MyBB 1.8.9

SecurityMaintenance

Important Notes

The upgrade script does not need to be run when upgrading to this release with the Changed Files package.

Before performing any upgrade please remember to backup your forum’s files and database and store them safely. If you have edited core files, including language files, please make sure you make a changelog for these changes so you can make them again (if necessary) once the upgrade is complete.

Follow the Upgrade Documentation for more detailed instructions.

Security vulnerabilities addressed (1)

Low risk

CSRF issue when removing subscriptions

Issues resolved (52)

View issues on GitHub

Changed Files (77)

  • admin/
    • inc/
      • class_form.php
    • modules/
      • config/
        • mod_tools.php
        • report_reasons.php
        • settings.php
      • forum/
        • management.php
        • moderation_queue.php
      • home/
        • index.php
      • style/
        • templates.php
        • themes.php
      • tools/
        • adminlog.php
        • backupdb.php
        • file_verification.php
      • user/
        • awaiting_activation.php
        • groups.php
        • module_meta.php
        • users.php
    • styles/
      • default/
        • main.css
    • index.php
  • inc/
    • datahandlers/
      • login.php
      • post.php
      • user.php
    • languages/
      • english/
        • admin/
          • config_attachment_types.lang.php
          • forum_management.lang.php
          • global.lang.php
          • style_templates.lang.php
          • tools_adminlog.lang.php
          • user_admin_permissions.lang.php
          • user_awaiting_activation.lang.php
          • user_groups.lang.php
          • user_module_meta.lang.php
          • user_users.lang.php
        • forumdisplay.lang.php
        • global.lang.php
        • member.lang.php
        • memberlist.lang.php
        • messages.lang.php
        • modcp.lang.php
        • moderation.lang.php
        • usercp.lang.php
      • english.php
    • plugins/
      • hello.php
    • tasks/
      • checktables.php
    • class_core.php
    • class_custommoderation.php
    • class_moderation.php
    • class_parser.php
    • datahandler.php
    • db_mysql.php
    • db_mysqli.php
    • db_pgsql.php
    • functions.php
    • functions_modcp.php
    • functions_post.php
    • functions_user.php
  • install/
    • resources/
      • mybb_theme.xml
      • mysql_db_tables.php
      • pgsql_db_tables.php
      • settings.xml
      • sqlite_db_tables.php
      • upgrade37.php
      • usergroups.xml
  • jscripts/
    • bbcodes_sceditor.js
    • general.js
    • thread.js
  • calendar.php
  • editpost.php
  • forumdisplay.php
  • global.php
  • modcp.php
  • moderation.php
  • newreply.php
  • newthread.php
  • portal.php
  • private.php
  • showthread.php
  • usercp.php
  • usercp2.php

Changed Language Files (18)

There are changes to 18 language file(s). Changed languages files can be cross-referenced from the list above.

Changed Templates (84)

  • calendar_event_editbutton
  • editpost
  • editpost_disablesmilies
  • editpost_postoptions
  • editpost_signature
  • forumdisplay_inlinemoderation_selectall
  • forumdisplay_thread
  • forumdisplay_thread_deleted
  • global_remote_avatar_notice
  • header
  • header_welcomeblock_member
  • header_welcomeblock_member_pms
  • header_welcomeblock_member_search
  • header_welcomeblock_member_user
  • member_profile_contact_fields_aim
  • member_profile_contact_fields_skype
  • member_profile_contact_fields_yahoo
  • member_profile_modoptions_viewnotes
  • member_profile_reputation_vote
  • misc_imcenter_nav
  • modcp_announcements_day
  • modcp_announcements_delete
  • modcp_modqueue_masscontrols
  • moderation_delayedmoderation_date_day
  • multipage_jump_page
  • newreply
  • newreply_disablesmilies
  • newreply_modoptions
  • newreply_multiquote_external
  • newreply_postoptions
  • newreply_signature
  • newthread
  • newthread_disablesmilies
  • newthread_multiquote_external
  • newthread_postoptions
  • newthread_signature
  • post_attachments_attachment_postinsert
  • postbit
  • postbit_classic
  • postbit_deleted
  • postbit_deleted_member
  • postbit_edit
  • postbit_ignored
  • postbit_multiquote
  • postbit_rep_button
  • postbit_report
  • postbit_status
  • private_quickreply
  • private_send
  • private_send_buddyselect
  • report
  • reputation_add
  • reputation_add_delete
  • reputation_add_negative
  • reputation_add_neutral
  • reputation_add_positive
  • reputation_addlink
  • reputation_vote_report
  • search_posts_inlinemoderation_selectall
  • search_results_inlinemodcol
  • search_results_posts_inlinemoderation
  • search_results_posts_post
  • search_results_threads_inlinemoderation
  • search_results_threads_thread
  • search_threads_inlinemoderation_selectall
  • showthread
  • showthread_inlinemoderation
  • showthread_quickreply
  • showthread_similarthreads_bit
  • showthread_subscription
  • showthread_threadnotes
  • showthread_threadnotes_viewnotes
  • smilieinsert_getmore
  • usercp_avatar
  • usercp_avatar_remote
  • usercp_latest_subscribed_threads
  • usercp_latest_threads_threads
  • usercp_nav
  • usercp_nav_home
  • usercp_options
  • usercp_options_pms
  • usercp_options_quick_reply
  • usercp_subscriptions_thread
  • video_twitch_embed