[tc4me]

https://blog.mybb.com/2020/08/09/mybb-1-...y-release/

MyBB 1.8.24 Released — Security Release

[Darth-Apple]

Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one.

Update has been run. They changed a surprisingly large amount of files in this release (not sure why, 1823 just came out and 1824 was a security release), so there will likely be a few bugs. As always, post any issues discovered here!

[Kyng]

I got this done on the day of release - and, so far, I haven't encountered any bugs from it.

Hope you don't either!

[tc4me]

Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one.

Update has been run. They changed a surprisingly large amount of files in this release (not sure why, 1823 just came out and 1824 was a security release), so there will likely be a few bugs. As always, post any issues discovered here!

But there is a bug in creating multiple profile fields

go to:
inc / functions_post.php (near ~ line 445) after

PHP code:


if($post['fieldvalue_option'] != '')
{
    eval("\$post['fieldvalue'] .= \"".$templates->get("postbit_profilefield_multiselect")."\";");
}



and insert directly below:

PHP code:


$post['fieldvalue_option'] = '';