Another forum upgrade brought to you by Wes. Plus PHP!

Wesley

Forum Administrator, DR's Webmaster and Treasurer
Staff member
Joined
Aug 11, 2012
Messages
701
Points
18
Ahoy everyone!

I'm glad to say that I have upgraded our vBulletin version to 4.2.4!
We hit a bit of a snag on this one, at the time, we was running PHP 5.4.45, and vBulletin 4.2.4 required a minimum of at least PHP 5.5+

After going through Hostgator Support to upgrade our PHP version the first time, something happened and it didn't work, causing our upgrade to fail and throw syntax errors. Took me hours to get everything reverted back to normal, making sure the database was ok, etc.

So, I got in touch with Hostgator Support AGAIN, and it finally worked. We now run PHP 5.6.29 (which is a stable version of PHP, 5.4.45 was outdated and EOL [End of Life, basically means there's no support for it, unstable, and vulnerable]) which means I was about to upgrade us to vBulletin 4.2.4.

vBulletin 4.2.5 seems to be coming out fast though, as it is in Beta 3. The unfortunate thing is that 4.2.5 requires a higher MySQL version than we do. We're currently running MySQL 5.5.51-38.2, while vBulletin 4.2.5 requires us to have a minimum of MySQL 5.5.8+

To upgrade our MySQL we would actually have to switch to a different plan with Hostgator, cheapest one being the Baby Cloud Hosting Package which costs $13.95 USD, two dollars more than our current $11.95 USD. We're going to discuss what to do when that version comes out of Beta and has it's first stable version for everyone to use.

ANYWAY, for those of you who actually keep up with this stuff, here's the changelog for this vBulletin version:
NOTE: These are all fixed, not current bugs.
Code:
Bug

    [VBIV-424] - Tag search does not give chronological results (Regression from vB3)
    [VBIV-15670] - Facebook Embedded Video has changed, <object> tag no longer works
    [VBIV-15929] - Thread cannot be submitted if synonym tag is used.
    [VBIV-15954] - Error when merging posts due to latest security patch
    [VBIV-15963] - Bad table BBCode can killl threads- makes page timeout
    [VBIV-16006] - Mobile style does not respect show['tag_box']
    [VBIV-16023] - email TLS needs to use tls:// instead of ssl:// for certain SMTP service providers
    [VBIV-16102] - Skype status fails - Microsoft have changed how it works
    [VBIV-16108] - multi-quotes cookie not being removed after quick reply
    [VBIV-16113] - Incorrect time zones in Russia
    [VBIV-16124] - "For your information" block in Admin CP is messed up
    [VBIV-16130] - threadbits API fix to prevent mobile app crashes
    [VBIV-16135] - vB4 with empty Activity return error JSON to mobile Client
    [VBIV-16137] - Active user count refers to incorrect field
    [VBIV-16138] - non-poll thread does not show in Mobile app's postview
    [VBIV-16139] - Change Message_Plain return from showthread api
    [VBIV-16145] - cpnav.xml files doe not allow multiple permissions to be listed
    [VBIV-16148] - Missing phrase 'avatar' from maintenance phrase group
    [VBIV-16159] - Panjo Plugin Needs Removing
    [VBIV-16161] - Typo in vB_ProfileBlock_VisitorMessaging $pageindo instead of $pageinfo
    [VBIV-16167] - ALTER IGNORE Table produces error in MySQL 5.7.4 and higher
    [VBIV-16178] - ForumRunner code still using split()
    [VBIV-16184] - Warning in class_dm_threadrate.php
    [VBIV-16185] - Date field defaults in MySQL 5.7
    [VBIV-16198] - ACP : Newer version does not display if there is no other news
    [VBIV-16201] - Undefined constant used in forumrunner and skimlinks
    [VBIV-16206] - Warnings in ACP rebuild user titles and ranks
    [VBIV-16208] - PHP Warning: Invalid argument supplied for foreach() in ..../includes/functions_prefix.php on line 131
    [VBIV-16210] - Strict Standards: Static function vB_Route::getURL() should not be abstract in ...../vb/route.php on line 428
    [VBIV-16212] - PHP Warning: Only variables should be passed by reference in ....\includes\class_dm_user.php on line 1058
    [VBIV-16213] - Unable to moderate rss feeds from admincp
    [VBIV-16223] - Creating default object from empty value
    [VBIV-16225] - Guests can not vote in cms poll widget, even if group has permission to vote in polls
    [VBIV-16230] - JS Error editing a template
    [VBIV-16240] - Array being passed to iconv
    [VBIV-16241] - PHP Error
    [VBIV-16245] - The domain zone in the e-mail is limited to 6 symbols
    [VBIV-16252] - Non-static method should not be called statically
    [VBIV-16253] - PHP Warning: iconv() expects parameter 3 to be string, array given
    [VBIV-16255] - PHP Issues in class_upload.php
    [VBIV-16261] - Proxy detection not working
    [VBIV-16274] - PHP Deprecated: Non-static method - vBBlog_Search_Result_BlogEntry::create_from_record()
    [VBIV-16275] - Notices with time doesn't work in specific case
    [VBIV-16277] - Add exists check to getallheaders in init.php

Feature Request

    [VBIV-16132] - Create MAPI for poll

Improvement Request

    [VBIV-16131] - Wrong filedata.refcount value leads to attachment loss
    [VBIV-16134] - Askimet Update Request
    [VBIV-16147] - When forum setup to allow IPv6 addresses the strikes system does not lock out users with IPv6 addresses
    [VBIV-16153] - Paypal Security Updates
    [VBIV-16175] - Change type of moderatorid field in moderator table
    [VBIV-16186] - Update 4.2.3 install package with fix for old attachments being deleted
    [VBIV-16191] - Update CLI upgrader to allow running of single upgrader version, and start from specific version
    [VBIV-16193] - Remove IE Compatability headers
    [VBIV-16204] - Change Navigation Manager install default to Forum.
    [VBIV-16229] - FATAL ERROR: Invalid URL.
    [VBIV-16263] - Generic Improvement Updates
    [VBIV-16267] - Switch forum read marking to database, and remove cookie marking

Task

    [VBIV-16133] - Update MAPI to v8
    [VBIV-16179] - Remove Postrelease
    [VBIV-16180] - Sync new vB5 bitfields back to vB4 file
    [VBIV-16260] - Remove zend.ze1_compatibility_mode
EDIT: Here's this PDF File as well, it's almost the same thing but it lists everything as fixed and all that.
http://puu.sh/uDD6m/7b449a1cb6.pdf

Thanks for choosing DR!
~Wes
 

Mitsurugi

Community Administrator
Staff member
Joined
Aug 11, 2012
Messages
2,939
Points
38
[glow="lime"]Mozila keeps saying that the connection here is unsafe....[/glow]
 

Wesley

Forum Administrator, DR's Webmaster and Treasurer
Staff member
Joined
Aug 11, 2012
Messages
701
Points
18
That's because all the major browsers are trying to keep users away from unsecured sites (http) and to only trust information to https sites.
We don't have a SSL (Secure Socket Layer) license to make us https.
 

Mitsurugi

Community Administrator
Staff member
Joined
Aug 11, 2012
Messages
2,939
Points
38
[glow="lime"]DR logo is gone from the bookmark T.T[/glow]
 

Wesley

Forum Administrator, DR's Webmaster and Treasurer
Staff member
Joined
Aug 11, 2012
Messages
701
Points
18
Our vBulletin was upgraded to 4.2.5!

Please note: this will be the FINAL version of vBulletin 4.X.X they now consider this version of the forum as EOL (End of Life) and won't be releasing any more major upgrades. Security patches, however, will still be given when needed.

"The vBulletin 4.X Publishing Suite is considered to be End of Life software. While we will strive to support the latest version, we do not foresee any further development of the series."
~Wes
 

Sheen

Duelists Server Admin
Staff member
Joined
Aug 11, 2012
Messages
182
Points
16
That's because all the major browsers are trying to keep users away from unsecured sites (http) and to only trust information to https sites.
We don't have a SSL (Secure Socket Layer) license to make us https.
Do you have any plans to get one? I'll happily donate for you to get one?
 

Wesley

Forum Administrator, DR's Webmaster and Treasurer
Staff member
Joined
Aug 11, 2012
Messages
701
Points
18
Do you have any plans to get one? I'll happily donate for you to get one?
Wow, I really don't know how I missed this lmao. We do plan on getting one one day :)
 

Umi

Donator
Joined
Nov 2, 2012
Messages
46
Points
0
Wow, I really don't know how I missed this lmao. We do plan on getting one one day :)
Letsencrypt provides free SSL certs that are trusted by all major browsers
https://letsencrypt.org/

Dunno if your web host supports them but https is a very important feature for a website these days. Not only will it prevent sensitive information sent in plain text in HTTP requests, it will also prevent MitM attacks.


EDIT: alternatively you can add daemonsring.com to Cloudflares network and use their SSL service ( https://www.cloudflare.com/ssl/ ) but rolling your own security is much preferable
 
Last edited:

Sheen

Duelists Server Admin
Staff member
Joined
Aug 11, 2012
Messages
182
Points
16
Letsencrypt provides free SSL certs that are trusted by all major browsers
https://letsencrypt.org/

Dunno if your web host supports them but https is a very important feature for a website these days. Not only will it prevent sensitive information sent in plain text in HTTP requests, it will also prevent MitM attacks.


EDIT: alternatively you can add daemonsring.com to Cloudflares network and use their SSL service ( https://www.cloudflare.com/ssl/ ) but rolling your own security is much preferable
Last I checked the host was HostGator.. which I'm really not sure if they support Let's Encrypt, but I hope they do.. because hosts that still rip customers off by selling SSL Certificates should be ashamed of themselves!
 

Wesley

Forum Administrator, DR's Webmaster and Treasurer
Staff member
Joined
Aug 11, 2012
Messages
701
Points
18
Letsencrypt provides free SSL certs that are trusted by all major browsers
https://letsencrypt.org/

Dunno if your web host supports them but https is a very important feature for a website these days. Not only will it prevent sensitive information sent in plain text in HTTP requests, it will also prevent MitM attacks.


EDIT: alternatively you can add daemonsring.com to Cloudflares network and use their SSL service ( https://www.cloudflare.com/ssl/ ) but rolling your own security is much preferable
EDIT: Actually guys, I got SSL enabled on the website ;)

https://www.whynopadlock.com/results/9573a23d-8688-4bf8-bb54-4e018112b30c
 

Mitsurugi

Community Administrator
Staff member
Joined
Aug 11, 2012
Messages
2,939
Points
38
[glow="lime"]Thanksies Wesdude[/glow]
 
Top