As our development team was kinda stagnating for some time, I have tried to re-union those still interested in continuing work recently. I also found a group of several former phpBB developers interested in joining our efforts, and we have discussed yesterday the future of PNphpBB2 and Zafenio. We had to do some final decisions, and here are the results:

After an unproblematic and fast upgrade we are running now on latest Zikula 1.2.2 and will check the next days for eventual problems and fixes we need to do. If you experience any bugs in our forum, please do not hesitate to report a bug - thanks!

Edit: Also the upgrade to 1.2.3 was free of problems.

Greetings,
Chris

F-Secure and Secunia have recently reported a security advisory from StAkeR which relates to PNphpBB2. Some background research will tell you that this person is well known for spamming security boards with non proofen and often simply false advisories. His motivations are unclear, probably he is interested in discrediting PHP in general.


Also in our case he describes an attack which is technicially simply not possible, as all admin paths for PNphpBB2 are protected against intruders. Only people loged into PostNuke/PNphpBB2 and holding admin rights for PNphpBB2 are able to access these files, everyone else will receive a 403 error from the web server.


So, no vulnerability, no fix needed - no worry. :-)


Greetings,

Chris

The Zafenio team is happy to announce the release of the release candidate 1 for PNphpBB2-1.2i-patch4, a bug fix release for the latest stable version of our forum module. Please download from the Cozi.

It can already be used for new installations on Postnuke 0.764, Zikula 1.0.3 and 1.1.1, and is strongly recommended for upgrades of existing version of PNphpBB2-1.2. This release candiate will become the final release in 2-3 days if no problems come up last minute. Full Change log and release notes will be added with the final package. Please test and report.

Greetings, Chris (slam) Hildebrandt

One says that good developers eat their own dog food. Not sure if our code is good enough to qualify in a serious dog show, however we have upgraded this very site to Zikula 1.1.1 today. Problems with the forum: None. Problems with Zikula: Some minor issues, but nothing we can not fix.
Feel free to follow our example.
Greetings,
Chris

As most of you already might have recognized: We are late in our release plan looking at what we have planned 6 months ago. This is why I thought an update together with a new package to test would be nice:

You might have recognized it already - after PostNuke went Zikula - we have re-named our project, too: Zafenio. Please adapt your bookmarks to the new domain. Everything has moved over here, and this site is also a fine example for how easy it actually is to upgrade PN to Zikula with a bigger PNphpBB2 inside (our database was over 650mb).

A SQL Injection exploit has been found in viewforum.php that could allow a hacker to obtain user passwords. The original file that I fixed (Late last night) was the viewtopic.php script and not the viewforum.php script as noted in the fix. I have uploaded the correct file and also posted the changes made to the file. Below is the link to the forum topic with the fix.



Link to patch for viewforum.php

We are pleased to announce the release of PNphpBB2 1.2i-patch3. The release contains no major features but fixes many outstanding bugs - one of them being a HTML injection vulnerability.

Be sure to apply this patch before reporting any problem with the software.

PNphpBB2 is not fully compatible with the latest release of PostNuke (0.763 and above).

If you encounter any problem you need to patch your installation.

For the patch see this post.

The PNphpBB Group has released PNphpBB 1.2i



PNphpBB 1.2i includes More fixes and updates! Thanks to everyone who submitted updates and pointed out issues. If you have any questions please head to the support forums.



1.2i represents a large amount of changes fixes and enhancements. Some of these include:



* Version 1.2i addresses many of the bugs found in 1.2a-h-RC3b

* phpBB 2.0.21 updates

* Atachment Mod 2.4.3 updates

* Update to the theme matching code

* Updated to allow PNphpBB2 to work within PostNuke .7.6.x

* Corrected update issues with the install script

* Flood control on searches

* Changes to increase compatibility with Xanthia themes

* Fixed the avatar upload feature

* Upgraded to version 2.0 of Multi-Block giving admins greater control

* New Pagination features



Thank you for your continued support of PNphpBB!

The PNphpBB Group