Is it worth upgrading this time
 

just wondering now cuz like i got 80+ hacks installed and it took a humongous time to update last time due to the hacks installed
is it worth updating from vb 2.30 rc3 to version 2.31 ?
because i haven't really found anything wrong with it

Yes. There is a XSS security exploit that may allow hackers access into your forums. It's obscure, but it's a security loophole.

I need to fix all the errors on my forum before I attempt to upgrade, dangit :(

Upgrading for me is going to be hell. At least now i'm equipped with some knowledge to fix those nasty parse errors ;)

how should i go about updating :(
can i pay someone to do it
last time i had to rehack my forums from scratch

Use araxis merge or beyond compare ^^ :)

I've never used Araxis Merge but I've used Beyond Compare and it is very good.

has anyone updated yet i just want to know how easy / difficult the update is ? from version 2.3

The hard part of the updating is if you have hacks installed. No hacks = no Hassle.

Hacks = Hell as there's 58 files that aren't the same. Good luck.

Well atm Scott MacVicar stated in the announcement that there are still some issues to be fixed and that there would be an update shortly IIRC :)

Yup, 2.3.2 came out.

Long live vB 1:p

;)

Satan

I'm suprised no one has posted just the XSS fixes yet... yes, for some it may be a pain, for those sites that are extensively hacked, it is possible this would be the easiest method.

Someone should do a diff off a clean tree and post .patch files

Posting just the XSS fix would make it obvious how to exploit it.

hehehehehe

Well, we have run into the 'security through obscurity' problem here, which I am not a fan of.

I'd rather be empowered to fix the problem rather then sit around and wait until a hacker figures it out and owns the site.

No one is going to post the fix because it would make the exploit too obvious. The files are provided for you to upgrade with - just use them.

Beyond Compare is a great way to upgrade hacked forums, I'd reccomend that to anyone having trouble with deciding.