Update Feed

FluxBB 1.5.10

21 June 2016

FluxBB version 1.5.10 is now available (security release).

Upgrading to FluxBB 1.5.10

FluxBB 1.5.10 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply FluxBB updates as new versions are released, or use Installatron's Clone feature to duplicate an existing FluxBB install to test the 1.5.10 upgrade prior to applying it live. Get started managing your FluxBB installations with Installatron

What's New in FluxBB 1.5.10

This release fixes a security vulnerability as well as several bugs, and also contains several small improvements.

The vulnerability, kindly disclosed by Kacper Szurek, allowed skilled attackers to inject malicious JavaScript into the page that is shown when administrators try to view information about a user's IP address.

In addition, this release contains some minor improvements in the area of CSS and usability, and fixes several smaller bugs.

Changelog

bug #792: Profile and signature img
bug #1012: Incorrect coding login.php
bug #1017: fix CSS
bug #1056: Invalidate only feed caches
bug #1058: hash_equals(): Expected known_string to be a string, null given
bug #1059: No csrf_token in unsubscibe link of subscription email
bug #1062: Edit.php and checkboxes
bug #1068: Wrong description for BBCode
bug #1072: The DB class for SQLite doesn't maintain string values by default?
bug #1075: Empty PHP_SELF somewhere
bug #1078: InnoDB check failed
bug #1082: Custom title overrides "Banned"
enhancement #1019: Refactor/move forum_list_plugins to common_admin.php
enhancement #1025: Display error message inline with login form
enhancement #1027: Change htmlspecialchars to pun_htmlspecialchars
enhancement #1064: error() function, PUN_DEBUG and security
enhancement #1066: For long nicknames