vBulletin 3.6.4 is out there! - Forums Help - vBulletin, IPB, phpBB, SMF skins and community

ForumsHelp · 11-22-2006, 02:09 PM

Hello everybody

Yes it's not a joke, vBulletin 3.6.4 has been released few hours ago to fix the potential cross-site scripting (XSS) issue in the administrators control panel and as usual, the best way to fix the problem is to perform a full upgrade. But if you don't want to go for a full upgrade then you can use the patch released to fix this issue.
Here are the file changes since vb 3.6.3:

ajax.php
calendar.php
memberlist.php
search.php
admincp/
- admincalendar.php
- index.php
- usertools.php
- subscriptions.php
archive/index.php
clientscript/
- vbulletin_global.js
- vbulletin_textedit.js
- vbulletin_thrdpostlist.js
includes
- adminfunctions.php
- adminfunctions_language.php
- adminfunctions_template.php
- class_bbcode.php
- class_core.php
- class_dm_event.php
- class_dm_pm.php
- class_dm_user.php
- class_sigparser_char.php
- functions_newpost.php
- functions_calendar.php
- cron/removebans.php
- xml/js_safe_phrases.xml
install/ - all of it
modcp/user.php

These are the template changes since 3.6.3 ONLY

If you are not running 3.6.3 yet, there are significantly more changed templates than are listed here. Use "Find Updated Templates" to find the templates that have changed and incorporate those changes. You may even wish to start with a default style!

Note:

You need to only look through this post for templates you have customized. You do not need to take any action to ensure that your uncustomized templates are the latest versions.

If you find a template you have customized in this list, you will likely want to include the changes made here. However, this is not always required. Under each change listed here, you will see "requires revert?" This refers to whether the changes are mandatory (yes). If the changes are mandatory, things will break if you do not incorporate the changes made. It is strongly recommended that you revert and recustomize any templates that say they require a revert.

Additionally, you may wish to use the "Find Updated Template" feature in the control panel to find templates that have been changed since your last edit to them.

--------------------------------------

bbcode_code
bbcode_html
bbcode_php

Changes to HTML for XHTML validation purposes

Requires revert? No (unless XHTML validation is important to you)

calendar_edit_customfield

Added maxlength parameter to the optional input to limit the amount of text to what is defined for the field.

Requires Revert? No, see bug 1199

newreply

Added style="border-top-width:0px" to the topic review bits table to prevent a border from doubling up.

Requires revert? No.

pm_showpm

Added style="border-bottom-width:0px" to the PM title table to prevent a border from doubling up.

Requires revert? No.
-------------------------------

This is not all as vbulletin 3.0.17 & 3.5.7 have been released as well.
Go ahead and upgrade

**Adam** · 11-23-2006, 01:39 AM

Very useful information! Thank you!

Mntsnow · 12-03-2006, 12:48 AM

It's a very important upgrade

jin · 12-04-2006, 02:35 AM

i have some erorrs when upgrading

**C_J** · 12-09-2006, 02:08 AM

already upgrade to vB 3.6.4

..same day as it released

ftaxtreme · 01-02-2007, 03:44 PM

3.6.4 is more stable. Mine is running that version

sac1pr · 01-05-2007, 09:54 AM

I will upgrade today thanks everyone!

relaxx · 01-20-2007, 03:30 PM

very usefull will upgrade asap

!

11-22-2006, 02:09 PM	#1 (permalink)
User Profile ForumsHelp Senior Member Join Date: Apr 2006 Age: 31 Posts: 968 Total Points: 196,804 Donate My Zoints Profile My Photos: (1) My Mood:	vBulletin 3.6.4 is out there! Hello everybody Yes it's not a joke, vBulletin 3.6.4 has been released few hours ago to fix the potential cross-site scripting (XSS) issue in the administrators control panel and as usual, the best way to fix the problem is to perform a full upgrade. But if you don't want to go for a full upgrade then you can use the patch released to fix this issue. Here are the file changes since vb 3.6.3: ajax.php calendar.php memberlist.php search.php admincp/ admincalendar.php index.php usertools.php subscriptions.php archive/index.php clientscript/ vbulletin_global.js vbulletin_textedit.js vbulletin_thrdpostlist.js includes adminfunctions.php adminfunctions_language.php adminfunctions_template.php class_bbcode.php class_core.php class_dm_event.php class_dm_pm.php class_dm_user.php class_sigparser_char.php functions_newpost.php functions_calendar.php cron/removebans.php xml/js_safe_phrases.xml install/ - all of it modcp/user.php These are the template changes since 3.6.3 ONLY If you are not running 3.6.3 yet, there are significantly more changed templates than are listed here. Use "Find Updated Templates" to find the templates that have changed and incorporate those changes. You may even wish to start with a default style! Note: You need to only look through this post for templates you have customized. You do not need to take any action to ensure that your uncustomized templates are the latest versions. If you find a template you have customized in this list, you will likely want to include the changes made here. However, this is not always required. Under each change listed here, you will see "requires revert?" This refers to whether the changes are mandatory (yes). If the changes are mandatory, things will break if you do not incorporate the changes made. It is strongly recommended that you revert and recustomize any templates that say they require a revert. Additionally, you may wish to use the "Find Updated Template" feature in the control panel to find templates that have been changed since your last edit to them. -------------------------------------- bbcode_code bbcode_html bbcode_php Changes to HTML for XHTML validation purposes Requires revert? No (unless XHTML validation is important to you) calendar_edit_customfield Added maxlength parameter to the optional input to limit the amount of text to what is defined for the field. Requires Revert? No, see bug 1199 newreply Added style="border-top-width:0px" to the topic review bits table to prevent a border from doubling up. Requires revert? No. pm_showpm Added style="border-bottom-width:0px" to the PM title table to prevent a border from doubling up. Requires revert? No. ------------------------------- This is not all as vbulletin 3.0.17 & 3.5.7 have been released as well. Go ahead and upgrade

11-23-2006, 01:39 AM	#2 (permalink)
User Profile Adam The ModFather Tournaments Won: 1 Join Date: Jul 2006 Location: The Internet and on most admin forums Posts: 228 Total Points: 2,101 Donate My Zoints Profile My Photos: (3)	Very useful information! Thank you! __________________

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

12-03-2006, 12:48 AM	#3 (permalink)
User Profile Mntsnow Junior Member Join Date: Nov 2006 Posts: 8 Total Points: 253 Donate My Zoints Profile My Photos: (0) My Mood:	It's a very important upgrade

12-04-2006, 02:35 AM	#4 (permalink)
User Profile jin Junior Member Join Date: Nov 2006 Posts: 9 Total Points: 192 Donate My Zoints Profile My Photos: (0)	i have some erorrs when upgrading

12-09-2006, 02:08 AM	#5 (permalink)
User Profile C_J Junior Member Join Date: Nov 2006 Posts: 20 Total Points: 298 Donate My Zoints Profile My Photos: (0) My Mood:	already upgrade to vB 3.6.4 ..same day as it released

01-02-2007, 03:44 PM	#6 (permalink)
User Profile ftaxtreme Junior Member Join Date: Dec 2006 Age: 27 Posts: 10 Total Points: 546 Donate My Zoints Profile My Photos: (0)	3.6.4 is more stable. Mine is running that version

01-05-2007, 09:54 AM	#7 (permalink)
User Profile sac1pr Junior Member Join Date: Dec 2006 Posts: 7 Total Points: 271 Donate My Zoints Profile My Photos: (0)	I will upgrade today thanks everyone!

01-20-2007, 03:30 PM	#8 (permalink)
User Profile relaxx Junior Member Join Date: Jan 2007 Age: 19 Posts: 10 Total Points: 196 Donate My Zoints Profile My Photos: (0)	very usefull will upgrade asap !