Although 3.6.9 was intended to be the final maintenance release for the 3.6.x series, the discovery of a CSRF (cross-site request forgery) vulnerability in vBulletin over the weekend has forced the release of an update to plug the hole.
The CSRF problem potentially enabled an administrator who had been lured to a third-party site to unknowingly submit forms located on the forum he or she administers, resulting in potential damage to the forum. Actions performed via the Admin Control Panel are not vulnerable.
The fix for the CSRF issue involves many files and many templates, so unfortunately it is not feasible to produce a patch or a plugin to address the problem. Only a full-scale update will work.
We recommend that customers running versions of vBulletin older than 3.6.10 upgrade as soon as possible.
Template Changes Automatically Applied
With one exception (userinfraction_view), all the template changes in this release require a revert, but they are simple to apply so the upgrade script will attempt to do this for you. The list below shows which templates will be affected by the change, and how they will be altered. Customized templates will be automatically updated, but your customized changes will be retained.
Upgrading from Previous Versions
3.6.10 is a security release and we recommend that all customers upgrade to benefit from many bug fixes and stability improvements.
Full instructions for upgrading vBulletin are available here.
PHP and MySQL Requirements
Please note that vBulletin 3.6.x requires at least PHP 4.3.3 and MySQL 4.0.16 or later.
However, we recommend that vBulletin 3.6.x is run on PHP 5.2.5 with APC (or a similar opcode cache) and MySQL 5.0.51 for best performance and stability.
End of Life for PHP 4
The PHP group has announced the end of life for PHP 4. We strongly recommend that customers update their servers to PHP 5.2.5 if they are still running PHP 4. vBulletin 3.6.10 supports PHP 5 without any problems, though you may need to disable strict mode for MySQL, see here on how to enable 'force_sql_mode'.
Note: We will continue to support PHP 4 in the vBulletin 3 series.
Download vBulletin 3.6.10
As usual, vBulletin 3.6.10 is available for all customers with valid, active licenses to download from the vBulletin Members' Area.
vBulletin Members Area
More...
For support questions, please use the appropriate forums on vBulletin.com
وانت وقت ما تعتمد على النسخة اعطيني رابطها لاعدل عليها واحمي اغلب الملفات و اشير الى القوالب التي يجب ان تعدل للحمياة و اضع حقوق التبادل العربي عليها ونزلها نسخة معتمد هنا بعد موافقة اخوانه الادارة عليها
اعتمد وتوكل وركب النسخه جارى استدعاء النسخ للمنتدى فى الوقت الحالى
التوقيع - محمد الهوارى
شركه الانترنت المتقدمه masryawy@hotmail.com
mobile in egypt : 0020102370474
mobile in ksa : 00966544782609 ننصح بالاتصال دوما بها الرقم
msn support : ip4s@ip4s.com
w w w . i p 4 s . c o m
اخى العساف النسخه موجوده بالتحكم عادى جدا لكن شغل القائمه المنسدله ودور عليها موجوده بشكل طبيعى ونحن فى التبادل العربى نستخدم نسخه اصليه
التوقيع - محمد الهوارى
شركه الانترنت المتقدمه masryawy@hotmail.com
mobile in egypt : 0020102370474
mobile in ksa : 00966544782609 ننصح بالاتصال دوما بها الرقم
msn support : ip4s@ip4s.com
w w w . i p 4 s . c o m
04-23-2008, 10:49 PM
رد: vBulletin 3.6.10 
العرض العادي
