| closedpsychostats security fix... |
| Started by diamond-optic on 01-12-2007, 11:15 PM |
diamond-optic
Threads: 103
Joined: May 2005
well since i just found out about it myself after talking to sgt pete bout some pstats stuff.. i figured maybe a lot of people also didnt know bout it...nn
A new security flaw was discovered today that affects all versions of PsychoStats 2. All users are encouraged to upgrade to the new version 2.3.4 which is now available for download! Do not delay! nnUsers may optionally update their installations w/o downloading the entire new version by downloading the following file and overwritting the original in your current installation..........................nnnLinks:npsychostats forum threadnwww.psychostats.comnnits a real simple upgrade too.. just one file that needs to be replaced :-D
Threads: 5
Joined: Aug 2006
thanks for the notice, I was just getting ready to start setting up our psychostats.
meathead
Threads: 23
Joined: Aug 2007
Sorry to revive an old thread but this looked like a good place.nnnLooking to move my server and the first place I went was scared to install pstats.nWould only try it in one location because that box already had mysql, and didn't want the security risk of having it on another location. Then after a day he tells me he won't do it cause pstats wants a file to write to on the server.nnn"I can't get psychostats to work for ya, it's a pretty big risk on the server nhaving a folder open like that in the windows directory."nnnAnybody know anything about this stuff?
diamond-optic
Threads: 103
Joined: May 2005
lol wownnit needs a temp folder.. to compile themes in so it loads faster and doesnt recompile them each time... definitly not a security risk, especially since only the server needs to have write access and not the whole world..nnplus ive never heard of a webserver that didnt already have a tmp folder or such with 775 or 777 chmod accessnnyou can set an option in the admin cp of pstats (v3.1+ but also on older versions too i think) to have it not use a directory and force it to compile the pages on each requestnnnn..other then that i cant think of anything else it would need to write to
meathead
Threads: 23
Joined: Aug 2007
I'll pass that on so they will know !