Kommentare

Serendipity 1.6.2 released

ahappycustomer am um :

now i am happy that i run a 4 year old version of s9y that is not affected by this bug. thank you so much for s9y, i'm a very happy "customer" :)

and yes, i know that 1.3 had security issues since then, but those are all limited to weird extensions or being an admin if i don't miss anything. so thanks again, this proves so much how s9y is superior to wordpress when it comes to security.

Garvin am um :

Hi Pawel! Can you explain how you achieve that? The query is only executed, and no returned data is passed along to output, so I don't exactly see how this can be used. I am not a SQL security expert, so if you can explain the situation, of course I would raise the risk assassment in that case!

Thanks for your input, Garvin

Pawel Golen am um :

I've sent you an email at blog@... with details. I hope you got it.

Garvin am um :

Thanks a lot for your specific email, now I see a lot clearer and have changed this blog text accordingly.