Known Issues with glFusion v1.1.1 (and fixes)

It never fails, once you make a release, a few bugs pop up. In the interim time before the next release rolls out, you can download the individual source files that contain the fixes.

Current Release Fixes

keep_unscaled_image setting is ignored - February 25, 2009

Link fixed Feb 25, 2009

When uploading images for a story, the original image is always deleted, regardless of the configuration setting keep_unscaled_image.

private/system/classes/upload.class.php

Offline Publishing Tools can fail on certain content - February 6, 2009

If content on your site has encode spaces;  , offline publishing tools will fail to retrieve the content.

private/system/lib-webservices.php

Potential XSS Issue with anonymous comments - February 5, 2009 - SECURITY UPDATE

Bjarne Mathiesen Schacht has reported a potential XSS issue when a site accepts anonymous comments. To resolve the issue, please update the lib-comment.php file in the private/system/ directory.

You can also disable anonymous comments which resolve the issue as well. It is still recommended that you apply the following update.

This fix can be applied to v1.1.0 and v1.1.1 of glFusion. If you are running an older version, please update to the latest release version as soon as possible.

private/system/lib-comment.php

Forum Plugin - January 25, 2009 - SECURITY UPDATE

If your site allows users to edit their posts after they have saved the original post, it is possible that another user could edit the post by modifying the URL. If you have disabled edits by setting the Forum config option Allowed time (min) to allow members to edit their posts to 0 (zero), this is not a problem.

If you do allow edits, please replace public_html/forum/createtopic.php with this updated createtopic.php.

Forum Plugin -January 18, 2009

The feature 'Popular Topics' does not properly filter the Forum categories by security group. It is possible that a user could see the title and summary of posts they do not have permission to view. If they select the topic, they will properly be denied access to the topic. But, the Popular listing should properly filter the topics.

public_html/forum/index.php

Menu Builder - January 1, 2009

Fixed issue with top level sub-menus not picking up color changes like regular top level menu items.

private/plugins/sitetailor/templates/gl_vertical-cascading.thtml

URL Rewriting Bug - December 30, 2008

On some web servers, the URL rewrite function does not work properly.

private/system/classes/url.class.php

Media Gallery Plugin - December 23, 2008

  • Add support for newlines in postcard email.
  • Fixed a missing global variable which caused batch image rotate to fail
  • Added check to rating code to validate if login is required and if user is logged in
  • Enhanced gallery_remote2.php to support F-SPOT Gallery export

public_html/mediagallery/postcard.php

private/plugins/mediagallery/include/batch.php

public_html/mediagallery/rater.php

public_html/mediagallery/rater_rpc.php

public_html/mediagallery/gallery_remote2.php

Searches with & (or other special chars) would fail on stories and comments - December 23, 2008

private/system/classes/search.class.php

private/plugins/calendar/functions.inc

private/plugins/links/functions.inc

private/plugins/mediagallery/functions.inc

Fixed wrong use of COM_isAnonUser in COM_getPermSQL - December 23, 2008

public_html/lib-common.php

Fixed STORY_getItemInfo - need to check the draft flag and for a publish date in the future - December 23, 2008

private/system/lib-story.php

Admin lists allowed non-sortable columns to be sortable - December 23, 2008

private/system/lib-admin.php

Static Pages: Do not include pages with sp_search set to 0 in stats - December 23, 2008

private/plugins/staticpages/functions.inc

Enhanced fusionrescue.php to also fix corrupted session table - December 15, 2008

If the MySQL server crashes, many times it will leave the sessions table in a corrupt state. fusionrescue.php now has the ability to easily repair the table and get the site back online quickly.

public_html/admin/install/fusionrescue.php

Online Help Links do not appear for plugin in online configuration - December 15, 2008

The Help icon does not show for plugins in the online configuration screen. The enhancement added in v1.1.1 to detect if the document actually exists uses the wrong variable to check if the file exists.

private/system/classes/config.class.php

Fixed bug where the URL query string could be duplicated when determining the current URL (bug #000293) - December 15, 2008

Under certain circumstances, the query string at the end of the URL is duplicated when determining the current URL. This can cause the Security Token check to improperly fail. This problem generally occurs when using the Abyss web server.

public_html/lib-common.php

Upgrades Only - Static Pages show backslashes where it shouldn't - December 12, 2008

Due to a fix in the static pages plugin, some static pages may display backslashes that they shouldn't, which could cause the page to show incorrectly. We have developed a small utility that will automatically fix all the static pages, simply download, place in your public_html/admin/ directory and then run by going to:

http://www.yoursite.com/admin/fixstaticpage.php

fixstaticpage.php

Saving a moderater / queued story could crash - December 10, 2008

Under some circumstances, trying to save a story from the moderation queue will crash with the following error: Fatal error: Call to undefined function ws_makeid()

private/system/lib-story.php

Media Gallery - Global edit of Allow Postcards would fail - December 9, 2008

There was a typo in the source code which caused the global edit of the enable postcard attribute to fail.

private/plugins/mediagallery/include/global.php

Media Gallery - Upload handling can error if corrupt meta data exists in image - December 9, 2008

When uploadinging an image, if there is a problem reading the meta data included in the image, Media Gallery would crash. We have improved the error detection and handling to now gracefully handle the errors.

private/plugins/mediagallery/include/makers/canon.php

private/plugins/mediagallery/include/makers/gps.php

private/plugins/mediagallery/include/makers/olympus.php

private/plugins/mediagallery/include/makers/sanyo.php

glfusion/issues/v111.txt · Last modified: 2010/02/02 02:12 (external edit)
 
Except where otherwise noted, content on this wiki is licensed under the following license: GNU Free Documentation License 1.3