News

The first beta version of Geeklog 1.6.1 is now available for download.

This releases fixes quite a few bugs (especially with the comment handling) and rough edges in Geeklog 1.6.0. We've also thrown in some new features, e.g.

• support for meta tags (keywords and description) for articles, topics, static pages, polls, and the index page
• better timezone support
• you can now have one featured story per topic
• ... and a few more

Please note that this is a beta release, so you may not want to run it on a "live" site just yet. But please try it out and send us your feedback (or bug reports, if necessary).

Last week, an exploit was published that allows unauthorized direct uploads to a Geeklog site, using the PHP connector included with FCKeditor. The uploads still have to go through FCKeditor's filters, so it's not possible to use this to upload scripts and the integrity of the Geeklog site as such is not in danger. As it turns out, however, this exploit is now being used to host malware on some Geeklog sites. So it seems we completely underestimated the impact of this issue.

Geeklog 1.6.0sr2 is now available for download and ships with a much more restrictive configuration for uploads through FCKeditor. There's also an archive to upgrade from 1.6.0sr1 and an updated version of the drop-in FCKeditor replacement for older Geeklog versions.

If you don't use FCKeditor (aka "Advanced Editor") on your site, the easiest and safest method is to simply remove the entire fckeditor directory (from your public_html directory). Otherwise, please install one of the above updates ASAP.

Installing Geeklog got a lot easier over time, thanks in no small parts to Matt's work on the new installation script (as of Geeklog 1.5). Making the installation easier still, though, requires some help from the hosting provider. Which is possible now by providing Softaculous to their customers.

Softaculous is a free auto installer for cPanel and DirectAdmin. It allows one-click installation of many popular open source web applications. And unlike other auto installers, it does actually install Geeklog in a secure way.