Download phpBB 2.0.8

PhpBB is a powerful, scalable and fully customizable forum package with a user-friendly interface and effective administration features. The package is being developed in the PHP language and offers support for MySQL, MS-SQL, PostgreSQL and Access/ODBC databases for storing the data. Recently, version 2.0.8 has been released which fixes a series of vulnerabilities. The release notes look like this:

What has changed in this release?

A comprehensive changelog is included with all archives. This edition is centered on fixing a number of critical security issues.

As with 2.0.5, 2.0.6 and 2.0.7 the visual confirmation and the template caching Mods are included in the contrib directory.

Changes since 2.0.7

• Fixed several vulnerabilities in admin pages
• Fixed sid checking code in admin/pagestart.php
• Fixed injection vulnerabilities possible with the img bbcode tag
• Limited allowed images in img bbcode tag to jpg, jpeg, gif and png
• Fixed redirect problems – 2.0.7a
• Fixed sql injection vulnerability in search – 2.0.7a

[break]The following downloads are ready:
Patch from 2.0.7a to 2.0.8
full package (zip † Gzip † Bz2†