ReviewPost Security

[WB]

omegatron:

I ran across an open issue this AM from one of the security lists our admin checks:

http://secunia.com/advisories/16134/

We all can appreciate that it takes time to incorporate the security changes but having come from using PhotoPost first, there does seem to be a big disparity in the security update time frame for PhotoPost versus ReviewPost.

There seem to be lots and lots of unplugged holes.

For those of us who use ReviewPost as well as PhotoPost, we'd appreciate the same level of attention to ReviewPost security issues. Note that I'm talking about security issues versus functionality. We realize that functionally speaking, PhotoPost will likely always have functional changes first but as with any product, I think most customers expect security issues to be dealt with as quickly as we are accustomed to with PhotoPost.

Thanks.

[Chuck S]

Hello as I have stated before any reviewpost vulernabilities that have been reported to use where fixed in previous versions. Now note the date on your report above it is today!!

You can do this to showproduct.php add code in bold

if (empty($perpage)) $perpage="";
if ( !is_numeric($sort) ) $sort=1;
$product = intval($product);

[WB]

omegatron:

Thanks.

I realize that the date on the report is from today, that is why I said we ran across it this AM when our admin checks the reports.

My general comments about the security updates weren't about that specific post but in general comparing our experience with PhotoPost versus ReviewPost.

There are definite holes in ReviewPost, which from the perspective of a site owner that uses it, we'd rather have the holes plugged (whether published holes or known holes that have yet to be published).

We like the timeliness of security updates to PhotoPost and would like the same from ReviewPost.

Thanks.

[snoopy5]

Originally Posted by WB

Since ReviewPost shares much of its code with Photopost and in light of the recent security update to PhotoPost, is there an ETA for when ReviewPost will be made secure as well (assuming that it needs the updates and based on the PhotoPost announcment it sounds as if the ReviewPost code needs it quickly since there was no 5.11 equivalent that might have mitigated some of the issues)?

Thanks.

Hi

I just wanted to know the current status quo on this.

I have not seen any info about a new release of ReviewPost with those security fixes in the announcement section.

Is there any time frame for this?

Thanks in advance

[Michael P]

I believe it is ready to go, just finalizing a few last things. I am hopeful it will be available this week.