UBB.threads 6.0.3 has been released to the Member Area.

Version 6.0.3 is a security improvement release. We have fixed some problems related to variable interpolation. It is highly recommended that
UBB.threads users upgrade to this version because malicious users could potentially manipulate board data if exploiting the security hole.

To update from 6.0.2:

Upload the below listed files over the existing files and then log into your board. Enter the admin area. Click the edit config settings link. Scroll down and click the update config.inc button.

To upgrade from older versions of UBB.threads please read the upgrade documents located here.

The updated files (from 6.0.2 to 6.0.3) are:
addfav.php
addpost.php
approvepost.php
delete.php
deletepost.php
domailthread.php
donotifymod.php
doratethread.php
editpost.php
favlinker.php
mess_handler.php
mess_reply.php
modifypost.php
newreply.php
postlist.php
printthread.php
remlinker.php
showflat.php
showthreaded.php
ubbthreads.php
ubbt.inc.php
viewmessage.php

admin/editconfig.php

Honor The Victims

[This message was edited by David Dreezer on August 15, 2002 at 04:39 PM.]

Just attempted the upgrade on a test box.

I copied the changed files as listed in the changedfiles. However, I now get lots of errors when logging in;

quote:

---

Notice: Undefined variable: magic in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 33

Notice: Undefined variable: magic in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 33

Notice: Undefined variable: magic in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 33

Notice: Undefined variable: magic in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 33

Notice: Undefined variable: magic in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 33

Notice: Undefined variable: magic in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 41

Notice: Undefined variable: HTTP_SESSION_VARS in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 47

Warning: Cannot add header information - headers already sent by (output started at D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php:33) in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 1022

Warning: Cannot add header information - headers already sent by (output started at D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php:33) in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 1026

Warning: Cannot add header information - headers already sent by (output started at D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php:33) in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 1027

Warning: Cannot add header information - headers already sent by (output started at D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php:33) in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 1028

Warning: Cannot add header information - headers already sent by (output started at D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php:33) in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 1029

---

And then on attemping to access the admin forms it kicks me out with;

quote:

---

Notice: Undefined variable: magic in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 25

Notice: Undefined variable: magic in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 41

Notice: Undefined variable: HTTP_SESSION_VARS in D:\Inetpub\wwwroot\IHIQS\ubbthreads\ubbt.inc.php on line 47

---

Using the OLD 6.0.2 ubbt.inc.php with the other 6.0.3 changed files seems to remove the errors.

Any idea what's up with this?

Adrian

Those are general notices if you have all warnings/notices turned on. I forgot to move a line up to the top of that file when this change was made. At the top of your ubbt.inc.php file you need to add this line:

// ------------------------
// Turn off high level info
error_reporting(7);

-------------------
Rick Baker
UBBThreads developer

I just tried to upgrade and it still calims 6.0.2 What did I do wrong?

...Steven

-----------
Owner of the first & only production UBB powered by MySQL.

Did you log into the control panel, click the link for edit config, then press the button on the bottom?

upload admin/editconfig?

Honor The Victims

Yes.


Update:
My bad I did not realize that you were asking to upload the file editconfig.php from the admin directory. As a first timer it sounded like I should jsut click the button at the bottom.

Working

-----------
Owner of the first & only production UBB powered by MySQL.

ok, thanks, the error_reporting seems to have done the trick.

A.

In templates/default/donotifymod.tmpl, line 26, Mnumber needs to be changed to Number. This has been reported earlier but seems to have been missed from this release.