You will need to check your error log for the real reason behind a 500 Internal Server Error.

Fillip

I have similar problem. User can't reset password. Error message was displayed after clik on reset link.

When I downgraded to 2.2.0 everything is ok.

I had to disable it didnt have time to debug this time, but will re install next version.

Sorry about that, I've updated the zip file with a fixed XML file :)


Fillip

vBSecurity v3.3.0:
Feature: New option: Enable Account Breach Check
Feature: New option: Account Breach Check: Check Username

This mod has been updated to be brought in line with the XenForo version.

Fillip

I updated this today (overwriting the old install) without realizing that I needed PHP Ver 5.6. I have PHP 5.3.29. Can I get the latest version that works with 5.3.29 please?

Thanks.

I'm really impressed with some of the features in the new version of this modification. Thanks for all the good work.

I notice you included instructions for using bcrypt for passwords. Do those instructions re-encrypt the entire password database? This is a huge issue that I've been concerned about for some time. I also would like to ask the impact of forum upgrades - so if you deploy it in 4.2.5 and then upgrade to 4.2.6, do you need to make those changes again?

Any file modifications will need to be reapplied in the event of a forum upgrade. Running the BCrypt action in the AdminCP does add additional BCrypt hashing to passwords in the database, yes.


Fillip

The download package has been updated to address a minor security vulnerability that could allow an attacker to inject code for their own user only (not other users) when viewing their currently active login sessions.

This vulnerability cannot be used to exploit your forum, this is not a critical vulnerability.

Fillip

If I do a mass password reset for all of my users, will they get an email saying that their password was reset? If so, can I customize that email?

Thanks