Main fixes:

- PHP sessions vulmeerability

- fixes in user's registrations and profile when you define custom field

- ability to display user's info in posts (done mostly for people who need avatars, signatures and other user's info displayed near his message). Currently, you can view part of that feature when we display "~www" link near each user's post (if available). We tried to implement this as fast as possible - it takes plus only 2 additional SELECT requests to database when generating a thread. This feature will not be enabled by default.

Download/Upgrade here, see !UPDATE.txt file for upgrading details.

Any update on this?
Andrew.

Released.

Team,

May I simply change the modified files since the initial RC2 excepting setup_options.php and to test the new version this way (until I make the embroidery to setup_options.php) :)

Shall I lose anything excepting the new option about the user's details?

I hope, you may. There were no critical changes or replacements.

Hi Team
whats with the mentioned session vuln? now sesiions useable over the internet? or still only for intranet use?

Fritzek
We just removed cookie setting when sessions are used. So, when you use sessions, miniBB's "original" cookie should not be set.

ok, will try it and come back

Last question on that :)

May I reach the same newest file setup_options.php, if I get the one from the pure RC2 and add at the bottom:

//$userInfoInPosts=array();

Sorry if I'm boring but I want to avoid some work now :)

Yes, you can, for sure.
Moreso - that's exactly the way you should do.

Thanks :)

small bug:

I've created a forum category which is a archive category
(with: $roForums=array(8); )

But, although nobody else than the admin can post in this forum, a message at the top of the forum appears, which says that the forum category is empty and I can post the first thread (I'm not logged in at this moment, I'm a guest!). Ok, there's no button for creating a new thread, but this message is nonsense in this case :-)

Is that understandable for you? My english is very bad, sorry.

Yes, I understand that. But what is the purpose of that forum for you if it is empty?

If that category will be used as a archive in future and is empty at the moment.

Why don't you use the great alternative quotation (which you can get under "downloads") as default in the downloadable miniBB sub-version 2.0 RC2b?

The simple Italic function isn't good.