Update Feed

CMS Made Simple 2.2.7

11 May 2018

CMS Made Simple version 2.2.7 is now available.

Upgrading to CMS Made Simple 2.2.7

CMS Made Simple 2.2.7 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply CMS Made Simple updates as new versions are released, or use Installatron's Clone feature to duplicate an existing CMS Made Simple install to test the 2.2.7 upgrade prior to applying it live. Get started managing your CMS Made Simple installations with Installatron

What's New in CMS Made Simple 2.2.7

2.2.7

Announcements

As of version 2.2.7, the minimum PHP version requirement is 5.6. We recommend PHP 7.1 for improved performance.

Bug Fixes
- Change internal CSRF variable name
- Fix object insertion bug via deserialize in LoginOperations
- Fix issue where login cookie contents could be forged by determining the hashing salt
- Refactor the mechanism for generating and verifying admin account password reset codes.
- FileManager: No longer allow uploading files with names that end in .
- FilePicker: No longer allow uploading files with names that end in .
- Search : Minor fix to microtime calls.

2.2.6

WARNINGS

This version introduces some breakage in third party modules that used old, antiquated methods of preparing flash messages in the admin console. These modules should be updated to use the SetMessage and SetError methods instead.

Bug Fixes
- Fixes to AdminAlerts::load_by_name()
- SetMessage() and SetError() in the module API now use session variables
- Remove support for module_error and module_action request parameters in admin module actions.
- Add call to check_login() in admin actions that were missing them.
- Search: Fix notice in PHP 7.1: A non well formed numeric value encountered...

2.2.5

Bug Fixes

Fix minor security issue in the way login information was cached in cookies and the session.
Simplify rules around alias editing/generation in fillparams: 1/ If the alias field exists then we can adjust its value or recalculate an alias. 2/ Use basic properties, and ownership and permissions to determine if that field exists on the edit form.
Minor fixes to the CmsJobManager.