MODx 2.5.2-pl
21 November 2016
MODx version 2.5.2-pl is now available.
Upgrading to MODx 2.5.2-pl
MODx 2.5.2-pl can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply MODx updates as new versions are released, or use Installatron's Clone feature to duplicate an existing MODx install to test the 2.5.2-pl upgrade prior to applying it live. Get started managing your MODx installations with Installatron
What's New in MODx 2.5.2-pl
- [SECURITY] Hide critical settings in MODx.config [#13170]
- [SECURITY] Prevent local file inclusion/traversal/manipulation [#13177]
- [SECURITY] Prevent path traversal in $modx->runProcessor [#13176]
- [SECURITY] Prevent unauthenticated access to processors [#13175]
- [SECURITY] Prevent path traversal in modConnectorResponse action param [#13173]
- [SECURITY] Update xPDO to 2.5.1 release
- Add security/login support for action based connector [#13158]
- Make one single connector file possible [#13157]
- Don't create a DirectoryIterator on non existing folders [#13127]
- Fixing tvLabel output filter empty needle warning [#13138]
- Fix session extension call using action based connector [#13146]
- Select modTemplateVarTemplate.rank for MySQL 5.7 ONLY_FULL_GROUP_BY SQL Mode [#13098]
- Fix new category option duplicating view of elements [#13137]
- Consistency in error messages, based on error type [#13126]
- Make sure things do not break when no valid json/empty string is returned OnMediaSourceGetProperties event [#13119]
- Removed superfluous code in the manager "gateway" [#13120]
- Set temporary directory for files processing in phpThumb [#13128]
- Upgraded phpThumb to 1.7.14-201608101311 [#13125]
- Force display errors during setup [#13107]
- Added duplicating caption field for TVs [#13100]
- Fix PHP warning if the response message is empty [#13111]
- Removed duplicate element ID [#13105]