Nick
03-02-2006, 02:40 AM
New Feature: Enhanced File Diagnostics
In previous versions of vBulletin, the 'Suspect File Versions' system (AdminCP > Maintenance > Diagnostics > Suspect File Versions) performed a check on each file found to ensure that its stated version matched the currently-installed version of vBulletin. Therefore, a 3.5.2 version of forumdisplay.php would be flagged for attention on a board running 3.5.3.
The new and improved suspect file versions system extends the file checking functionality in the following ways:
File version mismatch:
The system still checks for mismatched versions
File not found:
The system will identify any missing files
File not recognised:
It will also flag any script files in vBulletin directories that are not part of vBulletin
Unexpected file contents:
The final and most important check is that on download, MD5 sums are generated for every script file in the downloaded package. The system will now compare the original MD5 sum of each file with its current MD5 sum, so it is now possible to tell instantly if any files have been modified from their original state, making it very simple to see if hacks have been installed or if files have not been uploaded correctly.New Feature: SkypeWeb Integration
SkypeWeb allows the online status of Skype users to be viewed on web pages, and fits very nicely with vBulletin.
Implementational changes: Archive
The output generated by the Archive is now buffered before being sent to the client. Plugins for the Archive that generate output must be adapted in order to work correctly.
Updating your vBulletin to combat the XSS flaw:
Versions of vBulletin 3.5 from 3.5.0 Beta 1 to 3.5.3 are affected by the XSS flaw so we recommend that customers upgrade or patch their installations.
In previous versions of vBulletin, the 'Suspect File Versions' system (AdminCP > Maintenance > Diagnostics > Suspect File Versions) performed a check on each file found to ensure that its stated version matched the currently-installed version of vBulletin. Therefore, a 3.5.2 version of forumdisplay.php would be flagged for attention on a board running 3.5.3.
The new and improved suspect file versions system extends the file checking functionality in the following ways:
File version mismatch:
The system still checks for mismatched versions
File not found:
The system will identify any missing files
File not recognised:
It will also flag any script files in vBulletin directories that are not part of vBulletin
Unexpected file contents:
The final and most important check is that on download, MD5 sums are generated for every script file in the downloaded package. The system will now compare the original MD5 sum of each file with its current MD5 sum, so it is now possible to tell instantly if any files have been modified from their original state, making it very simple to see if hacks have been installed or if files have not been uploaded correctly.New Feature: SkypeWeb Integration
SkypeWeb allows the online status of Skype users to be viewed on web pages, and fits very nicely with vBulletin.
Implementational changes: Archive
The output generated by the Archive is now buffered before being sent to the client. Plugins for the Archive that generate output must be adapted in order to work correctly.
Updating your vBulletin to combat the XSS flaw:
Versions of vBulletin 3.5 from 3.5.0 Beta 1 to 3.5.3 are affected by the XSS flaw so we recommend that customers upgrade or patch their installations.