[DragonByte Tech]

Due to an exploit discovered by one of DBTech's members we would like to announce the immediate availability of vBShout v5.4.2:

• It is no longer possible to break the display of vBShout by using %message% or any other % % template variable in user names.
• The CMS tab will once again light up as intended when browsing the vBCMS page
• Editing a shout will now correctly display the old shout in the Command Log

In addition, the following fixes were previously applied to v5.4.1 after its release, and are included in this version:

• The "Max Characters Per Shout" setting is now properly ignored when your Usergroup is a Shoutbox Manager
• You can now properly delete shouts that, for whatever reason, have an instance id set to 0 and show up in your name
• The Shoutbox should no longer interfere with other mods adding themselves to the navbar in vB3

Finally, we have received word from one of our Suhosin users that the workaround did not fully comply with Suhosin's restrictions.

Sadly there's nothing further we can do. Due to the sheer number of features included in vBShout, allowing you to configure them all causes Suhosin to believe that vBShout is a malicious script.

That being siad, we have included a notice for Suhosin users that, if followed, should allow the Instance Management to work as intended. Feedback on whether the tips in the notice worked would be welcome.


Fillip