Oh no! Where's the JavaScript?
Your Web browser does not have JavaScript enabled or does not support JavaScript. Please enable JavaScript on your Web browser to properly view this Web site, or upgrade to a Web browser that does support JavaScript.
Not a member yet? Click here to register.
Forgot Password?

Advice on upgrade path

Asked Modified Viewed 6,390 times
H
heavencore
H
Semper in excremento sum, sed solum profunditas mutat...
  • Junior Member, joined since
  • Contributed 19 posts on the community forums.
  • Started 6 threads in the forums
  • Started this discussions
asked
Junior Member

Hi there,

I have a few sites running on 7.02.07 - these contain large forums with 1000's of posts, hundreds of users etc

Over the last few months we've been getting hammered with automated attacks and bots. Pen tests show that the vast majority of these flaws are in php itself & recommends updating to php 7.2.4 etc.

As a result, please can I get some input on the following questions:

[olist=1]1: Am i correct in saying Fusion 7 wont run on PHP7
2: Is fusion 9 stable enough for me to consider upgrading now?
3: Wordpress receives security updates almost weekly, there hasn't been security updates for fusion 7 for years - are there known vulnerabilities in fusion 7 that justify updating to 9?
4: Has fusion 9 undergone penetration testing?
5: Is there a revised ETA on fusion 9 going live?
6: Is PHP 7.2.4 supported by fusion 9?
[/olist]
0 replies

13 posts

D
douwe_yntema
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
answered
Senior Member

Fusion 7.02.7 can ben run under PHP 7.1
I have not tested with higher versions of PHP

I have a few sites running under PHP 7.1 with fusion 7
Edited by N/A on 20-04-2018 14:19,
0 replies
R
Anonymous User
R
Anonymous User 367
  • Veteran Member, joined since
  • Contributed 939 posts on the community forums.
  • Started 2 threads in the forums
  • Answered 20 questions
answered
Veteran Member

PHP Fusion 9 fully support latest PHP 7
0 replies
H
heavencore
H
Semper in excremento sum, sed solum profunditas mutat...
  • Junior Member, joined since
  • Contributed 19 posts on the community forums.
  • Started 6 threads in the forums
  • Started this discussions
answered
Junior Member

Hi there,

Thank you for the reply.

However, when i attempt to use 7.02.7 on PHP 7 i get fatal error because maincore.php:295 is trying to use the old mysql functions (mysql_connect).

Have you applied changes similar to this: https://www.php-fusion.co.uk/articles.php?article_id=49

Is there a better way?
0 replies
D
douwe_yntema
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
answered
Senior Member

I use the download from post#2, which can also be found here:
Edited by N/A on 20-04-2018 16:18,
douwe_yntema attached the following file:
fusion702-fix_for_php7.zip [No information available / 266 Downloads]
1 reply
F
Falk
F
Falk 131
Need help?, Having trouble?
• View our Documentation for Guides, Standards and Functions
• Name and Organize your Topics and Content correctly in the corresponding Forums for best support results
• Attaching Log Files and Screenshots when reporting issues will help
• Provide with an URL to live example if one exists
• Please read the How to Report an Error post
• Please read and comply with the Code of Conduct

(¯·._.·(¯°·._.·°º*[ Project Manager ]*º°·._.·°¯)·._.·¯)
  • Super Admin, joined since
  • Contributed 6,201 posts on the community forums.
  • Started 639 threads in the forums
  • Answered 11 questions
answered
Super Admin

Quote

1: Am i correct in saying Fusion 7 wont run on PHP7
2: Is fusion 9 stable enough for me to consider upgrading now?
3: Wordpress receives security updates almost weekly, there hasn't been security updates for fusion 7 for years - are there known vulnerabilities in fusion 7 that justify updating to 9?
4: Has fusion 9 undergone penetration testing?
5: Is there a revised ETA on fusion 9 going live?
6: Is PHP 7.2.4 supported by fusion 9?


1, There are no official releases yet but several mods around.
2, In the 9.0 version there was some upgrade glitches in forums that have all been fixed in the current Git.
The current Git is not stabilized enough for a public release yet but it contains a lot of fixes and improvements.
Since it is updated on a daily basis it can be a quite volatile version to rely on in public environments.
Once that one is released we should have a version that is well established, tested and quite solid as a result.
A lot of people do use the 9.0 version in their production sites today, just avoid upgrading if you have forums with the 9.0
3, 7 is quite solid since the 7.02.07 patch. There are some things that can be flagged at security risks but that would require Administrator access which in it self then could be a security risk, all semantics from that point of view.
4, All the time.
5, On this site?, Yes any day from today, final touches are made as we speak.
6, It has not yet been fully tested and verified on that version. 7.1 is known to be ok so it should work for most part. As with all new versions there might be issues ofc.
Edited by N/A on 23-04-2018 15:39,
1 reply
— 4 months later —
D
douwe_yntema
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
answered
Senior Member

I need to know wich PHP version you are using and where did you get the update package from PHP-fusion from?
1 reply
D
douwe_yntema
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
answered
Senior Member

Numbers of threads and views are displayed so the forum data is in your database. I guess it has something to do with an BB code not functioning. Can you please as a test swich off the BB codes one by one to see when the data on your forum is showing up? Then we know which one is faulty.
It could be more than one BB code, maybe switch them off all first.

Please come back after you have done this test.
1 reply
D
douwe_yntema
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
answered
Senior Member

There is an error in the admin part, I forgot,

Got to your site and edit folowing file:
http://www.yoursite.com/administration/bbcodes.php
arround line 170 find: $__BBCODE__ = "";

replace with $__BBCODE__ = [];

And upload the modified file to your webserver
1 reply
D
douwe_yntema
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
answered
Senior Member

Hmm,

I tested the modification on two different Sites running PHPFusion 7.02.07, One under PHP 7.1 and one under PHP 7.2, And I got no problems. I Investigated the code and the so called missing variable __BBCODE__ is filled from the bbcode_include_var.php files, which must be present for each BB-code.

I tested with some BB-Codes that comes with standard PHP_Fusion installation

Two questions arise:
1 - Is the problem not showing forum posts solved when you disable BB-codes?
2 - What BB-Code is it you are not able to enable again? Maybe this is the faulty BB-code we are looking for?
1 reply
D
douwe_yntema
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
answered
Senior Member

Congratulations!

You have found a bug in the solid as rock PHPFusion7.02.07!
What you did, you disabled the I and B BB-Code.
This are the only two BB-Codes with are 1 letter long. The others are longer e.g. [quote].
In the code is a section that checks the length of the BB-code, that has to be between 2 and 50 chars.
Well the B and I are the only ones that are shorter, so once disabled, you cannot enable them again.

Solution:
In te file: yourdomain.com/admininstration/bbcodes.php, around line 49 search for:

   } elseif (isset($_GET['enable']) && preg_match("/^([a-z0-9_-]){2,50}$/i", $_GET['enable']) && file_exists(INCLUDES."bbcodes/".$_GET['enable']."_bbcode_include_var.php") && file_exists(INCLUDES."bbcodes/".$_GET['enable']."_bbcode_include.php")) {


replace with:

   } elseif (isset($_GET['enable']) && preg_match("/^([a-z0-9_-]){1,50}$/i", $_GET['enable']) && file_exists(INCLUDES."bbcodes/".$_GET['enable']."_bbcode_include_var.php") && file_exists(INCLUDES."bbcodes/".$_GET['enable']."_bbcode_include.php")) {


The only difference is the number "2" in the preg_match parameters.

After this you can enable B and I BB-Codes.
0 replies
S
songiuno
S
  • Member, joined since
  • Contributed 55 posts on the community forums.
  • Started 13 threads in the forums
answered
Member

Thank you!! I adjusted /administration/bbcodes.php to check for 1, 50 characters and was able to enable the single character bbcodes. I then began disabling each of the subsequent bbcodes and found the culprits. They were image alignment bbcode add-ons that I saw and grabbed a while ago somewhere on another Fusion support site to align images to text [img-l][/img-l] and [img-r][/img-r]. I disabled them and forum posts display now. Can't find the author of those bbcodes to check for update, too bad.

But thank you so much for the persistent help!
Edited by songiuno on 20-08-2018 03:30,
0 replies
D
douwe_yntema
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
answered
Senior Member

Glad it's working now

Maybe you can sent me a copy of the BB-Codes, So I can try to make them work under PHP 7.x?
1 reply
— 2 months later —
S
songiuno
S
  • Member, joined since
  • Contributed 55 posts on the community forums.
  • Started 13 threads in the forums
answered
Member

Thank you, it is working fine again!
0 replies

Category Forum

Upgrading issues - 9

Labels

None yet

Statistics

  • Views 0 views
  • Posts 13 posts
  • Votes 0 votes
  • Topic users 8 members

8 participants

F
F
Falk 131
Need help?, Having trouble?
• View our Documentation for Guides, Standards and Functions
• Name and Organize your Topics and Content correctly in the corresponding Forums for best support results
• Attaching Log Files and Screenshots when reporting issues will help
• Provide with an URL to live example if one exists
• Please read the How to Report an Error post
• Please read and comply with the Code of Conduct

(¯·._.·(¯°·._.·°º*[ Project Manager ]*º°·._.·°¯)·._.·¯)
  • Super Admin, joined since
  • Contributed 6,201 posts on the community forums.
  • Started 639 threads in the forums
  • Answered 11 questions
S
S
  • Member, joined since
  • Contributed 55 posts on the community forums.
  • Started 13 threads in the forums
H
H
Homdax 10
  • Fusioneer, joined since
  • Contributed 2,246 posts on the community forums.
  • Started 108 threads in the forums
C
C
Chan 0
Lead Developer of PHP-Fusion
  • Super Admin, joined since
  • Contributed 3,841 posts on the community forums.
  • Started 232 threads in the forums
  • Answered 6 questions
H
H
Semper in excremento sum, sed solum profunditas mutat...
  • Junior Member, joined since
  • Contributed 19 posts on the community forums.
  • Started 6 threads in the forums
  • Started this discussions
H
H
  • Member, joined since
  • Contributed 57 posts on the community forums.
  • Started 11 threads in the forums
D
D
  • Senior Member, joined since
  • Contributed 667 posts on the community forums.
  • Started 57 threads in the forums
  • Answered 1 question
R
R
Anonymous User 367
  • Veteran Member, joined since
  • Contributed 939 posts on the community forums.
  • Started 2 threads in the forums
  • Answered 20 questions

Notifications

Track thread

You are not receiving notifications from this thread.

Related Questions

Not yet