Joomla 1.5.6 Released

Tuesday, 12 August 2008 21:45

Hot on the heels of Joomla 1.5.5 comes Joomla 1.5.6. Looks like this fixes a serious security issue. You should upgrade right away. A quick way to fix this if you use a hosted service to manage your Joomla install (like Fantastico or Installatron) is to patch /components/com_user/models/reset.php. After global $mainframe; on line 113 of reset.php, add:

if(strlen($token) != 32) {
	$this->setError(JText::_('INVALID_TOKEN'));
	return false;
}

Read more about it at the Joomla Developer's Blog.

TrackBack URI for this entry

Comments (0)