phpBB 2.0.22 released !

Administrator Anmeldungsdatum: 01.08.2002 Beiträge: 4735 Wohnort: Aachen

phpBB 2.0.22 was released today by the phpBB Group. This release addresses several bugfixes and some security issues. Language pack authors may note that one additional language variable had been added.

It is important that you carry out both parts of the update - updating the files and running the database update script - for updates to be complete.

What has changed in this release?

The changelog (contained within this release) is as follows:

[Fix] Check for user's existence prior to showing email form
[Fix] New members of moderator groups should always become moderators (Bug #382)
[Fix] Proper message when replying to non-existant topics (Bug #459)
[Fix] Changed column type of search_array to store more ids (Bug #4058)
[Fix] Fixed annoyance with font-size selector (Bug #4612)
[Fix] Fix optimize line in database updater (Bug #6186)
[Sec] Check for the avatar upload directory reinforced
[Sec] Changes to the criteria for "bad" redirection targets - kellanved
[Sec] Fixed a non-persistent XSS issue in private messaging
[Sec] Fixing possible negative start parameter - SpiderZ.
[Sec] Added session checks to various forms - kellanved

phpBB 2.0.22 Full Package
phpBB 2.0.22 Updated Files only
phpBB 2.0.22 Patch File
phpBB 2.0.21 to phpBB 2.0.22 Code Changes

phpBB2 Plus 1.53a Core Code Changes to phpBB 2.0.22 Code

phpBB 2.0.22 incl. deutschen Sprachfiles und Grafiken

am i right, that plus-users should just
use "/install/update_to_latest.php" and codechanges?

================================
Frage an den Autor:
Ich vermute, daß für Plus-User nur die "/install/update_to_latest.php und die Codechanges benutzt werden sollten - ist das so richtig?

phpBB2.de User Anmeldungsdatum: 29.01.2005 Beiträge: 183

Someone tell us if coolsoft is right to do the changes...

i tried this yesterday at a testboard:

for plus users: no way to upload - the files are for Vanilla

use manual editing.
sometimes in the codechange text: "$HTTP_GET_VARS" is used for search
plus (at my site) uses "$_GET" instead very often.

So "FIND" will be a bit tricky,

the code-line-numbers are different, too.

took a german article about that to
http://www.phpbb-professionals.de/viewtopic.php?p=32#32

phpBB2.de User Anmeldungsdatum: 13.08.2002 Beiträge: 691

Für eine Step-by-step Anleitung für Plus User wäre sicher nicht nur ich dankbar Wink

Kann uns die bitte jemand bereit stellen?

Der Link von coolsoft ist jetzt nur begrenzt hilfreich.

Die Step-by-Step Anleitung ist die phpbb-2.0.21_to_2.0.22.txt aus dem update package

phpBB2.de User Anmeldungsdatum: 27.11.2003 Beiträge: 994 Wohnort: sLOVEnia

Can someone help me with this lines.
first search.php

Code:

#-----[ FIND ]---------------------------------------------
# Line 117
$topic_days = 0;
}

$start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;

#
#-----[ AFTER, ADD ]---------------------------------------------
#
$start = ($start < 0) ? 0 : $start;

and with this

Code:

templates/subSilver/posting_body.tpl

#
#-----[ FIND ]---------------------------------------------
# Line 370
            </select>  {L_FONT_SIZE}:<select name="addbbcode20" onChange="bbfontstyle('[size=' + this.form.addbbcode20.options[this.form.addbbcode20.selectedIndex].value + ']', '[/size]')" onMouseOver="helpline('f')">

#
#-----[ REPLACE WITH ]---------------------------------------------
#
            </select>  {L_FONT_SIZE}:<select name="addbbcode20" onChange="bbfontstyle('[size=' + this.form.addbbcode20.options[this.form.addbbcode20.selectedIndex].value + ']', '[/size]');this.selectedIndex=0;" onMouseOver="helpline('f')">
               <option value="0" class="genmed">{L_FONT_SIZE}</option>

at last one there is no line like this.

Code:

viewtopic.php

#
#-----[ FIND ]---------------------------------------------
# Line 44
$post_id = intval($HTTP_GET_VARS[POST_POST_URL]);
}

$start = ( isset($HTTP_GET_VARS['start']) ) ? intval($HTTP_GET_VARS['start']) : 0;

#
#-----[ AFTER, ADD ]---------------------------------------------
#
$start = ($start < 0) ? 0 : $start;

this line was at very differend place so I jsut puted behind last line.

read this - 3 posts before!

Zitat:

tried this yesterday at a testboard:

for plus users: no way to upload - the files are for Vanilla

use manual editing.
sometimes in the codechange text: "$HTTP_GET_VARS" is used for search
plus (at my site) uses "$_GET" instead very often.

So "FIND" will be a bit tricky,

the code-line-numbers are different, too.

took a german article about that to
http://www.phpbb-professionals.de/viewtopic.php?p=32#32

Administrator Anmeldungsdatum: 01.08.2002 Beiträge: 4735 Wohnort: Aachen

Update Instructions are now also available for phpBB2 Plus 1.53a. I have updated to Announcement Topic here with the Download Link for the Update Instructions Mod.

phpBB2.de User Anmeldungsdatum: 31.07.2004 Beiträge: 129 Wohnort: Gone

Im using note & wordpad and im seeing errors from 1.53a Core Code Changes.

open
includes/usercp_register.php

Code:

#-----[ AFTER, ADD ]---------------------------------------------
#
// session id check
if ($sid == '' || $sid != $userdata['session_id'])
{
$error =粑true;
$error_msg .= ( ( isset($error_msg) ) ? '<br />' : '' ) . $lang['Session_invalid'];
}

#

$error =?true;

use a better texteditor like ultraedit, textedit or sth. like that

phpBB2.de User Anmeldungsdatum: 12.01.2004 Beiträge: 144

Weaverslave is a good one.

phpBB2.de User Anmeldungsdatum: 31.07.2004 Beiträge: 129 Wohnort: Gone

coolsoft hat folgendes geschrieben:

use a better texteditor like ultraedit, textedit or sth. like that

I just like note because its simple and free. Just warning people because you wont see any new members.

Jetlag,

You could use Notepad++, it's free and you could use it to replace the default notepad. I use it and it's very reliable for coding.

http://notepad-plus.sourceforge.net/uk/site.htm

phpBB2.de User Anmeldungsdatum: 13.08.2002 Beiträge: 691

Ich erhalte folgende Fehlermeldungen, wenn ich versuche die update to latest.php auszuführen. Wo liegt hier eigentlich der Fehler? Warum findet er die Pfade nicht?

Danke Euch für Eure Hilfe und noch ein schönes Neues Jahr!

Code:

Warning: main(./../extension.inc) [function.main]: failed to open stream: No such file or directory in /pages/d4/ba/d0004850/home/htdocs/line6forum/phpBB2/update_to_latest.php on line 46

Warning: main(./../extension.inc) [function.main]: failed to open stream: No such file or directory in /pages/d4/ba/d0004850/home/htdocs/line6forum/phpBB2/update_to_latest.php on line 46

Warning: main() [function.include]: Failed opening './../extension.inc' for inclusion (include_path='.:/usr/lib/php') in /pages/d4/ba/d0004850/home/htdocs/line6forum/phpBB2/update_to_latest.php on line 46

Warning: main(./../config.) [function.main]: failed to open stream: No such file or directory in /pages/d4/ba/d0004850/home/htdocs/line6forum/phpBB2/update_to_latest.php on line 47

Warning: main(./../config.) [function.main]: failed to open stream: No such file or directory in /pages/d4/ba/d0004850/home/htdocs/line6forum/phpBB2/update_to_latest.php on line 47

Warning: main() [function.include]: Failed opening './../config.' for inclusion (include_path='.:/usr/lib/php') in /pages/d4/ba/d0004850/home/htdocs/line6forum/phpBB2/update_to_latest.php on line 47
Please read: INSTALL.html before attempting to update.