A security issue has been discovered within the personal conversations system that could allow exposure of the message content if the personal conversation ID is known.
We have released a simple patch for this issue. To apply, simply download the correct zip file and upload the file(s) over the ones on your server. There is <b><i>no</i></b> need to rebuild or reset any templates or language packs. Customers with active support are welcome to ask technical support for assistance if required.
<b>IP.Board 3.0.x</b>
<a href="http://community.invisionpower.com/index.php?app=core&module=attach§ion=attach&attach_id=26409" target="_blank"><img src="http://community.invisionpower.com/public/style_extra/mime_types/zip.gif" border="0" class="linked-image" /></a>
<a href="http://community.invisionpower.com/index.php?app=core&module=attach§ion=attach&attach_id=26409" target="_blank">30xPatch.zip</a> <b>(7.38K)</b>
Number of downloads: 45
<b>IP.Board 3.1.x</b>
<a href="http://www.invisionpower.com/files/313Update.zip" target="_blank">http://www.invisionpower.com/files/313Update.zip</a>
This 3.1.3 update also resolves a few other issues:
- Warning when using JSON when the PHP JSON extension isn't available
- Twitter log in issue
- Hovercard Opera positioning issue
- Missing dashboard notifications in the Admin CP
The main download zips have been updated at the time of this post so if you have downloaded after the date of this message you do not need to apply this patch.
<a href="http://community.invisionpower.com/topic/323970-ipboard-30x-31x-security-patch-released/" target="_blank"><b>Читать дальше...</b></a>
<a href="http://translate.google.com/translate?u=http://community.invisionpower.com/topic/323970-ipboard-30x-31x-security-patch-released/&langpair=en%7Cru" target="_blank"><b>Перевод...</b></a>
We have released a simple patch for this issue. To apply, simply download the correct zip file and upload the file(s) over the ones on your server. There is <b><i>no</i></b> need to rebuild or reset any templates or language packs. Customers with active support are welcome to ask technical support for assistance if required.
<b>IP.Board 3.0.x</b>
<a href="http://community.invisionpower.com/index.php?app=core&module=attach§ion=attach&attach_id=26409" target="_blank"><img src="http://community.invisionpower.com/public/style_extra/mime_types/zip.gif" border="0" class="linked-image" /></a>
<a href="http://community.invisionpower.com/index.php?app=core&module=attach§ion=attach&attach_id=26409" target="_blank">30xPatch.zip</a> <b>(7.38K)</b>
Number of downloads: 45
<b>IP.Board 3.1.x</b>
<a href="http://www.invisionpower.com/files/313Update.zip" target="_blank">http://www.invisionpower.com/files/313Update.zip</a>
This 3.1.3 update also resolves a few other issues:
- Warning when using JSON when the PHP JSON extension isn't available
- Twitter log in issue
- Hovercard Opera positioning issue
- Missing dashboard notifications in the Admin CP
The main download zips have been updated at the time of this post so if you have downloaded after the date of this message you do not need to apply this patch.
<a href="http://community.invisionpower.com/topic/323970-ipboard-30x-31x-security-patch-released/" target="_blank"><b>Читать дальше...</b></a>
<a href="http://translate.google.com/translate?u=http://community.invisionpower.com/topic/323970-ipboard-30x-31x-security-patch-released/&langpair=en%7Cru" target="_blank"><b>Перевод...</b></a>