The secure CMS.
Resources
Topics
- Home
- Development (314)
- Geeklog (209)
- Plugins (108)
- Themes (5)
- News (387)
- Announcements (248)
- Geeklog.net (31)
- Security (76)
- Spam (11)
- Summer of Code (28)
User Functions
Events
What's New
Stories
No new storiesComments last 2 weeks
Trackbacks last 2 weeks
No new trackback commentsLinks last 2 weeks
No recent new linksNEW FILES last 14 days
No new filesWelcome to Geeklog Tuesday, June 18 2013 @ 11:13 PM EDT
Geeklog 1.6.0sr1 and 1.5.2sr5
- Thursday, July 30 2009 @ 02:00 PM EDT
-
- Contributed by:
- Dirk
-
- Views:
- 5,522
Geeklog 1.6.0sr1 and 1.5.2sr5 address the following security issues:
- Gerendi Sandor Attila reported an XSS in the forms to email a user and to email a story to a friend.
- The "Mail Story to a Friend" function didn't check story permissions, so that it was possible to email a story even if you didn't have the permissions to view it on the site.
For Geeklog 1.6.0, we also fixed two bugs (an SQL error when the story submission queue was off and a call to a nonexistent function).
The following files are available:
- a complete tarball of Geeklog 1.6.0sr1
- an upgrade archive from Geeklog 1.6.0
- an upgrade archive from Geeklog 1.5.2sr4
- a combo update from any previous 1.5.2 version
Trackback
- Trackback URL for this entry:
- http://www.geeklog.net/trackback.php/geeklog-1.6.0sr1
Here's what others have to say about 'Geeklog 1.6.0sr1 and 1.5.2sr5':
- http://devnote.com.mx/blog/2009/07/31/disponibles-geeklog-1-6-0sr1-y-1-5-2sr5/
- Tracked on Friday, July 31 2009 @ 10:38 AM EDT
[...] AudioPlayer.setup("http://devnote.com.mx/wp-content/plugins/podcasting/player/player.swf", { width: 290 ~); Geeklog.net . Fuente: Alcance Libre Comparte/Guarda Otros artÃculos relacionados Disponible Geeklog 1.5.2sr1. Disponible Geeklog [...] [read more]
- Disponibles Geeklog 1.6.0sr1 y 1.5.2sr5 - Soporte Geeklog Hispano
- Tracked on Sunday, August 02 2009 @ 03:53 PM EDT
[...] desde Geeklog 1.5.2sr4 Un paquete acumulativo desde cualquier versión previa a 1.5.2 Fuente: Geeklog.net . Relacionado con esto... paquete completo paquete de actualizaci&... paquete de actualizaci&... paquete acumulativo Geeklog.net [...] [read more]
The following comments are owned by whomever posted them. This site is not responsible for what they say.
Message:
Warning: fopen(/home/mysuzie/logs/error.log) [function.fopen]: failed to open stream: Permission denied in /home/mysuzie/public_html/lib-common.php on line 1521
An SQL error has occured. Please see error.log for details.
Any help would be appreciated.
Thank you
Sue
First of all: Please do not post support request on completely unrelated articles. That's what our forums are for. Thanks.
You seem to have two problems: An SQL error occurs. Geeklog tries to log it, but you didn't make the error.log file writable. To fix the latter, please refer to the installation instructions again - all the files and directories that have to be writable are listed there. Once you did that, try again and if the error occurs again, post the error message in a new forum post.
As for 1.5.2sr5, is there plan to full release tar ball?
I found some more changes with 1.5.2sr5, such as documentation update,
but they aren't included in these update archive files.
Best regards.
taca
We only provide complete tarballs for the current version - and that's 1.6.0 now.
But I wish updated documentation to be included in the update archive.
Best regards.
taca
Please use our forums for questions that are not related to a specific article.
Our Links section has many examples of Geeklog sites. Examples of popular sites are Groklaw, Mac OS X Hints, and MacFixIt.