MyBB Documentation

Version: 1.8.7

MyBB 1.8.7

Release Date

MyBB 1.8.7 was released on 11 March 2016.

Announcement Summary

MyBB 1.8.7 is a security and maintenance release and fixes 13 vulnerabilities and 83 reported issues causing incorrect functionality of MyBB.

Fixed Issues

  • Vulnerabilities:
    • Medium risk: Possible SQL Injection in moderation tool
    • Low risk: Missing permission check in newreply.php
    • Low risk: Possible XSS Injection on login
    • Low risk: Possible XSS Injection in member validation
    • Low risk: Possible XSS Injection in User CP
    • Low risk: Possible XSS Injection in Mod CP logs
    • Low risk: Possible XSS Injection when editing users in Mod CP
    • Low risk: Possible XSS Injection when pruning logs in ACP
    • Low risk: Possibility of retrieving database details through templates
    • Low risk: Disclosure of ACP path when sending mails from ACP
    • Low risk: Low adminsid & sid entropy
    • Low risk: Clickjacking in ACP
    • Low risk: Missing directory listing protection in upload directories
  • Bugs fixed:

Changed Files

The following files have changed since MyBB 1.8.6.

  • admin
    • inc
      • class_form.php
      • class_page.php
      • functions.php
    • modules
      • config
        • settings.php
      • forum
        • management.php
      • style
        • themes.php
      • tools
        • adminlog.php
        • backupdb.php
        • modlog.php
        • recount_rebuild.php
        • spamlog.php
        • system_health.php
      • user
        • admin_permissions.php
        • banning.php
        • groups.php
        • users.php
    • index.php
  • archive
    • index.php
  • inc
    • cachehandlers
      • apc.php
      • disk.php
      • eaccelerator.php
      • interface.php
      • memcache.php
      • memcached.php
      • xcache.php
    • datahandlers
      • post.php
      • user.php
      • warnings.php
    • languages
      • english
        • admin
          • global.lang.php
          • user_banning.lang.php
        • archive.lang.php
        • forumdisplay.lang.php
        • global.lang.php
        • managegroup.lang.php
        • member.lang.php
        • memberlist.lang.php
        • messages.lang.php
        • misc.lang.php
        • modcp.lang.php
        • newthread.lang.php
        • private.lang.php
        • search.lang.php
        • usercp.lang.php
      • english.php
    • mailhandlers
      • php.php
      • smtp.php
    • tasks
      • dailycleanup.php
    • class_captcha.php
    • class_core.php
    • class_custommoderation.php
    • class_datacache.php
    • class_error.php
    • class_language.php
    • class_mailhandler.php
    • class_moderation.php
    • class_parser.php
    • class_session.php
    • db_mysql.php
    • db_mysqli.php
    • functions.php
    • functions_forumlist.php
    • functions_post.php
    • functions_search.php
    • functions_task.php
    • functions_upload.php
    • functions_user.php
    • functions_warnings.php
  • install
    • resources
      • mybb_theme.xml
      • mysql_db_tables.php
      • output.php
      • pgsql_db_tables.php
      • settings.xml
      • sqlite_db_tables.php
      • tasks.xml
      • upgrade13.php
      • upgrade26.php
      • upgrade35.php
    • index.php
  • jscripts
    • select2
      • select2.css
    • general.js
    • inline_moderation.js
  • calendar.php
  • contact.php
  • editpost.php
  • forumdisplay.php
  • global.php
  • managegroup.php
  • member.php
  • misc.php
  • modcp.php
  • newreply.php
  • newthread.php
  • polls.php
  • printthread.php
  • private.php
  • ratethread.php
  • reputation.php
  • search.php
  • sendthread.php
  • showthread.php
  • usercp.php
  • usercp2.php
  • warnings.php
  • xmlhttp.php

Language Changes

There are changes to 15 language files. Changed languages files can be cross-referenced from the list above.

Template Changes

There are changes to 41 templates.

  • forumdisplay
  • forumdisplay_inlinemoderation
  • forumdisplay_nopermission
  • headerinclude
  • managegroup
  • managegroup_adduser
  • managegroup_inviteuser
  • member_profile
  • member_profile_findposts
  • member_profile_findthreads
  • member_register
  • member_register_referrer
  • memberlist
  • memberlist_search
  • misc_imcenter_skype
  • misc_whoposted_poster
  • modcp_banuser
  • modcp_finduser
  • modcp_warninglogs
  • polls_editpoll
  • post_attachments_attachment
  • post_attachments_new
  • private_advanced_search
  • private_send_autocomplete
  • report
  • report_error_nomodal
  • search
  • search_results_posts_inlinemoderation
  • search_results_posts_post
  • search_results_threads_inlinemoderation
  • showthread_inlinemoderation
  • usercp_currentavatar
  • usercp_editlists
  • usercp_editlists_user
  • usercp_subscriptions
  • video_dailymotion_embed
  • video_metacafe_embed
  • video_myspacetv_embed
  • video_vimeo_embed
  • video_yahoo_embed
  • video_youtube_embed

Edit this page on GitHub