ClipShare Pro 2.6 Released (Security / Bug Fix Release)

[Aryos]

1st i would like you to patch 2.X more because we are using it RIGHT NOW and we cant wait for 3.X to feel safe from hackers

You are NEVER safe from hackers. Additional patches for 2.5/2.6 are being worked on right now. But will take AT LEAST some days, till released.

2and please provide the steps to keep mod_security enabled with out effecting clip-share

I will try to make this part of the documentation and release it, at the same time, in forums post.

3rd i would like to ask do i need to replace the template files for 2.5rc1 if i want to upgrade to 2.6 ? or i can still use the same old template files ?

No, the same template files can be used.

[bman]

cool so i can use the same old template files and just replace every thing else with the 2.6 files

thanks for the info Aryos and plz keep patching the current version at the top of the to-do list

[pheal]

Aryos, if I already modified the database to use MD5 encryption and modified the files to prevent sql injections, is the upgrade really needed or am I good to go?

[pheal]

I forgot to add I use 2.5 RC1

Originally Posted by pheal

Aryos, if I already modified the database to use MD5 encryption and modified the files to prevent sql injections, is the upgrade really needed or am I good to go?

[Danny]

I've made 2 small modifications/fixes in the ClipShare Pro 2.6 release.
Get the latest distributions from the Client Area, and overwrite index.tpl and myprofile.tpl

[bman]

Originally Posted by Danny

I've made 2 small modifications/fixes in the ClipShare Pro 2.6 release.
Get the latest distributions from the Client Area, and overwrite index.tpl and myprofile.tpl

will i still be able to use the old template files ?
or just replace the old files with index.tpl and myprofile.tpl from 2.6 and keep the old files

[Aryos]

Aryos, if I already modified the database to use MD5 encryption and modified the files to prevent sql injections, is the upgrade really needed or am I good to go?

No, you don't need to use the upgrade script. I believe tis is mentioned in the README file. If I have forgotten to mention that, if you use the script on an already md5 database, noone will be able to login again. If you use the script, in such a case, all passwords will be stored in md5 from md5 (double conversion), so they will be unusable for old users.

[Aryos]

If you're talking about already modified the script with bronc's patch, this will cover you for most of the things that were patched in our release. More fizes will follow soon, though.

[test]

Originally Posted by Danny

I've made 2 small modifications/fixes in the ClipShare Pro 2.6 release.
Get the latest distributions from the Client Area, and overwrite index.tpl and myprofile.tpl

Thanks. That fixed it.

[pheal]

Originally Posted by Aryos

If you're talking about already modified the script with bronc's patch, this will cover you for most of the things that were patched in our release. More fizes will follow soon, though.

Thanks for you support Aryos, I guess it's ok then.