Geeklog Forums

I am currently running version 1.3.11sr6. Is there a need for me to upgrade from this version? Thanks as I am very new to this.

If you've installed Geeklog correctly, i.e. such that config.php, the 'plugins' directory, etc. are not reachable from the web (by typing a URL into your browser), then there's no need to do anything.

The mcpuk file manager issue only applies to Geeklog 1.4.0 anyway.

bye, Dirk

My site was an automatic install from my web host. All my files and folders are in the root. Will upgrading to the newest version protect me? Thank you.

The fixes in 1.4.0sr4 are only meant as a sort of "second line of defense" - it's really not a good idea to have all that stuff in your webroot. Do you realize, for example, that everyone could download your database backups?

As a quick measure, I'd suggest you password protect all those directories, or at the very least the 'system', 'plugins', 'backups', and 'logs' directories. You can also remove the entire 'sql' directory, as it is only needed during the initial install and for upgrades.

bye, Dirk