[Burkie]

Really had a great time playing with bbpress again to create http://wannaverb.com – a discussion site to help connect people with similar interests, allow them to post activities and see who else would be interesting in attending that movie, going for weekly walks our heading to the pub. It’s just about ready to go live, just thought it deserved to be posted here before anywhere else.

[Ben L.]

In bbpress.php, topics and replies have 'revisions', as one of their features. Comment out those two lines.

[Ben L.]

In bbpress.php, topics and replies have 'revisions', as one of their features. Comment out those two lines.

[Ricardo]

here’s how i done it (1.0.2 to 1.0.3):

1- backup the bb-config.php or write down the database name, user and password.

2- delete “bb-admin”, “bb-includes” and “bb-templates” folders and all the single files from the bbpress root directory with the exception of “.htacess”

3- download bbpress, extract the contents to a folder, rename bb-config-sample.php to bb.config.php and edit it with the details from step 1.

4- send everything from that folder to your bbpress root directory clicking yes if your ftp program asks to overwrite files on the server.

it worked for me but i not using pluggins that allow visitors to upload files or images

[Ricardo]

here’s how i done it (1.0.2 to 1.0.3):

1- backup the bb-config.php or write down the database name, user and password.

2- delete “bb-admin”, “bb-includes” and “bb-templates” folders and all the single files from the bbpress root directory with the exception of “.htacess”

3- download bbpress, extract the contents to a folder, rename bb-config-sample.php to bb.config.php and edit it with the details from step 1.

4- send everything from that folder to your bbpress root directory clicking yes if your ftp program asks to overwrite files on the server.

it worked for me but i not using pluggins that allow visitors to upload files or images

[pbul2004]

Will upgrading help with the 100’s of spam posts im getting on my forum? I have had to take it off line!?

So i just download the new bbpress zip file and replace all the contents on my ftp? And my theme files wont be affected?

Do my theme files need to be updated as well?

Thanks

[pbul2004]

Will upgrading help with the 100’s of spam posts im getting on my forum? I have had to take it off line!?

So i just download the new bbpress zip file and replace all the contents on my ftp? And my theme files wont be affected?

Do my theme files need to be updated as well?

Thanks

[_ck_]

Upgrade the same way you upgrade wordpress.

You can install the new version over the old copy, just don’t delete anything.

Just make sure your template directory is not the same as bbpress default (kakumei) which you seem to be using “mytheme” so that’s fine.

[_ck_]

Upgrade the same way you upgrade wordpress.

You can install the new version over the old copy, just don’t delete anything.

Just make sure your template directory is not the same as bbpress default (kakumei) which you seem to be using “mytheme” so that’s fine.

[pbul2004]

Hi,

I am on v 1.0.2 of bbpress.

My theme is located in /forum/bb-templates/mytheme.

How would i upgrade to latest version without affecting my sites theme and changes i have made?

Thanks

Paul

[pbul2004]

Hi,

I am on v 1.0.2 of bbpress.

My theme is located in /forum/bb-templates/mytheme.

How would i upgrade to latest version without affecting my sites theme and changes i have made?

Thanks

Paul

[_ck_]

Hacked means they injected javascript and such that was never meant to be posted by anyone.

Spammed is just malicious posts. If you are simply spammed, install askismet and a captcha plugin or my Human Test plugin.

Also, if you are running bbPress 1.0.2 make sure you upgrade to 1.0.3

[_ck_]

Hacked means they injected javascript and such that was never meant to be posted by anyone.

Spammed is just malicious posts. If you are simply spammed, install askismet and a captcha plugin or my Human Test plugin.

Also, if you are running bbPress 1.0.2 make sure you upgrade to 1.0.3

[_ck_]

Hi Mike, you are welcome to submit your plugin.

There may just be a css problem with the form in your browser?

I see the form just fine and it “works for me” ?

https://bbpress.org/plugins/forum/requests

[_ck_]

Hi Mike, you are welcome to submit your plugin.

There may just be a css problem with the form in your browser?

I see the form just fine and it “works for me” ?

https://bbpress.org/plugins/forum/requests

[_ck_]

These are the changes between 1.0.2 and 1.0.3

https://trac.bbpress.org/changeset/2958/tags/1.0.3?old=2339&old_path=%2Ftags%2F1.0.2

unfortunately the mime property was modified on files that were otherwise unchanged, so the file list looks huge, but most of them are unaffected.

also /jquery/interface.js was added in 1.0.3 but for some wrong reason they are using the packed version which is slower because it has to be unpacked on every page load, it should be the minified only version without packing and just let gzip do the compression work between the server and the browser

I’ve edited down the list and removed the property-only changes

Files changed between bbPress 1.0.2 and 1.0.3

bb-templates/kakumei/style.css (1 diff)

bb-templates/kakumei/favorites.php (1 diff)

bb-templates/kakumei/view.php (2 diffs)

bb-templates/kakumei/forum.php (2 diffs)

bb-templates/kakumei/tag-single.php (1 diff)

bb-templates/kakumei/front-page.php (2 diffs)

bb-templates/kakumei/post-form.php (2 diffs)

bb-templates/kakumei-blue/style.css (1 diff)



bb-includes/functions.bb-users.php (3 diffs)

bb-includes/functions.bb-pluggable.php (3 diffs)

bb-includes/class.bp-options.php (1 diff)

bb-includes/functions.bb-posts.php (1 diff)

bb-includes/functions.bb-template.php (4 diffs)

bb-includes/functions.bb-meta.php (1 diff)

bb-includes/functions.bb-core.php (3 diffs)

bb-includes/functions.bb-deprecated.php (1 diff)



bb-cron.php (3 diffs)

bb-login.php (3 diffs)

rss.php (1 diff)



bb-admin/tools-recount.php (2 diffs)

bb-admin/includes/class.bb-install.php (1 diff)

bb-admin/includes/functions.bb-upgrade.php (3 diffs)

bb-admin/includes/functions.bb-admin.php (4 diffs)

bb-admin/includes/defaults.bb-schema.php (2 diffs)

bb-admin/includes/functions.bb-recount.php (added)

bb-admin/admin.php (2 diffs)

bb-admin/admin-base.php (1 diff)

bb-admin/index.php (2 diffs)

There may be additional backPress changes which are beyond my desire to track/list.

[_ck_]

These are the changes between 1.0.2 and 1.0.3

https://trac.bbpress.org/changeset/2958/tags/1.0.3?old=2339&old_path=%2Ftags%2F1.0.2

unfortunately the mime property was modified on files that were otherwise unchanged, so the file list looks huge, but most of them are unaffected.

also /jquery/interface.js was added in 1.0.3 but for some wrong reason they are using the packed version which is slower because it has to be unpacked on every page load, it should be the minified only version without packing and just let gzip do the compression work between the server and the browser

I’ve edited down the list and removed the property-only changes

Files changed between bbPress 1.0.2 and 1.0.3

bb-templates/kakumei/style.css (1 diff)

bb-templates/kakumei/favorites.php (1 diff)

bb-templates/kakumei/view.php (2 diffs)

bb-templates/kakumei/forum.php (2 diffs)

bb-templates/kakumei/tag-single.php (1 diff)

bb-templates/kakumei/front-page.php (2 diffs)

bb-templates/kakumei/post-form.php (2 diffs)

bb-templates/kakumei-blue/style.css (1 diff)



bb-includes/functions.bb-users.php (3 diffs)

bb-includes/functions.bb-pluggable.php (3 diffs)

bb-includes/class.bp-options.php (1 diff)

bb-includes/functions.bb-posts.php (1 diff)

bb-includes/functions.bb-template.php (4 diffs)

bb-includes/functions.bb-meta.php (1 diff)

bb-includes/functions.bb-core.php (3 diffs)

bb-includes/functions.bb-deprecated.php (1 diff)



bb-cron.php (3 diffs)

bb-login.php (3 diffs)

rss.php (1 diff)



bb-admin/tools-recount.php (2 diffs)

bb-admin/includes/class.bb-install.php (1 diff)

bb-admin/includes/functions.bb-upgrade.php (3 diffs)

bb-admin/includes/functions.bb-admin.php (4 diffs)

bb-admin/includes/defaults.bb-schema.php (2 diffs)

bb-admin/includes/functions.bb-recount.php (added)

bb-admin/admin.php (2 diffs)

bb-admin/admin-base.php (1 diff)

bb-admin/index.php (2 diffs)

There may be additional backPress changes which are beyond my desire to track/list.

[_ck_]

bbPress 0.9 users should install my unofficial “block-long-queries” mini-plugin to avoid the security bug that 1.0.3 fixes and similar unknown attacks in the future.

(it also works in 1.0 and WordPress)

<?php

/*

Plugin Name: Block Long Queries (for bbPress and WordPress)

*/



if (strlen($_SERVER['REQUEST_URI'])>255 ||

preg_match('@(eval|base64|unescape)[^a-zA-Z0-9]@si',$_SERVER['REQUEST_URI']))

{

header('HTTP/1.1 414 Request-URI Too Long');

header('Status: 414 Request-URI Too Long');

header('Connection: Close');

exit;

}

[_ck_]

bbPress 0.9 users should install my unofficial “block-long-queries” mini-plugin to avoid the security bug that 1.0.3 fixes and similar unknown attacks in the future.

(it also works in 1.0 and WordPress)

<?php

/*

Plugin Name: Block Long Queries (for bbPress and WordPress)

*/



if (strlen($_SERVER['REQUEST_URI'])>255 ||

preg_match('@(eval|base64|unescape)[^a-zA-Z0-9]@si',$_SERVER['REQUEST_URI']))

{

header('HTTP/1.1 414 Request-URI Too Long');

header('Status: 414 Request-URI Too Long');

header('Connection: Close');

exit;

}

[_ck_]

All bbpress 1.0.x users should immediately upgrade to bbPress 1.0.3

(It was released February 23rd but there was no announcement or blog entry)

Download

It is mostly just a security update to 1.0.2 – there are no new features.

bbPress 1.1 with additional features will have a release candidate within a week or two, however you should NOT skip this 1.0.3 update.

[_ck_]

Trac unfortunately doesn’t disclose where the tag was created from, the only documentation is the comment JJJ made.

https://trac.bbpress.org/changeset/2930

However it’s easy to test.

Checkout a copy from the trunk, then do a “switch” to tag/1.0.3 and see what files (if any are changed).

The SVN itself may disclose more details but let’s see what happens…

ah no, I forgot the trunk is actually 1.1

Yeah 1.0.3 is a branch from 1.0.2, not the trunk.

If a fix wasn’t committed to the 1.0 branch, it won’t be in 1.0.3

But you can always use the trunk for 1.1 preview

[_ck_]

Trac unfortunately doesn’t disclose where the tag was created from, the only documentation is the comment JJJ made.

https://trac.bbpress.org/changeset/2930

However it’s easy to test.

Checkout a copy from the trunk, then do a “switch” to tag/1.0.3 and see what files (if any are changed).

The SVN itself may disclose more details but let’s see what happens…

ah no, I forgot the trunk is actually 1.1

Yeah 1.0.3 is a branch from 1.0.2, not the trunk.

If a fix wasn’t committed to the 1.0 branch, it won’t be in 1.0.3

But you can always use the trunk for 1.1 preview

[_ck_]

They just announced it to the world this morning so I hope the 1.x users have upgraded to 1.0.3

http://seclists.org/fulldisclosure/2011/Mar/155

I suspect it was not enough time but there never is.

Note that my “block-long-queries” mini-plugin will protect you from this kind of attack and other yet unknown ones via the URL (GET requests)

https://bbpress.org/forums/topic/bbpress-103-released#post-84690

It will work in both bbPress and WordPress

There is really no reason to allow URIs to be longer than 255 characters but apache will allow up to 4000 by default which can carry a massive payload. I have seen some wordpress installs that need that limit bumped up to 320 or even 512, something about the akismet plugin needs very long URIs for some bad reason.

[_ck_]

They just announced it to the world this morning so I hope the 1.x users have upgraded to 1.0.3

http://seclists.org/fulldisclosure/2011/Mar/155

I suspect it was not enough time but there never is.

Note that my “block-long-queries” mini-plugin will protect you from this kind of attack and other yet unknown ones via the URL (GET requests)

https://bbpress.org/forums/topic/bbpress-103-released#post-84690

It will work in both bbPress and WordPress

There is really no reason to allow URIs to be longer than 255 characters but apache will allow up to 4000 by default which can carry a massive payload. I have seen some wordpress installs that need that limit bumped up to 320 or even 512, something about the akismet plugin needs very long URIs for some bad reason.

[adbydesigns]

i would love a layout like this one