Download Phpbb 3.0.3

Yesterday version 3.0.3 of Phpbb was released. With this program it is possible to create a forum where visitors can discuss with each other. Phpbb is made available under the gpl license and uses PHP and a database program to store messages. Besides Mysql, Postgresql, Oracle, Firebird and Sqlite are also supported as database software. Version 3.0.3 contains a large number of improvements that should improve stability and performance, fix several minor bugs and also fix some security vulnerabilities. Below is an overview of the most important changes since version 3.0.2:

Fixed:

• Correctly set topic starter if first post in topic removed
• Added VST – Venezuela Standard Time
• Close DB connections in file.php.
• Correctly return results for nested cached queries
• Allow export of PM pages greater one. (#33155)
• Display colored username or last poster in list of subscribed forums (prosilver).
• Don’t jump back to page 1 when hiding member search in memberlist.
• Correctly limit input of the users location to 100 characters in the UCP and ACP.
• Sync reports when using the move all users posts tool in the ACP.
• Remove reported flag from shadow topics when closing reports.
• Do not show non indexed forums on the search page if they contain no subforums.
• Stop search bots incrementing topic views.
• Use correct link for post author search.
• Do not decrease topics counter when deleting shadow topics.
• Send localized disapproval reasons in the recipients local language.
• Do not display reported topic icon for shadow topics.
• Expand shown ban reason in unban screen to fully show long entries.
• Preserve alpha transparency for created thumbnails.
• Use correct port delimiter for MSSQL connections in windows.
• Do not allow setting forums parent to the forum itself.
• Display assigned rank/avatar for guests.
• Set secure cookie for style switcher if required.
• Fix native full text search on postgresql while using excluding keyword matches.
• Pass S_SEARCH_ACTION through append_sid() in search.php.
• Correctly handle unread status of subforums (that are not shown on the index) of forums that are shown on the index.
• Stop users from deleting posts after the edit time has passed or they have been locked.
• Split posts target forum requires ‘f_post’ now instead of ‘m_split’.
• Use a distinct log message for shadow topic deletions to differentiate between normal topic deletions.
• Fix problems with styles using an underscore within the filename.
• Better return links when deleting topics through the MCP.
• Add quoting support to PM history when composing a reply.
• Use phpBB 3.1.x method for storing cached data to prevent PHP bug with our usage of var_export(). (Thanks to Techie-Micheal and HoL for pointing out possible problems)
• Check users pm preferences for pm’s sent to groups.
• Do not allow password reminders if u_passchg permission is not given.
• Implemented strict check for cached user permissions and existing ACL options. This fix makes sure cached permissions are valid, even if they got already cached.
• Do not show link to user/group profiles if user has no permission to view the linked page and gets a denied message anyway.
• Do not display last post link and sort display options for search engines.
• Make sure users still get notifications if they set to only be notified by Jabber, but Jabber service disabled.
• Don’t show forum subscription link on categories.
• Display a message if no topics or forums are selected when unsubscribing.
• Mark/unmark all links in UCP now select/unselect both subscribed topics and forums.
• Increase board topic counter when splitting topics.
• Display profile icons when viewing a topic, or PM when only the jabber icon is to be visible.
• Do not send PMs with warnings if the user cannot read PMs or they are disabled.
• Correctly convert Niels’ Birthday MOD to the date format used in phpBB3.
• Parse BBCode lists of type square, circle and disc.
• Round the displayed percentages in polls.
• Disable mass email when email is disabled.
• Display colored poster username of queued posts displayed on the front of the MCP.
• Moderators can only see reports/queue/logs from forums they can actually read.
• Correctly display topic when start parameter is equal to the number of posts.
• Correctly display topic in MCP when start parameter is equal to or greater than the number of posts.

Changed

• No longer allow the direct use of MULTI_INSERT in sql_build_array. sql_multi_insert() must be used.
• Display warning in ACP if config.php file is left writable.
• More restrictive chmod to new files being created. (phpbb_chmod() function mostly by faw)
• Set headers to allow browsers to better cache attachments (Mylek pointed this out)
• Hide parameters if they equal the default in viewforum/viewtopic
• Various improvements to group listings
• Set headers for IE 8 in file.php
• Do not count queued posts to user_posts.
• Allow setting birth year to current year.
• Do not use the topics posted table when performing an egosearch.
• Log the forum name that topics are moved into.
• Automatically add users/groups to the PM recipient list, if entered or selected.
• Reply to PM now includes all previous recipients and not only the original sender.
• Make topic selection for merge less confusing by removing unneeded controls.
• MCP topic view checkboxes now default to unchecked.
• Adjust language key “SPLIT_AFTER” to make the action clearer.
• Add links to the post and forum when viewing a report from the MCP.
• Remove NUL-Bytes directly in request_var() for strings and within the custom DBAL sql_escape() functions (MSSQL, Firebird, Oracle) (reported by AdhostMikeSw)

Feature

• Allow limited inheritance for template sets.
• Allow hard disabling of the template editor.
• Allow setting custom language path through $user->set_custom_lang_path(). $user->lang_path now also do not include the user language, but only the path.
• Ability to define null/singular/plural language entries
• Ability to mimic sprintf() calls with $user->lang() with the ability to correctly assign nullar/singular/plural language entries.
• Added the possibility to force user posts put in queue if post count is lower than an admin defined value. Guest posting is not affected by this setting.
• Added ‘max_recipients’ setting for private messages. This setting allows admins to define the maximum number of recipients per private message with a board-wide setting and a group-specific setting.
• Added new permission setting for sending private messages to groups. Now there are two permissions to define sending private messages to multiple recipients and private messages to groups.
• Allow specific connection to different server for jabber functionality by providing a valid JID as username. This also allows the use of talk.google.com as jabber server with gmail.com JIDs.

Sec Precaution

• Stricter validation of the HTTP_HOST header (Thanks to Techie-Micheal et al for pointing out possible issues in derived code)

[break]