mrkredo

We are pleased to announce Invision Power Board 3.0.5 has been released.

This is a maintenance release for IP.Board 3 and addresses various bugs, security enhancements, and performance improvements.

Major Changes Since 3.0.4

Among many dozens of smaller bugs fixed and performance improvements, the following security enhancements were made:

• SQL and local file include issue fixed. Note: Due to protection within the SQL driver classes, it is very difficult to effectively exploit IP.Board using this attack. Also you need moderator permissions to perform any exploit. We've hardened this code regardless. Also, due to the input cleaning functions IP.Board uses, the local file include is limited to PHP files on the file system as the usual 'null byte' trick is ineffective.
  
• Internet Explorer XSS Issue due to incorrect attachment handling fixed.

Downloading

You can download IP.Board 3.0.5 and any applications you have an active license for in the client area. As always, make a backup of your community before proceeding.


IP.Board 2.3.6 Security Update
Below is a zip containing the patched files for 2.3.6.
 ipb236-dec-patch.zip   14.09K   1216 downloads

Legacy Clients

Lifetime and Perpetual license holders should see the IP.Board 3.0.2 release announcement for updated information.

We are pleased to announce our new Spam Monitoring Service

Our new Spam Monitoring Service will assist with the ever-growing problem of spam account registrations on communities across the web. This service will use a central database, hosted by IPS, to track those that may try to register an account on your IP.Board-powered community and stop them from registering.


How it Works

Each time a user tries to register, your IP.Board will contact the service and report the IP address and email address attempting to register. The service will scan a list of known spammers and give the account a score of 1 - 4. There are various options you can configure to control what behavior happens based on the score such as banning the account, letting it through normally, or queuing it for approval.

By harnessing the power of the many thousands of IP.Board communities, the service can "learn" over time what accounts are spammers. For example, a real human could never register on 5 IP.Board communities in just one minute so the service would see that account as a probable spam account.

The service will also monitor the "mark as spam" feature now included in IP.Board. This means that, as you and your moderators manually mark an account as a spammer, the information is reported back to the service to help stop those accounts on your community and other IP.Board communities as well!

Through these methods we are creating a service that learns from the collective data gathered from all IP.Board communities who choose to participate in the Spam Monitoring Service.



Privacy

IPS will collect various registration information to track and catch spam accounts. Information that is not from a spammer is only kept temporarily (to detect trends so we can catch spam accounts) then deleted. The only information permanently kept is for those known to be spammers. The service is completely optional and no IP.Board is required to participate.

Activating the Service

The Spam Monitoring Service will be available in IP.Board 3.0.2 and is already being tested here on the IPS company forums. Once you have IP.Board 3.0.2, simply login to the IPS client area and activate a special key used for the service and put that key on your IP.Board AdminCP.


Pricing

To further our continuing efforts to not only enhance the products we offer but also the services around those products: this service will be offered at no additional charge to those with an active support and service license for IP.Board and for IPS hosting customers!