[peppolone]

Originally Posted by onlinebisnes

Thanks for the 0.9.9.5 update Yankidank,
but I am in the same situation as swese44. is there any guide on how to upgrade without replacing existing files?

i used a diff software to watch the differences between 9.9.5 and 9.9.0, then i patched my site, not long time.

[ditto]

Originally Posted by Yankidank

Check the SVN for a changelog. The more recent changes are for security issues. There was one large change that covered a lot of files, that is probably the one.

Revision 15: /

It would have been nice if you could name all the files with security fixes in revision 11 at the SVN, because there is a lot of other fixes in that revision. Thanks in advance!

PS! This is not related to the security fixes. But i wonder why you have changed line number 316 in libs/link.php back to 'true' again? I have changed this to false, and don't want to change it back unless it gives me problems ...

[peppolone]

Originally Posted by Yankidank

Check the SVN for a changelog. The more recent changes are for security issues. There was one large change that covered a lot of files, that is probably the one.

Revision 15: /

In the new svn we can only view the last rev, not the changes.

[ditto]

Originally Posted by peppolone

In the new svn we can only view the last rev, not the changes.

If you use a client you can see all the changes/diffs. I use tortoisesvn.tigris.org

[longcountdown]

I'm running 9.8.2 and went through ddluck's changes on page 2, but the lines that need changing in settemplate.php and edit.php aren't in 9.8.2. Please advise.

(Like many others, upgrading Pligg to the latest version is not really an option after making so many modifications to core files.)

[deeplygreen]

I would also appreciate an answer as to whether older versions are affected or not.

DG

[betagirl]

We are running a *heavily* modified 9.8.2 and running the scripts against our install had no effect. However, there were still a few issues with non-sanitized inputs that needed to be handled. Review the modifications recommended earlier in this thread, and you should be good. Note that the edit.php and settemplate.php changes may not apply (they did not for us).

Also, every server environment is different. Your ISP may not have the mod_security rules in place that assist in preventing certain types of intrusion attempts. I notified our ISP of the security threats, and they tightened those rules even more in response.

I strongly recommend alerting your ISP to the problem, point them to the article here: SecurityFocus and ask them to attempt the intrusions, if you are not able to yourself. That combined with the changes recommended above (by ddluk i think it was) should help.

Hope that helps.

[JAPUNDIT]

I have installed the new version, and except for template problems everything is working fine.

However, in ADMIN, the User Management page of YGET does not list any users. Other templates list users without any problems.

Any advice?

[jackal]

after upgrading to new version votes doesn't work.

"Error: vote is not defined
: javascript:vote(1,248,0,'09980afe17c08f0f741588f40 23e2f11',10)
row: 1"

[Yankidank]

Please open up new threads for bugs. We can't address them all on this giant thread. If you are asking what files are updated please reffer to the SVN for full changes, here are some example files:

config.php
login.php
out.php
recommend.php
settemplate.php
story.php
trackback.php
libs/html1.php
libs/mailer.php *unstable, working on a fix
libs/trackback.php

Closing this thread.