Loading ...

PHP Melody v2.7.1

Board index / General Chat / Announcements

News and announcements from our team

Postby Andrew on Jan 27, 2017 9 am


Earlier this week we received news of vulnerabilities in PHP Melody's code. We've patched the exploitable holes and "beefed up" other areas to make absolute certain we stay safe. The patch is available in today's release: v2.7.1.

We understand that not everyone might be able to update to v2.7.1. Rest assured, you can still patch the flaw by making these changes: http://help.phpmelody.com/php-melody-cr ... -jan-2017/

The problem is super easy to fix but it's important to do it right away. Do it now and enjoy the weekend.

For the official announcement and more details, please visit: http://www.phpsugar.com/blog/2017/01/ph ... y-patched/

I will be working throughout the weekend to help everyone who needs assistance. You patience is greatly appreciated.

Happy to answer any questions about today's release.
PHP Melody v3.0
New Series Module? Publish series and episodes right from PHP Melody's Dashboard -->
https://demo.phpmelody.com/admin/series.php
User avatar
Andrew
Founding Developer
 
Posts: 7504
Joined: Jul 07, 2007 1 pm
Reputation points: 428

Postby exage on Jan 27, 2017 11 am


If I make the update, whether changes that i made to default theme will be lost?
Or, I can update all folders and files except the templates folder?
exage
Verified Customer
Verified Customer
 
Posts: 8
Joined: Feb 06, 2015 5 pm
Reputation points: 0

Postby Andrew on Jan 27, 2017 1 pm


exage wrote:If I make the update, whether changes that i made to default theme will be lost?
Or, I can update all folders and files except the templates folder?


Depends on the changes that were made. You can omit the /templates folder to simply patch the vulnerabilities.

However, there is a bug or two which can only be patched by uploading the files from /templates.

My recommendation would be to use Beyond Compare or a similar software to compare your files with the files form the update. This allows you to copy the new changes from v2.7.1 into your templates without overwriting/losing previous modifications.
PHP Melody v3.0
New Series Module? Publish series and episodes right from PHP Melody's Dashboard -->
https://demo.phpmelody.com/admin/series.php
User avatar
Andrew
Founding Developer
 
Posts: 7504
Joined: Jul 07, 2007 1 pm
Reputation points: 428

Postby absl on Jan 27, 2017 2 pm


update not work for me
absl
Verified Customer
Verified Customer
 
Posts: 37
Joined: Dec 12, 2013 5 pm
Reputation points: 0

Postby Andrew on Jan 27, 2017 2 pm


absl wrote:update not work for me


Which part exactly? Can you offer more details?
PHP Melody v3.0
New Series Module? Publish series and episodes right from PHP Melody's Dashboard -->
https://demo.phpmelody.com/admin/series.php
User avatar
Andrew
Founding Developer
 
Posts: 7504
Joined: Jul 07, 2007 1 pm
Reputation points: 428

Postby absl on Jan 27, 2017 3 pm


blank page When I replace the files
absl
Verified Customer
Verified Customer
 
Posts: 37
Joined: Dec 12, 2013 5 pm
Reputation points: 0

Postby Andrew on Jan 27, 2017 3 pm


absl wrote:blank page When I replace the files


Sounds like a suppressed PHP error. I'm happy to assist in patching the website if you can open a customer support ticket. Please include the FTP credentials as well.
PHP Melody v3.0
New Series Module? Publish series and episodes right from PHP Melody's Dashboard -->
https://demo.phpmelody.com/admin/series.php
User avatar
Andrew
Founding Developer
 
Posts: 7504
Joined: Jul 07, 2007 1 pm
Reputation points: 428

Postby exage on Jan 27, 2017 5 pm


Andrew wrote:
exage wrote:If I make the update, whether changes that i made to default theme will be lost?
Or, I can update all folders and files except the templates folder?


Depends on the changes that were made. You can omit the /templates folder to simply patch the vulnerabilities.

However, there is a bug or two which can only be patched by uploading the files from /templates.

My recommendation would be to use Beyond Compare or a similar software to compare your files with the files form the update. This allows you to copy the new changes from v2.7.1 into your templates without overwriting/losing previous modifications.


Very useful recommendation. Thank you Andrew!
exage
Verified Customer
Verified Customer
 
Posts: 8
Joined: Feb 06, 2015 5 pm
Reputation points: 0

Postby joneric on Jan 27, 2017 5 pm


absl wrote:blank page When I replace the files


HTTP ERROR 500 for me ...


EDIT : I THINK THE ISSUE IS WITH THE FILE "/include/functions.php" when i use the 2.7 version , my website work again ...
Last edited by joneric on Jan 27, 2017 6 pm, edited 1 time in total.
joneric
Verified Customer
Verified Customer
 
Posts: 5
Joined: Jul 13, 2014 11 am
Reputation points: 20

Postby maniaka55 on Jan 27, 2017 5 pm


I have a problem

Fatal error: Call to undefined function fetch_user_info() in /home/SITE/public_html/include/functions.php on line 1373
maniaka55
Verified Customer
Verified Customer
 
Posts: 63
Joined: Jun 10, 2013 11 am
Reputation points: 10

Postby temp on Jan 27, 2017 8 pm


Same error 500 here.

after add begging of include/functions.php

Code: Select all
require_once('user_functions.php');


problem solved.
temp
Verified Customer
Verified Customer
 
Posts: 3
Joined: Apr 04, 2015 2 pm
Reputation points: 0

Postby mijaz on Jan 27, 2017 8 pm


To me it is all ok for update, there were no errors.

File: admin/modify.php is not correct, embed code can not edit, also iframe code when edit erase all.

I returned the old file and everything is working properly.
mijaz
Non-verified
Non-verified
 
Posts: 125
Joined: May 22, 2012 8 pm
Reputation points: 10

Postby iorellana on Jan 27, 2017 11 pm


Hello!,

This update have killed my website.... i can get inside the admin but there is nothing outside but this message:

Fatal error: Smarty error: unable to write to $compile_dir '/www/hrmd.tk/web/armyOfOneTV/Smarty/templates_c'. Be sure $compile_dir is writable by the web server user. in /www/hrmd.tk/web/armyOfOneTV/Smarty/Smarty.class.php on line 1092

I have done this updates every time since i bought this CMS, and every time it has been a risk, because you have to replace almost every file....

Help please! http://www.armyofonetv.com

Thank you!
Ignacio.
iorellana
Verified Customer
Verified Customer
 
Posts: 34
Joined: Dec 28, 2012 4 am
Reputation points: 0

Postby oskathemighty on Jan 28, 2017 1 am


This is what happened when I tried to update...

Fatal error: Call to undefined function fetch_user_info() in /home2/oska1com/public_html/include/functions.php on line 1373
"We can not become who we need to be,by remaining what we are."
User avatar
oskathemighty
Verified Customer
Verified Customer
 
Posts: 102
Joined: Nov 03, 2009 12 am
Location: USA
Reputation points: 0

Postby oskathemighty on Jan 28, 2017 2 am


oskathemighty wrote:This is what happened when I tried to update...

Fatal error: Call to undefined function fetch_user_info() in /home2/oska1com/public_html/include/functions.php on line 1373



I was able to restore my site ,however I can't do the update until it's proven working! ....
"We can not become who we need to be,by remaining what we are."
User avatar
oskathemighty
Verified Customer
Verified Customer
 
Posts: 102
Joined: Nov 03, 2009 12 am
Location: USA
Reputation points: 0


Who is online

Users browsing this forum: No registered users and 12 guests

cron