Geeklog 1.4.0sr5 and 1.3.11sr7

I just noticed something odd. After replacing my lib-comment.php file (updating from 1.4.0sr4 to 1.4.0sr5), when I add a comment on my site now, the preview is not working correctly. It is only showing the first few lines and is ignoring the html formating.

I tried it using Safari and Firefox with the same results. Part my reason for posting this comment here now is to see if it happens here as well or not. I just tested it here as well by clicking the preview and it only displays the first few lines and ignores the html formatting.

It seems to be limited to only previewing a comment, because when I hit submit, the complete comment does post along with the html formating.

Whoops. It's a bit overzealous now with the filtering. Looks like we have to release a fix for the fix ... Sorry about that.

bye, Dirk

Basically, it's this. I'm seeing extra backslashes on one of my sites, though, and I have had virtually no time to even attempt to roll out a new release, sorry.

bye, Dirk

One thing that I noticed, as a user new to php and new to Geeklog, was the security notice on the site reviewing the site on a cursory level to make sure things were OK. I found out the hard way, however, that installing Geeklog with cPanel/Fantastico is just plain bad. Rather than relive all of the details, you can check it out here.

The short of the long is this: how hard would it be to amp up the security check in subsequent releases to check for the path to some of the core components (i.e. config.php, plugins, logs, etc), and if they are the same as the root (i.e. flat installed into the root of the site) then give the user an indication that this is a bad thing? I intend to work at it a bit, but given that I am quite the n00b when it comes to PHP, my version may release at some point when computers are all embedded.

Ciao,
Kurt

Yeah, more thorough checks for a secure install are certainly on my to-do list. I was initially thinking about adding them to the install script, but it seems they should really be embedded into Geeklog itself for all those auto installers.

The funny thing is that none of the authors of those auto installs ever contacted us. They just appeared out of nowhere. Initially, I thought they were a good idea but now I'm not so sure any more ...

If anyone can provide us with contact addresses, we'll try and have a word with them.

bye, Dirk