phpBB 2.0.15 released

May 8, 2005

Hi everyone,

phpBB Group announces the release of phpBB 2.0.15, the “summer needs to be hot” release. This release addresses some bugfixes and addressing some security issues, one being serious. With this release the admin re-authentication security feature from phpBB Olympus has been backported to the 2.0.x branch too.

To fix the serious issue, please apply the following code changes:

In includes/bbcode.php

Find:

{
global $lang, $bbcode_tpl;

After, add:

$text = preg_replace(‘#(script|about|applet|activex|chrome):#is’, “\1:”, $text);

Find:

*/
function make_clickable($text)
{

After, Add:

$text = preg_replace(‘#(script|about|applet|activex|chrome):#is’, “\1:”, $text);

It is highly recommended to apply the complete update though.

Posted in General