[13-Jul-2004] PHP Development Team would like to announce the immediate availability of PHP 4.3.8. This release is made in response to several security issues that have been discovered since the 4.3.7 release. All users of PHP are strongly encouraged to upgrade to PHP 4.3.8 as soon as possible.

Don't be in an all-fired hurry to migrate -- just yet :) The bug reports are coming in already (of course). John Lim writes "Looks as if the bug reports are coming in. Here's a serious one: HTTP authentication is broken. Expect a PHP 5.0.1 or 5.0.0 patch level 1 real soon now. There is also a link to the discussion over on Slashdot about the release - complete with both sides of the story slashdot's bile and blessings on the PHP5 release.

The following articles will provide you with valuable information on how to migrate to PHP 5 from previous versions Read More...

v3.5 of KISSQ has been released. This is a bug fix for the stand-alone version and a couple of internal tweaks. Since the same files are used for all versions you should download this update even if you run this as a nuke/post-nuke module. Thanks to user upennballer for finding this!

Changelog:
Fixed one vulnerability in admin_board.php - Xore
Added checking for proper session id characters to sessions and viewtopic to prevent injections - Bartlomiej Korupczynski
Fixed injection vulnerabilities possible with linked avatars
Implemented unsetting globalised variables
Limited confirm switch to POST variable in posting
Changed IP code in common.php to prevent IP spoofing
Updated visual confirmation mod [pre-edited files]
Moved obtaining word censors in modcp out of topic generation loop [increased performance/lower query count] - spotted by R45
Added the ability to link to https/ftps sites using the img bbcode tag
Fixed user online information in admin/index.php
Fixed getting group moderator in groupcp.php if running oracle backend - spotted by pakman
Fixed use of non-existing result variable in modcp (poster_id instead of user_id)
Fixed several vulnerabilities (XSS, SQL Injection and path disclosure) only possible with register_globals enabled - Matthew C. Kavanagh, Janek Vind
Fixed problem with SID not delivered to next page in groupcp.php
Download here.

As noted in THIS post, PHPBB v2.0.9 has been released. There have been several inquiries, both public and private, as to the upgrading of nuke's integrated PHPBB. Yes, Chatserv is already aware and working on it. As always, we appreciate this dedication that Chat has for keeping the community up-to-date with the integrated PHPBB forums and you can rest assured that as soon as he has it completed it will be announced at his sites and here also!

dmolavi writes:  

After a 2 month wait, a fourth, and hopefully final beta of the phpBB2/phpNuke integration HOWTO is available. There were a few minor changes and bug fixes that had to be made, and the guide has been split into two parts:
Part One (click here): For those with new phpNuke and new phpBB2 installations.
Part Two (click here): For those with existing phpNuke installations (and the Forums module) who wish to integrate standalone phpBB2 into their site as a replacement.

Please read them, try them out, and post any results to the appropriate fora.

Thanks,
Dariush Molavi