What security updates and do they effect templates

[John Diver]

Hey,

I wanted to know what I have to download from the member area for security updates - I am on 3.8.7 and have a very custom template but I really have to do security updates.

Right now I have 1000 active users and the site was just put back online a few days ago - It is obviously spam users and it is killing my server, I need to get it sorted ASAP.

Thanks for any help

[Mark.B]

Just upgrade to 3.8.10. It shouldn't affect any customisations.
Note though that there isn't any security issue in 3.8.7 that would cause spam to be sent. It sounds like you've either got an insecure custom add-on, or the server may have been compromised.

[Paul M]

1000 active users ? Do you mean members, or just users (which includes spiders, and can easily hit 1000).

[John Diver]

Thanks Mark and Paul.

Mark : I have all plugins disabled via the config file, so that shouldn't be a problem.

Paul: I mean members and guests, as in logged in users that are trying to post : 2200+ threads to be moderated ( I set this because of spamming ) in a few days.

[Paul M]

Guests are not logged in users, only members.

Do you have e-mail verification enabled ?
If not, turn it on, if you do than maybe you should enable moderation of all new users until the spammers move on.

(Upgrading from 3.8.7 to 3.8.10 is recommended, but wont make any difference to your current issue).

[John Diver]

Hey Paul,

Sorry - I thought I replied to this..

I do have email verification turned on but its hundreds or registrations ( If not thousands ) so its a nightmare to go through - Im going to get a mod from vb.org to help with spam.

In regards to the upgrading I dont have access to 3.8.10 for this license - Do I have to upgrade my license if its for security issues?

Thanks again Paul

[Paul M]

If you have an old vB3 licence then yes, I'm afraid you would have to upgrade it.
(There is an option to upgrade it to vB4, which also gives access to all vB3 versions).