News

Stefan Esser has found an SQL injection vulnerability in Geeklog that can, under certain circumstances, be used to extract sensitive user data such as a user's password hash. We are therefore releasing security updates to address this issue and would advise you to upgrade ASAP.

There are upgrade archives available to upgrade from Geeklog 1.3.11 and Geeklog 1.3.9sr3, as well as a complete tarball for Geeklog 1.3.11sr1 (for new installations).

Users of Geeklog 1.3.10 please read on ...

StreamPro is my latest theming effort intended for Geeklog 1.3.11.

This is an easy to style theme having most of it's style restricted to the style sheets including its main layout. The clalendar and the forum styles are found in separate style sheets in order to find and edit those styles quicker. Only 3 or 4 colors were harmed in the making of this theme making it easy to color. Custom template files were created to accommodate the button-like appearance of the standard nav blocks.

StreamPro encorporates a two column layout--a left/nav column and a right/content column. This is perhaps not the best layout for larger displays, but it still looks great on my laptop. There is a significant lack of tables used in this design compared to the standard themes.

Look for StreamPro in the local themes section of Geeklog's download page.

The Geeklog mailing lists are back up now, after a hiatus that lasted slightly longer than planned. Some problems with the mailing list archives still have to be worked out, but at least they're up again and can be used.

One important change in configuration is that posts from non-subscribers are silently discarded now. Sorry about that, but the amount of spam attempts we get on the mailing lists has just completely gotten out of hand.

So when you post to the mailing lists, please make sure that you're posting from the address you used when you signed up with the list. The geeklog-security mailing list for reporting security issues is, of course, exempted from this change.

There's also a new mailing list, geeklog-spam, devoted to discussions on how to fight comment spam and other forms of spam that affect Geeklog sites. I'm probably going to post most of my spam warnings there, too, and reserve the spam topic for major outbreaks and important issues.