Makestation

Full Version: MyBB 1.8.24 Released — Security Release
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
https://blog.mybb.com/2020/08/09/mybb-1-...y-release/

MyBB 1.8.24 Released — Security Release
Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one.

Update has been run. They changed a surprisingly large amount of files in this release (not sure why, 1823 just came out and 1824 was a security release), so there will likely be a few bugs. As always, post any issues discovered here!
I got this done on the day of release - and, so far, I haven't encountered any bugs from it.

Hope you don't either!
(August 10th, 2020 at 11:17 PM)Darth-Apple Wrote: [ -> ]Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one.

Update has been run. They changed a surprisingly large amount of files in this release (not sure why, 1823 just came out and 1824 was a security release), so there will likely be a few bugs. As always, post any issues discovered here!

But there is a bug in creating multiple profile fields

go to:
inc / functions_post.php (near ~ line 445) after

PHP code:


if($post['fieldvalue_option'] != '')
{
    eval("\$post['fieldvalue'] .= \"".$templates->get("postbit_profilefield_multiselect")."\";");
}



and insert directly below:

PHP code:


$post['fieldvalue_option'] = '';