SMF 1.1.x incompatibility with recent PHP versions (PHP5.5+)

[Shambles]

Good work, naro.

[vbgamer45]

Naro yeah I  did the same for my sites that are on SMF 1.1.x

[Arantor]

I really couldn't encourage persisting in 1.1.x support.

There is now at least one (proven) SQL injection vulnerability in the base software that will not be patched. It's possible there are more vulnerabilities that are also unpatched.

[anodi]

HI,

How to disable error log on SMF 1.1? I had 8GB database before I cleaned log table...

Need to update to 2.xx but until that would be nice to not get thousands of errors in minutes.

Thanks!

[Aleksi "Lex" Kilpinen]

Admin -> Features and Options -> Enable error logging.

Do note that disabling the error log is not a solution to the problems, it just hides them from sight.

[_sebas_]

I have extracted fixes for preg_replace(_callback) from SMF 2.0.15 into a XML mod file which I use together with my own mod for 1.1.21.
If you have your own modifications, you can add this XML file and apply it or you can create new mod with that modifications.

How do I apply it?
Can you explain something else, or give some clue?
Thank you

[Kindred]

since there are also a whole pile of security releases in 2.0 that were never applied in 1.1.21, it is recommended that you upgrade rather than trying to keep patching an outdated and sunset version...

[wattie]

Here's a fixed Subs.php from the Sources directory. There were lots of "deprecated" warnings for "create_function" in PHP 7.2. Now they are gone.

If anybody gets warnings regarding deprecated calls from other files, PM me - I have them all fixed.

[Biology Forums]

This allows for PHP 7.2?

[vbgamer45]

If your site is already updated to support php 7.1 there are some other files though.

[Kindred]

Wattie,

Unfortunately, the license for SMF 1.1.x does not allow distribution of modified source files.
It only allows modification packages which instruct the system on what changes to apply to source files.

That being said - anyone who is still using 1.1.x should really upgrade.
Although vbgamer has made mod packages with some of the updates, I am fairly certain that some of the security fixes have not been backported - and as the systems diverge more and more, it's going to be harder.

Additionally, Study Force... SMF 2.0.x doesn't support php7.2 yet - so there is no backport for that.

[wattie]

Thanks, I did not know that, sorry.

I have no much time to learn how to make it as a package. In mean time I backported some of the important CVE vulnerabilities too.

I know it's good to upgrade - no doubt in that. The reason I am keeping it is that the forum theme is not working with 2.0.x and my forum is inactive for few years - I am keeping it up for historical reasons (registration is disabled, users are gone).

I used some patch for PHP 7.1 which someone gave me some time ago. Then I patched it myself to work for PHP 7.2 because I fount it to be very easy. That's all.

[wattie]

P.S. Yes, there are other files as well. It looks like Load.php is not very trivial to fix.

[cuion]

What could be exact php version to install??

[Kindred]

don't install 1.1.x. Period.


1.1.x is end of life.

[Imago]

Trying a large upgrade from my archaic 1.1 RC3 to the last version of SMF but getting 500 error on navigating to upgrade.php.

Which version of PHP should I change to after uploading the large upgrade files. Currently the 1.1 rc3 forum works fine on php-fpm 5.3

UPDATE: OK, PHP-FPM 7.4 worked fine