Geeklog 2.0.0 is now available for download.

With Geeklog 2.0.0 we have raised the minimum system requirement if you use PostgreSQL as your database to 9.1.7 or later. The required PHP Version of 5.2.0 or greater remains the same.

There are a number of new features and fixes with this version of Geeklog. These include:

• Improved strength of password hashing
• Allow Topics to have child Topics
• Allow Articles, Blocks and other Plugin objects to be associated with more than one Topic
• Topic Breadcrumb support
• Emergency Rescue Tool is included with the Geeklog Install
• Added support for MySQLi
• Add Stop Forum Spam and Spam Number of Links Modules to Spam-X
• A new theme called Denim which is based on Responsive Web Design
• A new theme called Modern Curve
• Comments Form on same page as Articles and plugin other Plugin objects
• Comments RSS Feed Plugin now integrated into Geeklog
• Includes updated versions of jQuery to 1.9.1 and jQuery UI to 1.10.1
• Updated FCKeditor version to 2.6.9
• XSS fixes for the Install, Configuration, Topic Editor, Polls Plugin and Calendar Plugin
• Twitter OAuth API updated
• HTML 5 DOCTYPE

Please note: With Geeklog 2.0.0 plugins that install and/or access blocks, or access article topics, most likely will be not compatible. If you use any plugins that perform these functions please check with the plugin developer to make sure they are compatible before upgrading Geeklog. If you are not sure about 1 or more plugins and still wish to upgrade your Geeklog website then either disable the plugin(s) or uninstall it. All Core plugins have been updated and support Geeklog 2.0.0

Developers, please read more below to find out what has changed or is new in Geeklog that may affect development of themes and plugins.

The third release candidate of Geeklog version 2.0.0 is now available for download. For the full list of bug fixes found in Geeklog 2.0.0rc3 please read the included change log found in the docs directory of the download.

We expect that this release candidate will be the last one before the final Geeklog 2.0.0 release. If you have a chance please test this release on a non-production site. If you find any bugs, you can add them to the Geeklog Bugtracker. If all goes smoothly we hope the final version of Geeklog 2.0.0 to be released by the end of March.

As always we welcome new and updated translations. If you speak a language other than English and you would like to help out the Geeklog community, translations are a great place to start.

We have received two reports about security issues that affect Geeklog in both current versions, i.e. 1.8.2 and 2.0.0 (which is not officially out yet, but in release candidate state):

• High-Tech Bridge Security Research Lab reported an XSS in the calendar_type parameter in the Calendar plugin.
• Trustwave Spiderlabs reported XSS in the install script, the Configuration, as well as in the Admin interfaces for the Polls plugin and the Topic editor.

To address these issues, we are releasing Geeklog 1.8.2sr1 (complete archive; also available as an update from 1.8.2) and Geeklog 2.0.0rc2.

Geeklog 1.8.2 is now available for download.

This is a maintenance release that fixes some bugs in Geeklog 1.8.1, most notably some incompatibilities with MySQL 5.5 and the Twitter OAuth login as well as a few minor issues.

There were no changes in the database, the themes, or the language files, so this should be a straightforward upgrade from any previous 1.8.x release.

Well you may have noticed a few changes with Geeklog.net. We have upgraded the site to use Geeklog 2.0.0rc1 and have switched over to a new theme called Modern Curve.

We have already updated the topics of the site to take advantage of the new child topics feature and you can expect to see other changes coming in the near future that will make it easier to find information and support on Geeklog.

We also have 2 demo sites now (thanks to Ironmax). One is for the current version of Geeklog found at http://demo.geeklog.net and the second one is for any pre-releases at http://demonext.geeklog.net. Links to the Geeklog demo sites can be found under the Resources block on the left.

The first release candidate of Geeklog version 2.0.0 is now available for download.

See this article about Beta 1 for the full list of new features found in Geeklog 2.0.0. Plugin and theme developers should read this post as well since it includes valuable information on what has changed with plugins and themes that could make their current releases incompatible with Geeklog 2.0.0

For the full list of bug fixes found in Geeklog 2.0.0 RC 1 please read the included change log found in the docs directory of the download.

The second beta version of Geeklog 2.0.0 is now available for download.

See this article about Beta 1 for the full list of new features found in Geeklog 2.0.0. Plugin and theme developers should read this post as well since it includes valuable information on what has changed with plugins and themes that could make their current releases incompatible with Geeklog 2.0.0

For the full list of bug fixes found in Geeklog 2.0.0 Beta 2 please read the included change log found in the docs directory of the download.

The first beta version of Geeklog 2.0.0 is now available for download.

New features in this version include:

• Improved strength of password hashing
• Allow Topics to have child Topics
• Allow Articles, Blocks and other Plugin objects to be associated with more than one Topic
• Topic Breadcrumb support
• Emergency Rescue Tool is included with the Geeklog Install
• Added support for MySQLi
• Add Stop Forum Spam and Spam Number of Links Modules to Spam-X
• A new theme called Denim which is based on Responsive Web Design
• A new theme called Modern Curve
• Comments Form on same page as article

... as well as a lot of other improvements. The complete list can be found in the history.txt file located in the download.

The implementation of the new Topic features required changing how Topics are handled in Geeklog. For this reason there are a few Geeklog plugins that are not compatible with this new Geeklog version. Most of the plugins that are incompatible are ones that install their own blocks and/or create a centerblock. Upgrading a Geeklog site to 2.0.0 with plugins that are currently installed that do deal with blocks or topics could cause your site not to function. These plugins should be disabled before upgrading Geeklog. The current release of the Forum plugin (2.8.0) is not yet compatible with Geeklog 2.0.0 but by the time of the final release (or soon after) a new version of the Forum plugin will be released which will be fully compatible.

We would also like to put a request out there for translators. If you speak and write another language besides English or Japanese and would like to contribute to Geeklog please join the geeklog-translations mailing list. Translating Geeklog isn't complicated. Instructions can be found on the Geeklog Wiki or simply ask on the translation list.

We would like to encourage you to download this beta version, try it out, and give us your feedback. This is a beta version and it may still contain bugs. If you find any please report them in our Bug Tracker. We also do not recommend running beta versions on "live" sites. We do plan on rolling out updates over the next weeks with the final version hopefully ready to ship in late June.

For more details on the changes plugin developers will need to make moving forward please read below...

Geeklog 1.8.1 is now available for download. This is a maintenance and recommended upgrade for Geeklog 1.8.0.

This release ships with jQuery 1.6.3, which fixes a possible XSS in that JavaScript library, which shouldn't have affected Geeklog itself, but may potentially exist in add-ons that make extensive use of jQuery. Geeklog 1.8.1 also fixes two cases of information leakage, where the OAuth consumer key and secret were exposed when enabling the "rootdebug" option (which is off by default). Also, the MS SQL driver was displaying full details of SQL errors by default.

Other changes in this release:

Geeklog 1.8.1 is a maintenance release and a recommended upgrade for Geeklog 1.8.0. The first release candidate is now available for download.

Geeklog 1.8.1 fixes a regression with the [code] and [raw] tags which didn't escape content properly in 1.8.0. This release also ships with jQuery 1.6.3, which fixes a possible XSS in that popular JavaScript library. To the best of our knowledge, this XSS did not affect Geeklog itself, but it may potentially exist with plugins that make extensive use of jQuery. For other changes, please see the documentation and the included ChangeLog.

Geeklog 1.8.1 does not introduce any changes in the language files (other than some updated or new translations), in the theme, or in the database. So upgrades from Geeklog 1.8.0 should be pretty straightforward.

Please help us test this release candidate so that we can release the final version soon. Thanks.