1.0.0 delta 3

esoBB 1.0.0d3 represents the largest cumulative modification to the core software in a single release, to-date. This update includes security improvements, bug fixes, and new features. It adds a login-based session management system, converts user inputs to prepared statements, finalizes the MD5-to-bcrypt transition and adds WebP support in the form of an all-new Uploader class, which serves as a drop-in replacement for existing file uploader implementations.

Word of note: The 1.0.0d3 installer requires PHP 7.2 or newer. Forum administrators who are still using PHP 5.6 and below should update to the latest version of PHP.

Upgrading from 1.0.0d2 to 1.0.0d3

Despite the numerous modifications made to the database for this release, the upgrade process should be relatively smooth and headache-free. To further simplify the process, it is recommended to disable any plugins before upgrading.

1. Download and unzip esoBB 1.0.0d3.
2. Replace any files in the forum's web server directory (e.g. /var/www/html) matching newer files in the unzipped 1.0.0d3 directory (e.g. /home/simon/1.0.0d3).
   • If you happen to be running Linux, consider using rsync for this:
     rsync -av --progress /home/simon/1.0.0d3/ /var/www/html/
-a (archive mode, preserves file permissions) and -v (verbose)
     Use the --dry-run flag to see what would happen without actually copying.
3. Upon visiting your forum's URL, you should be redirected to /upgrade/index.php (or some variation thereof) and be told that your forum has been upgraded. Hurrah!

Changelog

1. Fix tag cloud to exclude tags from private conversations to prevent spam 0ea7a2e
2. Add variables to skins for resources embedded throughout forum to allow for different names and file types 0ea7a2e
3. Fix conversations with falsy titles not redirecting properly 0ea7a2e
4. Fix username change not requiring session logout; both un and passwordEmail forms now work as intended 0ea7a2e
5. Fix changeAvatar() to check config variable, not just view 0ea7a2e
6. Fix ternary operator syntax error f94b1ce
7. Add color of OP to thumb on conversations in search results d99fb43
8. Fix bug where whitespace in conversation view obstructed style for hiding empty post controls d99fb43
9. Add external class to normal links with different hostname from baseURL d99fb43
10. Fix bug where RSS feed did not parse correctly due to zero-width joiners d99fb43
11. Fix bug where toggleSticky/Lock did not work in footer on mobile view d99fb43
12. Show a more selective tag cloud on mobile view d99fb43
13. Prevent embedded images and videos from taking up the full width of desktops d99fb43
14. Fix cookie logins broken due to transition from MD5 to bcrypt 5b7a4e6, #33
15. Add frame class to image and video formatters for easier skinning 3d40d30
16. Add external links behavior to alert user when clicking on an external link; users can disable this 3d40d30
17. Add checkbox to user settings to disable JS alerts caused by external links 3d40d30
18. Add $position variable to addCSS() for better specification of stylesheet priority/order 3d40d30
19. Fix bug where mailto: address in links (not auto-linked) were declared as external links 3d40d30
20. Fix bug with changeAvatar() avatar color values less than 1 ("white" avatars) 3d40d30
21. Fix warning caused by stats variable in the wrapper 3d40d30
22. Fix formatter: let auto-links use all TLDs and fix editing quotes by updating deprecated /e modifier with preg_replace_callback() c5a09d8
23. Use esoTalk/esoBB name for versions 410e562
24. Create actions table to replace logins and searches; makes it easier for plugins to log individual actions, particularly for flood control measures 3d9d1a1
25. Create cookies table for better management of user cookies (replacing ID&password combo with a random string) thus making it possible for users to delete specific login cookies; necessary for better data compliance 3d9d1a1
26. Add column emailVerified to users table to represent whether a user has verified their email 3d9d1a1
27. Replace makeLink("") with $config["baseURL"] on the "Home" button 3d9d1a1
28. Add "Forgot password" link to the footer on all views 3d9d1a1
29. Add variable $skin->numberOfColors to JS output 3d9d1a1
30. Fix bug with avatarAlignment behavior as none on search results 3d9d1a1
31. Fix bug where users could change their color to a value that does not exist 3d9d1a1
32. Fix bug where changeColor could display colors that do not exist 3d9d1a1
33. Show a message if the user does not have a verified email 3d9d1a1
34. New user setting: rememberMe, whether to store and check for automatic login cookie 3d9d1a1
35. Add check to changeUsername() to prevent suspended users from changing their username 3d9d1a1
36. Add additional check to prevent email requests being spammed by suspended users 3d9d1a1
37. Fix bug where reloadPosts could generate negative limits and display missing posts 3d9d1a1
38. Add touch handlers to pagination for better mobile interaction with the vertical scrollbar 3d9d1a1
39. Add .pTime class to represent post timestamps 3d9d1a1
40. Add function updatePostTimes; post timestamps will update when checking for new posts 3d9d1a1
41. New setting: $config["onlineShowSuspended"], whether to show suspended users in the online list 3d9d1a1
42. New user setting: $config["showOnline"], whether or not to display when the user is online 3d9d1a1
43. Split the setting $config["registrationRequireApproval"] into two separate settings: requireEmailApproval and requireManualApproval 3d9d1a1
44. Add a smiley face emoticon to the "Disable emoticons" setting 3d9d1a1
45. Implement login-based session management system with restructured logins table e1a2253
46. Set session save_path to sessions/ directory e1a2253
47. Set session gc_probability to 1 e1a2253
48. Add session expiration check based on sessionExpire setting e1a2253
49. Add session validation (IP and user agent) e1a2253
50. Refactor cookie-based login to use logins table e1a2253
51. Fix flood control to use memberId=0 for anonymous attempts e1a2253
52. Change config references from `registration...

1.0.0 delta 2

1.0.0d2 contains several bug fixes, new features and updates to the software—most namely compatibility with the latest release of PHP, 8.2.5. It is recommended that you update your forum, as many forum-breaking bugs have been fixed in this version. Instructions on how to update your forum can be found here.

Changelog

1. Fix members tab save settings button #15
2. Fix reference to missing language string a29fc72
3. Use a left and right avatar for both alignments 3f0cc96
4. Fix generating the sitemap and web manifest #17, #18
5. Create new config setting changeAvatar 01fa3d2
6. Fetch a list of unvalidated members in the dashboard 8cc5970, 804baeb
7. Add advanced settings to the dashboard a0b2045, 85e0070
8. Add setting for members to disable emoticons fc35dc3
9. Fixed where selecting 0 as a profile color creates a glitched profile a12c82d
10. Include hardcoded version in installer a229d8c
11. Add languages to the dashboard with an uploader 20455e2, b83938e
12. Allow moderators to access some parts of the dashboard f6474d8, 6009019
13. Remove basePath config setting 6009019
14. Add https to suggestBaseUrl() (install with https) 6009019
15. Define constants for directories 6009019, a9b4d18
16. Add hooks postFooter, profileInfo and settingsPageEnd 28c1515
17. Add PHP 7 compatibility to software and lexer #27, 5dd7404, 31487ea
18. Add MySQL character set to config with setting characterEncoding e6c2d7d
19. Fixed where members could not restore their deleted posts upon refresh of the page 7cd10c4
20. Add "delete forever" to deleted posts that can permanently delete them and update the conversation's lastPostMember and lastPostTime 7cd10c4
21. Use new hashing algorithm for generating passwords (bcrypt, PHP 5.5) b6c4952
22. Get members' 'real' IP address and store in cookieIp as a hash value b6c4952, 01694d3
23. Include $this->bar["right"] (right hand side nav buttons) in footer b6c4952
24. Use flood control measures to prevent mass sign up attempts (counted as logins per minute) 01694d3
25. Select between hashing algorithms bcrypt/md5 during forum setup 01694d3
26. Use MySQLi (mysql improved) database driver over the old one ad016b4
27. Redirect deadlinks to the search controller as queries ad016b4
28. Add PHP 8 compatibility to software ad016b4, 44105ba, ca8f363, 43a6a31, 49ae8a6
29. Config setting usePrettyURLs should now make a difference in whether slugs are included 2c33c2a
30. Allow username change for capitalization of member's name 2c33c2a
31. More elegant redirects for forgot-password and join controllers 2c33c2a
32. Hide certain navbar buttons based on config settings 2c33c2a
33. Member verification e-mails now use resetPassword column for increased security 49ae8a6
34. Config setting onlineMembers set to false will now count all members in the header instead of counting online members 49ae8a6

New contributors

1. @andromeda-Z
2. @b-rd

1.0.0 delta 1

1.0.0d1

Bump version to 1.0.0d1, format statistics

1.0.0 pre 1

This is the first pre-release of eso, the web forum software created for geteso.

Read more about the project here.