UBB.threads PHP Forum Software Community Forums Active Threads This Week

Right, I think we are saying the same thing. Nearly no action is taken by the swarm of bots which causes the table to clear.

Two days ago I cleared the cache / emptied the table. I then waited 2 days. Today the ubbt_online table had 491,392 entries in it and the system was extremely slow. I manually cleared the cache. The table is filling right back up again. So it's not even that I can make a weekly post to stay ahead of this. I'd need to make at least a daily post / do a daily cache clear.

I will ping you giz. i don't have the time but will address this due to risk.

Thanks Issac. I am the hosting company in this instance. I would love to run just 1 version of php now and use 9.7.1 version of mysql instead of the animal cracker soup of versions on the server.

My preference is php 8.5.12 and MySql 9.7.1 gonna need to try and make it work. I can get rid of all the 10 to 15 year old stuff on the server and catch up.

PHP8.3.36 would be my general recommendation until UBB.threads v8.1.0 is released later this year (otherwise you'll have a gigantic log file full of depreciated warnings, including ones for the unreleased PHP8.6).

I do not own UBBCentral or the UBB.threads product, that is all handled by Brooks at the Support Desk; if you're looking for my 3rd party services you can contact me directly on my contact page on VNC Web Services.

As of October 21 2026, the highest version is PHP 8.5.12. There is no more higher version. Though, unlike your post assumes, the higher the version number does not mean the most recent release of a software. Previous versions of software get patched for many reasons. In this case the reason is for a security exploit, php2shell (CVE-2026-109618 and CVE-2026-109619).

The patched versions are:
• PHP 8.5.12
• PHP 8.4.27
• PHP 8.3.36
• PHP 8.2.35

From The PHP Group; Only actively supported PHP branches (8.2 and newer) receive official security fixes. Previous versions of PHP are unsupported and will not receive patches.

"PHP 8.1 and older no longer receive updates from the PHP project. Some distributions and LTS vendors provide backported fixes, so contact your vendor for details, or upgrade to a supported version"
source - https://www.php.net/

Normally this is something that your hosting company takes care of, rather than a web script provider (ubbsystems) or a third-party script support agent (gizmo). Your website hosting provider administrators must update their PHP runtime to the patched versions.

This is mandatory now with the PHP exploit. I need to run PHP V 8.5.12 or it's no go. they can hack the heck out of your server now thanks to Ai.

I have been trying for weeks to get a website I have upgraded to the lastest so I can run V8 of php but now now it has to be V8.5.12 or higher.. Right now that's the highest version. I would also like to move off of the old MySQL to version 9.7.1 too. I used to have time to devote to this but this is a friends site otherwise I would scrap it and go. To be honest I couldn't even get a fresh install done and working on version 8 either.. that is probably how out of touch I am with the product latetly

Gizmo I will pay you get it done.. I need to do it asap.

So where are we on this and can I keep the site running?

Thanks,

Mike

Luckily CloudFlare had a set of WAF rules to protect sites pretty quickly implemented; so users behind their service were safeguarded until their hosts implemented the fixes.

My servers are CentOS Stream servers so patches were pretty painless to implement through the update manager on the systems.

Hopefully everyone is patching their PHP today.

https://www.nbcnews.com/tech/security/critical-vulnerabilities-php-update-systems-rcna604751

Hello,

chiming in here: we didn't get any news since the UBB patch release 8.0.1 last year and PHP 8.3 will only be receiving security fixes until the end of 2027. So, please give us an update when we can expect a UBB release with official support for PHP 8.5?

Thank you, Michael