Coppermine 1.5.26
7 January 2014
Coppermine version 1.5.26 is now available (security release).
Upgrading to Coppermine 1.5.26
Coppermine 1.5.26 can be upgraded to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Coppermine updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Coppermine install to test the 1.5.26 upgrade prior to applying it live. Get started managing your Coppermine installations with Installatron
What's New in Coppermine 1.5.26
The release covers a recently discovered issue which allow users to upload pictures to public albums without permission under certain conditions. Furthermore, the release covers recently discovered XSS vulnerabilities that allow (if unpatched) a malevolent visitor to include own script routines under certain conditions.
Other changes:
- Fixed custom menu link icon
- Fixed error message when removing favorite pictures
- Fixed possible issue when searching for image titles
- Optimized admin tools "Update thumbs and/or resized photos" and "Delete original image backup for watermarked images"
- Optimized code if 'Show first level album thumbnails in categories' is disabled
- Added possibility to choose category thumbnail for user galleries category
- Fixed display of quota on profile page if user belongs to more than one group
- Fixed display of additional groups on profile page if user doesn't belong to more than one group
- Fixed strict standards warning messages
- Added PHP4-replacement of function htmlspecialchars_decode to fix email issues
- Extended captcha_plugin_enabled function to distinguish various forms
- Optimized album thumbnails code to reduce database query count
- Fixed typo in plugin writing docs
- Updated template plugin to match fixed typo in the docs
- Fixed regex check for "The content of the main page" in config
- Shuffled thumbnails for meta album "random" instead of sorting them by pid
- Fixed docs regarding user quota
- Added CSS class "thumbnail" to thumbnail images on thumbnails.php pages
- Added CSS class "thumbnail" to album thumbnails
- Fixed clickable keyword list content
- Removed references to constants THEME_HAS_VANITY_GRAPHICS and THEME_IS_XHTML10_TRANSITIONAL, as they didn't worked as intended
- Added CSS classes "thumb_title_title", "thumb_title_views", "thumb_title_owner", "thumb_caption_caption", "thumb_caption_msg_date", "thumb_caption_author", "thumb_caption_ctime", "thumb_caption_rating", "thumb_caption_mtime" to thumbnail meta data on thumbnails.php pages
- Fixed smiley detection in theme directory
- Added constant THEME_HAS_COMMENT_GRAPHICS to use theme-depended images for approve/disapprove/delete/edit/report comments
- Fixed XSS issue
- Updated SWFUpload to fix several XSS issues
- Updated Czech language file (user contribution)
- Updated header information to reflect new year