0
Welcome Guest! Login
0 items Join Now

J 1.0.13 Released - Caution before upgrading!

  • J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • 1.0.13 has been released but it breaks a few things apparently. :'(

      e.g. it breaks community builder

      www.joomlapolis.com/content/view/3610/1/

      I also heard form Orstio that it breaks the latest version of his SMF bridge for those who already use it.

      There is also a strong possibility that it breaks other bridges including VM so be sure to test your site on a copy before upgrading, or check with the suppliers of your components to see if they are affected.
    • Last Edit: 17 years 9 months ago by Daniel Chapman.
    • www.ninjoomla.com - The Ninjoomla Open Source Extension Club
      Over 50 open source extensions and 100 videos to you build the site you want.
    • Mack's Avatar
    • Mack
    • Elite Rocketeer
    • Posts: 535
    • Thanks: 0

    Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • Good start. Maybe we need a thread of upgrade gotchas.
    • rightup's Avatar
    • rightup
    • Newbie
    • Posts: 14
    • Thanks: 0

    Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • Any idea if the ItemID issue has been fixed in 1.0.13?
    • 's Avatar

    Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • There's a hotfix on the VM site which sorts the problem out

      I've tested it and it works fine
    • rightup's Avatar
    • rightup
    • Newbie
    • Posts: 14
    • Thanks: 0

    Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • Mark Foster wrote:
      There's a hotfix on the VM site which sorts the problem out

      I've tested it and it works fine

      Sorry man... newbie here. Where can I find this VM Site?
    • 's Avatar

    Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • Andy Miller's Avatar
    • Andy Miller
    • Preeminent Rocketeer
    • Posts: 9919
    • Thanks: 96
    • Web Kahuna

    Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • FYI, the change was related to how the login works because a new random salt was added to all passwords. This was done to further protect passwords from brute force attacks. Any 3rd party component that 'hacks' their own login process (VM, CB, SMFBridges) are going to have to incorporate the new algorithm in their login features to match.
    • GollumX's Avatar
    • GollumX
    • Elite Rocketeer
    • Posts: 2817
    • Thanks: 0

    Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • Andy Miller wrote:
      FYI, the change was related to how the login works because a new random salt was added to all passwords. This was done to further protect passwords from brute force attacks. Any 3rd party component that 'hacks' their own login process (VM, CB, SMFBridges) are going to have to incorporate the new algorithm in their login features to match.

      Cool. Good move then... and certainly not a bug! :)
    • Say no to Internet Explorer 6.
      twitter.com/mark_up
  • Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • it puts a : in a random place.

      Not sure it makes it that much more secure if everyone knows the fix! :P
    • www.ninjoomla.com - The Ninjoomla Open Source Extension Club
      Over 50 open source extensions and 100 videos to you build the site you want.
    • GollumX's Avatar
    • GollumX
    • Elite Rocketeer
    • Posts: 2817
    • Thanks: 0

    Re: J 1.0.13 Released - Caution before upgrading!

    Posted 17 years 9 months ago
    • one extra character, even if it is a known character, will add a few hours, if not days and weeks, to a brute force attempt. Most hosts/webmasters would notice the attempt by then.

      I lock people out of my server after just 5 failed attempts ;D
      ...joomla should do that... 5 failed attempts means a 10 min block on the IP.
    • Say no to Internet Explorer 6.
      twitter.com/mark_up

Time to create page: 0.077 seconds