| Joomla/Mambo Community Builder |
|
The Community Builder suite extends the Joomla! and Mambo website user management systems and allows to manage those users. Key features include: extra fields in profile, enhanced registration workflows, user lists, connection paths between users, admin defined tabs and user profiles, image upload, front-end workflow management, integration with other components, like PMS, Newsletter, Forum, Galleries. |
Latest Member Blogs
| Security Release - CB 1.0.1 - RELEASED! |
|
| Written by Nick A. | ||
| Wednesday, 09 August 2006 | ||
|
Update 2: ERRATA: All sites should either update to CB 1.0.1 or correct a Joomla setting ! Just when you thought you were safe with PHP register_globals OFF ... NO! ... A post less than an hour ago brought to our attention that Joomla 1.0.10 still emulates register_globals ON by default, even if php-setting register_globals is OFF. See the Joomla forum post by Adam (aka Websmurf) for instructions on how to turn it off. So: if you didn't or can't turn that off in that file, you should update Community Builder immediately to security release 1.0.1. UPDATE 3: Excellent article about website security and Joomla configuration. A must-read ! The following mass email has just been sent (actually in progress) to all Joomlapolitans ...
Fellow Community Builder Website Masters,
The CB Core team over at joomlapolis.com has been working hard during the past 48 hours on a security release 1.0.1 of the CB suite following the discovery of a vulnerability present in 1.0 RC2 and 1.0 stable on weakly configured web-servers. We have decided to release it as a highly-recommended critical security and stability update, as we had one report this morning and another one this afternoon for 2 sites where it got exploited to change files. Your site needs urgent update to CB 1.0.1 if ALL of these PHP settings are met: CB 1.0.1 will be released in the next hours and will be available on http://www.joomlapolis.com and on the Community Builder project area on forge.joomla.org. Everyone is urged to upgrade asap, a REAME file is included in the release as usual. Sites with the settings above are in danger. If you want to stop receiving future messages of this type just visit your contact info tab on your joomlapolis profile and click on the "Don't email me critical vulnerability fixes" checkbox. Thank you, The CB Team on Joomlapolis.com
Update 1: The security release 1.0.1 is now available as package on our project area on the forge and in the downloads area of Joomlapolis. If your hosting environment meets all 4 of the above prerequisites you must upgrade immediately! Either way all installations should be upgraded ASAP.
|
||
| Last Updated ( Thursday, 17 August 2006 ) | ||
| Next > |
|---|
Documentation
Documentation Subscription Service
(updated for CB 1.2 RC2)
What?
Why?
Where?
Download Latest Release
The latest stable Community Builder Release is version 1.1 for Joomla 1.0 and Mambo.
You need to be a registered member of Joomlapolis to download.
The latest release candidate of Community Builder is version 1.2 RC2, native for Joomla 1.0, 1.5 and Mambo.
It is available as "thank you" to all CB documentation subscribers at this time.
CB Login
Syndicate
