UBB.threads PHP Forum Software Community Forums General Suggestions and Feedback 7.3 - footer

I have 2 litte suggestions for the footer.tpl
1) replace the hardcode powered by with wordlet
2) remove the version from footer. If a security bug found this made it not so easy to identify your running version
line 48:
change to:

One of the problems for Rick and Groupee is the fact that people remove and alter the copyright against the agreement that everyone makes when they purchase the script.

I think by putting it into the language file will make it easier for people to change the wording, whereas at the moment users have to physically alter a file.

The only way this would perhaps work is if the language file was not directly editable from the CP.

There are two sides to also displaying the version. It makes it easy to see which version is being run. I am also not sure that it is a security risk as it is the site owners responsibility to upgrade to the latest version. If owners do not update their scripts, I am not sure that Groupee can be held responsible for versions that have reached their EOL. Groupee have a responsibility to ensure that the latest version (currently 7.3) is free of any security holes, but not versions that are 2 or 3 versions old.

I am only speaking from my own thoughts on the subject, and do not know what the company line is.

the running version is shown in the admin section. This should be enough. Displaying the version public made it easy to find the propper boards using google. If you dont show the version you must try more board if you test a exploit.
Ok, its not a big thing.

Wordlet: As you see I only take the powered by. The rest is in the footer hardcode. The powered by string is also used for the browser top line while wathing the portal. This gives me the option in different languages to translate the powered by string without touching the UBBthreads™ and the link.

Whereas I'm against moving the powered by to a language file (agree with ian), I am for removing the version number for the security mention.

"Powered by" should be in the language file (agree with Zarzal lol) because in another language people might not understand what it means. Those two words have nothing to do with the copyright statement, but help them understand that it is a copyright.

I liked the old hover-over for the version number in 7.1, not sure if search engines would see it or not? It's good to know the version number another site is using if trying to debug or answer their questions, or answer our own questions... But I do get the possible security issue if a particular version might be exploitable...

Disagree as it is the copyright! The software is written and released in the English language so should remain as such.

I think it is also part of the licence that this cannot be changed, so any putting of it into the language file would go against the licence that everyone agrees to.

I might be wrong - but I do not think so

I'm inclined to agree about removing the version number - that's how phpBB hackers have found easy exploits over the years.

Yes I agree that it is the responsibility of the user to keep their boards up to date - but that's in a perfect world.

I wonder how many 7.2 users aren't aware that 7.3 has been released?

If it's okay with Rick, the version number can be placed back into the link title (shown with mouseover, as in 7.1) by using the following in the footer template:


It's not, of course, foolproof, but it could help?

Here is another point. My ISP is "Powering" the site and the site is running UBB.threads so why can't it be "Powered by me running UBB.threads"?

because you do not own the software

I believe Rick emailed everyone who runs a recent version - I know I got email's/pm's from clients wanting to upgrade that I haven't heard from in a while

Heh heh.

Actually, I deleted the last line of that post that said something like... "I bet that not everyone is on the mailing list"

Perhaps it's not an opt-in list? I don't know.

I own the server powering the software DUDE. If the software is "Powered" by UBB.threads then they better own the server.

Powered by my company RUNNING UBB.threads

If your car is "Powered by Mopar" then there is a Mopar making it go. The software ain't going anywhere without the server behind it. Put it on a usb stick and see if you can post without it in a computer.

Just a thought.

Anyway, as long as UBB.threads™ is there it is not a violation of the copyright.

My kind of humour lol

"however, the copyright and "Powered By" legends at the bottom of each page may not be removed."

https://www.ubbcentral.com/terms.php