering the original PHP files. Ease of installation, upgrades, and forum maintenance are substantially improved from 3.0 to 3.5.


Templates are stored in the database. To update them, follow the instructions in Kier's second post. The first step, as you have indicated, is to tweak each template that uses a <title> tag. Note that the only templates you will have update manually are the ones you have customized. Whenever you customize a vBulletin template, it becomes frozen in time, thus ignoring any updates.

vBulletin 3.5 has Template Compare and Template History features built right into the control panel to simplify this process.

[Tantawi]

Got all excited when i logged into my CP today, but it wasn't 3.5, it was 3.0.8. Still it's great to get any upgrades, thanks for all the hard work VB people!

Yeah same here :D I'm upgrading anyway.

[Spacefreak2]

What do I do to upgrade, and ensure I DO NOT change the modifications to the templates?
I also would like to know about this.

EDIT: OK... looks like I have to do it manually.

[feldon23]

When you upgrade to 3.0.8, any templates you modified at 3.0.7 will stay the same. The 3.0.8 templates will be "suppressed" until you click Revert.

[BLazeD1]

Just a small note to everybody wondering:

If you run 3.0.x and you don't want to upgrade to 3.0.8 because you feel 3.5.0 stable is close then at least patch your 3.0.x with the files from the announcement. This will fix the minor security issues, and that's always a good thing.

If you run 3.5.0 (beta or rc) you do not have to take any action, you can not use the patch files and you can't run the 3.0.8 upgrade files, nor can you downgrade to 3.0.8. The issues from 3.0.7 are fixed in 3.5.0 RC 1. So you do not have to worry.

Sorry, just to confirm, if we only want the security fixes from this release, we need to over-write all files in our current installation (mine is 3.0.7) with the new files from this release?

Any easier way to get the security benefits only?

[rossco_2005]

Sorry, just to confirm, if we only want the security fixes from this release, we need to over-write all files in our current installation (mine is 3.0.7) with the new files from this release?

Any easier way to get the security benefits only?
I'd like to know too, as all my hacks/mods would have to be redone...it's bad enough that I have to do them for 3.5, but was planning on making most of them PLUGINS by the time that is released.:confused:

[feldon23]

There's a patch. Look again.

[Spacefreak2]

When you upgrade to 3.0.8, any templates you modified at 3.0.7 will stay the same. The 3.0.8 templates will be "suppressed" until you click Revert.I was just about to begin, but now I'm confused... I want to upgrade my modified 3.0.7 to 3.0.8.

Forgive me if I sound thick. I just started with vB a few weeks ago, and I don't want to encounter any problems as I do this manually.

1. The vB308_patch.zip contains 2 files, faq.php and private.php. I haven't touched these files, so I can simply replace the old files with the 2 new ones? (I did this already)

2. The <title> tag thingie... just go through all my php files and replacing the code whenever I see a <title> tag?

3. The rest of the code changes (http://www.vbulletin.com/forum/showpost.php?p=928143&postcount=3) looks straighforward.

4. List of all the files changed since 3.0.7 (approx. 60 or 70 files)... what exactly am I supposed to do with these. I'm assuming some of them had the <title> tag issue, but what about the rest?

5. Changes for MySQL 4.1 Support: Backup DB (w/ mysqldump utility), but then how and where do I run those queries? I can't seem to find the 3.0.8 "upgrade script"... it's not in that attached zip file "vb208_patch:.

Any advice would be appreciated.

[Bizzy]

Does this upgrade fix the "Tachy goes to Coventry" problem where users in this status posts could still be seen in the last post column? I read the list of files affected but I don't know which file that option uses.

Thanks for the upgrade. I'll probably be upgrading in the next day or so.

[Floris]

Sorry, just to confirm, if we only want the security fixes from this release, we need to over-write all files in our current installation (mine is 3.0.7) with the new files from this release?

Any easier way to get the security benefits only?
If you do not want to upgrade, but only want to patch your current 3.0.x version, this is what you do:

Do not download the .zip from the members area, do not run upgrade scripts.
Get the vb308_patch.zip from the announcement and unpack it, then upload those files to your web server, overwriting (do not skip or resume, but really overwrite) the files already there (faq.php and private.php). This will patch your current 3.0.x release. And then you're done.

------------------------------------------------------------------------------------------------
if you do want to upgrade from 3.0.x to 3.0.8 you have to do a full upgrade, then other instructions apply.

[Floris]

Does this upgrade fix the "Tachy goes to Coventry" problem where users in this status posts could still be seen in the last post column? I read the list of files affected but I don't know which file that option uses.

Thanks for the upgrade. I'll probably be upgrading in the next day or so.
Looking quickly over the details I have, no, I do not think it does fix that particular bug. But I have too little information to make that my official comment. Hopefully a dev will be able to confirm it for you. Just assume for now that it doesn't.

[djwins]

I was just about to begin, but now I'm confused... I want to upgrade my modified 3.0.7 to 3.0.8.


1. The vB308_patch.zip contains 2 files, faq.php and private.php. I haven't touched these files, so I can simply replace the old files with the 2 new ones? (I did this already)


4. List of all the files changed since 3.0.7 (approx. 60 or 70 files)... what exactly am I supposed to do with these. I'm assuming some of them had the <title> tag issue, but what about the rest?
This is where I am confused as well. The attachement only contains 2 files, so whats the story with the long list of file changes?

[Mark.B]

This is where I am confused as well. The attachement only contains 2 files, so whats the story with the long list of file changes?
You'll find the two files in the patch contain essential security fixes, while the long list of other files have non-essential bug fixes.

[Freddie Bingham]

Does this upgrade fix the "Tachy goes to Coventry" problem where users in this status posts could still be seen in the last post column? I read the list of files affected but I don't know which file that option uses.

Thanks for the upgrade. I'll probably be upgrading in the next day or so.
That is fixed in 3.5

[CaptainBlue]

I have three boards running 3.0.7

I'm in the middle of a 'full' upgrade on one of them and have downloaded the full package from here for one of them.

Once I've upgraded this one, can I upload the same set of files to the other two or do I have to log in twice more and download separate complete packages?

[gregsbaby64]

Thank you! Wheeeeeeeeee! :)

[Steve Machol]

You have to use the zip file for that particular license. You cannot shares the files between licenses.

[BoYagoob]

My questions:

1- How can I make revert for one template ? and if I make the revet, do I have to change the changed of modefied parts manually?

2- For the files changed: attachment.php, calendar.php .... etc ..
can I change only these files when I upgrade and no need to change the others?

Thats it .. :)

[MRGTB]

I am new to vbulletin and have just installed 3.0.7 last week. The problem is I have vBindex 3.0.0 RC5 installed here and I'm new to upgrading. Will the upgrade effect the way vbindex work?

And do I need to upgrade by uploading the full package and then running the upgrade.php, Or do I just need to upload the two files "faq.php" and "private.php" and then run the 3 queries listed.

I'm not exactly sure what I need to do.

[CaptainBlue]

You have to use the zip file for that particular license. You cannot shares the files between licenses.

Thanks Steve.

[Jose Amaral Rego]

Now, that just throws me off a little. Well @ least I will be removing the arcade & portal. I did not think you guy's were working on two forums. That is pretty impressive to do and keep the support running smooth, except for the banning part. http://images.vbulletin.com/images_vb3/smilies/tongue.gif

[sabret00the]

trying for a page one, thanks for this very very very unexpected update.

[Bizzy]

That is fixed in 3.5

Thanks for letting me know. Keep up the good work!

[gio~logist]

Questions:

- Will this affect my hacks?
- Kier posted that various files have changed besides FAQ.php and PRIVATE.php, why are people suggesting to just updae those two?

[feldon23]

- Kier posted that various files have changed besides FAQ.php and PRIVATE.php, why are people suggesting to just updae those two?
Because of:

- Will this affect my hacks?
You've just answered your own question.

[gio~logist]

lol indeed,
So what if i use araxis merge to fidn the difference between files and edit all the changed files, and jus toverwrite the oens i dont have hacks in... then i should be set... correct?

[Floris]

My questions:

1- How can I make revert for one template ? and if I make the revet, do I have to change the changed of modefied parts manually?

2- For the files changed: attachment.php, calendar.php .... etc ..
can I change only these files when I upgrade and no need to change the others?

Thats it .. :)

1- Go to that template, and click on the revert button.

2- If you do an upgrade, upgrade ALL the files.

[Floris]

I am new to vbulletin and have just installed 3.0.7 last week. The problem is I have vBindex 3.0.0 RC5 installed here and I'm new to upgrading. Will the upgrade effect the way vbindex work?

And do I need to upgrade by uploading the full package and then running the upgrade.php, Or do I just need to upload the two files "faq.php" and "private.php" and then run the 3 queries listed.

I'm not exactly sure what I need to do.

We do not know how vBIndex works, so ask the author's support department please.

If you want to upgrade, upgrade as usual, and if you just want to patch and stick to your current version, then upload those 2 files.

Don't run any queries.

[Zidane007nl]

I just have vBulletin for one week and already an update? I'll install it later, since I've already installed hacks on my forum...

[Wayne Luke]

Somebody put this in the User Manual or Announcement or something:


You can submit comments for the manual using the online interface.

[tamarian]

Note that the instructions also talk about another action:


In order to work around an XSS bug in Internet Explorer, wherever a page contains <title> tags, the <title> has been moved below the $headinclude section.
I'm using the patch method, since I'd rather not upgrade until 3.5 gold, so this is this the easy way to update the templates, to avoid editing all of them:

Side effect: All your templates will be marked as modified.

0. You might want to shut down your forum until the replacement is complete.

1. Use template search and replace box:

Search for Text:
$headinclude Replace with Text: nothing (leave empty)

Check no for "Test Replacement Only"
Check no for "Use Regular Expressions"

Click find and wait until complete

2. Use template search and replace box:

Search for Text:
<title> Replace with Text:
$headinclude
<title>

Check no for "Test Replacement Only"
Check no for "Use Regular Expressions"

Click find and wait until complete

3. You're done. :)

[Tantawi]

Upgraded to 3.0.8 from 3.0.7 and working fine, however the "Don't display [img] in quotes" hack is no longer working with this release, as it causes a blank page when loading threads, but it's not a big deal.

Good job vB!

[Floris]

Upgraded to 3.0.8 from 3.0.7 and working fine, however the "Don't display [img] in quotes" hack is no longer working with this release, as it causes a blank page when loading threads, but it's not a big deal.

Good job vB!
Re-applying the source code changes should make the resource work again.

[pco]

Quoting from the announcement:



Replaced
HTML Code:

<a href="profile.php?$session[sessionurl]do=joingroup&usergroupid=$usergroup[usergroupid]">$vbphrase[join_group]</a>
with
HTML Code:

<a href="profile.php?$session[sessionurl]do=joingroup&usergroupid=$usergroup[usergroupid]">$vbphrase[join_group]</a>


Is it me or is it late??? :confused:

[egyptsons]

Thanks I will try to upgrade soon
:)

[talkhost]

This was kinda unexpected!!!
I logged in to my admin area to see that 3.0.8 had been released. Is there some sort of security issue that means we need to upgrade? I've been following the releases of 3.5 and planned upgrading when the stable version was released.
Sorry if this has already been answered. I didn't read thise whole thread...

[Creepshow]

Cool, thanks vB! I've just upgraded to 3.0.8 & everything went smooth as silk. :cool:

Thanks again! :) :) :D

[zkilzz]

How long did the first step take? Mine has taken 15 minutes and counting.. I ca 1 gig attachment DB.

Altering attachment Table (1 of 2)


Regards

Marius

[Shining Arcanine]

Kier, you didn't say if modifyusergroups_memberbit requires a revert.

[Squee]

Upgrade went flawlessly (even with annoying hacks), as usual. Though, if there's a change that affects a LOT of templates like the <title> one, could you please list out the templates in the future? It would be really helpful as I like to go down the list of modified templates as I'm updating...It was irking me somewhat that I had these templates that weren't on the announcement list and had to assume it was just the <title> change...

[Floris]

This was kinda unexpected!!!
I logged in to my admin area to see that 3.0.8 had been released. Is there some sort of security issue that means we need to upgrade? I've been following the releases of 3.5 and planned upgrading when the stable version was released.
Sorry if this has already been answered. I didn't read thise whole thread...
No, you do not have to upgrade your 3.0.x version to 3.0.8 if you want to wait for 3.5.0, but at least upload the 2 patched files from the announcement's .zip

[Natch]

Has anyone composed a RegEx to modify all temapltes to switch position of $headinclude and <title>(.*)</title>

[TCM]

This was... unexpected. :P

[Reeve of Shinra]

I think we were all caught by surprise! hahaha

[tribedude]

We are finally about to migrate from 2.37 this weekend. I have been putting it off until i was sure other large boards were using it successfully because it is going to be a big move for us...

My question is do we go from 2.37 -> 3.08 or do we have to go from 2.37 -> 3.07 and then patch that to 3.08?


Also, it seems like you guys are devoting more & more time to 3.5x and are going to release that soon.... Wouldn't it be a wiser move for us to continue using 2.37 and go directly to 3.5x when it is released, skipping a generation?

I am dreading this upgrade and I would hate to have to traumatise our users with new interfaces by doing major upgrades twice in a year...

[Floris]

We are finally about to migrate from 2.37 this weekend. I have been putting it off until i was sure other large boards were using it successfully because it is going to be a big move for us...

My question is do we go from 2.37 -> 3.08 or do we have to go from 2.37 -> 3.07 and then patch that to 3.08?


Also, it seems like you guys are devoting more & more time to 3.5x and are going to release that soon.... Wouldn't it be a wiser move for us to continue using 2.37 and go directly to 3.5x when it is released, skipping a generation?

I am dreading this upgrade and I would hate to have to traumatise our users with new interfaces by doing major upgrades twice in a year...
Nope, get 3.0.8 and run upgrade.php
And yes, you could perhaps better wait (because you have a big forum) and skip 3.0 and go to 3.5 instead later on.

[c0bra]

You have to use the zip file for that particular license. You cannot shares the files between licenses.

You could just use mass-replace software to automatically replace all references of license number A with licenser number B right in the scripts? I assume there's a simple purpose to having the appropriate license number in the scripts; you use it to call home and check against piracy for each site running the software.

[c0bra]

Note that the instructions also talk about another action:



I'm using the patch method, since I'd rather not upgrade until 3.5 gold, so this is this the easy way to update the templates, to avoid editing all of them:

Side effect: All your templates will be marked as modified.

0. You might want to shut down your forum until the replacement is complete.

1. Use template search and replace box:

Search for Text:
$headinclude Replace with Text: nothing (leave empty)

Check no for "Test Replacement Only"
Check no for "Use Regular Expressions"

Click find and wait until complete

2. Use template search and replace box:

Search for Text:
<title> Replace with Text:
<title>
$headinclude
Check no for "Test Replacement Only"
Check no for "Use Regular Expressions"

Click find and wait until complete

3. You're done. :)

Thanks mate. This useful hint should definitely be posted in the announcements forum to help everyone else. :)

[MonkeyJoe]

Thinks I messed up board at www.dadownloads.com with upgrade thingy :(

[confusion09]

Are there manual directions for upgrading 3.0.8? I'd really hate to have to re-install hacks :(.

[Floris]

Thinks I messed up board at www.dadownloads.com with upgrade thingy :(
Please post support issues in the appropiate forum. Thank you.

[Floris]

Are there manual directions for upgrading 3.0.8? I'd really hate to have to re-install hacks :(.
If you do not want to upgrade, but only want to patch your current 3.0.x version, this is what you do:

Do not download the .zip from the members area, do not run upgrade scripts.
Get the vb308_patch.zip from the announcement and unpack it, then upload those files to your web server, overwriting (do not skip or resume, but really overwrite) the files already there (faq.php and private.php). This will patch your current 3.0.x release. And then you're done.

If you have any hacks installed that apply to faq/private files, re-apply those changes, and you're done. This saves you having to do a full upgrade and going through all manual changes.

[Steve Machol]

Are there manual directions for upgrading 3.0.8? I'd really hate to have to re-install hacks :(.
Upgrading always overwrite hacks. You will need to reapply these. The upgrade instructions are the same as always: upload the 3.0.8 files and run install/upgrade.php.

[steven s]

Are there manual directions for upgrading 3.0.8? I'd really hate to have to re-install hacks :(.Did you read the first post? If you want you can copy over 2 files if you do not want to do a complete upgrade. I keep a list of my hacks and mods and reapply the latest versions of each whenever I upgrade. It's not that difficult. I'm choosing to wait for 3.5 Gold.

[fms]

If you do not want to upgrade, but only want to patch your current 3.0.x version, this is what you do

Thanks Floris for your always helpful posts. I'm glad to patch while I wait for 3.5 Gold. :)

[tribedude]

Nope, get 3.0.8 and run upgrade.php
And yes, you could perhaps better wait (because you have a big forum) and skip 3.0 and go to 3.5 instead later on.

grrrrrrrrr. here i psyched up my whole community, lined up all the tech guys in a row, sent out piles of admin notices about the upgrade!

You guys!:mad:

releasing 2 major new versions so close together is not altogether the best thing for admins like me whose occasional upgrades are a major deal...

More questions:

is 3.5 so much different than 3.x? It looks similar cosmetically...

will the upgrade path from 2.37 to 3.5 (when it is released) be smooth and reliable for large boards like mine?

[Floris]

I never said that 3.5 will be here 'soon', you said that you expect it to be close to 3.0.8 and didn't want to upgrade close together. If you don't want to stress your community with multiple upgrades my advise is to wait for 3.5 When it will be out is unknown. Currently we are at RC1, what is closer to a stable release then a beta 2 or 3..

[tribedude]

I never said that 3.5 will be here 'soon', you said that you expect it to be close to 3.0.8 and didn't want to upgrade close together. If you don't want to stress your community with multiple upgrades my advise is to wait for 3.5 When it will be out is unknown. Currently we are at RC1, what is closer to a stable release then a beta 2 or 3..

Well I guess I will wait till you release 3.5 then, moving up a version to 3.0 for me has no value right now except hours of hard work, weeks of learning the new template and styles formats, weeks of tweaking, agonizing over minor template changes, and answering thousands of "how do i do post pics of my cat with the new board software..." PMs from the membership. I've waited this long, some more won't be all that bad...

jus call me old skool 2.37 from now on...

[Tantawi]

Re-applying the source code changes should make the resource work again.
That's exactly what I did :cool: and the code isn't compatible anymore.

Thanks.

[ItsJustMe]

Okay, I know this is a terribly newbie question, but I'm new to vBulletin, so please be gentle. :o If you changed the names of your admincp folder and modcp folder when installing 3.0.7 as was recommended for security reasons, will that effect the upgrade? Do I need to change anything before I install/upgrade 3.0.8? Thanks for your help! :)

BTW, I couldn't believe how easy it was to install 3.0.7. Your documentation is wonderful, even for a newbie like me. :)

[Reeve of Shinra]

Did you guys forget a file? Kier listed admincp/reminder.php as a file that was updated but there is no reminder.php in the 3.0.8 download.

[GsxrTony]

Thanks guys, just upgraded.

[Mike Sullivan]

Did you guys forget a file? Kier listed admincp/reminder.php as a file that was updated but there is no reminder.php in the 3.0.8 download.
Just a mistake in the announcement.

[LOTR]

Note that the instructions also talk about another action:



I'm using the patch method, since I'd rather not upgrade until 3.5 gold, so this is this the easy way to update the templates, to avoid editing all of them:

Side effect: All your templates will be marked as modified.

0. You might want to shut down your forum until the replacement is complete.

1. Use template search and replace box:

Search for Text:
$headinclude
Replace with Text: nothing (leave empty)

Check no for "Test Replacement Only"
Check no for "Use Regular Expressions"

Click find and wait until complete

2. Use template search and replace box:

Search for Text:
<title>
Replace with Text:
<title>
$headinclude

Check no for "Test Replacement Only"
Check no for "Use Regular Expressions"

Click find and wait until complete

3. You're done. :)


Im using your method and all my templates are now messed up (css, js are not showing up on the forum/templates), how do i revert i back to the original? So the $headinclude will be back on the respective templates?

Example 1: Before use the 'Search/Replace'

$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
<head>
<meta name="description" content="$foruminfo[description]" />
<title>$vboptions[bbtitle] - $foruminfo[title]</title>
$headinclude
</head>
<body>
$header
$navbar

Example 1: After Use the 'Search/Replace'

$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
<head>
<meta name="description" content="$foruminfo[description]" />
<title>$vboptions[bbtitle] - $foruminfo[title]</title>
NO headinclude
</head>
<body>
$header
$navbar

---


Example 2: Before use the 'Search/Replace'

$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
<head>
<title>
$vboptions[bbtitle]</title>
$headinclude
</head>
<body>
$header

$navbar

Example 2: After Use the 'Search/Replace'

$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
<head>
<title>
$headinclude$vboptions[bbtitle]</title>

</head>
<body>
$header

$navbar

[]SK[]

Are there manual directions for upgrading 3.0.8? I'd really hate to have to re-install hacks :(.

Which is why I ditched all hacks. Upgrading is now a 5 minute process.

[dreamer81]

im just gonna patch my 3.0.7 :D

[dreamer81]

SK[']Which is why I ditched all hacks. Upgrading is now a 5 minute process.

yeah if u have ur own server it is

[]SK[]

I do but then I dont see why that helps. I still only used FTP and Firefox to do the upgrade.

[Onimua]

yeah if u have ur own server it is

It's a five-minute job for me too, and I don't own my own server.

[islelove]

LOTR

Same problem Happened to my forum, and I had it fixed by doing the same steps changing the search in this order

Search for Text:


<title>


$headinclude


Replace with Text:


$headinclude
<title>


And it worked fine

[dreamer81]

well if you dont have your own server, and you need to backup a database you will most probably get an sql dump file larger than 50mb.

phpmyadmin doesn't allow that big of a file. So in case something goes wrong and you need to recover, you are in big trouble.

If you have your own server, you will have shell acess and can recover through the shell.

All this because it's not possible to recover from the admincp, with an sql dump file located on the server somewhere.

[Grover]

Hi,

Kies says this:



All Templates Containing <title>

In order to work around an XSS bug in Internet Explorer, wherever a page contains <title> tags, the <title> has been moved below the $headinclude section.

Requires revert? Technically yes, but I suggest you just make the changes manually to any affected templates.

This puzzles me a little. What is the reason we are adviced to make the changes manually? Can this also all be done automatically?

Since I am using a testboard and experience problems with the above mentioned corrupted avatars and pictures, I would like to fully upgrade to VB 3.0.8, but I am not sure what to do with the template-revert procedure now.

[steven s]

well if you dont have your own server, and you need to backup a database you will most probably get an sql dump file larger than 50mb.

phpmyadmin doesn't allow that big of a file. So in case something goes wrong and you need to recover, you are in big trouble.

If you have your own server, you will have shell acess and can recover through the shell.

All this because it's not possible to recover from the admincp, with an sql dump file located on the server somewhere.
If all you have is phpMyAdmin there is
http://www.ozerov.de/bigdump.php

[LOTR]

LOTR

Same problem Happened to my forum, and I had it fixed by doing the same steps changing the search in this order

Search for Text:


<title>


$headinclude


Replace with Text:


$headinclude
<title>


And it worked fine



Thanks for the tips, but somehow now it became :-


$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
<head>
$headinclude
<title> <title>
$headinclude
<title>$vboptions[bbtitle]</title>

All double now on all the respective templates. Anyway one of my skins now has corrupted, the css,stylevars setting somehow is missing. $crap... i've submit a support ticket 5 hours ago, but till now no reply.

[zachlee]

just patched my 3.0.7 board, but in admincp still shows up as I am running 3.0.7

I know I overwrote the old faq.php and private.php files, should I be concerned by this?

[ghali]

Woopeh, upgraded. Tnx

[Trevor Hannant]

just patched my 3.0.7 board, but in admincp still shows up as I am running 3.0.7

I know I overwrote the old faq.php and private.php files, should I be concerned by this?

You haven't upgraded, just replaced a couple of files so technically you're still running 3.0.7.

[zachlee]

You haven't upgraded, just replaced a couple of files so technically you're still running 3.0.7.

I can live with 'minor bugs' especially since not having any trouble (or complaints) *knocks on wood*

Too close to 3.5 release to upgrade then reinstall all hacks plus all template mods, etc etc.

[King Kovifor]

I think I'll force Myth to patch to not disrupt any hacks. If they are in one of the files to transfer the hacks over. I'll to template fixes though.

[tamarian]

Thanks for the tips, but somehow now it became :-


$stylevar[htmldoctype]
<html dir="$stylevar[textdirection]" lang="$stylevar[languagecode]">
<head>
$headinclude
<title> <title>
$headinclude
<title>$vboptions[bbtitle]</title>
All double now on all the respective templates. Anyway one of my skins now has corrupted, the css,stylevars setting somehow is missing. $crap... i've submit a support ticket 5 hours ago, but till now no reply.

If it's still like this, just replace:

<title> <title>
$headinclude
with nothing.

[fablau]

Hello here. I have a question: I have several modifications to my 3.0.7 vBulletin forums. Can I upgrade to this new release? If yes, how?

Thanks in advance.

Sincerely,
Fab.

[CHIngs]

In this post http://www.vbulletin.com/forum/showpost.php?p=928141&postcount=2 it says that those file (in that post) have been changed. I just want to make something i clear for myself. Do you mean there are actual changes done to those php files. Like for example, because you are asking me to overwrite the patched files, but not asking to overwrite the changed files, that is where I am in a little confusion. What is the difference between patched files and changed files?

[~Xcalibur~]

Used the patch and overwrote the two files, so far no problems.....heck I can't even tell I did anything, lol, unless I go look at those two php files. ;)

[weirdpixels]

upgraded, with no problems :)

[fablau]

Did you have any modification?

Thanks.

Fab.

[weirdpixels]

Yea, I re-applied all the code edits for this new version

[~Xcalibur~]

The patching did not interfere at all with my mods. ..... I am holding out for the 3.5 Gold. lol Shouldn't be much longer I would think. ;)

[Fusion]

There'll be another RC judging by the reported bugs.. ;)

[SaN-DeeP]

Is this a major/important release ?
I meant, do we really need to upgrade our forums ?

[serc]

So if i install 3.0.8 I will lose all my mods and they wont be compatible with 3.0.8?

[Steve Machol]

Upgrading will always overwrite any hacks or changes you made to the vB files. However it will not overwrite custom templates. Nonetheless you should seriously consider reverting any updated templates to get the full advantage of all bug fixes and improvements.

[serc]

Thanks. I think I'll wait until 3.5 before upgrading.

[greenhybrid]

I'm running 3.0.7 and have some mods that I haven't touched in a while. I'm a little worried about messing things up with 3.0.8. I see there's a "patch" with only two files: private.php and faq.php. Can I just use these two new files and not worry about the others? I don't seem to be having any issues with my forum, but want to make sure I'm up-to-date on security. Thanks in advance!

[cnutter]

It took longer to upload the files than to run the update.... thanx and keep up the good work. I'm looking forward to 3.5.0 gold...

[SixthSense]

Hi there.
I have:

Uploaded patch files - overwriting exsiting files of course.
Re-ordered the <title>blah blah blah</title> and $headinclude.
Removed div tag that contains removing this user from your ignore list in postbit_ignore_global template.
Added </td> to their correct lines. a. Now I'm stuck with editing modifyusergroups template. So how/where do I add the form and what will it look like in the final shape?
b. Do I have to revert postbit_ignore_global template if I didn't add the form?

[SixthSense]

It took longer to upload the files than to run the update.... thanx and keep up the good work. I'm looking forward to 3.5.0 gold...
You can just upload the two patch files and overwrite the existing file.
You don't need to upgrade as stated many times in this thread ;).

[cnutter]

You can just upload the two patch files and overwrite the existing file.
You don't need to upgrade as stated many times in this thread ;).


Yes, I know that but whats the fun in that? :rolleyes:

[GearTripper]

upgrade took about 10 minutes - kewl.

[flash7]

Hello,

upgraded from 3.0.7 to 3.0.8 and now the login is corrupt over all my site.
What was changed in this version???

Thanks

[alamuae]

After the last forum revolution: vBulletin Version 3.0.8

we have a problem in it. If any one submits his\her reply, the page will stop for minutes & disappears after that. Also, this happen when submitting a new page, a new reply or a private message. In addition, I have to sign in the forum each time I open it. This is happening with all the users. Note: I'm using the Last version of the internet Explorer

[flash7]

Hello,

upgraded from 3.0.7 to 3.0.8 and now the login is corrupt over all my site.
What was changed in this version???

Thanks
OK OK, problem FIXED :D

[Grover]

Hi, I am still a little puzzled by these manual-change things.

Kies says this:



All Templates Containing <title>

In order to work around an XSS bug in Internet Explorer, wherever a page contains <title> tags, the <title> has been moved below the $headinclude section.

Requires revert? Technically yes, but I suggest you just make the changes manually to any affected templates.
This puzzles me a little. What is the reason we are adviced to make the changes manually? Can this also all be done automatically?

Since I am using a testboard and experience problems with the above mentioned corrupted avatars and pictures, I would like to fully upgrade to VB 3.0.8, but I am not sure what to do with the template-revert procedure now.

So.... instead of making changes manually I would like to know from someone if it can skip this manually-change part and do it all automatically by just reverting all my templates?

Thanks for any help,

[marsauae]

After the last forum revolution: vBulletin Version 3.0.8

we have a problem in it. If any one submits his\her reply, the page will stop for minutes & disappears after that. Also, this happen when submitting a new page, a new reply or a private message. In addition, I have to sign in the forum each time I open it. This is happening with all the users. Note: I'm using the Last version of the internet Explorer
same problem alamuae :(
icant add newreply & newthread afer upgrade to 3.0.8

[gregsbaby64]

I upgraded this morning, all went well after I applied a few things to the index.php. :) I'm glad I backed everything up!

No problems so far with anything.

[Grover]

Hi, I am still a little puzzled by these manual-change things.

Thanks for any help,

Never mind, I guess I was thinking to difficult when reading the Announcement. I went on with it and during the process I realized that most of my templates did not need any revert and I made some manual changes on 2 of them, using Beyond Compare.

All went well and I am now using 3.0.8. Now I can backup and import my live database into my test database without being confronted by corrupted Avatars and stuff. Thanks for fixing this issue, btw!

[sleepyk]

i know i edited quite a few files but screw it i'll let it go then edit what needed afterwards, but will i have temp errors cuz some would be overwritten?

ima upgrade about 2 hrs

[Tantawi]

i know i edited quite a few files but screw it i'll let it go then edit what needed afterwards, but will i have temp errors cuz some would be overwritten?

ima upgrade about 2 hrs

I would recommend closing your board until you update it.

[technoguy]

Good job :)

[]SK[]

I notice there's an update for functions.php. I don't get the error described so is it worth updating my forum's functions.php file just in case?

[feldon23]

SK[']I notice there's an update for functions.php. I don't get the error described so is it worth updating my forum's functions.php file just in case?
No.

[BoYagoob]

Some Questions:

1- Can I modify these templates:
http://www.vbulletin.com/forum/showpost.php?p=928143&postcount=3
Before I run the "upgrade.php" to upgrade to 3.0.8?


2- For this:

modifyusergroups_nonmemberbit

Replaced
HTML Code:
<a href="profile.php?$session[sessionurl]do=joingroup&usergroupid=$usergroup[usergroupid]">$vbphrase[join_group]</a>with
HTML Code:
<a href="profile.php?$session[sessionurl]do=joingroup&usergroupid=$usergroup[usergroupid]">$vbphrase[join_group]</a>
Requires revert? Yes
Do I need to revert it if I change it manually?

.
.

Thanks.

[MajorFm.com]

seems i found another bug on a test board, when you create a new calender, everything seems fine but it doesnt create, no matter what you do, you cannot create a new calender...??????

[Steve Machol]

seems i found another bug on a test board, when you create a new calender, everything seems fine but it doesnt create, no matter what you do, you cannot create a new calender...??????
Bug: http://www.vbulletin.com/forum/bugs.php?do=view&bugid=4117

[MajorFm.com]

thanks! is there a Recurring Event issue aswell? i keep adding a Recurring Event but it doesnt seem to want to work?

[SilverBoy]

Hi, I upgraded and every thing went good.

but I lost the setting groups of 2 hacks, I dont know why !!!

[Colin F]

You should ask for hack support at vbulletin.org

[dwh]

I've seen these XSS issues for many versions now, so I suppose it's a good time to finally ask, what the hell is XSS? And what kinds of issues occur if you don't fix it? In particular the $headinclude thing. Because I have TONS of custom templates and this would be many hours work. But if I don't do it, when I upgrade, I'll probably forget to do it. Also, today I had someone circumvent forum permissions on a server so I was wondering if it could be related.

[feldon23]

Wish I knew what hackers were capable of doing due to these vulnerabilities.

[Lottis]

Puh,it was a long time since i have done a upgrade, so i was quite nervois. ;)
But it went smooth.

[insomniia]

nice :)

[dwh]

Just looked around a bit. I thought XSS was like CSS and that it was part of the protocol of the pages we were delivering :) And that some of the code being dynamic in nature turned out not to be 100% xss compatible :) It turns out XSS is a short way of saying Cross Site Scripting. Which means javascript injection and the like. This is scary. I hope some major change will happen on the browser end of things to ensure that this doesn't become rampant.

[Lottis]

I am not impressed by 0.8 . There is to many issues so fare. I regret that i did the upgrade and just did the patch.

[]SK[]

I am not impressed by 0.8 . There is to many issues so fare. I regret that i did the upgrade and just did the patch.

Such as? If you found problems within the software you should report them to the vB team.

Personally, 3.0.8 works without any problems.

[Lottis]

I have done that. ;) First i had troubel with that the forum hang and they couldent post long message ore quote. Then PMs wont be send, and then wont thread be marked as read. This is fore now.

[sensimilla]

I've seen these XSS issues for many versions now, so I suppose it's a good time to finally ask, what the hell is XSS? And what kinds of issues occur if you don't fix it? In particular the $headinclude thing. Because I have TONS of custom templates and this would be many hours work. But if I don't do it, when I upgrade, I'll probably forget to do it. Also, today I had someone circumvent forum permissions on a server so I was wondering if it could be related.

XSS = cross site scripting
u are using malicious code located on another hoster that allows you to execute shell commands on attacked server
php inclusion is similar..

most of these are php issues not vbulletin particulary
phpBB and IPB are full of vulnerabilities too.. not all of them are public

hope this helps

[]SK[]

I have done that. ;) First i had troubel with that the forum hang and they couldent post long message ore quote. Then PMs wont be send, and then wont thread be marked as read. This is fore now.

Sounds like a host problem. If these didn't work for others im sure there would be more than you saying so.

[Lottis]

I think there are others here, also with the same problems.

[cool_b_return]

Good job

[feldon23]

I think there are others here, also with the same problems.
Have you modified any of the posting templates?

[Lottis]

I only have one templates. But im not quite shure what you meen?

[feldon23]

I only have one templates. But im not quite shure what you meen?
vBulletin uses nearly 150 templates to display the forum. Maybe you are referring to having only 1 style-- the default style?

Have you ever gone into Styles & Templates -> Style Manager and pulled down the popup menu to Edit Templates and made changes to any of the templates there?

If so, realize that when you change a template, that template is then frozen in time and will not be updated by a software upgrade. So if you change a template at 3.0.1, even if you are running vBulletin 3.0.8, that template is still stuck at 3.0.1.

[Lottis]

Aha, I see. I dident know that Feldon. But all my templates is updated according to the control panel. Thank you fore a very helpfull answer. :)

[CHIngs]

BUG? ERROR? TYPO?

I was editing files from 3.0.7 to 3.0.8 and in 3.0.8 version of functions_online.php LINE 83 I found

$searchuserid = $wol_search["$searchid"]['userid'];;

and in 3.0.7 version it was

$searchuserid = $wol_search["$searchid"]['userid'];

The only difference is the
;; at the end of the line in version 3.0.8

I have been seeing this in ALOT of places, is this an error or do I really need 2
;; ?

[Steve Machol]

Please start a new thread for problems and troubleshooting issues.

[welo]

Just upgraded my test board from 3.0.7 to RC2, and am confirming the upgrade script chokes if you haven't already upgraded to 3.0.8 first.

[iloco]

I sure hope this gets fixed before I upgrade to 3.5 gold.
I am using 3.0.7 with the patch that had the two files to upload. I didn't do the 3.0.8 upgrade because was waiting for vbb 3.5 Gold.

[m_gafri_y]

When you upgrade to 3.0.8, any templates you modified at 3.0.7 will stay the same. The 3.0.8 templates will be "suppressed" until you click Revert.

[m_gafri_y]

You may not post new threads

[poolking]

I am not impressed by 0.8 . There is to many issues so fare. I regret that i did the upgrade and just did the patch.

You do realise that the 3.0.x branch are just bug fixes? Just as much 2.3.x are now maintenance releases.

[Rob-Morgan]

Upgrade from 3.0.7 completed!

[sensimilla]

Upgrade from 3.0.7 completed!

www.forumfile.com << seems it didnt worked fine ? :o

[]SK[]

Seems you don't know what your doing?

[Trevor Hannant]

Upgraded from 3.0.6 fine.

Now for 3.5.........;)

[lilsnatch770]

sweet.......

[Bailx]

could someone tell me if i run those listed queries, and keep on running 3.0.7.... will it then function properly with mysql 4.1x, or because of the older 3.0.7 files will it "eventually" lead back to corruption?

i have a ton of hacks installed and my 3.0.8 upgrade is going poorly... so i thought i'd go with a quick-fix for the time being.... especially since i'd probably want to go to 3.5x someday...

any help appreciated.

[G.I.JOE*MFA*]

one thing i noticed though i dont think anyone else has or i missed it im upgraded to v3.0.8 but it still displays 3.0.6 as the latest version

[feldon23]

Did you actually install vB3.0.8, or just drop in the security patch?

[ConVoi]

www.forumfile.com (http://www.forumfile.com) << seems it didnt worked fine ? :o
http://www.forumfile.com/postinfo.html - worked fine! :D

[mholtum]

http://www.forumfile.com/postinfo.html - worked fine! :D

Sure it did... :eek:




Web Publishing Information

The HTML comments in this page contain the configurationinformation that allows users to edit pages in your web using the Microsoft Web Publishing Wizard or programs which use the Microsoft Web Publishing Wizard such as FrontPad using the same username and password they would use if they were authoring with Microsoft FrontPage. Please refer to the Microsoft's Internet SDK for more information on the Web Publishing Wizard APIs.

[G.I.JOE*MFA*]

Did you actually install vB3.0.8, or just drop in the security patch?


guess i dropped in the security patch...thats the only link i got when i went to downloads

[Scribbller]

guess i dropped in the security patch...thats the only link i got when i went to downloads

Well you can change your version number to latest one by adding the $debug = 1; at the end of your config.php file then change your version number through admin cp.

[klusek37]

Good Job :)

[ahmed-samara]

Good Job:)

[White Bear]

I upgraded to 3.0.8 last night but still have problems with the jpg and gif files. Upgrade seemed to install normal, no issues. But, no effect on the problems caused when my host server upgraded to mySQL 4.1 .

Anyone have ideas on what to do next ??

[Grover]

I upgraded to 3.0.8 last night but still have problems with the jpg and gif files. Upgrade seemed to install normal, no issues. But, no effect on the problems caused when my host server upgraded to mySQL 4.1 .

Anyone have ideas on what to do next ??

You mean Avatars/profile pictures?

[todd222222]

Ok I have a fairly busy site with some hacks installed, nothing major.

I don't fully understand the template section, expecially the 'revert' comments.

So what should I do? I see earlier in this thread that the system will not see the 3.0.8 templates until I select 'revert'...I don't understand. I've modified maybe 15 templates. Should I just take all of those and save them in notepad, do the upgrade and then merge my changes back in?

Can anyone provide some clarification and maybe a semple step by step procedure. I do plan to do htis on my test box first so if no one does it's not a big deal. I'm sure I'll figure it out.

Thanks!
Todd

[feldon23]

Should I just take all of those and save them in notepad, do the upgrade and then merge my changes back in? Pretty close. Actually, vBulletin 3.5 has a Template History feature which lets you compare side-by-side on-screen different versions of the same template. This may make things even easier!


When you upgrade from vB3.0.8 to vB3.5.x, any templates that you have edited are frozen in time at the version you edited them. For instance, if you modified the SHOWTHREAD template in vB3.0.8, then when you upgrade to vB3.5.x, vBulletin will still try to use the old 3.0.8 version of that SHOWTHREAD template and exhibit many bugs. If you 'Revert' the template, it will simply remove your customizations and use the default 3.5.x template.

The most critical templates are the ones for posting new threads and replying to existing threads. These were basically rewritten from scratch, so you would not want to try to run in a hybrid 3.0.8/3.5.x scenario as users would basically be unable to post!

[White Bear]

I upgraded to 3.0.8 last night but still have problems with the jpg and gif files. Upgrade seemed to install normal, no issues. But, no effect on the problems caused when my host server upgraded to mySQL 4.1 .

Anyone have ideas on what to do next ??

All photo files, including attachments.

[Grover]

All photo files, including attachments.

I know this is not a troubleshooting forum, but .... you are still experiencing troubles with avatars also? I have the same problem apparently...:(

[White Bear]

Yes, the problem includes avatars. But, not all of them.

Sorry, if I got this in the wrong forum.

[Grover]

Yes, the problem includes avatars. But, not all of them. I have got the exact same problem : http://www.vbulletin.com/forum/showpost.php?p=932006&postcount=32

I will try and backup my 3.0.8 again and import it in a clean database and then upgrade to RC3 and see what happensss....

[White Bear]

Grover,

Let us know, if that fixes the problem. I'll follow your lead, if it does.

[Mike Sullivan]

Please continue discussions in the 3.0.9 release thread:
http://www.vbulletin.com/forum/showthread.php?t=153884