Original Post by Acyd Burn
Icy Phoenix
English Chit Chat - phpBB3 Release Candidate 1 (RC1) Released
ThE KuKa [ Sun 20 May, 2007 20:34 ]
Post subject: phpBB3 Release Candidate 1 (RC1) Released
Post subject: phpBB3 Release Candidate 1 (RC1) Released
tonyf12 [ Mon 21 May, 2007 10:20 ]
Post subject: Re: PhpBB3 Release Candidate 1 (RC1) Released
Post subject: Re: PhpBB3 Release Candidate 1 (RC1) Released
Ironic that Icy goes final when phpbb3 RC1 finally comes out
Mighty Gorgon [ Fri 25 May, 2007 00:52 ]
Post subject: Re: phpBB3 Release Candidate 1 (RC1) Released
He he he... Icy Phoenix has been released just a couple of hours before phpBB3
!
Post subject: Re: phpBB3 Release Candidate 1 (RC1) Released
tonyf12 wrote: [View Post]
He he he... Icy Phoenix has been released just a couple of hours before phpBB3
!
moreteavicar [ Thu 07 Jun, 2007 18:05 ]
Post subject: Re: phpBB3 Release Candidate 1 (RC1) Released
Post subject: Re: phpBB3 Release Candidate 1 (RC1) Released
Oooh ayy!... the phpbb webste finally looks decent!
One thing that suprises me about phpbb3 is that it doesn't look like they've done much to improve security, or rather to adopt a better standard of programming practice. In particular what I'm referring to is the includes library - using the .php file extension on function files which are only ever meant to be included, never called directly. As we know from the past, any mods that add files or changes to the includes directory, and which do not declare variables properly, can then be executed, with values being parsed to a variable, opening the way for remote file inclusions. Simply by changing the extension of files in includes from .php to something like .lib - e.g. functions.lib, would then mean that the files can never be executed directly (unless a suicidal admin changed the extension settings in his php server!). And after all, calling them something like .lib is more appropriate to their purpose - as libraries of functions, rather than something to be executed, just as this is the standard practice of file naming in C++. In fact it is just general common sense!
BTW hi everybody
One thing that suprises me about phpbb3 is that it doesn't look like they've done much to improve security, or rather to adopt a better standard of programming practice. In particular what I'm referring to is the includes library - using the .php file extension on function files which are only ever meant to be included, never called directly. As we know from the past, any mods that add files or changes to the includes directory, and which do not declare variables properly, can then be executed, with values being parsed to a variable, opening the way for remote file inclusions. Simply by changing the extension of files in includes from .php to something like .lib - e.g. functions.lib, would then mean that the files can never be executed directly (unless a suicidal admin changed the extension settings in his php server!). And after all, calling them something like .lib is more appropriate to their purpose - as libraries of functions, rather than something to be executed, just as this is the standard practice of file naming in C++. In fact it is just general common sense!
BTW hi everybody
Mighty Gorgon [ Sun 10 Jun, 2007 02:37 ]
Post subject: Re: phpBB3 Release Candidate 1 (RC1) Released
Post subject: Re: phpBB3 Release Candidate 1 (RC1) Released
Welcome back! 
Mighty Gorgon [ Fri 14 Dec, 2007 01:23 ]
Post subject: Re: phpBB3 Release Candidate 1 (RC1) Released
Post subject: Re: phpBB3 Release Candidate 1 (RC1) Released
And finally phpBB 3 went GOLD! 
Congratulations to all phpBB world!
Congratulations to all phpBB world!