News

SLV (Spam Link Verification) is a service run by Russ Jones at www.linksleeve.org. The idea is that interactive sites like Geeklog or forums send all user-contributed posts to SLV first which then checks if certain links show up in unusually high amounts. In which case it considers those to be spam and flags them accordingly.

The SLV module for Geeklog's Spam-X plugin makes use of that service. See the included README for installation instructions.

This module should be considered experimental for now. I've been using an earlier version on two sites for several months now, though, and it did help quite a bit. And it can only get better the more sites use it.

Last week's security release introduced display problems in the comment preview that we're fixing with the following versions:

• Geeklog 1.4.0sr5-1 is available as a complete tarball, as an upgrade from 1.4.0sr5, and as a combo update from any previous 1.4.0 release.
• Geeklog 1.3.11sr7-1 is available as an upgrade from 1.3.11sr7 and as a combo update from any previous 1.3.11 release.

Please note that when using the 1.4.0 "combo" update, you will also have to remove some files to fix the security issue with FCKeditor's file manager, as explained in the included README file.

JPCERT/CC informed us about a possible XSS in the comment handling that we're fixing with the following releases:

• Geeklog 1.4.0sr5, available as a complete tarball and as an upgrade from 1.4.0sr4.
• Geeklog 1.3.11sr7, available as an upgrade from 1.3.11sr6 and as a combo update from any other 1.3.11 release.

Upgrades should be straightforward as you'll only have to replace one file (lib-comment.php for Geeklog 1.4.0 and comment.php for Geeklog 1.3.11).