SMF 2.0.3, 1.1.17 and 1.0.23 security patches released

[Goodman854]

Did you download it from here?
As double check, try cleaning your browser cache and downloading the file again.

That' really strange, I tested the patch on two quite picky servers that always give me issues with packages, but that patch installed without a problem...

Strange. That worked. I used http://download.simplemachines.org/ Small Update before and didn't work.

But the file on the page you gave me worked. So thanks.

[emanuele]

Oh, no that's not strange.
The small update is not meant to be used with the package manager.

[Apllicmz]

Thank you all
good work

[jaideejung007]

Thai language, updated?

[emanuele]

The patch didn't change any language file.
The issue with language packs has been solved few days ago.

[dpylant]

I have been running 2.03 since it came out.  How do i tell if my version has the patch installed?  Thanks!

[mashby]

Hiya. Welcome to SMF.

If the footer says 2.0.3, as I think you are saying, then you are running the latest.

[vtel57]

Thank you, SMF!

It would have been more difficult to fall off a log than it was to upgrade this software. When I saw the upgrade notice in my email Inbox, I cringed... bad memories of phpBB. This upgrade could not have been simpler!

An outstanding product with fabulous support! Thanks so much SimpleMachines Forums.

Here's wishing the entire SMF staff and community a wonderful, blissful, safe, and warm Holiday Season!

~Eric
Tampa, Florida, USA

[Matthew K.]

Thank you, SMF!

It would have been more difficult to fall off a log than it was to upgrade this software. When I saw the upgrade notice in my email Inbox, I cringed... bad memories of phpBB. This upgrade could not have been simpler!

An outstanding product with fabulous support! Thanks so much SimpleMachines Forums.

Here's wishing the entire SMF staff and community a wonderful, blissful, safe, and warm Holiday Season!

~Eric
Tampa, Florida, USA

We're very glad to hear that your upgrade process went smoothly Thank you for stopping by and posting your feedback!

[dpylant]

Thank you!  Just wanted to make sure 2.03 didnt need the patch.  Happy Holidays.

[Aaron10]

I'm getting an error with security.php in 1.1.17 on line 560 (where 'else' is):

Code Select Expand

// Check the referring site - it should be the same server at least! if (isset($_SESSION['request_referer']))
$referrer = $_SESSION['request_referer'];
else
$referrer = isset($_SERVER['HTTP_REFERER']) ? @parse_url($_SERVER['HTTP_REFERER']) : array();
if (!empty($referrer['host']))

[mashby]

Need a line break there on the first line that you quoted:

Code Select Expand

// Check the referring site - it should be the same server at least!
if (isset($_SESSION['request_referer']))
$referrer = $_SESSION['request_referer'];
else
$referrer = isset($_SERVER['HTTP_REFERER']) ? @parse_url($_SERVER['HTTP_REFERER']) : array();
if (!empty($referrer['host']))

[Aaron10]

Thanks, I shouldve seen that lol

It was a direct copy and paste from here:
http://custom.simplemachines.org/upgrades/index.php?action=upgrade;file=smf_patch_1.0.23_1.1.17.tar.gz;smf_version=1.1.16

[JHF]

Well, this time you don't provide a zip file with the changed files to upload to the server, then, I have a problem, because I never was able to use the Package manager.

Install Actions
Installations actions for "SMF 1.0.23 / 1.1.17 Update":
Installing this package will perform the following actions:
   Type    Action    Description
1.    Execute Modification    smf_1-1-16_to_1-1-17_patch.mod    Modification parse error

Then, I would really appreciate any guided help you could provide. I ever preferred the old style updates by this reason. Also, because I have slightly theme changes too, so... provide any help.

Thank you.

[colas]

Hi guys, first off i installed 2.02 to 2.03 update in a few seconds from the package manager, seem to work perfect, thanks guys

I read in the changelog there are a fix for "intermittent session verification failures" but there are not more info about

In my case, i was getting random "session expired"  error, i went crazy triying to fix it (and did not get it) randomly my session expired 3 mins next to create it, sometimes 5, sometimes few seconds... and so

So is this 2.03 fix referred to this problem?

Thanks!

[emanuele]

Then, I would really appreciate any guided help you could provide. I ever preferred the old style updates by this reason. Also, because I have slightly theme changes too, so... provide any help.

mmm...so the package doesn't work for you.
You can chose:
* manual edits ( http://custom.simplemachines.org/upgrades/ )
* small update ( http://download.simplemachines.org/ ) but since you have theme changes you may want to upload only the Sources directory instead of the whole package.

I read in the changelog there are a fix for "intermittent session verification failures" but there are not more info about

In my case, i was getting random "session expired"  error, i went crazy triying to fix it (and did not get it) randomly my session expired 3 mins next to create it, sometimes 5, sometimes few seconds... and so

TBH it depends on the issue.
The fix applied will fix some but not all the issues related to the sessions.
The only thing you can do is try and if it doesn't fix yours then ask for support in the appropriate board.

[RR144]

Thanks, it installed just fine!

[JHF]

Then, I would really appreciate any guided help you could provide. I ever preferred the old style updates by this reason. Also, because I have slightly theme changes too, so... provide any help.

mmm...so the package doesn't work for you.
You can chose:
* manual edits ( http://custom.simplemachines.org/upgrades/ )

Oh, yes, I could make the manual editing, why not?, but god, the packages system never worked for me. I had those errors every time I tried any package. So, any fix to the problematic packages system? Because, for whatever reason, it doesn't work with my installations in the past (yes, in plural).

* small update ( http://download.simplemachines.org/ ) but since you have theme changes you may want to upload only the Sources directory instead of the whole package.

As far as that download is for 2.x version and I'm sticky with 1.1.16 (before I choose to do manual edits if there is not fix to packages system) that is not a valid option, I think..., is it?

I don't think is a good idea to mix things and I don't plan to make the swith from 1.1.x to 2.x yet (I know I should, but I'm not).

I'd really would like to fix packages system.

[emanuele]

Oh, yes, I could make the manual editing, why not?, but god, the packages system never worked for me. I had those errors every time I tried any package. So, any fix to the problematic packages system? Because, for whatever reason, it doesn't work with my installations in the past (yes, in plural).

Well...if the package system doesn't work at all with any mod, please open a topic in the support board so that we can discuss it there.

As far as that download is for 2.x version and I'm sticky with 1.1.16 (before I choose to do manual edits if there is not fix to packages system) that is not a valid option, I think..., is it?

I don't think is a good idea to mix things and I don't plan to make the swith from 1.1.x to 2.x yet (I know I should, but I'm not).

Looking into the "archived releases" section you will find 1.1.17 too.

[mack420]

smooth update, thanks for smf