Installation/Update

Installation can be performed using the ZIP files linked in the installation instructions on wbce.org (german) and by running the unzip script (upload the unzip along with the ZIP file and rename it back to *.php).

For updates, the WBCE Updater admin tool is recommended (installed by default in versions 1.6.7 and later; otherwise, download it from the AOR).

The installation/update package can also be downloaded from GitHub as usual.

What's New?

Security Update for NWI
Under certain conditions, malicious backend users could have exploited an XSS vulnerability; this has now been fixed.

elFinder Updated
elFinder has been updated to version 2.1.68.

Updates to libraries and modules
wbstats, WBCE-Updater, Twig, and PHPMailer are available in their latest versions.

PHP 8.5 Compatibility
A few warnings and deprecated messages under PHP 8.5 have been fixed.

System Requirements
PHP 8.2.x - PHP 8.5.x. Anything prior to PHP 8.1.x is no longer supported.

The core has no issues with PHP 8.5. Please check your modules for errors. Updates are already available for some modules. Otherwise, please select a lower PHP version and/or report module problems here in the forum.

Even though this is rather inconvenient, and the last update wasn't that long ago, it is recommended to perform an update. Anyone who hasn't updated in a while and is still using version 1.5.x or older should read the release notes for 1.6.0 beforehand.

Many thanks to everyone who contributed ideas and ideas to this version, and to all the donors who support WBCE and the team.

Before any questions arise: Version number 1.6.6 was skipped for technical reasons. Version 1.6.7 wasn't actually planned, as we are currently working on version 1.7.0 with significant changes and improvements. However, since its release is still some time away, and version 1.6.5 is vulnerable under certain circumstances, an interim update was necessary.

Installation and Update

Installation can be performed using the ZIP files linked in the installation instructions on wbce.org (german) and by running the unzip script (upload the latter along with the ZIP file and rename it back to *.php).

The WBCE Updater admin tool is recommended for updating.

The installation/update package can also be downloaded from GitHub as usual.

What's new?

Security update for frontend login
The XSS vulnerability that necessitated this unscheduled patch is, of course, fixed in this version.

elFinder updated
elFinder has been updated to version 2.1.67.

CAPTCHA for login screen only when needed
The CAPTCHA check introduced in version 1.6.5 for the CMS login screen now only appears if there have been an unusually high number of failed login attempts—regardless of the IP address used.

This additional protection can be disabled, for example, if the instance is already protected by other means, the Fraggy backend theme is being used, or if it would be unreasonable to expect users to solve a CAPTCHA. In this case, a new entry must be added to the config.php file:

define('NO_LOGIN_CAPTCHA',true);

Furthermore, CAPTCHA protection is not active if the session cookie is disabled by adding the corresponding entry to the config.php file.

WBCE Flat Backend Theme Responsive
The standard WBCE Flat backend theme is now also usable on tablets and smartphones.

WBCE Updater Admin Tool
Future updates can be conveniently performed using the new WBCE Updater admin tool.

Various Minor Fixes
Fixed an issue with email validation in PHP versions 8.4 and above, added a config.php option for email address as login, and set the bot honeypot as the default in all miniform default templates.

Updated jQuery Libraries
jQuery Migrate - v3.6.0, jQuery UI - v1.14.2.

PHPMailer Update
Updated to version 7.0.2.

System Requirements

PHP 8.2.x - PHP 8.4.x. PHP 7.4.x is no longer supported, and PHP 8.5.x is not yet supported.

Even though this is rather inconvenient, we recommend updating. If you haven't updated in a while and are still using version 1.5.x or older, please read the release notes for version 1.6.0 beforehand.

Many thanks to everyone who contributed ideas and ideas to this version. And also many thanks to all donators who support WBCE and its team.

WBCE gets better with each iteration.

I want to personally thank Bianka (WebBird) for her help with the Database class changes.
Christoph (collinax) for the many implementations of libraries.
Bernd for all the changes he made with modules and so much more.
And Florian who is really managing this project very well.  Although we are but a few contributors he manages to keep this project alive and kicking.

For all who work professionally with WBCE, please consider a donation. It really makes a difference.

Christian