DynPG-Update 4.2.1 fehlerhaft. Neues Release vom 23. November.

Das Release Candidate der Version 4.2.1 vom 16. November 2010 war fehlerhaft. Das neue Release vom 23. November behebt diesen Fehler! Hier die geänderten Dateien herunterladen, falls die fehlerhafte Version bereits installiert ist.

Eigentliche Neuerungen der Version 4.2.1:

• Wichtiges Sicherheitsupdate.
• Aktualisierte TCPDF API.

Changelog

• bugfix: hide internal include file path on require error
• bugfix: file inclusion vulnerability in SetParam_Plugin_Language because of missing get parameter sanatizing.
• bugfix: fixed mysql injection vulnerability.
• bugfix: escape_string with real_escape_string.
• bugfix: realescape string password and systemname.
• bugfix: fixed several vulnerabilities (noticed by High-Tech Bridge SA HTB22701 - HTB22703).
• bugfix: add slashes to subarrays inside _POST, too.
• added: new Template var Listing_Empty in write_allArticles().
• added: slashed article fields for php functions within template to avoid parsing errors! {$#PHP !empty('{$TITLESLASHED}') #} if TITLE contains ' unslashed will fail!
• bugfix: notLike match as corrected, since it has been used twice inside match4.
• update: tcpdf class to 5.9.
• bugfix: mediabrowser popup.
• bugfix: reduced fading time for loading effects.