vBulletin 3.0.10 Release Discussion [Archive]

View Full Version : vBulletin 3.0.10 Release Discussion

Kier

Tue 1st Nov '05, 9:52pm

This thread is for discussing the release of vBulletin 3.0.10.

Please use this thread to talk about things you like or installation experiences etc., but please do not use this thread to post troubleshooting queries or bug reports. These threads tend to grow very large and bug reports etc. tend to become lost and will not get attention from the support or development teams.

For troubleshooting and bug reporting, please use either the vBulletin 3 Bug Tracker (http://www.vbulletin.com/forum/bugs.php?) for reporting and tracking bugs, or the vBulletin 3.0 forums (http://www.vbulletin.com/forum/forumdisplay.php?f=54) for general queries and troubleshooting.

Carrie Anderson

Tue 1st Nov '05, 10:10pm

"Patch files for vBulletin 3.5.x, 3.0.x and 2.3.x are attached to this thread..." :confused:

totenmaske

Tue 1st Nov '05, 10:17pm

And I thought maybe I was the only one that couldn't find them...

Mike Sullivan

Tue 1st Nov '05, 10:20pm

*whistles innocently* :)

There now.

PitchouneN64ngc

Tue 1st Nov '05, 10:27pm

Thank you for this release :)

Carrie Anderson

Tue 1st Nov '05, 10:52pm

Cool, any vB propers see an issue with using these latest patched files on 3.0.7, which contains all prior official patches?

Mike Sullivan

Tue 1st Nov '05, 11:02pm

Cool, any vB propers see an issue with using these latest patched files on 3.0.7, which contains all prior official patches?
Don't see why it'd be a problem but I haven't explicitly tested it.

MRGTB

Wed 2nd Nov '05, 12:14am

So how do I upgrade from 3.0.9 to 3.0.10?

Do I just upload the 3 files to the Includes folder and overwrite the ones already there. Is that all I need to do?? :confused:

PitchouneN64ngc

Wed 2nd Nov '05, 12:27am

So how do I upgrade from 3.0.9 to 3.0.10?

Do I just upload the 3 files to the Includes folder and overwrite the ones already there. Is that all I need to do?? :confused:
http://www.vbulletin.com/docs/html/upgrade :)

ChrisLM2001

Wed 2nd Nov '05, 12:30am

Oh, boy. Now got to run to that guy and request he upgrades to the latest as well (and the FF fix is a godsend!).

Chris

MRGTB

Wed 2nd Nov '05, 12:31am

http://www.vbulletin.com/docs/html/upgrade :)

Yeh, but I still don't follow. I understand if it was a fully vB 3.10 download I need to overwrite all files and run the upgrade installer. But this is just a 3 file download.

Do I just overwrite them and thats the upgrade done. Or do I still need to run some kind of upgrade script

PitchouneN64ngc

Wed 2nd Nov '05, 12:35am

MRGTB

Wed 2nd Nov '05, 12:44am

If you have downloaded the patch, you upload to your web server only the files given and all is ok :)

If you have downloaded a package from the Member's Area, you must to run the upgrade script and upload all files :)

Sorry about that, I didn't realise there was 3 patch file download and a full vB 3.10 download version in the members area. One last question, so what are the patch files for. Are they just for people who just want to fix the security issues but still display the same version number. Rather than download the whole package that will update your version to vB 3.10 in the footer

Are there other fixes in the full download that are not there in the 3 patch files.

Chroder

Wed 2nd Nov '05, 12:47am

Sorry about that, I didn't realise there was 3 patch file download and a full vB 3.10 download version in the members area. One last question, so what are the patch files for. Are they just for people who just want to fix the security issues rather than download the whole package that will update your version to vB 3.10

Are there other fixes in the full download that are not there in the 3 patch files.
Yes, the patch files only address the security issues. The package in the memebers area will bugs, too (and new features, if any).

PitchouneN64ngc

Wed 2nd Nov '05, 12:49am

Sorry about that, I didn't realise there was 3 patch file download and a full vB 3.10 download version in the members area. One last question, so what are the patch files for. Are they just for people who just want to fix the security issues but still display the same version number. Rather than download the whole package that will update your version to vB 3.10 in the footer

Are there other fixes in the full download that are not there in the 3 patch files.
The patchs files are for people who don't want to upgrade their forums (not recommanded), or for people who don't have renew their access to download vBulletin in the Member's Area and have an Owned Licence :)

There are some others fixes in the full download that are not in the patch files :)

MRGTB

Wed 2nd Nov '05, 12:50am

thanks

Oblivion Knight

Wed 2nd Nov '05, 3:27am

Wait.. Since when does Jelsoft do a .10? :p

Shouldn't this release technically be the "new" 3.1.0? Unless I'm getting forgetful in my old age.. ;)

MRGTB

Wed 2nd Nov '05, 4:18am

ha, acually your right!

Zonex

Wed 2nd Nov '05, 6:49am

.10 is the correct way to do it
.1.0 would indicate additional features
http://en.wikipedia.org/wiki/Version#Numerical

Oblivion Knight

Wed 2nd Nov '05, 7:59am

.10 is the correct way to do it
.1.0 would indicate additional features
http://en.wikipedia.org/wiki/Version#NumericalI know.. :p

However, in the past this trend has been followed. It's the first time I've seen a .10 from them, 2.2.9 jumped to 2.3.0 with no real feature gains..

welo

Wed 2nd Nov '05, 8:09am

Go figure. Last night I finally get around to upgrading from RC2 and this one shows up :D. Incidentally, I really like how it now tells you what modified templates to pay attention to after upgrade. That's an incredibly handy feature. I mean, you have no idea.

And now I find I posted this on the wrong thread too. *sigh*

EcKo^uK

Wed 2nd Nov '05, 12:19pm

nice one guys

xmlxp

Wed 2nd Nov '05, 3:51pm

contemptx

Wed 2nd Nov '05, 4:27pm

Zachery

Wed 2nd Nov '05, 4:30pm

functions_file.php patch did not work for 3.0.1 , it cuz a proplem when i try to upload an image ...i get an sql eror ,so i had to keep the old one

functions_upload.php & init.php did not cuz a problem till this moment

can any one confirm he got the same problem i had ?
Realistlicly you are way out of date and should take the time to upgrade.

feldon23

Wed 2nd Nov '05, 4:31pm

OK, i would like to patch from 3.0.9 to 3.0.10 but i have a few mods installed and overwriting my exisiting code would mean alot of work,

is there a way i can just get the code snippets which i need to chnage in each file please?Compare the two versions using Beyond Compare or Araxis Merge.

Also consider upgrading to vB3.5 which uses a Plugin system for mods/hacks which does not impact the original PHP files and makes upgrades much faster.

Scott MacVicar

Wed 2nd Nov '05, 4:50pm

functions_file.php patch did not work for 3.0.1 , it cuz a proplem when i try to upload an image ...i get an sql eror ,so i had to keep the old one

functions_upload.php & init.php did not cuz a problem till this moment

can any one confirm he got the same problem i had ?
They only work witih 2.3.4+ and 3.0.6+, i've since updated the thread to show this. You should be already running one of these versions anyway.

xmlxp

Wed 2nd Nov '05, 6:23pm

i dont think i could be able to ugrade till saturday or sunday

is there any thing i can do now such as disable any thing from admincp to limit this security hole for few days ?

Scott MacVicar

Wed 2nd Nov '05, 6:58pm

Make sure PHP is 4.4.1 and make sure template names in templates is off in the admincp.

xmlxp

Wed 2nd Nov '05, 7:06pm

Make sure PHP is 4.4.1 and make sure template names in templates is off in the admincp.

where exactly i can find tamplates names

admincp --->

Scott MacVicar

Wed 2nd Nov '05, 7:32pm

Its under vBulletin Options though I'm not sure what section, try using a search for comment

0ptima

Wed 2nd Nov '05, 10:43pm

Compare the two versions using Beyond Compare or Araxis Merge.

Thats what I did and I quickly patched my site in no time.

GearTripper

Thu 3rd Nov '05, 4:21am

upgraded the other night... took all of 5 minutes.

almqdad

Sat 5th Nov '05, 12:24am

Hi

I uploaded the patch in the right directory

then got this error

php,v $ - $Revision: 1.239.2.15 $ || ################################################## ################## \*================================================ ======================*/ ?>

I am running 3.08

luckley I had a backup

of the three patch files

whats wrong

Zonex

Sat 5th Nov '05, 12:50am

oldengine

Mon 7th Nov '05, 1:00am

Anyone run into issues with updating PHP to 4.4.1 relative to Turck MMCache causing errors?

Do you remove the Zend Engine altogether or what is the workaround?

dwh

Mon 7th Nov '05, 4:40am

Make sure PHP is 4.4.1 and make sure template names in templates is off in the admincp.

Scott,

If I understood correctly, the security update is to plug a hole in php. And upgrading to php 4.4.1 fixes the php hole.

Is the patch to fix something that remains insecure even with 4.4.1? Or is it just to be extra careful? Because if I can avoid applying the patch until upgrading to vb 3.50, I'd be real happy. Already upgraded php to 4.41.

Thank you.

oldengine

Mon 7th Nov '05, 8:12am

Applying the three patch files was simple and easy. Updating to 4.4.1 turned into a nightmare.

giuseppe

Mon 7th Nov '05, 1:00pm

Table access already has a unique index ?
Table adminhelp already has a unique index ?

that he means and that Devo Fare

dwh

Mon 7th Nov '05, 1:42pm

Applying the three patch files was simple and easy. Updating to 4.4.1 turned into a nightmare.
I got lots and lots of hacks so the opposite is true for me. 4.4.1 took 10 minutes and went off without a hitch. But sometimes it can be a pain, true.

I hope a VB official will respond to my question soon.

dwh

Mon 7th Nov '05, 5:47pm

It looks like there are 2 recent php vulnerabilities. One of them attacks phpinfo(). VB allows you to "turn on" phpinfo() to the public. I didn't look at your fix but I never thought it was a good idea to offer this feature. Why allow the public to see this unless the user knows what he's doing and decides to manually do a phpinfo?

Zachery

Mon 7th Nov '05, 5:49pm

ITs a support tool for us dwh :) and its easier than asking a user to make, upload, etc etc a file :)

dwh

Mon 7th Nov '05, 5:51pm

ITs a support tool for us dwh :) and its easier than asking a user to make, upload, etc etc a file :)
OK.

Any answer on my other question?

dwh

Tue 8th Nov '05, 3:19pm

bump

Mike Sullivan

Tue 8th Nov '05, 4:01pm

Which question?

Why allow the public to see this unless the user knows what he's doing and decides to manually do a phpinfo?
It's not on by default. Like several other settings, it's primarily used as a debugging tool.

Wayne Luke

Tue 8th Nov '05, 4:16pm

Scott,

If I understood correctly, the security update is to plug a hole in php. And upgrading to php 4.4.1 fixes the php hole.

Is the patch to fix something that remains insecure even with 4.4.1? Or is it just to be extra careful? Because if I can avoid applying the patch until upgrading to vb 3.50, I'd be real happy. Already upgraded php to 4.41.

Thank you.

It fixes a vulnerability in 4.4.0 and lower. However we still recommend you apply the patch files at least until you can upgrade.

almqdad

Tue 8th Nov '05, 4:51pm

Patch files containing only the security fixes for vBulletin 3.5.0, 3.0.6 - 3.0.9 and 2.3.4 - 2.3.7 are attached to this thread,

what about 3.0.8 is there a need for patch can I use the same patch

Wayne Luke

Tue 8th Nov '05, 5:10pm

3.0.8 would fall between 3.0.6 and 3.0.9. The patch should work for that series should work on your forums.

dwh

Tue 8th Nov '05, 5:57pm

Which question?

It's not on by default. Like several other settings, it's primarily used as a debugging tool.
Thanks Mike, I meant the other question which Wayne later answered.

dwh

Tue 8th Nov '05, 5:58pm

It fixes a vulnerability in 4.4.0 and lower. However we still recommend you apply the patch files at least until you can upgrade.
Thanks Wayne. Still just a tad confused. Is this correct: with php at 4.4.1 I'm relatively safe for now?

winkyx

Tue 8th Nov '05, 8:26pm

Please help me!! i can't play file swf in forum....:)

Mike Sullivan

Tue 8th Nov '05, 8:30pm

Thanks Wayne. Still just a tad confused. Is this correct: with php at 4.4.1 I'm relatively safe for now?
PHP 4.4.1 fixes the PHP bug we referenced. You still need the patch files to workaround the IE bug though.

dwh

Tue 8th Nov '05, 8:59pm

Thanks.

One more thing, will you make an announcement when the php 5 series is patched? And if so, which forum/thread should I watch for it?

Scipio11

Wed 9th Nov '05, 1:08am

hollyboy

Wed 9th Nov '05, 5:04am

I'm about to upgrade from 3.07 to 3.010 I am not quite sure...is there an upgrade command or do I have to install as it is a new board?

feldon23

Wed 9th Nov '05, 11:45am

Hi, I got an email saying that this was a pretty important update due to new exploits. I am currently running my forum on 3.0.7 and am wondering will this update change my skin?? I have put quite a lot of work into my skin and I would hate to loose it. Also do these new exploits really effect me? I don't allow image uploads... You can apply the security patch mentioned in the announcement.

If you do a full upgrade (uploading fresh copies of everything but the /images directory), you will lose any code hacks, but Plug-ins and your Templates/Styles will be preserved.*

*Realize that any templates that you have modified will be 'frozen in time' at the version you modified them. If you modify a template in 3.0.7, it will NOT receive any related bugfixes for that template from 3.0.8, 3.0.9, or 3.0.10 until you compare and contrast and update the template yourself manually. Not all templates are updated from one version of the software to the next and many updates are just typos and cosmetic fixes, not critical bugfixes -- see each announcement for details.

P.S. You don't allow people to post attachments, avatars, or profile pictures?

I'm about to upgrade from 3.07 to 3.010 I am not quite sure...is there an upgrade command or do I have to install as it is a new board? To do a full upgrade, download a fresh copy of vB3.0.10 excluding images and upload all these files to your forum directory. Then visit /install/upgrade.php on your forum (i.e. http://www.yourwebsite.com/forum/install/upgrade.php) (http://www.yourwebsite.com/forum/install/upgrade.php%29). Any hacks (modifications to the vB source PHP files) will be lost. I don't know your reason for sticking with vB3 (I'm considering the upgrade today), but one of the great features of vB3.5 is instead of PHP code hacks, you can download Plug-ins to extend the functionality of vB without making upgrading so difficult.

Scipio11

Thu 10th Nov '05, 5:42pm

P.S. You don't allow people to post attachments, avatars, or profile pictures?

Nope :). Its more or less an RP forum so I have a set avatar gallery, and you can hav sigs etc. but you have to host them yourself :p

Thanks for the help!

carolem

Wed 16th Nov '05, 3:23pm

Just to clarify when upgrading from 3.0.9 to 3.0.10:

It sounds like it is preferable to upload all the files (except the image files) instead of just uploading the list of files that have been changed that are listed in this post: http://www.vbulletin.com/forum/showpost.php?p=1002393&postcount=5.

Is this correct to upload all the files?

Do we lose something by only loading up the changed files?

getting ready to upgrade...
Carolem

Steve Machol

Wed 16th Nov '05, 5:35pm

You should upload ALL the 3.0.10 files except the images and install.php.

metal85

Sun 20th Nov '05, 12:46pm

how can i download Vbulletin 3.5
please give me Download Links:confused:

feldon23

Sun 20th Nov '05, 12:59pm

how can i download Vbulletin 3.5
please give me Download Links:confused:
Sure, just get a job at McDonald's.

conner_bw

Sun 20th Nov '05, 7:54pm

I am trying to download [patch_vBulletin_309.zip] but it says I don't have permission to do so...

Help?

Steve Machol

Sun 20th Nov '05, 7:57pm

You are showing up as licenced so you should be able to do this now.

carolem

Sun 20th Nov '05, 8:53pm

how can i download Vbulletin 3.5
please give me Download Links:confused:

Type in www.vbulletin.com/members in your address bar or just click on this link (www.vbulletin.com/members)
Then you will get a window to enter your customer number.

LSIntegra94

Wed 23rd Nov '05, 12:58pm

After reading all of the posts refering to PHP v 4.4.1 I'm a little confused. Do I have to upgrade to v 4.4.1? It doesn't seem that I have to. But, thought it best to ask. Currently running PHP v 4.3.11

feldon23

Wed 23rd Nov '05, 2:48pm

The patches secure vBulletin from the flaws in PHP versions prior to 4.4.1. And of course every version, even tiny point releases of vB, usually contain many other useful bugfixes.

Note that any other web script you run might be vulnerable. Upgrade to 4.4.1 as soon as you can.

Mike Sullivan

Tue 6th Dec '05, 12:54pm

Please continue in the 3.0.11 discussion thread: http://www.vbulletin.com/forum/showthread.php?t=166390