Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
SimpleMachines
/
SMF
Public
Notifications
You must be signed in to change notification settings
Fork
268
Star
752
Code
Issues
134
Pull requests
58
Actions
Projects
Wiki
Security and quality
6
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Wiki
Security and quality
Insights
[3.0] Misc fixes
- #9302
#9302
Open
Sesquipedalian
wants to merge 20 commits into
SimpleMachines:release-3.0
SimpleMachines/SMF:release-3.0
from
Sesquipedalian:3.0/upgrader_login
Sesquipedalian/SMF:3.0/upgrader_login
Copy head branch name to clipboard
Conversation
Commits
20
(20)
Checks
Files changed
Open
[3.0] Misc fixes
#9302
Sesquipedalian
wants to merge 20 commits into
SimpleMachines:release-3.0
SimpleMachines/SMF:release-3.0
from
Sesquipedalian:3.0/upgrader_login
Sesquipedalian/SMF:3.0/upgrader_login
Copy head branch name to clipboard
Commits
Commits on Aug 15, 2026
Uses hash_equals() in SMF\Maintenance\Maintenance::login* methods
Show description for 09f6fbb
Sesquipedalian
committed
09f6fbb
View commit details
Copy full SHA for 09f6fbb
Browse repository at this point
Logs correct info about who ran the upgrader
Show description for fdc5996
Sesquipedalian
committed
fdc5996
View commit details
Copy full SHA for fdc5996
Browse repository at this point
Moves validatePasswordFlood() from SMF\Actions\Login2 to SMF\Security
Show description for 12c1d7b
Sesquipedalian
committed
12c1d7b
View commit details
Copy full SHA for 12c1d7b
Browse repository at this point
Implements SMF\Security::checkPassword()
Show description for 5796286
Sesquipedalian
committed
5796286
View commit details
Copy full SHA for 5796286
Browse repository at this point
Commits on Aug 20, 2026
Correctly handles creating login tokens in upgrader
Show description for d6d058e
Sesquipedalian
committed
d6d058e
View commit details
Copy full SHA for d6d058e
Browse repository at this point
Removes Maintenance::$context in favour of plain old Utils::$context
Show description for 28dc778
Sesquipedalian
committed
28dc778
View commit details
Copy full SHA for 28dc778
Browse repository at this point
Uses correct key in DropTimeOffset migration
Show description for f9c85e6
Sesquipedalian
committed
f9c85e6
View commit details
Copy full SHA for f9c85e6
Browse repository at this point
Gives CacheApi::$enable a default of 0
Show description for 7636d97
Sesquipedalian
committed
7636d97
View commit details
Copy full SHA for 7636d97
Browse repository at this point
Commits on Aug 21, 2026
Adds #[\SensitiveParameter] attribute to password processing methods
Show description for d361005
Sesquipedalian
committed
d361005
View commit details
Copy full SHA for d361005
Browse repository at this point
Adds $update param to Security::checkPassword()
Show description for a5e2a0f
Sesquipedalian
committed
a5e2a0f
View commit details
Copy full SHA for a5e2a0f
Browse repository at this point
Prevents timing attacks against Security::checkPasswordFallbacks()
Show description for 45c2353
Sesquipedalian
committed
45c2353
View commit details
Copy full SHA for 45c2353
Browse repository at this point
Ensures $offset is a string in DropTimeOffset::execute()
Show description for d109f67
Sesquipedalian
committed
d109f67
View commit details
Copy full SHA for d109f67
Browse repository at this point
Commits on Aug 22, 2026
Avoids permission errors when karma data was retained during upgrade
Show description for 56a6f66
Sesquipedalian
committed
56a6f66
View commit details
Copy full SHA for 56a6f66
Browse repository at this point
Improves backward compatibility support for permissions
Show description for 4d8b31b
Sesquipedalian
committed
4d8b31b
View commit details
Copy full SHA for 4d8b31b
Browse repository at this point
Adds additional guards against errors about unknown permissions
Show description for 33aec9b
Sesquipedalian
committed
33aec9b
View commit details
Copy full SHA for 33aec9b
Browse repository at this point
Ensures guest profile has been loaded in User::initializeGuest()
Show description for e1b2fae
Sesquipedalian
committed
e1b2fae
View commit details
Copy full SHA for e1b2fae
Browse repository at this point
Improves migration step for updating the attachment directory settings
Show description for 8146f43
Sesquipedalian
committed
8146f43
View commit details
Copy full SHA for 8146f43
Browse repository at this point
Runs AttachmentDirectory before LegacyAttachments during upgrade
Show description for 52afd10
Sesquipedalian
committed
52afd10
View commit details
Copy full SHA for 52afd10
Browse repository at this point
Modernizes and tides code in LegacyAttachments migration step
Show description for 6e21787
Sesquipedalian
committed
6e21787
View commit details
Copy full SHA for 6e21787
Browse repository at this point
Handles attachmentUploadDir more robustly in RemoveTempAttachments task
Show description for d8a35f3
Sesquipedalian
committed
d8a35f3
View commit details
Copy full SHA for d8a35f3
Browse repository at this point
You can’t perform that action at this time.