It never fails, once you make a release, a few bugs pop up. In the interim time before the next release rolls out, you can download the individual source files that contain the fixes.

Patch Level Information

Each time a set of fixes are published, we re-create the distribution archives and include a Patch Level component in the version number. This way, you can be sure that you are downloading the latest, most up to date version of glFusion, with all released patches and updates.

To check your current patch level, go into the Command & Control screen, the current glFusion version number (and patch level) will be displayed at the top of the page.

The current patch level is pl4.

• Bad Behavior2 v2.0.32 Update Available (2009/11/04 00:30)

  The Bad Behavior2 plugin that is bundled with glFusion has been updated to v2.0.32 and is available for download here.   All users should upgrade to resolve issues with potential blocking of a major search engine. Users of specialized web services integrated into their host platforms, for which Bad Behavior should not screen requests, should upgrade to take advantage of this new functionality.  To upgrade your version of Bad Behavior, please upload this release using the plugin auto installer located in your Plugin Admin screen.

  Bad Behavior is developed and maintained by Michael Hampton.  Please consider supporting his development efforts by making a financial contribution.

  What’s new?

  New in this release (since 2.0.29 bundled with glFusion v1.1.6):

  • Recent reports indicate that the msnbot web crawler, used by Microsoft’s Bing search engine, no longer identifies itself as msnbot, but now uses a User-Agent string which was previously seen only with malicious requests from email harvesters and site scrapers. Microsoft has been notified of the problem, but given the glacial pace at which they fix issues with their software, a resolution is not expected soon. Due to concerns that Bad Behavior users may be losing their rankings in the Bing search engine, this malicious User-Agent string has been temporarily removed from Bad Behavior’s internal blacklist so that requests from msnbot may be processed. This will increase your exposure to spam and other malicious traffic. You may send comments regarding this to msnbot@microsoft.com.

  • Due to ongoing issues with various web services such as OpenID and PayPal IPN behaving in strange ways which trigger Bad Behavior, a new whitelist has been added. You may now add URLs of your site to Bad Behavior’s whitelist. When a URL is added, Bad Behavior will ignore any HTTP request to that particular URL. If you need this feature, please check the bad-behavior/whitelist.inc.php file for further information. This feature was driven largely by the PayPal IPN web service, which sends POST requests with no User-Agent string, a common indicator of malicious activity. PayPal has refused to add a User-Agent string for years and has never given a reason, good or bad, for not including it. Reports from PayPal merchants who have contacted me indicate that PayPal is finally considering adding a User-Agent string to IPN requests; interested merchants should contact PayPal to express their support for this feature.

  • On some web servers, a WordPress installation sending a trackback (not a pingback) to another WordPress installation would sometimes cause Bad Behavior to block the request as a fake trackback. This issue has been fixed.

  • A condition in which the HTTP Referer: header contains invalid data now returns a 400 Bad Request error instead of a 403 Forbidden error. This is intended to make clear the fact that robots triggering this condition are not in compliance with the HTTP specification.

  • An additional spambot has been identified and blocked by its unique User-Agent string.

  • Users whose sites are accessible using IPv6 may find IPv6 users are blocked by Bad Behavior when the http:BL feature is enabled and certain versions of PHP are in use. This issue has been fixed.

  • A SQL injection attack against Windows servers running IIS has been identified and blocked.

   

• Configuration Help Link incorrect when glFusion installed in a sub-directory (2009/10/14 18:09)

  The help link for configuration items is incorrect when glFusion is not installed in the main webroot directory.  To resolve this issue update the configuration class file config.class.php.

  private/system/classes/config.class.php

  This fix should only be applied to glFusion v1.1.6.  This fix is included in glFusion v1.1.6 patch level 4.

   

• Search results do no honor URL_rewrite setting for comments (2009/10/14 18:07)

  Search results do not use the URL rewrite setting for comment results.  To resolve this issue update the search class file, search.class.php.

  private/system/classes/search.class.php

  This fix should only be applied to glFusion v1.1.6.  This fix is included in glFusion v1.1.6 patch level 4.

   

• Group Editor - Unable to admin attribute for groups (2009/10/14 18:04)

  The group editor does not save the 'admin' attribute when selected.  To resolve this issue, update the the group editor file group.php

  public_html/admin/group.php

  This fix should only be applied to glFusion v1.1.6.  This fix is included in glFusion v1.1.6 patch level 4.

   

• Static Pages Centerblock may show more than once (2009/10/14 18:01)

  A Static Page centerblcok might show more than once if it is configured to display after the featured stories and there is no featured story.  To resolve this issue, update the Static Pages's functon.inc file.

  private/plugins/staticpages/functions.inc

  This fix should only be applied to glFusion v1.1.6.  This fix is included in glFusion v1.1.6 patch level 4.

   

• Search Results do not properly support UTF-8 characters (2009/10/10 01:12)

  Search results may not always display UTF-8 characters properly.  To resolve this issue update the search.class.php

  private/system/classes/search.class.php

  This update should only be applied to glFusion v1.1.6.  This update has been included in pl3.

• Static Pages Fix for Multi-Language Sites (2009/10/10 01:08)

  The Static Pages plugin could crash with an SQL error when a site has multi-lingual support enabled. 

  To resolve this problem, update the Static Pages functions.inc

  private/plugins/staticpages/functions.inc

  This update should only be applied to glFusion v1.1.6.  This update has been included in pl3.

• Static Pages Update (2009/10/05 17:54)

  The Static Pages plugin did not correctly call the PLG_itemSaved() and PLG_itemDeleted() APIs.  This can cause problems when integrating with other plugins.  Specifically, this caused a problem with the Tag plugin where the Tag plugin did not detect the changes to the tag auto tag.

  To resolve the issue, update services.inc.php.

  private/plugins/staticpages/services.inc.php

  This update should only be applied to glFusion v1.1.6.  This update has been included in pl2.

• Link Category Editor Fix (2009/10/05 12:32)

   When trying to edit an category in the Links plugin, a PHP error will occur.  To resolve the issue, install the updated category.php.

  public_html/admin/plugins/links/category.php

  This update should only be applied to glFusion v1.1.6.  This update has been included in pl1.

v1.1.7
v1.1.5
v1.1.4
v1.1.3
v1.1.2
v1.1.1
v1.1.0
v1.0.2
v1.0.1
v1.0.0