[robbiefritz]

Originally Posted by Lynne

I asked if you manually went and ran that script. If you did not, you WILL have problems. Many, many, MANY people skipped that step. This is NOT a normal patch release where all you have to do is upload the files. You MUST run the script also.

The instructions are NOT very clear on this. It leads one to believe that if you have sl2 or 3 you only need to upload the files.

The upgrade process is the same as previous patch level releases - simply download the patch from the Members Area, extract the files and upload to your webserver, overwriting the existing files. There is no upgrade script required if you are currently running 4.0.2 PL2 or PL3. If running 4.0.2 or 4.0.2 PL1 see the details below as the process is slightly different.

As with all security-based releases, we recommend that all customers upgrade as soon as possible in order to prevent any potential damage resulting from the flaw being exploited.

There is no need to run an upgrade script if you are already running the latest version (4.0.2 PL3).

If you are running 4.0.2, or 4.0.2 PL1 you should follow these steps.
1) Download the 4.0.2 PL4 patch files.
2) Set your site to be offline.
3) Make sure your install directory still exists. If not, upload the install directory from your vBulletin package to your vBulletin directory, leaving out install/install.php.
4) Upload the patch files to your vBulletin directory.
5) Run the url http://your.site.com/vBdirectory/ins...e_402_salt.php
6) Set your site to be online.
This will address all PL fixes, including the fixes contained in 4.0.2 PL3. It is not necessary to run any other scripts.

Is step 5 required even when the statement reads otherwise? I am not trying to be smart but I am not a seasoned vBulletin member and if I read that a script run is not required that how can I be sure when the instructions are as written?

--------------- Added [DATE]1270427585[/DATE] at [TIME]1270427585[/TIME] ---------------

Uploaded files again and ran script. Members are noting that they can log in. Thanks Lynne.