The major updates of this release contain various fixes of vulnerabilities (kindly provided by
Khashayar Fereidani); code additions for the upcoming
Structured Data add-on, templates' structure updates following the W3C accessibility guidelines [WCAG] (suggested by
marsbar); improvement of the customized
Description meta tag for the topics and forum pages, and a few bugfixes.
This version also builds a base for the future CSRF-protection and more secured forms of some add-ons.
$jsReturn_getCSRFCookie var defined in
bb_functions.php, as well as functions like
checkCSRFCheckCookie,
jsReturn_formSubmit and
jsReturn_getSubmit now supply universal code for working this protection around.
For those who would follow this progress first, I'd recommend to update
bb_functions.php file at first and at most. It contains the function named
validIP, which defines the validity of IP-address recorded by the improved function
getIP. This is the most important security update in this release.
For other changes, as usually, follow the
Updates History (
file) — latest release changes mentioned below of it, in the section named
Changes comparision: 3.7.2 — 3.8. It's also the full guide to update miniBB from its previous version with the full-controlled manual approach.
Amongst this release, I've also updated the
Mobile templates set, i.e. the following from
templates-mobi:
- main_posts.html
- main_topics.html
- main_user_info.html
— these are primary templates requiring the updated CSRF-security and WCAG-updates.
The
FREE Structured Data add-on is planned for release until December 2026.
Other add-ons will be gradually updated during the next months for covering XSS/CSRF issues. You shouldn't be afraid of them, unless being logged as Administrator or Moderator,
you love blindly clicking incoming/suspicious links without verification.
This version of miniBB is fully compatible with the most recent release of
PHP 8.5.12 — it's been
tested and developed on this PHP version.
Test the new release on
miniBB demo (which is upgraded to miniBB 8.5), upgrade your forum until it's not too late (always keep backups in mind!), and follow miniBB forum for further program upgrades.
✌️
