| Author |
 Topic Search  Topic Options
|
harry 
Newbie
Joined: 24 July 2007
Status: Offline
Points: 5
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: hacked: patch from 8.03
Posted: 24 July 2007 at 1:36am |
Hello,
I've not been on the forums for a while, was quietly letting my site run with 8.03 and then today it was hacked. Yes I know I should've kept it right up to date, but my site is pretty small and I didn't ever think this would be an issue.
But now that you've gone to version 9 (congrats btw, looks lovely) I don't see any version 8 downloads. Sure I could goto 9, but want to first quickly patch to the latest and securest version of 8 before I look into what is required and what changes are in version 9. So can someone link me to a patch to the latest version please.
Thanks.
|
 |
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 July 2007 at 8:33am |
|
Going from 8.03 to 8.06 would be pretty much the same amount of work as going from 8.03 to 9.0, so you may as well go for version 9 as it has allot more security against XXS hacking.
|
|
|
|
harry
Newbie
Joined: 24 July 2007
Status: Offline
Points: 5
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 July 2007 at 3:35pm |
Ok I'll give it a shot! So how do you upgrade from version 8? I've looked for an upgrade script or instructions on the website and forum and can't see anything??? You always had a guide for previous versions.
Also I think it's a bad idea to remove all links to version 8 downloads. Some people might need access to earlier versions if they are not ready to upgrade to version 9.
|
|
billd3
Senior Member
Joined: 19 February 2003
Location: United States
Status: Offline
Points: 530
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 July 2007 at 3:41pm |
|
Tip:
First thing I did - extract all the files of 8.06 and burn a CD - even if I screw-up badly, I can always use the original files from the CD........
Download your version, extract the files, burn them to CD in the proper folder structure. Good reference, too.
|
|
BillD
http://theamcpages.com
http://theamcforum.com
|
|
javi712
Senior Member
Joined: 22 May 2003
Location: United States
Status: Offline
Points: 488
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 July 2007 at 4:26pm |
|
Yes and upgrading takes less than 3 seconds. The upgrade tool is included in the download.
|
|
billd3
Senior Member
Joined: 19 February 2003
Location: United States
Status: Offline
Points: 530
|
Post Options
Thanks(0)
Quote Reply
Posted: 24 July 2007 at 4:45pm |
|
Much to his credit the man doesn't seem to leave users hanging out to dry when he makes changes, even major ones.
|
|
BillD
http://theamcpages.com
http://theamcforum.com
|
|
harry
Newbie
Joined: 24 July 2007
Status: Offline
Points: 5
|
Post Options
Thanks(0)
Quote Reply
Posted: 26 July 2007 at 3:06pm |
Ok, I've just upgraded from 8.03 to 9. It was fairly painless, a couple of suggestions.
1. Within the upgrade scripts strDbTable is hardcoded to "tbl". That's fine for the 99.98% of installations that use the default settings, but it should be one of the install options (if you can change dbo, then you should be able to change this, without going in and editing the code).
2. The install guide on the website in the FAQ assumes the install is for new installs. Fine, but somewhere it should make mention of the upgrade path, cos otherwise some people will be running steps they don't need to make.
3. Finally, Private Messaging and File Uploads are in the "Premium" version only? WTF? This upgrade is for me a major step back. Apart from the interface having a minor refresh I've not noticed any major features or improvements in version 9, I only upgraded due to security concerns and now I find myself with a product that lacks features that I am used to and expect as part of a basic forum package. I think i'll have to look into alternative forums now, for me the site licence is not an option as the website i'm running it on is already running at a loss. Not impressed.
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 26 July 2007 at 3:47pm |
|
1. This will be looked into
2. This is in hand, but with staff working 12 hour days for the last 6 months some of us do need a break once in a while
3. You can't expect my staff to work doing 1 & 2 for no pay, and expect all the other bells and whistles for nothing!! Staff costs, taxs, servers, phones, software development, support, offices, software, etc. all costs money.
Yes you can get other forums for free, but do they include telephone support, new regular versions, high level of security, 1 hour support ticket response, supports from qualified developers, and a 2 hour patch policy for any reported vulnerabilities.
Web Wiz Forums is aimed more at the heavy user and business users who need a stable product, high level of response, good technical phone and email support, and a secure and robust package.
For the home/novice user there are plenty of free forums around with online community support that may or may not have bugs fixed by someone in their spare time, and you may or may not get a support question answered by the middle of next week, by an unqualified user who is having a stab in the dark.
The fact that we have a free version at all which is supported through our online support forums should be a bonus, as novice home/users get a high level product without having to shell out.
Edited by -boRg- - 26 July 2007 at 3:50pm
|
|
|
|
