We’re still in the middle of our August break and are looking forward to returning next weekend. However, you may have heard today that the deadline for the Best CAPTCHA plugin competition has been extended to Friday, September 4th. That means that if you want to write a CAPTCHA plugin and are still working on it, you’ve still got two weeks left!

Obviously, we’re going to be covering the competition very closely during the month of September, and we want to start by hearing about some of the ideas that you, the phpBB MODding community, have come up with.

Therefore, during the next two weeks, we will be running a small survey asking CAPTCHA plugin authors to tell us all about your CAPTCHA plugins! On phpBB Weekly #121, which will be live on Saturday, September 5th (the day after the submission deadline), we’re going to take a look at the submissions that we receive and discuss them on the show. That’s right, this is a golden opportunity for you to get free exposure to your CAPTCHA plugin, and more exposure might mean more votes in the competition!*

*This does not mean that we will lobby for or against any particular plugin; all coverage of CAPTCHA plugins on phpBB Weekly will be fully objective during the duration of the contest.

Our only requirement is that your plugin must be a stable version and submitted to the MOD Database (and thus qualify for the contest). So what are you waiting for? Fill out our survey after the jump.

Thanks, and best of luck to all during the competition!

phpBB code swarm from phpBB on Vimeo.

Now at the end of his announcement, Meik said that “We wish everyone to have fun with this video, simply enjoy it.” Well, if you know us on phpBB Weekly, and me in particular, we’ll be sure to have fun with this video, but not just by simply enjoying it. No, we (mainly I) have to have fun with it in our (my) own special way. So be sure to tune in tomorrow to phpBB Weekly #108 (or wait until it’s released this weekend) for a zany interpretation of the code swarm that might rival the fun we had with BBGourmet, performed live on the show. Sound like fun? Yeah, if the internet can survive it. Until then, later…

David and I have been preparing for a very significant episode of phpBB Weekly tomorrow during which we will fully cover and address all of the details surrounding these two critical issues. David is also arranging to hopefully have some members of the phpBB teams join us to provide more inside details on both of these issues, but we will not know for sure in advance who will be joining us because of the massive amount of work that the teams are facing right now.

Nevertheless, we would like to invite you to join us tomorrow, Saturday, February 7th at 12:00 EST (1700 UTC) for this critical episode of phpBB Weekly, and please spread the word about this episode as much as you can, in particular to any administrators of phpBB boards that are being affected by the spam registrations issue. We also want to remind you that we invite you to participate in the show by asking us questions either in the chat room or by calling in live. We represent all of you, the listeners, and so we want to be sure that we fill you in on the current situations that the phpBB community is facing. We will also do our best to release the episode on phpBBWeekly.net within 12 hours of the end of the live stream.

If you can’t join us during the episode tomorrow but have any questions that you would like us to cover, you may also feel free to ask them in this topic on our forum.

Click on the ShareThis button below to quickly spread the word about this episode on one of your social networks or blogs, or e-mail it to your friends. And we hope to see you during tomorrow’s episode. Thanks!
–Douglas Bell
Co-Host and Editor, phpBB Weekly

David really wanted us to be able to do a special mid-week episode of phpBB Weekly to cover the outage, but unfortunately life is busy for us and so we will not be able to do so. However, we will be having a very comprehensive discussion of the outage on Saturday’s episode of phpBB Weekly, including a discussion with one or more team members on the issues behind this outage.

Until then, please read the post for more details, including some important warnings if you have not logged in on phpBB.com since March 2007 (before phpBB.com was upgraded to phpBB3) concerning your password security. Support is temporarily available on the Area51 forums. And the next time we tell you to be prompt in keeping your software up-to-date, remember this as a very good reason why you should do so.

With the exception of the Support Forums Member and Staff Member competitions, which are specifically within the support forums of phpBBHacks.com, the other awards are significant indicators of some of the best MODs, Styles, and communities out there for phpBB, and award-winners get to have a lot of bragging rights for the next year.

Voting for the awards ends on Sunday, December 14 at 6:00 PM EST (2300 UTC), so don’t miss this chance to vote now! We’ll be discussing the awards as one of our topics this Saturday, but I wanted to make sure that we told you about this more than a few hours ahead of time.

During the past three and a half years, the face and scope of the MOD Team has radically changed. When Eric was first promoted to MOD Team Leader in February 2005, the team’s primary focus was simply on validating MODs in the queue and moderating the MOD development/discussion forums. The team only validated phpBB2 MODs; after all, the first beta of phpBB3 was still fifteen months away, and the only MOD template that was used was the old text-based MOD template. Now, the MOD team no longer accepts new phpBB2 MODifications (and three months from now, will no longer accept any phpBB2 submissions of any kind), and are pretty much exclusively validating phpBB3 MODs. They now exclusively use their MODX template format, and in the span of three and a half years, they not only previewed the XML format to the MODding community and got feedback on it, but have put out multiple iterations of the MODX format, both the XML spec AND two versions of the XSL stylesheet for it. The MOD Team took over EasyMOD, which had originally been a project independently run by Nuttzy, and has released numerous versions of it for phpBB2, and they are now working on a MOD Package Manager (“Blinky”) to provide similar functionality for phpBB3. Following the unexpected move over to the new phpBB3-powered phpBB.com in March 2007, the MOD team completely rebuilt a brand new MOD Database and MOD Queue (as well as a new Styles Database and Queue to boot for the Styles Team) for the new site, and, under pressure, got a beta version of it up and running in just under three months. They organized three MOD Author Conventions (2006, 2007, and 2008) on their IRC channel to improve their back-and-forth communications with the MODding community and receive feedback from MODders. More recently, they have built a new MOD pre-validator for MOD authors to use, launched a phpBB Code Wiki to share MODding and coding documentation, and just last week launched their new Junior Validators team to help them better recruit new validators.

I spent nine months on the MOD team, having been accepted to the team in November 2005, and stepping down in August 2006, when I realized that I am far too busy in my personal life to have the necessary time to contribute to the team. Nevertheless, during the time I spent on the MOD Team, Eric was the team member that I looked up to the most. I was the youngest team member at the time, and at only fourteen years old, I was certainly less mature than I am today. Nevertheless, Eric was always willing to listen to my concerns and was always supportive. And that wasn’t just the case with me, but with the whole team. He epitomizes the best kind of leader: someone who leads by supporting and encouraging his team members to do their best job, and who seeks to listen to the concerns of each of his team members and help to work them out. Despite all the additional responsibilities that he has had as a team leader, he has always led the MOD Team to greatness through the support and encouragement that he has given to his team members, and he is to be greatly commended for it.

Today, Igor takes over from him as MOD Team Leader, and he’s got some awfully big shoes to fill. He is, however, a highly-respected and very knowledgeable member of the MOD community, and he is definitely a good choice for the job. I’m sure that he’ll continue to lead the MOD Team to bold new frontiers (yes, I had to get the Star Trek theme in here somewhere for David’s sake!). And fortunately for us, Eric isn’t leaving the teams for good. He’ll be sticking around with the Team Leaders group (now newly renamed as the “Management Team”) as “Operations Manager.” I don’t know what that means yet, and all Eric said in his announcement was that he’s going to “take a different role with phpBB.” I have a hunch that we’ll find out just how much of a role he’ll be playing soon…

Nevertheless, from the bottom of my heart, thank you Eric for all of the contributions that you have made to the MOD Team and to phpBB over the past few years, and for the work that you will continue to do for phpBB in your new role. Also, congratulations to Igor for his promotion and for the many more contributions that he’ll be making to the MOD Team and to phpBB in the years to come.
–Douglas Bell, phpBB Weekly Co-Host

David and I are getting ready to kick into high gear for the beginning of Londonvasion, which is now only a week and a half away. While our next few episodes of phpBB Weekly will be doing full coverage of the event, I hope you’ll check out Londonvasion Central for more big news from Londonvasion in between our episodes and as it all happens.

Enjoy! Londonvasion (and the wrath of BertieZilla) awaits!
–Douglas Bell

Confirming what David has promised us for these past few months, the Dev Team will be quietly issuing “quality assurance” release candidates of every minor release in an effort to avoid repeating instances of having to issue a new release within days of a previous one (as happened twice in the 2.0.x line and once during phpBB3′s RC stage). Anyone can help themselves to these release candidates (and the QA “Quack and Assassinate” Team will be forced to dive through them), and they will likely materialize into a full version of phpBB 3.0.1 by the end of the week. There will be a mailing list to subscribe to if you want to help test out release candidates when they come out (they will not normally be published on the announcements forum to the general community). As a reminder, while the RCs are not fully complete, the chances are that they will fix more problems than they cause; the purpose of the QA testing is to ensure that they don’t introduce any significant new problems.

So far, the list of changes for 3.0.1 features fifty bugfixes–it’s obvious that the dev teams have been busy, in addition to their recent release of 2.0.23 plus working on the development of Ascraeus.

We have been planning something special for this Saturday’s episode of phpBB Weekly, and thus, we will not be able to discuss phpBB 3.0.1 on our show this week. However, this is just a note to you to keep an eye out for the new release and update! (You know, I hear that the new auto-updater is like super-easy and totally rocks!) If you’re interested in helping to test out the release candidates, feel free to help yourself.

It was also revealed that the phpBB3 codebase security audit was done by independent software security company SektionEins. Their website indicates that they specialize in security audits for web applications, in particular for those based on PHP. Their site also lists a number of stats about Internet attacks, and on episode #034 we talked a bit about some common vulnerabilities that web applications suffer. One of the reasons that phpBB has a bad reputation for security is because many hosts are using much much older versions of phpBB2 that have serious vulnerabilities in them. The phpBB teams over the years have been very good at getting new, fixed releases out in a timely matter, and the majority of the fault for these exploits are forum admins who don’t keep phpBB2 up-to-date, but nevertheless, the phpBB teams have been unfairly blamed many times for these. By having a codebase audit prior to Olympus going gold, phpBB3 will hopefully have a better lifetime than phpBB2 did.

However, Acyd Burn mentioned that the security audit turned up zero SQL injection vulnerabilities and zero Command Code Execution (CCE) vulnerabilities, which is excellent news and really exemplifies some of phpBB3′s superiority to phpBB2 when it comes to security. Considering that there’s over 200,000 lines of code in phpBB3, this is an excellent accomplishment and props for that goes to the Development Team. However, thanks to the security audit, RC-6 does bring along fixes for a few XSS vulnerabilities, a new password hashing mechanism, and a number of other new goodies.

Anyway, be sure that you run, don’t walk, over to the downloads page and download the RC-6 updater! The countdown to phpBB3 is getting nearer, can you feel the excitement?

UPDATE: Acyd Burn has announced that due to some problems with the RC-6 package, a new RC-7 package will be released later today. The teams will be providing auto-update packages for both RC-6 to RC-7 and RC-5 to RC-7. You probably should hold off until the new release this afternoon.
On phpBB Weekly #035, David will probably talk a bit about what happened to necessitate the RC-7 release.

If you are experiencing problems on your board with the RC-6/RC-7 update, read this article which details many problems with MODs and Styles due to the update.