MyBB 1.8.23

17 July 2020

SecurityMaintenance

code 1823

Full Package

Install a new MyBB forum or upgrade from older versions.

.zip – 2.14 MB

Download from MyBB.com Download from GitHub.com (mirror)

sha512:

b182a2385a6549d24a479a76b2cc09c931f641422dae2d53f007a499ab0e77f490be6fd7c131f2c32d55c462d15ae5a1b68f57b7ea5ae76a1492ab37a03c85de

More checksums…

sha256:

8a9b4aa8b676c38bd35ef10f13aa184495864c79fedaa4fbf1d9f7a52b6fcb32

sha1:

68e76de40cd4d755be6faf418a3a7161da47da81

md5:

b47d8617c1511e98cc14c38c8d34c196

Changed Files

Upgrade from the previous version.

.zip – 0.93 MB

Download from MyBB.com Download from GitHub.com (mirror)

sha512:

cdbd0cdeca2062b42fb79a21d2ccb34c308de25d2e615f62a8788e042e58dc8aa78e3530224f43353a5e45ffd2ab86242ae64e927cffb4f7152c1ac974458c8c

More checksums…

sha256:

806c5d979b3b3b075e492af59190a77e05d4688e49e735632b2fb20c042c48b8

sha1:

e83ad78713e76fe0152f448265d23cfaa160b111

md5:

bbfb91320c08663fa2c58a28119bfbbb

How to verify packages

This release includes added support for hCaptcha, reCAPTCHA v3, APCu, Redis, improvements related to ACP’s Thread Prefixes management, UTF-8 search, performance, and updates jQuery to 3.5.1.

Themes: content of global.css stylesheet may need updating (#3977).

Extension developers: always use verify_post_check() for my_post_key token verification (#4022); positions of some hooks were changed (#3648); the banned datacache was removed (#3878).

Upgrading to this Version

To upgrade: copy and overwrite the files, and run the install/ upgrade script.

Before performing any upgrade, remember to backup your forum’s files and database and store them safely.

If you have edited core files, including language files, please make sure you make a changelog for these changes so you can make them again (if necessary) once the upgrade is complete.

Follow the Upgrade Documentation for more detailed instructions.

Security Vulnerabilities Addressed (1)

Medium risk

Anti-CSRF token disclosure in online status location [1]

CWE-200 CVSS:3.1/PR:N Reported by Mipher

Issues Resolved (101)

View issues on GitHub

[{"admin":[{"inc":["class_page.php","functions.php","functions_themes.php","functions_view_manager.php"]},{"modules":[{"config":["attachment_types.php","report_reasons.php","settings.php","thread_prefixes.php","warning.php"]},{"forum":["attachments.php","management.php"]},{"home":["preferences.php"]},{"tools":["warninglog.php"]},{"user":["admin_permissions.php","banning.php","groups.php","users.php"]}]},"index.php"]},{"archive":["index.php"]},{"inc":[{"cachehandlers":["apcu.php","redis.php"]},"class_moderation.php","class_parser.php",{"languages":[{"english":[{"admin":["config_settings.lang.php","config_thread_prefixes.lang.php","forum_attachments.lang.php","forum_announcements.lang.php","tools_warninglog.lang.php","user_admin_permissions.lang.php","forum_management.lang.php"]},"global.lang.php","memberlist.lang.php","editpost.lang.php","member.lang.php","messages.lang.php","newthread.lang.php","datahandler_warnings.lang.php","misc.lang.php","moderation.lang.php","online.lang.php","usercp.lang.php","private.lang.php"]},"english.php"]},"class_core.php","class_session.php",{"datahandlers":["post.php","user.php"]},"db_pgsql.php","functions_forumlist.php","functions_online.php","functions_search.php","functions_upload.php","class_captcha.php","class_error.php","class_stopforumspamchecker.php","functions.php","db_mysql.php",{"mailhandlers":["smtp.php"]},"class_datacache.php","class_mailhandler.php","db_mysqli.php","db_sqlite.php","functions_archive.php","functions_post.php"]},{"install":[{"resources":["mybb_theme.xml","mysql_db_inserts.php","output.php","pgsql_db_inserts.php","settings.xml","upgrade12.php","upgrade30.php","upgrade50.php"]},"index.php","upgrade.php"]},{"jscripts":["regvalidator.js",{"sceditor":[{"styles":["jquery.sceditor.default.css","jquery.sceditor.modern.css","jquery.sceditor.mybb.css","jquery.sceditor.office-toolbar.css","jquery.sceditor.office.css","jquery.sceditor.square.css"]}]},"jquery.js","post.js","bbcodes_sceditor.js","usercp.js"]},"calendar.php","contact.php","editpost.php","forumdisplay.php","global.php","index.php","managegroup.php","member.php","misc.php","modcp.php","moderation.php","newreply.php","newthread.php","online.php","private.php","report.php","search.php","sendthread.php","showthread.php","usercp.php"]

Changed Files ()

Changed Language Files (19)

There are changes to 19 language file(s). Changed languages files can be cross-referenced from the list above.

Changed Templates (46)

calendar_weekrow_currentday
calendar_weekrow_day
calendar_weekrow_thismonth
codebuttons
editpost
error_nopermission
forumdisplay_thread
header_welcomeblock_guest_login_modal
headerinclude
managegroup_adduser
managegroup_inviteuser
managegroup_user_checkbox
member_profile_adminoptions_manageban
member_profile_contact_fields_skype
member_register
member_register_referrer
member_register_regimage_hcaptcha
member_register_regimage_hcaptcha_invisible
member_resendactivation
memberlist
memberlist_search
modcp_announcements_edit
modcp_announcements_new
modcp_banuser
modcp_finduser
modcp_warninglogs
moderation_delayedmoderation
moderation_threadnotes
multipage_jump_page
mycode_img
post_attachments
post_attachments_attachment_mod_approve
post_attachments_attachment_mod_unapprove
post_attachments_attachment_remove
post_attachments_attachment_unapproved
post_captcha_hcaptcha
post_captcha_hcaptcha_invisible
post_javascript
private_advanced_search
private_send
private_send_autocomplete
search
sendthread
usercp_editlists
usercp_removesubscription_forum
usercp_removesubscription_thread