Re: [Slashcode-general] Will there be a new slashcode releaseat sourceforge ?

[Penang A1 <pen...@ho...>]

Since I'm the one who asked the original question, please allow me to state why I asked that question ...

Many years ago I set up a site using slashcode. Worked flawlessly !

Recently, as I was preparing to set up another side with slashcode, lo and behold, an announcement of a serious security issue ! So I went to sourceforge and check ... and was disturbed to find out that the files there were all the old ones !

It's not that I can't do the update as described by others, the main reason I post that original question is because I am thinking of ***THE NEW USERS*** who want to try out slashcode but aren't aware of the security issue.

Or it could be that people knew about the security issue, but thought (wrongly!) that the slashcode files at sourceforge contain the fix already, and therefore are safe to use !

We shouldn't be thinking just for people like us, the long time users. There _are_ others who don't even know about this mailing list !

Let me post the question this way:
         If people use slashcode and got their sites hacked,
         wouldn't it tarnish the reputation of slashcode?

We wouldn't want that, do we??

Hence, can someone please do all of us a favor, please update the slashcode files at sourceforge with the fix.

Thank you all for reading !!


Lee


> Date: Fri, 15 Feb 2008 10:10:04 +0100
> From: ab...@no...
> To: sla...@li...
> Subject: Re: [Slashcode-general] Will there be a new slashcode releaseat	sourceforge ?
> 
> Hi,
> 
> On Thu, Feb 14, 2008 at 07:17:04PM -0500, Shane Zatezalo wrote:
> > I think the reason why you see people asking for a point-release is  
> > because the point-release would typically have included in it a  
> > scripted-method to upgrade from prior version(s).
> 
> Ack. That's one of parts really necessary for a distribution if they
> want to ship Slashcode as package: An automatable upgrade path.
> 
> > Also, the point release would have to have some serious testing and  
> > what-not done to it before it could be released.
> 
> Another point of stable releases which would make it more suitable for
> packaging and especially later maintaining.
> 
> 		Regards, Axel
> -- 
> Axel Beckert - ab...@de..., ab...@no... - http://noone.org/abe/
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> Slashcode-general mailing list
> Sla...@li...
> https://lists.sourceforge.net/lists/listinfo/slashcode-general

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/