To upgrade follow the steps in your website's http://mybaseurl/upgrader.php script. You will need to copy the URL of the attached file (created via the form below) during step 3.
This is a long-term maintenance release. Only critical bugs and security holes are being fixed in this version branch. If a newer branch is available, it is highly recommended upgrading your site to the newest branch at your earliest convenience.
It is not advised upgrading to 10.0.50 unless you had problems with 10.0.49.
If you had cookie issues from version 10.0.49, you may need to clear your browser cookies (and instruct all your users to do the same) after upgrading. Note that this version reverts the cookie changes in 10.0.49, meaning your session cookies will not have the HttpOnly or Secure flags anymore. Be aware there is a security implication with this as cookie / session hijacking is possible (but very unlikely given IP validation).
The following tracker issues have been resolved since version 10.0.49…
- Session cookies should always be HttpOnly / Secure where applicable [core]
- Login loop when accessing CMS/Admin zones [core]
- CSRF tokens broken [core]
The following changes were made via git since version 10.0.49…
- Need token on admin theme
- Undo aggressive eatcookie; causes headers to get too large
- Revert "Undo aggressive eatcookie; causes headers to get too large"
- Revert "Need token on admin theme"
- Revert "Fixes from tests"
- Require login for tracker; too much Guest spam happening
- Also require logging in for the report issue page
Special thanks to these members for resolving the issues above:
Special thanks to these members for reporting the issues above to the tracker:
Special thanks to these individuals for contributing to the software code on git:
- Lovinity (Patrick Schmalstig)
Comments
There have been no comments yet