| Author |
 Topic Search  Topic Options
|
WebWiz-Bruce 
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: Web Wiz Forums version 7.95 released
Posted: 19 October 2005 at 7:00am |
Web Wiz Forums version
7.95 has been released today. This new version has a number of security
and bug fixes as well as some new features including the integration of
the soon to be released Web Wiz CAPTCHA image software.
This is the first major release of Web Wiz Forums since last year and the new features and bug fixes include:-
- Web Wiz CAPTCHA software integration
- Extra security for login and registration pages using Web Wiz CAPTCHA image technology
- Support for SMTP Server authentication
- Support for ‘locahost’ SMTP servers
- New International Date function to fix CDate bug that affects some servers
- Improved performance and CDate bug fix for Active Topics page
- CAPTCHA security images now work in ‘Lite’ version
- New Google Ads
- Update to copyright display
- + Many other improvements and bug fixes
As the ADO.Stream object is no-longer required for the running of
Web Wiz Forums this object can be disabled on servers for extra
security as a number of hackers have been using this object to hack web
sites and installations of Web Wiz Forums.
To download the latest version follow the link below:-
Download Web Wiz Forums version 7.95
Edited by -boRg- - 31 October 2005 at 10:56am
|
|
|
 |
dfrancis
Senior Member
Joined: 16 March 2005
Location: United States
Status: Offline
Points: 442
|
Post Options
Thanks(0)
Quote Reply
Posted: 19 October 2005 at 7:43am |
Thanks Wizmasta!
Now, for the inevitable question. If upgrading a customized forum, which files are necessary to change in order to implement the security fixes. I ask because I am really holding our for v8 before a total re-write of the site.
I have sql v7.92 installed and working fine and would prefer, on your counsel, wait for v8.
What say you wise wizmasta?
(I just don't want to go through this and then in a few months say, "Shucks, I coulda had a V-8."  )
|
|
Muskan
Groupie
Joined: 14 May 2004
Status: Offline
Points: 40
|
Post Options
Thanks(0)
Quote Reply
Posted: 19 October 2005 at 11:16am |
|
I would also like to know the same. Using 7.92 sql version which has been modified by mods and other changes. So will need explicit guidelines about updating from 7.92 to 7.5
And when will V8 come out?
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 19 October 2005 at 11:49am |
|
The changed files are listed in the version history file:-
Changes from version 7.92 to version 7.95
------------------------------------------
1. email_messenger.asp - fixed email address bug
2. functions_send_email.asp - changed to allow CDOSYS to use localhost mail server
3. login_user.asp - fixed un-active user bug
4. post_message.asp - fixed editing page bug
5. post_message.asp - fixed subject editing bug
6. register.asp - intergrated new improved CAPTCHA security image with Web Wiz CAPTCHA v1.0 - www.webwizcaptcha.com
7. login_user.asp - now shows CAPTCHA images by default
8. admin/default.asp - intergradted new CAPTCHA images for login
9. CAPTCHA/CAPTCHA_form_inc.asp - new file for CAPTCHA form
10. CAPTCHA/CAPTCHA_image.asp - new file for CAPTCHA images
11. CAPTCHACAPTCHA_setup.asp - setup file for CAPTCHA images
12. common.asp - updated version number
13. admin/common.asp - updated version number and new login for CAPTCHA images
14. default.asp - updated HTML head content
15. updated the copyright on all files to read 2005
16. functions/functions_send_mail.asp - updated to support JMail4 and SMTP authentication
17. language_files/language_file_inc.asp - updated to reflect new CAPTCHA image text
18. includes/adds_inc.asp - new ads file
19. functions/functions_date_time_format.asp - updated for improved performance
20. functions/functions_common.asp - added new function to calculate an international date that should work across all servers
21. post_message.asp - now uses new international date function
22. common.asp - updated to use international date function and should fix the CDate error that effects some servers
23. include/active_users_inc.asp - now uses international date function
24. mark_posts_as_read.asp - same as above
25. functions/functions_format_post.asp - updated edit parser to display edit date from international date format
26. admin/functions/functions_format_post.asp - updated edit parser to display edit date from international date format
27. default.asp - updated to use new last date cookie
28. active_topics.asp - same as above
29. remove_coookies.asp - same as above
30. active_topics.asp - improved performance and fixed LCID bug that effects some servers
31. security_image.asp - removed file as it is no-longer used
Version 8 is still some way off as when I finsh re-writing all the
files for the new permissions system I then need to add new fetaures
and look at making it compatible with mySQL. There is still allot of
work to be done.
Edited by -boRg- - 20 October 2005 at 5:56am
|
|
|
|
JJLatWebWiz
Groupie
Joined: 02 March 2005
Location: United States
Status: Offline
Points: 136
|
Post Options
Thanks(0)
Quote Reply
Posted: 19 October 2005 at 11:50am |
|
After looking over the files mentioned in the new version history and comparing those to 7.92, it appears that there is a fix in post_message.asp that prevents a recently reported hack vulnerability. So, replacing post_message.asp is probably MOST important, assuming the rest of your forum is not having problems with international dates and emailing and performance. HOWEVER, the new post_message.asp also uses a new "internationalDateTime()" function, so functions/functions_common.asp must also be replaced. The new function is the only change to functions/functions_common.asp.
I just used MS Word to compare the 7.92 to 7.95 files, so I might have missed something. The changes aren't dramatic in how the code looks, but significant in how they secure the forum.
|
|
p.s. I'm not affiliated with Web Wiz Guide in any way. I'm just an average Web Wiz user repaying my debt for the use of their fine forum by trying to help other Web Wiz Guide users.
|
|
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 19 October 2005 at 12:47pm |
|
If you just want to patch your forum to prevent the reported hack
vulnerability as JJL surgests, then just changing the following files
should be OK:-
post_message.asp
functions/functions_common.asp
functions/functions_format_post.asp
I've not tested just replacing these files, but from the chnages that I
have made the forum should run without problems by just replacing these
files. (it will certainly patch the vulnerability)
|
|
|
|
marcosstgo
Newbie
Joined: 10 September 2005
Status: Offline
Points: 2
|
Post Options
Thanks(0)
Quote Reply
Posted: 19 October 2005 at 1:59pm |
I update from 7.92 to 7.95 and display this error in login_user.asp.
What i do to fixed? Thanks!!
Microsoft VBScript runtime error '800a01f4'
Variable is undefined: 'strTxtEnterCAPTCHAcode'
/forum/login_user.asp, line 389
|
|
superlative
Groupie
Not Comparative, I m Superlative :)
Joined: 26 November 2004
Location: Turkey
Status: Offline
Points: 125
|
Post Options
Thanks(0)
Quote Reply
Posted: 19 October 2005 at 3:18pm |
 dfrancis wrote:
Thanks Wizmasta!
Now, for the inevitable question. If upgrading a customized forum, which files are necessary to change in order to implement the security fixes. I ask because I am really holding our for v8 before a total re-write of the site.
I have sql v7.92 installed and working fine and would prefer, on your counsel, wait for v8.
What say you wise wizmasta?
(I just don't want to go through this and then in a few months say, "Shucks, I coulda had a V-8." )
|
My question is same yours.i fix some bugs our in our forum. But i modify a lot of page. For this reason i wait V8. I stop update wwf at 7.92. And i dent user editable message properties. I wait v8 sql edition. And re-write my modified pages and translate to turkish.
|
|
|
|
