24 January 2015
FluxBB version 1.5.8 is now available (security release).Upgrading to FluxBB 1.5.8
FluxBB 1.5.8 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply FluxBB updates as new versions are released, or use Installatron's Clone feature to duplicate an existing FluxBB install to test the 1.5.8 upgrade prior to applying it live. Get started managing your FluxBB installations with InstallatronWhat's New in FluxBB 1.5.8
This release fixes a minor security issue in install.php. The installer could be tricked into loading and executing any file named install.php. Abuse of this vulnerability could have only been possible in combination with other security issues that would have allowed an attacker to create files with that name.
As a special present, in this release we made it super-easy to install anti-spam modifications by providing a few hooks where these modifications can hook into. All you will need to do to install this new generation of anti-spam tools is to copy one or two files into certain folders of your FluxBB installation. We hope this change encourages the community to create a broad range of more diverse antispam tools, so that spammers will hit unpredictable obstacles when targetting FluxBB. As an example, I have created a modification that adds Google's new reCAPTCHA system to your registration page. Expect more documentation in the next days.
This release also brings some security hardening, fine-tuning, several small features and usability improvements to your forum.
Highlights
Full Changelog