October 20 2006 · PHPFusion
The future of PHPFusion
After a break, work is now under way on the next version of PHPFusion. v6.02 will not only contain…
By Falk
Read More
After a break, work is now under way on the next version of PHPFusion. v6.02 will not only contain…
English, Belgian, Bulgarian, Danish, French, German, Hungarian, Iranian, Italian, Lithuanian, Dutch, Norwegian, Polish, Russian, Swedish and Turkish translators and proofreaders…
Hey folks, apologies for the lack of news recently. We've been extremely busy behind the scenes sorting out our…
In recent days it has been brought to my attention that there may be a possible exploit in the extraction…
Today is the last day to nominate PHP Fusion for your favorite CMS. At midnight tonight, nominations will close and…
As many of you are aware a number of PHPFusion Support Sites have been hacked in the last 12 hours. …
The Fusion Server will be going offline sometime within the next 24 to 48 hours while we migrate to a…
Having been on the cards for a while, PHPFusion v6.01.4 is finally available to the public. This updated…
On behalf of the Management Team and the Design Team, it is with great pleasure that I announce the opening…
What is happening with our beloved CMS? Why did Sheldon step down? How come the official Themes-site is no…
Effective immediately I am stepping down and away from PHP Fusion for several reasons of which I will not go…
Following the exploit fix in PHPFusion 6.01.3, it has come to my attention that files planted prior to…
Dear friends, users and fellow Fusioneers. Today is a day of Celebration for many of us. Over in Canada they…
[Update 02/07/2006] : Hackers are now targetting photo submissions using the exploit explained below. I neglected to add the fix to submit.php as an oversight. If you have updated to 6.01.3 already please upload submit.php from the updated 6.01.3 Update pack. If you have not yet updated to v6.01.3 please do as soon as possible.An image or not an image? A critical bug fix in the form of v6.01.3 is now available for immediate download. The fix prevents the uploading of malformed images including avatars and forum image attachments. The malformed image contains hidden javascript which if viewed directly executes a cookie stealer thus compromising the super admin account. Avatar and forum image attachments are now scanned when they are uploaded, if any malicious code is detected the image will be rejected.Existing v6.01.2 users can download the file '6.01.3 Update for v6.01.2' and simply upload the inluded files and click upgrade under System Admin. For those of you who have not yet upgraded, the full sourceforge package has been updated.PHPFusion 6.01.3 Update FOR V6.01.2 ONLY (20Kb).PHPFusion 6.01.3 (2.04Mb).