The Spam-X plugin 1.0.2 is now available for download. This release fixes a few bugs, includes new modules and also implements the necessary name change.

• Fixed MassDelete module
• New module to filter spam posts by IP address
• New module to filter spam posts by the IP address of the spamvertized domain
• New module to filter spam posts by characteristics of the HTTP header

The tarball also includes an updated submit.php which now filters story, link, and event submissions for spam.

This release is compatible with Geeklog 1.3.10, 1.3.11, and 1.3.11sr1. If you're running the current CVS version (1.3.12cvs), please do not install this plugin but continue to use the CVS version.

Stefan Esser has found an SQL injection vulnerability in Geeklog that can, under certain circumstances, be used to extract sensitive user data such as a user's password hash. We are therefore releasing security updates to address this issue and would advise you to upgrade ASAP.

There are upgrade archives available to upgrade from Geeklog 1.3.11 and Geeklog 1.3.9sr3, as well as a complete tarball for Geeklog 1.3.11sr1 (for new installations).

Users of Geeklog 1.3.10 please read on ...

As announced earlier, the old Geeklog themes (Classic, Clean, Digital Monchrome, Gameserver, Smooth Blue, XSilver, Yahoo) have now been removed from CVS and will no longer be maintained by us.

Instead, they are now available from the CVS of the GPlugs project.

And as a reminder: They are also available for download in a version that's compatible with Geeklog 1.3.10 and 1.3.11.