phpBB Weekly

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Download MP3 Episode (44.9 MB)

Episode Duration: 1:18:23
On This Episode: Douglas Bell (Fountain of Apples) and David Lewis (Highway of Life)

Sponsor: Online meetings made easy. Try GotoMeeting FREE for 30 days! www.gotomeeting.com/techpodcasts/

News from the phpBB front has been somewhat limited recently, so we dug deep into our coffers to uncover some things to chat about on this “potpourri”-style episode.

David first brings up that phpBB.com has now been enhanced with some of the new features from the recently-released phpBB 3.0.3. New users on phpBB.com will now have their first post send to the moderation queue for approval, but once they have one approved post, they will then have free access to go on posting like normal. The teams are hoping that this will allow them to catch spammers more easily and ban them on sight. Speaking of banning, David also shares how much he loves the new one-click ban feature, making it possible for administrators to ban users straight from their profile.

David and Douglas than discuss a question which has been often brought up recently: “Will phpBB write/release a book?” Well, as is the case with most things from the teams, there’s no definite answer, but David and Douglas both have their own separate opinions on the subject, which they spend some time discussing.

Finally, David and Douglas talk a bit about the new request class that Nils Aderman (naderman) committed to the Ascraeus SVN repository last week, which brings a number of enhancements to phpBB3′s request_var() function, and what it means for MOD authors. They then step back and go over the importance of securing user-submitted variables in PHP in order to prevent SQL injection vulnerabilities, which request_var() makes very simple for phpBB3 MOD authors. As Nils quoted in his commit log,

“Given a choice between dancing pigs and security, users will pick dancing pigs every time.”

The MOD of the Week is Smilie Creator by Dr.Death, and the Style of the Week is proChristmas by topdown. If you have any suggestions for MODs or Styles to highlight on our show (particularly any holiday-themed styles), please share them with us!

phpBB Weekly is a proud member of the Tech Podcast Network. Check them out for other great technology podcasts.

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Download MP3 Episode (35.3 MB)

Episode Duration: 1:01:37
On This Episode: David Lewis (Highway of Life), Paul Sohier (Paul), and Ashley Pinner (NeoThermic)

Sponsor: Try GotoMeeting free for 30 days! For this special offer, visit www.gotomeeting.com/techpodcasts/.

Is your website secure? What if you learned that half a million websites have been hacked via SQL Injections just since last January? On this episode, David Lewis is joined by Paul (of the MODs Team) and Ashley Pinner (NeoThermic, Support Team Leader), in which they discuss how site owners can be aware of SQL injection vulnerabilities, how they can prevent vulnerabilities in their own site, and how you can identify possible SQL injections within MODs that you download. And for MOD authors out there, they discuss the phpBB3 framework and how you can use it to prevent SQL injections in MODs.

Plus, have you ever run phpBB3 and made a change to your site, but nothing changed? That’s probably due to phpBB3′s caching of content, templates, and themes. David and the others discuss how to properly purge the cache with phpBB3, as well as discussing the differences between the different kinds of cached content.

And of course, Londonvasion is getting ever-closer, and so we’ve got your latest fix on Londonvasion news right here, as usual. Stay tuned as we finalize phpBB Weekly’s own Londonvasion plans over the next few weeks; we’ll be keeping you posted.

The MOD of the Week is Purge cache from any page for phpBB3 by Elglobo, and the Style of the Week is Day Song for phpBB3 by APT92.

phpBB Weekly is a proud member of the Tech Podcast Network. Check them out for other great technology podcasts.

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Download MP3 Episode (28.9 MB)

Episode Duration: 50:34
On This Episode: David Lewis (Highway of Life), Paul Sohier (Paul), Yuriy Rusko (Marshalrusty), Ashley Pinner (NeoThermic)

Sponsor: Try GotoMeeting free for 30 days! For this special offer, visit www.gotomeeting.com/techpodcasts/.

Douglas was off taking a test during this episode, so he couldn’t make it, but then again, David forgot that it was Saturday, which is why the live stream of phpBB Weekly never happened! Whoops. Anyway, David managed to grab together a couple of team members to talk to for what could almost pass as another episode of the Official phpBB Podcast.

Anyway, this past week, the inevitable phpBB 3.0.1 was released featuring dozens of bugfixes, including two security-related fixes. As this marks the first non-RC-related update to phpBB3, they spend a little bit of time reviewing the process for updating from 3.0.0 to 3.0.1 and the importance of keeping your boards up-to-date. In addition, they discuss other common support issues with upgrading and how upgrading relates to the importance of keeping core code changes in MODs down to a minimum for compatibility.

They then discuss the recent alpha release of a MOD by naderman (of the Development Team) of the Sphinx Search Plugin for phpBB. Sphinx is a free open-source SQL fulltext search engine that is now another option that you can use for indexing your board’s content on your search page, and will quite possibly be showing up in phpBB 3.2 “Ascraeus.”

Yuriy gives us a quick update on the latest Londonvasion details (and by the way, you should also check out phpBB Weekly’s latest Londonvasion plans), and David tells us about Star Trek Guide’s new MOD Manager, as well as how you can obtain the “Borg Invasion” style that was used for STG’s recent April Fools joke.

No MOD or Style of the Week was selected this week, but we promise that we will make up for lost time next week and get back into the MODs and Styles selections.

Technical Note: Apologies for the background sounds in this episode–David discovered after the fact that he forgot to turn off his Skype sound effects!

phpBB Weekly is a proud member of the Tech Podcast Network. Check them out for other great technology podcasts.

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Download MP3 Episode (60.9 MB)

Episode Duration: 1:46:26
On This Episode: Douglas Bell (Fountain of Apples), David Lewis (Highway of Life), and David M. (DavidMJ)

We thought that we were going to do this episode of phpBB Weekly on Skypecasts, but we encountered problems with their service that made TalkShoe feel like the utopia of live audio streaming, so we decided to move back, and indeed, a brand new bugfixed update of TalkShoe was waiting for us. After spending some time talking about our interesting phpBB Weekly plight, congratulating David’s brother Francis Lewis (Handyman) for becoming a MOD Team member (the first time when two brothers have both been on the teams!), and talking about the recent Joomla!-phpBB meetup, we welcomed phpBB Developer DavidMJ as special guest for the show.

With DavidMJ, we talk about some of the many changes in phpBB3 over phpBB2, particularly in the areas of security and the improved accessibility of the codebase for MOD and style authors. DavidMJ also tells us about his particular areas of expertise in phpBB3, the database management system (DBMS). We also discuss the question over phpBB2′s fate, how much longer phpBB3 will support PHP 4, and some technical info on the various optimizations in phpBB3, and much more.

The MOD of the Week is Instant Post Redirect for phpBB3 by eviL<3, and the Style of the Week is Holiday Style for phpBB3 by Echo. (Yes, we did unintentionally pick styles from the same author on two consecutive episodes.)
Also, as the holiday season gets closer, we’re asking you to recommend any holiday-related MODs and Styles to us to feature on the upcoming episodes of phpBB Weekly. If you have one to recommend, bookmark it on del.icio.us with the tag “phpbbwmod” or “phpbbwstyle” and we’ll consider promoting it on the show.

Editor’s Note: Apologies for the time it took to release this episode. I was having some difficulties getting my editing software to work properly until Apple pushed out an updated release which fixed everything. I look forward to when we’ll stop having technical difficulties on this podcast!

phpBB Weekly is a proud member of the Tech Podcast Network. Check them out for other great technology podcasts.

Audio clip: Adobe Flash Player (version 9 or above) is required to play this audio clip. Download the latest version here. You also need to have JavaScript enabled in your browser.

Download MP3 Episode (49 MB)

Episode Duration: 1:25:40
On This Episode: Douglas Bell (Fountain of Apples) and David Lewis (Highway of Life)

This episode did not go according to plan. We had expected to have phpBB Developer DavidMJ on as a guest today, but unbeknownst to us at the time, he had a family emergency and was unable to make it, so we ended up coming together with a pretty good show while we stalled and took comments from our live listeners (six of whom were phpBB team members!). This episode was recorded right before the release of phpBB3 RC-6 and the ensuing chaos that has followed the release, which you can read a bit about in the previous post on this blog, and which will be discussed more thoroughly on next week’s episode. We do hope to try to bring DavidMJ on sometime in November, with more details coming soon.

In this episode we talk a bit about the phpBB Security Team and Incident Investigation Team and about what those teams do, and also briefly discuss some common security vulnerabilities common in PHP code that both the developers and MOD authors need to look out for. We do a little bit more coverage of the just-about-to-be-released RC-6, and wander off for a few minutes into a discussion of Mac security vs. Windows security. (It’s not as bad as you might think.) Then, Jeffro calls in and asks us to talk a bit more about just how private private messaging is, and we also talk about changes in phpBB3 styles vs. phpBB2 styles and possible enhancements to phpBB MODding in the long-term future.

The MOD of the Week is Notify Admin on Registration for phpBB3 by ameeck, and the Style of the Week is Playstation for phpBB3 by Scott Stubblefield.

phpBB Weekly is a proud member of the Tech Podcast Network. Check them out for other great technology podcasts.