25 June 2015
CMS Made Simple version 1.12.2 is now available (security release).Upgrading to CMS Made Simple 1.12.2
CMS Made Simple 1.12.2 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply CMS Made Simple updates as new versions are released, or use Installatron's Clone feature to duplicate an existing CMS Made Simple install to test the 1.12.2 upgrade prior to applying it live. Get started managing your CMS Made Simple installations with InstallatronWhat's New in CMS Made Simple 1.12.2
This release addresses a concern about how the HTTP_HOST header can potentially be spoofed in some circumstances resulting in various problems including the fact that all links from your site could be altered to point to another domain. We have modified the code such that this is no longer easily possible. This change will not be of a concern for most installations, but on some sites where the same installation of CMS Made Simple can be accessed by requesting different domains some modifications may be required.
In CMSMS 1.12.2 we also introduced a new config variable entitled 'host_whitelist' which provides an absolute list of which hosts your installation will support. Developers using installations that support some kind of multi-site configuration will need to review the documentation for this config variable in the doc/config_reference.pdf file distributed with CMSMS 1.12.2 and adjust their config.php file accordingly.
Additionally, there are a few very minor fixes included with 1.12.2, including some fixes to the cms_url class.
Core - General
CMSMailer 5.2.14