There is a small but nasty security bug with fresh installations of Geeklog 1.3. This only pertains to fresh installations of Geeklog 1.3. Turns out with fresh installations, the data includes one orphaned group_assignments record with a user ID of 13. Geeklog\'s user table with on a fresh installation only has 12 users. So the first user that creates an account has access to the GroupAdmin Group and, subsequently, the UserAdmin Group.

If you have already installed a fresh version of Geeklog 1.3 then you need to edit the user with a uid of 13. To get that, do a \"SELECT username FROM users WHERE uid = 13\" in your favorite MySQL editor. Then in the admin/users.php page edit that user and uncheck both the GroupAdmin Group AND the UserAdmin Group and be sure to leave the Normal User and Logged-in User boxes checked.

Thanks to whoever posted that nasty on our SourceForge site.

Ok, so 1.3 has been on the market now for a few weeks and many of you have started tweaking your site by modifying the templates and what not. But now what? Well, I thought I'd write a quick how-to with a real life example on using a Geeklog PHP block.

I\'ve installed Geeklog twice on a test web server and have run across the same problems. It could well be me as I\'m unused to Linux, Apache, PHP etc. but I\'ve managed to get a few other systems working okay.

As an indicator, when I bring up a calendar, the \'small\' calendars either side of the month have links which go to \'/calendar.php...\' instead of \'/geeklog/public_html/calendar.php...\'. It seems that in that module, the use of $_CONF[\'site_url\'] returns a blank string when used in a function (like getSmallCalendar) but the correct value in the main part of the code.

I don\'t know anything about PHP so cannot really debug any better. Can you tell me what I\'ve done wrong here.

One other possible clue: in the \'Display Preferences\' section, there are no Themes in the drop-down box.

Hope someone can help (and if this is a bug, I\'ll post it but I assumed I\'d followed the quickie instructions wrongly).

Tony.