Update to Security Fix 1.03 does not work

[Angelus]

Hi.

I updated my phpbb Security from 1.02 to 1.03 as it is described in the update Files.

But after this I have this message in my ACP under "phpBB Security Status":

The newest release is 1.0.3. The version you are using is . So I would have to say you need to upgrade ASAP!

My actual Version is not read.

The second thing is that I could not find where to set the minimum password length or anything else what the mod should do. I looked in the Configuration and in Security but could not find anything.

Hope anyone can help.

Greetings
Thorsten

[IntegraMOD]

Did you do the edits manually or just upload the pre-done files, if manual go through all the edits as you may of missed something, also did you run the update.php file

[Angelus]

HI. I forgot to upload ps_upgrade.php. And I did the update manually because I have installed some mods. But now there are still no entries in the board configuration or the security settings.

I will look to the changes again but I'm really sure that I done the changes correct.

Greetings
Thorsten

[Flex]

So you forgot to upload ps_upgrade.php and now? Is there still a problem even after running the upgrade?

[Angelus]

Yes as I said I still can't find any new settings for password.

Only the ACP mainpage shows that I have installed 1.03.

I looked through the code changes again and it seems everything is correct.

Any ideas?

Greetings
Thorsten

[Angelus]

Now I tried something else. BEcause I think I haven't changed something within the files for 1.02 I copied the premodded files. But I still can't find any options for the length of password.

Where should this be set?

Greetings
Thorsten

[computerz]

HI. I forgot to upload ps_upgrade.php. And I did the update manually because I have installed some mods. But now there are still no entries in the board configuration or the security settings.

I will look to the changes again but I'm really sure that I done the changes correct.

Greetings
Thorsten

For future reference, you have to be really, really, really careful when applying changes, else you run into unecessary problems.

Go to your database using phpMyAdmin, and browse the phpbb_config table. Expand the table to show all rows. See if you have rows labled as such and see if you have any values in them.

phpBBSecurity_login_limit
phpBBSecurity_notify_admin
phpBBSecurity_notify_admin_id
phpBBSecurity_auto_ban
phpBBSecurity_allowed_sessions
phpBBSecurity_DDoS_Ban
phpBBSecurity_Encoded_Ban
phpBBSecurity_Union_Ban
phpBBSecurity_Clike_Ban
phpBBSecurity_SQL_Ban
phpBBSecurity_File_Ban
phpBBSecurity_Perl_Ban
phpBBSecurity_total_attempts
phpBBSecurity_Cback_Ban
phpBBSecurity_Allow_Change
phpBBSecurity_notify_admin_pm
phpBBSecurity_notify_admin_em
phpBBSecurity_DDoS_level
phpBBSecurity_per_page
phpBBSecurity_allowed_admins
phpBBSecurity_disallowed_agents
phpBBSecurity_disallowed_referers
phpBBSecurity_last_backup_date
phpBBSecurity_backup_time
phpBBSecurity_backup_on
phpBBSecurity_backup_folder
phpBBSecurity_backup_filename

Then try changing a setting in your ACP and then look back in your db to see if the setting took effect. If not, then you have a code edit, i.e a manual error.

[Angelus]

I have the following rows:

Code: Select all

 phpBBSecurity_allowed_admins   phpBBSecurity_allowed_sessions  phpBBSecurity_Allow_Change  phpBBSecurity_answer   phpBBSecurity_answer_over  phpBBSecurity_auto_ban  phpBBSecurity_backup_filename  phpBBSecurity_backup_folder  phpBBSecurity_backup_on  phpBBSecurity_backup_time  phpBBSecurity_Cback_Ban  phpBBSecurity_Clike_Ban  phpBBSecurity_DDoS_Ban 1 phpBBSecurity_DDoS_level  phpBBSecurity_disallowed_agents   phpBBSecurity_disallowed_referers   phpBBSecurity_Encoded_Ban  phpBBSecurity_File_Ban  phpBBSecurity_guest_matches  phpBBSecurity_last_backup_date  phpBBSecurity_login_limit  phpBBSecurity_notify_admin  phpBBSecurity_notify_admin_em  phpBBSecurity_notify_admin_id  phpBBSecurity_notify_admin_pm  phpBBSecurity_password_min_length  phpBBSecurity_Perl_Ban  phpBBSecurity_per_page  phpBBSecurity_question   phpBBSecurity_question_over  phpBBSecurity_SQL_Ban  phpBBSecurity_total_attempts  phpBBSecurity_Union_Ban  phpBBSecurity_use_password_length  phpBBSecurity_use_password_match  phpBBSecurity_version

Only 5 have no value]  phpBBSecurity_allowed_adminsphpBBSecurity_answer  phpBBSecurity_disallowed_agents   phpBBSecurity_questionphpBBSecurity_disallowed_referers  [/code]

If I change the name of a backup this is applied. But If I try to change the number of admins allowed this is not applied in DB.

And I still can't find any option in the ACP where to set the password length.

[Jacky]

OK, I need to say that in the readme.txt and in the installation/update file, there is nothing telling you that you need to upload the ps_upgrade.php. I myself have also overlooked it, since it was not listed in the readme.

Perhaps it should be added to the readme?

[IntegraMOD]

OK, I need to say that in the readme.txt and in the installation/update file, there is nothing telling you that you need to upload the ps_upgrade.php. I myself have also overlooked it, since it was not listed in the readme.

Perhaps it should be added to the readme?

It is shown here in phpbb_security_102_to_103.txt

Code: Select all

################################################################# ## MOD Title]http://www.phpbb.com/mods/[/url] for the ## latest version of this MOD. Downloading this MOD from other sites could cause malicious code ## to enter into your phpBB Forum. As such, phpBB will not offer support for MOD's not offered ## in our MOD-Database, located at: [url=http://www.phpbb.com/mods/]http://www.phpbb.com/mods/[/url] ############################################################## ## Author Notes: Before uploading any files you MUST read README_FIRST.txt, ##               it has important information in it.  Without this information,##               this mod will NOT function!##   ##               After editing the files upload ps_upgrade.php to your root folder.##               Visit ps_upgrade.php with your browser and then make sure to DELETE IT##               immediately afterwards.##############################################################

[Angelus]

Can anyone please post a picture where the new settings are shown?

[Jacky]

OK, I need to say that in the readme.txt and in the installation/update file, there is nothing telling you that you need to upload the ps_upgrade.php. I myself have also overlooked it, since it was not listed in the readme.

Perhaps it should be added to the readme?

It is shown here in phpbb_security_102_to_103.txt

Code: Select all

################################################################# ## MOD Title]http://www.phpbb.com/mods/[/url] for the ## latest version of this MOD. Downloading this MOD from other sites could cause malicious code ## to enter into your phpBB Forum. As such, phpBB will not offer support for MOD's not offered ## in our MOD-Database, located at: [url=http://www.phpbb.com/mods/]http://www.phpbb.com/mods/[/url] ############################################################## ## Author Notes: Before uploading any files you MUST read README_FIRST.txt, ##               it has important information in it.  Without this information,##               this mod will NOT function!##   ##               After editing the files upload ps_upgrade.php to your root folder.##               Visit ps_upgrade.php with your browser and then make sure to DELETE IT##               immediately afterwards.##############################################################

Yes, that is the installation/update file. If you are planning to use the pre-MODDed files, I don't think you will bother to read the install file, since that's for manual update.

I would suggest listing in the readme as well since that's the first thing a user will read. I DID take note of the includes/phpbb_security.php part where you have to edit the config names.

[Angelus]

Where are the config names saved because I'm not sure that my old phpBB_security file entries are correct.

And still the question if someone can tell me where to find the new options!!!!

[odius]

ya i got the same error, until i re-ran the ps_upgrade.php from the site root directory n it fixed it.

[Angelus]

Obviously nobody has the same problems expect us. Or nobody knows how to solve this <img>

Greetings
Thorsten

[Teelk]

Here's a quote from another post that should help you get the fields that you need.

Unfortunately, they're impossible to find if you don't know what you called them. Unless you know this little trick.

Using phpmyadmin, browse the config table looking for three field's config_name(s); sec_admin, sec_mods and sec_name.

The config_value of each is the same as phpbb_security.php values.

sec_admin = number of allowed admins.
sec_mods = number of allowed mods
sec_name = blocks unwanted... whatever it blocks...

Just so there's no confusion I'll repeat...

You want the config_value of these three fields.

[Angelus]

These fields I have.

But somewhere you should be able to set the minimum password length don't you? But this setting I can't find for example!!!

Greetings
Thorsten

[IntegraMOD]

What order did you update from 2.0.17.

2.0.18
2.0.19
2.0.20
2.0.21
1.03

I think thats was the way I did it, also make sure you run the apdate that comes with every version upgrade?
[flash=,:13dzh6so]http://www.gffb.net/ian/image2.jpg[/flash:13dzh6so]

[Teelk]

The order in which the patches were released is as follows...

2.0.17 to 2.0.18
2.0.18 to 2.0.19
phpBB Security update
2.0.19 to 2.0.20
2.0.20 to 2.0.21

This should be the order in which you update, I've also seen some people install the phpBB Security update first without any problems.