Makestation
MyBB 1.8.24 Released — Security Release - Printable Version

+- Makestation (https://makestation.net)
+-- Forum: Technical Arts (https://makestation.net/forumdisplay.php?fid=45)
+--- Forum: Web Design & Internet (https://makestation.net/forumdisplay.php?fid=62)
+---- Forum: MyBB Related (https://makestation.net/forumdisplay.php?fid=120)
+---- Thread: MyBB 1.8.24 Released — Security Release (/showthread.php?tid=3129)



MyBB 1.8.24 Released — Security Release - tc4me - August 9th, 2020

https://blog.mybb.com/2020/08/09/mybb-1-8-24-released-security-release/

MyBB 1.8.24 Released — Security Release


RE: MyBB 1.8.24 Released — Security Release - Darth-Apple - August 10th, 2020

Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one.

Update has been run. They changed a surprisingly large amount of files in this release (not sure why, 1823 just came out and 1824 was a security release), so there will likely be a few bugs. As always, post any issues discovered here!


RE: MyBB 1.8.24 Released — Security Release - Kyng - August 13th, 2020

I got this done on the day of release - and, so far, I haven't encountered any bugs from it.

Hope you don't either!


RE: MyBB 1.8.24 Released — Security Release - tc4me - August 14th, 2020

(August 10th, 2020 at 11:17 PM)Darth-Apple Wrote: Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one.

Update has been run. They changed a surprisingly large amount of files in this release (not sure why, 1823 just came out and 1824 was a security release), so there will likely be a few bugs. As always, post any issues discovered here!

But there is a bug in creating multiple profile fields

go to:
inc / functions_post.php (near ~ line 445) after

PHP code:


if($post['fieldvalue_option'] != '')
{
    eval("\$post['fieldvalue'] .= \"".$templates->get("postbit_profilefield_multiselect")."\";");
}



and insert directly below:

PHP code:


$post['fieldvalue_option'] = '';