Mosets Tree 1.59 upgrade available

[dknight]

Mosets Tree 1.59

As you may be aware, there have been an increased hacking attempts to Joomla websites for the past few weeks mostly through custom components. The Joomla team has released a new version 1.0.10 to address some of these vulnerabilities. If you are running Joomla prior to 1.0.10 you should upgrade to this version.

We have also perform an internal audit on Mosets Tree and discover under certain server configuration it is possible for an attacker to include remote files which could result in your website being compromised.

Because of this, we have release the latest patch - 1.59 to address this security issue. This release also includes several bug fixes. If you *only* want to apply the security fixes, download the upgrade (1.5.8 - 1.5.9) and overwrite all files from this directory:

/components/com_mtree/Savant2/

to your server. This is the fastest way to fix the security issue and applies to all version of Mosets Tree.

We encourage all our customers to upgrade to this version as soon as possible. If you have any questions regarding this release, please do not hesitate to contact us at support AT mosets.com.

If you're an existing customer, you can download the patch now from the Download page.

[dknight]

version 1.59 - July 2006

# Prevent Savant2 files from being accesses directly

# Fixed 'Go' button in editlink back-end for not return full URL after the first ampersand.

# mod_mt_dtree - Current category or listing is highlighted when browsing within MT

# mod_mt_dtree - Fixed listings not showing in root when parent cat is set to non 0

# stripslashes for search text in search results

^ Increased the text box size in back-end's editreview

# Fixed html entities corrections in editlink's admin note

# Revert support to MySQL 4.0.x in listpopular SQL query

# mod_mt_search: now escape instead of encodeURI search text to support non-english characters

# Fixed submission form to support Open-SEF in page_recommend, page_contactOwner, page_report, page_rating, page_addCategory, page_claim, page_confirmDelete, page_writeReview