The first Release Candidate for Geeklog 1.7.0 is now available for download.

This version fixes the display of the last 10 comments in a user's profile and adds proper support for the CAPTCHA plugin to the Calendar and Links plugins, among other things. It also includes some updated localisations.

We are slightly behind our original schedule for 1.7.0, but expect to release the final 1.7.0 real soon now. So if you haven't tried it out yet, now would be a good time to do so and give us some feedback.

The Forum plugin 2.7.3 addresses a security issue where an XSS was possible in anonymous usernames, reported by Jaloh Smith.

To upgrade from version 2.7.2, you only need to replace 3 files:

• config.php (for the version number)
• functions.inc (for the upgrade code)
• public_html/createtopic.php (which contains the actual fix)

Then simply run the upgrade from Geeklog's Plugin admin panel.

The first beta of Geeklog 1.7.0 is now available for download.

The main new feature in this release is support for PostgreSQL (aka Postgres), implemented by Stan Palatnik during the 2009 Summer of Code. We haven't forgotten about the other successful GSoC 2009 projects - those will be added in future releases.

Geeklog 1.7.0 also addresses everybody's favourite nuisance, the problem with the expiring CSRF token: Now when the token expires, you will be asked for your password again, after which you can continue as normal (and without any data loss).

Other important changes in Geeklog 1.7.0: The minimum requirements are PHP 4.4.0 and MySQL 4.0.18 (assuming you use MySQL as your database) now. We are currently planning to drop support for PHP 4 entirely in Geeklog 1.8 later this year.