[_ck_]

bbPress 0.9 users should install my unofficial “block-long-queries” mini-plugin to avoid the security bug that 1.0.3 fixes and similar unknown attacks in the future.

(it also works in 1.0 and WordPress)

<?php

/*

Plugin Name: Block Long Queries (for bbPress and WordPress)

*/



if (strlen($_SERVER['REQUEST_URI'])>255 ||

preg_match('@(eval|base64|unescape)[^a-zA-Z0-9]@si',$_SERVER['REQUEST_URI']))

{

header('HTTP/1.1 414 Request-URI Too Long');

header('Status: 414 Request-URI Too Long');

header('Connection: Close');

exit;

}

[_ck_]

bbPress 0.9 users should install my unofficial “block-long-queries” mini-plugin to avoid the security bug that 1.0.3 fixes and similar unknown attacks in the future.

(it also works in 1.0 and WordPress)

<?php

/*

Plugin Name: Block Long Queries (for bbPress and WordPress)

*/



if (strlen($_SERVER['REQUEST_URI'])>255 ||

preg_match('@(eval|base64|unescape)[^a-zA-Z0-9]@si',$_SERVER['REQUEST_URI']))

{

header('HTTP/1.1 414 Request-URI Too Long');

header('Status: 414 Request-URI Too Long');

header('Connection: Close');

exit;

}

[_ck_]

All bbpress 1.0.x users should immediately upgrade to bbPress 1.0.3

(It was released February 23rd but there was no announcement or blog entry)

Download

It is mostly just a security update to 1.0.2 – there are no new features.

bbPress 1.1 with additional features will have a release candidate within a week or two, however you should NOT skip this 1.0.3 update.

[_ck_]

Trac unfortunately doesn’t disclose where the tag was created from, the only documentation is the comment JJJ made.

https://trac.bbpress.org/changeset/2930

However it’s easy to test.

Checkout a copy from the trunk, then do a “switch” to tag/1.0.3 and see what files (if any are changed).

The SVN itself may disclose more details but let’s see what happens…

ah no, I forgot the trunk is actually 1.1

Yeah 1.0.3 is a branch from 1.0.2, not the trunk.

If a fix wasn’t committed to the 1.0 branch, it won’t be in 1.0.3

But you can always use the trunk for 1.1 preview

[_ck_]

Trac unfortunately doesn’t disclose where the tag was created from, the only documentation is the comment JJJ made.

https://trac.bbpress.org/changeset/2930

However it’s easy to test.

Checkout a copy from the trunk, then do a “switch” to tag/1.0.3 and see what files (if any are changed).

The SVN itself may disclose more details but let’s see what happens…

ah no, I forgot the trunk is actually 1.1

Yeah 1.0.3 is a branch from 1.0.2, not the trunk.

If a fix wasn’t committed to the 1.0 branch, it won’t be in 1.0.3

But you can always use the trunk for 1.1 preview

[_ck_]

They just announced it to the world this morning so I hope the 1.x users have upgraded to 1.0.3

http://seclists.org/fulldisclosure/2011/Mar/155

I suspect it was not enough time but there never is.

Note that my “block-long-queries” mini-plugin will protect you from this kind of attack and other yet unknown ones via the URL (GET requests)

https://bbpress.org/forums/topic/bbpress-103-released#post-84690

It will work in both bbPress and WordPress

There is really no reason to allow URIs to be longer than 255 characters but apache will allow up to 4000 by default which can carry a massive payload. I have seen some wordpress installs that need that limit bumped up to 320 or even 512, something about the akismet plugin needs very long URIs for some bad reason.

[_ck_]

They just announced it to the world this morning so I hope the 1.x users have upgraded to 1.0.3

http://seclists.org/fulldisclosure/2011/Mar/155

I suspect it was not enough time but there never is.

Note that my “block-long-queries” mini-plugin will protect you from this kind of attack and other yet unknown ones via the URL (GET requests)

https://bbpress.org/forums/topic/bbpress-103-released#post-84690

It will work in both bbPress and WordPress

There is really no reason to allow URIs to be longer than 255 characters but apache will allow up to 4000 by default which can carry a massive payload. I have seen some wordpress installs that need that limit bumped up to 320 or even 512, something about the akismet plugin needs very long URIs for some bad reason.

[adbydesigns]

i would love a layout like this one

[adbydesigns]

i would love a layout like this one

[adbydesigns]

All i have just started using word press and i have to say i like it, what i am trying to do is setup a client with wordpress and bbpress so they have a forum to use and can serach with , in one area of there forum the people have to pay to post but not read waht do u think would be best for this i have been trying to use BBPRESS but everything i try to get the connection from WP to BB working i have issues, the current one is when i go to my bbpress page it will go direct to my wp page, i am not usre what i have done here

[Real Estate Transaction Management]

Wonderful design!

Quick question. Has anyone integrated bbpress into an independent stand-alone web -app? Integration that would allow the user to flow seamlessly between the app and bbpress?

Steve

[alexchenco]

I’m using the bbPress plugin. I have a page with the Latest Topics.

The pagination link is displayed correctly at the beginning:

External DBs

But when this page is made the front page it doesn’t take me to the next paginated page (this is the link it shows):

http://localhost/taiwantalk/?paged=2

Any suggestion to solve this?

[Super Artsy]

Alright, so after running the install. I get these errors:

Your installation completed with some minor errors. See the error log below for more specific information.

SQL ERROR!

>>> Database: wp_blog (localhost)

>>>>>> CREATE TABLE IF NOT EXISTS bbs_posts (

post_id bigint(20) NOT NULL auto_increment,

forum_id int(10) NOT NULL default 1,

topic_id bigint(20) NOT NULL default 1,

poster_id int(10) NOT NULL default 0,

post_text text NOT NULL,

post_time datetime NOT NULL default ‘0000-00-00 00:00:00’,

poster_ip varchar(15) NOT NULL default ”,

post_status tinyint(1) NOT NULL default 0,

post_position bigint(20) NOT NULL default 0,

PRIMARY KEY (post_id),

KEY topic_time (topic_id, post_time),

KEY poster_time (poster_id, post_time),

KEY post_time (post_time),

FULLTEXT KEY post_text (post_text)

) TYPE = MYISAM DEFAULT CHARACTER SET ‘utf8’;

>>>>>> You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘TYPE = MYISAM DEFAULT CHARACTER SET ‘utf8” at line 16

Key master email not sent!

I have tried dropping all the bbPress tables and reinstalling it, but the problem still persists. I get this error message everytime after running the install script. I am running PHP 5.3.5 and MySQL 5.5.8 on a WAMP localhost server. Also, I am trying to integrate bbPress with my current WordPress blog…

Thanks in advance,

-Deuce

[findinlaos]

Hi All,

I would like to upgrade from 1.0.2 to 1.0.3 but can’t find instructions for this.

I have read http://bbpress.org/documentation/upgrading/ but as stated, “these instructions cover upgrading to version 1.0.2”

Also, there is no instructions in the readme.txt of the bbpress 1.0.3.

How should I proceed?

[Ben L.]

Did you have Akismet activated? If not, you should have. Unfortunately, there are a lot of less-than-honest people on the internet that would like nothing more than to use your forum as an advertisement for their less-than-honest websites.

[Ben L.]

Did you have Akismet activated? If not, you should have. Unfortunately, there are a lot of less-than-honest people on the internet that would like nothing more than to use your forum as an advertisement for their less-than-honest websites.

[pbul2004]

Hi,

I have just looked at my forum on my site and it has been spammed to hell, LOADS!!!

myweddingreviews.co.uk/forum

I have removed it from the main site. How has this happened and why?

And how do i prevent this for the future as this would 100% turn people away from the site, if it has not done already.

Hope you guys can advise! I might just remove the forum all together unless i know this can be prevented!

Cheers

Paul

[Ben L.]

My turn! I did one for the whole plugin repository: http://nightgunner5.wordpress.com/2011/03/11/bbpress-plugin-repository-the-movie/

[Ben L.]

My turn! I did one for the whole plugin repository: http://nightgunner5.wordpress.com/2011/03/11/bbpress-plugin-repository-the-movie/

[Ben L.]

mindacatur, did you seriously need to bump a year-old topic just to say you were going to use software unrelated to this forum?

[artdeen]

Hello all!

I’ve been thinking about SimplePress integration with your WordPress installation. It worked fine with me a few months ago.Give it a shot.May be it needs some customization on its template.Just an opinion.

After all, bbPress and buddyPress are all WordPress family product.

Regards.

[3hreedee]

Hi all,

I tried to install the bbpress plugin through my website and it said that the installation had failed.

When I tried to install it again it now says the directory already exists.

Can anyone assist?

Thanks.

Dan

http://www.3hreedee.com

[iftomkins]

Found a solution that worked. Looks like it had to do with the Inove bbpress theme I am using. When I replaced password-reset.php from Inove theme folder with password-reset.php from the Kakumei folder, the password reset now works just fine!

[iftomkins]

Found a solution that worked. Looks like it had to do with the Inove bbpress theme I am using. When I replaced password-reset.php from Inove theme folder with password-reset.php from the Kakumei folder, the password reset now works just fine!

[iftomkins]

I’m having a similar issue. When I log in via WordPress first, then I go to bbPress, it tells me that I’m logged in, and the Admin link is visible. But when I click the admin link, it just returns to the same page, and doesn’t go to the dashboard.

To get around it, I log out of BOTH WordPress and bbpress, then go back into bbpress and log in as Admin. When done in this order, I’m able to click the “Admin” link and access the dashboard.