phpBB Weekly

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Download MP3 Episode (39.9 MB)

Episode Duration: 1:09:42
On This Episode: Douglas Bell (Fountain of Apples)

David is away on this episode (and will probably be away on episode #046 as well) as he goes through the necessary steps of his move to Spokane, Washington. However, on this Year in Review episode, Douglas walks through all of the major announcements and events that took place for phpBB during the year 2007, including all of the beta and RC releases, the website outages, prosilver, the Community Choice Awards, MOD Team announcements, and of course, the 3.0.0 release. He also looks ahead into the year 2008 and pinpoints some of the things that we can expect to come down the road in the next few months.

In addition, the latest update on what has been going on with Douglas’ whole webhost fiasco and a final recap of the year 2007 for phpBB Weekly are also provided.

All of the major announcements covered in this episode can be found in the phpBB Announcements forum. Some of the links that were mentioned in particular on the episode included the designing prosilver feature, Bertie Conquers Olympus on Mars, and the information page for the RokBridge extension.

The MOD of the Week is Prime Notify PM for phpBB3 by primehalo, and the Style of the Week is Flash Web for phpBB3 by digitalnerd.

Have a very happy new year (and don’t party too hard)! See you all in the year 2008!

phpBB Weekly is a proud member of the Tech Podcast Network. Check them out for other great technology podcasts.

phpBB 3.0.RC6, probably the most hyped release candidate of phpBB so far (and definitely the one release that we’ve talked about more than any other on our show), was just released this afternoon. (Or, if you’re in Europe/Asia, it was released last night.) What’s so significant about this particular release is that it arguably includes the most changes/new features to the phpBB3 codebase since UTF-8 support arrived in Beta3, back last November. (David covered many of these features on episode #033, and we also discussed a few of these on today’s episode #034, which will be released really soon.)

It was also revealed that the phpBB3 codebase security audit was done by independent software security company SektionEins. Their website indicates that they specialize in security audits for web applications, in particular for those based on PHP. Their site also lists a number of stats about Internet attacks, and on episode #034 we talked a bit about some common vulnerabilities that web applications suffer. One of the reasons that phpBB has a bad reputation for security is because many hosts are using much much older versions of phpBB2 that have serious vulnerabilities in them. The phpBB teams over the years have been very good at getting new, fixed releases out in a timely matter, and the majority of the fault for these exploits are forum admins who don’t keep phpBB2 up-to-date, but nevertheless, the phpBB teams have been unfairly blamed many times for these. By having a codebase audit prior to Olympus going gold, phpBB3 will hopefully have a better lifetime than phpBB2 did.

However, Acyd Burn mentioned that the security audit turned up zero SQL injection vulnerabilities and zero Command Code Execution (CCE) vulnerabilities, which is excellent news and really exemplifies some of phpBB3′s superiority to phpBB2 when it comes to security. Considering that there’s over 200,000 lines of code in phpBB3, this is an excellent accomplishment and props for that goes to the Development Team. However, thanks to the security audit, RC-6 does bring along fixes for a few XSS vulnerabilities, a new password hashing mechanism, and a number of other new goodies.

Anyway, be sure that you run, don’t walk, over to the downloads page and download the RC-6 updater! The countdown to phpBB3 is getting nearer, can you feel the excitement?

UPDATE: Acyd Burn has announced that due to some problems with the RC-6 package, a new RC-7 package will be released later today. The teams will be providing auto-update packages for both RC-6 to RC-7 and RC-5 to RC-7. You probably should hold off until the new release this afternoon.
On phpBB Weekly #035, David will probably talk a bit about what happened to necessitate the RC-7 release.

If you are experiencing problems on your board with the RC-6/RC-7 update, read this article which details many problems with MODs and Styles due to the update.

Well, it was announced this morning that the other shoe dropped. The other phpBB Project Manager Jonathan “SHS`” Stanley, who was originally the Moderator Team Leader and in late 2005 promoted to his current position, has today stepped down. Although theFinn was the one who got phpBB started, Jon was the one who really kept the behind the scenes of phpBB strong. Every time the website or server needed to be rebuilt, SHS` was the one working on it, and he wouldn’t stop until it was done. (dhn mentioned how he spent 14 hour days during the March 2007 server outage.) I’ve seen him on IRC sometimes when he hadn’t slept for 50 hours because of working on the servers! I have no idea how he could do that.

All of the advertising on the site has been made possible by him. Many of the language packs and corrections in phpBB3 have been made possible by him. If it wasn’t for him, Bertie Bear wouldn’t exist (which depending on some people’s opinion may be a good thing or bad thing). And I’ll never forget this little morsel. And, as dhn said, SHS` was responsible for some other plans that we’ll hear about soon…

So goodbye SHS`, and thanks for all you’ve done for phpBB. You really are deserving of that custom rank which says “Kidnapped by Bertie!”

But now, with both of the Project Managers disappearing in the timespan of a month, I’m sure that there might be some people wondering if phpBB is coming to an end. The answer: absolutely not. Don’t compare this to captians leaving a sinking ship because the ship is not sinking. phpBB is an all-volunteer project, and in the case of SHS`, he’s been spending more time on phpBB than a full-time job would require.

phpBB still has 42 energized and excellent team members behind it. The only difference will be in the leadership: all of the decisions on which direction to take phpBB will be made collectively by the 7 team leaders. phpBB is still running strong, and will continue to run strong through the final release of phpBB3 and beyond.

Also, dhn hinted that an announcement saying “A return” would be coming in the next few days, which means that somebody might be coming back. As for who it is, I’m actually placing my bets on psoTFX…

I often have the sneaking suspicion that the phpBB teams are starting to post their announcements on Saturday afternoons intentionally so that I won’t cover it on the show. (Just kidding guys, I love you, really!) Anyway, SHS` posted today that the site will be going down to backup the posts table. I’m going to stir up the rumor mill a bit, but doesn’t that bring up a striking suspicion that a new release is on the way? It wouldn’t be the first time.

Anyway, keep an eye on the site. If there’s any announcements, I’ll be covering them in-depth during episode #017 on May 12th…