vBulletin 3.7.5 Released

[Brandon Sheley]

yeah, more updates

[silvermerc]

oo 3.8 thursday woop, just installed 3.7.5 so thats good

[jeefo]

i think ,, mmmmmm

i'll wait for 3.8

[MTGDarkness]

Lemme get this straight. We have to go to the members area, download the entire vBulletin 3.7.5 script, overwrite the current files, and then run an update script? This is the impression I'm getting.

To be honest, this is rather ridiculous. Coming from SMF, I can say that there are way better ways of doing this (Hell, updating from 1.1.6 to 1.1.7 was about 2 clicks in the ACP)... I'd say that install, transfer, and updating is vBulletin's greatest faults... And to be honest, I'd rather not have my forum offline for the time it takes to update all this!

[Wayne Luke]

That two-click upgrade leaves your forums vulnerable to security breaches as well. I guess SMF didn't tell you that. In order for your server to overwrite your code files, they need to by writable by the server. This allows things like the Yahoo Counter trojan to spread across a server hitting every site and infecting thousands of end users. In the past it was a worm specifically designed to infect phpBB installations by exploiting a quick upgrade system like this. They don't even have to attack your site. Just attack a site on your server.

All in all you're forums will need to be offline for less than 10 minutes to upgrade if you have a decent internet connection. Turn them off, Upload Files, Create database Backup, Run Upgrade script, turn them on. If you have SSH access you can lower this to less than a minute or two using this technique.

[MTGDarkness]

if you have a decent internet connection.

Big if here... So there's a good reason, I take it back. Sorry, I spoke too soon. This is part of the reason I like vB... And hate it at the same time. Oh well. But all the files need to be changed? Why all of them? Why not just the ones that have changes? (Guessing there's a simple reason for this and that I'm about to feel pretty stupid again)

[Wayne Luke]

Really the reason that we have you upload all files is that is makes our job easier. A list of changed files is posted in the release announcement.

[MTGDarkness]

kk.

[Gladhatter]

Originally Posted by Wayne Luke

That two-click upgrade leaves your forums vulnerable to security breaches as well. I guess SMF didn't tell you that. In order for your server to overwrite your code files, they need to by writable by the server. This allows things like the Yahoo Counter trojan to spread across a server hitting every site and infecting thousands of end users. In the past it was a worm specifically designed to infect phpBB installations by exploiting a quick upgrade system like this. They don't even have to attack your site. Just attack a site on your server.

All in all you're forums will need to be offline for less than 10 minutes to upgrade if you have a decent internet connection. Turn them off, Upload Files, Create database Backup, Run Upgrade script, turn them on. If you have SSH access you can lower this to less than a minute or two using this technique.

Thank you Wayne for pointing this out to lamers like me. I am like all and do not want my forum down but for God's sake it is better to be down for 10 minutes than 10 days when you get PHPBB hacked every few days or for sure every upgrade period.

I am so grateful to have gotten Vbulletin as I almost did years before and now would not switch for any reason.

As well the 3.8 may appeal to a lot of folks and I too will go to it some day in the future but not for now as I prefer the things I know work over the ones that may and may need some time to finish baking.

I thank however the entire VB team and all the fine coders that contribute to it.

[bleros]

really good job upgrade to 3.7.5