Mr. Sam Tomas recently discovered, that if you have magic_quotes_gpc set to OFF in php.ini, there is a very possible vu1neerability with high seecurity risk. In most cases, magic_quotes_gpc is set to ON, and it is set to ON by default in PHP installation, but anyway, it is higly recommended to upgrade to the new version for everybody.

This disclosure was only reported to us and never published by him, so we are VERY thankful to him for that. RC4b fixes bb_cookie.php file, which could be affected. We are also providing new BB codes JavaScript interface in this release, which allow to use JavaScript buttons more native way. Read more in !UPDATE.txt.

Than why, if you excuse my ignorance:

RC4a UPDATE_DB.sql 03..05.2005 => 1,676 bytes

RC4b UPDATE_DB.sql 30.08.2005 => 1,952 bytes

I saw it while I searched for the updated readme.

You don't require to update anything - we just added IGNORE statement so users who will update database, should not have errors on duplicated columns, which may happen often for previous releases.

Thanks!