Page 1 of 1

Updates of many plugins, but no report

Posted: Tue Dec 02, 2014 12:57 pm
by Czorneboh
Hello everybody!
Hello developers,

last night I recognized, that there are many plugins to be updated. It seems so almost all.
I did not found yet any info about that, neither in this forum nor on Github.

I remember a report about a serious security issue for different cms on Heise like Drupal. Serendipity was not nounced, but because of PHP is as well concerned? Are that patches according to this?:

http://www.heise.de/newsticker/meldung/ ... 67962.html

This was my first guess according to a reason.

Second guess is the preparation for the update of s9y core to 2.0.

Third: Integration of czechian language.

Without an official statement I do not want to update the plugins.

In the list of the plugins here

http://spartacus.s9y.org/index.php?mode ... s_event_en

... there are shown already these current versions to be updated. Many changes with the date 29. and 30 november.

Re: Updates of many plugins, but no report

Posted: Tue Dec 02, 2014 1:25 pm
by Timbalu
Czorneboh wrote:Second guess is the preparation for the update of s9y core to 2.0.
Yes, nearly! ;-)

We are sorry not having found time to announce this properly to public yet, being busy with RC finishing issues.

We discovered an overall used, securing PHP method, called htmlspecialchars, having changed its default reading LANG_CHARSET to UTF-8 with PHP 5.4.

This only hit us on non-UTF-8 Blogs with native lang set and PHP 5.4+ versions. Then the function could just give back a plain empty var, if non-ascii chars were used.

We have now added a wrapper function to the very near upcoming 2.0 RC release and changed all plugin places with htmlspecialchars, to read if that wrapper is already available, else use a fallback with the correct Blog LANG_CHARSET.

We think it is recommended to update, even if not already using 2.0.

Re: Updates of many plugins, but no report

Posted: Tue Dec 02, 2014 10:48 pm
by Czorneboh
Update done.

Strange. In media library I had among the folders with pics one folder with mp3-files, called Audiodateien. This one has disappeard now in frontend. Under the url for this folder there is nothing anymore.

https://www.ost-impuls.de/pages/gallery ... iodateien/

In the articles, where a file was integrated the player loads, but no audio file to listen to.

I can still see it in the backend.

Is it a bug or a feature?
Once I had ask here in the forum, if there is an opportunity to hide media files in special folders of the media gallery overview (static page), which only are collected to integrate them in articles or near the title.

Garvin answered, that there is no such function.

Re: Updates of many plugins, but no report

Posted: Wed Dec 03, 2014 11:07 am
by Timbalu
I assume you use the serendipity_event_usergallery for this.
There is a new plugin option available: Zeige alle Nicht-Bild Dateien/Show all Non-Image objects
Turn this ON to show pdf and audio objects in your gallery page again.
It is a feature! :)

Re: Updates of many plugins, but no report

Posted: Wed Dec 03, 2014 1:13 pm
by Czorneboh
Your assumption is right.
I have changed it. Now it showes again audio files, but still have the problem, which I describe now here:

http://board.s9y.org/viewtopic.php?f=4&t=20158