To upgrade follow the steps in your website's http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached file (created via the form below) during step 3.
A block file is missing: composr_homesite_make_upgrader (sources/blocks/composr_homesite_make_upgrader.php or an overridden equivalent to this path)
The following tracker issues have been resolved since version 10.0.48.beta…
- "Edit templates" page:- option for creating new template not working. [core_themeing]
- Multiple issues and potential privileged content leak in Comcode page searching [core_comcode_pages]
- Author field text issue [authors]
- Internal redirects failing with Forbidden error [core]
- $VALID_COMCODE_TAGS undefined [core_rich_media]
- Session cookies should always be HttpOnly / Secure where applicable [core]
The following changes were made via git since version 10.0.48.beta…
- Improve session handling (WIP)
- Improve session handling (WIP)
- Whoops
- Whoops, missing global $BREADCRUMB_SET_PARENTS
- IP bans test was not properly cleaning up
- Optimise comcode_pages search
- Verbose title changes
- Test fixes
- Fixes from tests
Special thanks to these members for resolving the issues above:
Special thanks to these members for reporting the issues above to the tracker:
Special thanks to these individuals for contributing to the software code on git:
- Lovinity (Patrick Schmalstig)
Comments
Please see the comments on the following tracker issues for major bug patches:
0005888: Login loop when accessing CMS/Admin zones - Composr CMS feature tracker - Login loop issue (not sure if the patch works but we know clearing browser cookies works)
0005889: CSRF tokens broken - Composr CMS feature tracker - Issue with broken CSRF tokens on AJAX requests (rating, changing password, etc)
A 10.0.50 release will be made in a day or two. I'm going to sit a couple days to see if any other major issues pop up first.
If that does not work, try renaming the cookies to invalidate the old ones site-wide (go to _config.php and change the value of session_cookie (e.g. give it a new Md5 hash). You may also need to change user_cookie and pass_cookie.
If that also does not work, please report to 0005888: Login loop when accessing CMS/Admin zones - Composr CMS feature tracker .
The login loop may happen with old cookies due to the change made in 0005887: Session cookies should always be HttpOnly / Secure where applicable - Composr CMS feature tracker