MyBB 1.8.9
6 January 2017
MyBB version 1.8.9 is now available (security release).
Upgrading to MyBB 1.8.9
MyBB 1.8.9 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply MyBB updates as new versions are released, or use Installatron's Clone feature to duplicate an existing MyBB install to test the 1.8.9 upgrade prior to applying it live. Get started managing your MyBB installations with Installatron
What's New in MyBB 1.8.9
This release fixes 1 security vulnerability and 52 reported issues causing incorrect functionality of MyBB.
Security
- Low risk: CSRF issue when removing subscriptions – reported by Devilshakerz
Bugs fixed
- Bug: Collapsed theads
- Bug: Empty index operator throws fatal error on PHP 7.1 when used on strings
- Bug: Disable edit by timestamp for admins also disables for moderators
- Bug: Gravatar link updation
- Bug: You have entered an invalid secret PIN.
- Bug: XSS in URL BBCode
- Bug: Outdated location name on Time Zone
- Bug: Outdated MIME types link in Attachment Types configuration
- Bug: SQL Error in private.php
- Bug: Links executing JS functions should return false and point to javascript.void(0) instead of hashtags
- Enhancement: Update `Google Talk` language string to `Google Hangouts`
- Enhancement: No Licence file
- Bug: Signature preview saves the signature?
- Bug: Weird timestamp addition in modcp resulting in integer overflow
- Enhancement: No hooks available in password hashing functions
- Bug: Delayed moderation - missing lang string for time
- Bug: Report Reasons not sent in report PM/email notifications
- Bug: Expand/collapse theads not fully implimented
- Bug: Invalid table name in Report Reasons
- Bug: Redundant " in moderation_delayedmoderation_date_day and modcp_announcements_day
- Bug: threads get marked as read by just visiting forum categories
- Bug: modcp_announcements_delete
- Bug: Fix #2464 Add option to set cookies with Secure flag
- Bug: Use a stylesheet for select2.css
- Bug: pgsql: Cannot delete theme on postgres
- Bug: "Notice: Undefined index: num_threads" when moving threads
- Enhancement: Ability to disallow remote avatars
- Bug: Missing setting descriptions
- Bug: add package.json
- Bug: showthread: dropdown-menus respond without "ok" - inconsistency
- Bug: can not set permissions on another super admin
- Bug: Unable To Perform a Database Backup
- Bug: Template group not working.
- Bug: Moderation Tools prefix issue
- Bug: Check files returns /install missing
- Bug: Renaming a stylesheet doesn't recache it
- Bug: check tables incorrect if check
- Bug: Hello World plugin fails on SQLite and most likely also pgsql
- Enhancement: Proposition : enhanced numeric option setting
- Bug: Weird global.php is_super_admin() check
- Bug: Splitting thread decrease the thread count of user
- Bug: Incomplete forum deletion
- Bug: "Email Verification & Administrator Activation" usless
- Enhancement: Add Deletion Notice
- Enhancement: wontfix: Modal & Confirm dialogs
- Enhancement: Hide stuff users can't see v2
- Bug: CDN In AdminCP
- Bug: Line breaks in templates search fails
- Bug: Calendar, Week Overview: Week period calculated wrong
- Bug: pgsql: Performance Optimization for the function replace_query
- Bug: SQL error with Binary pseudo charset