Jan, 25 2010
Today I've updated phMailer to version 1.5.1. The only new feature is that all email is now sent as text/html instead of text/plain. This should solve all the issues people have with newer email clients like Gmail where the message did not display with line breaks. This was one of the biggest complaints with the script. Now that almost all email clients are HTML compatible I figured it was time to update the script to support HTML. Head over to the scripts section to download the new version.
- Scott Lucht
Jan, 23 2010
I've finally gotten around to updating a few of my scripts. This week I updated phShoutBox and addressed the security vulnerability that allowed admin access by setting a custom crafted cookie on the attackers machine. That was the only known bug with that script and now it's resolved. The script is available for download and I encourage everyone to upgrade to the new one. It's a simple drop in replacement to upgrade, just replace your admin.php file with the new one.
phUploader was also subject to an arbitrary file upload vulnerability which allowed an attacker to upload a file with two extensions (filename.php.jpg) and then remotely execute this file. This appears to only work on some web servers, mainly Apache, but it's no longer an issue as the script has been patched. Along with the patch comes a new highly requested feature: phUploader no longer denies a whole group of files if one of the files does not pass validation. This means that if only one of your numerous files being uploaded already exists, is the wrong file type or is to large, etc. only that file will be denied during the upload process. I've also re-wrote parts of the script to make it cleaner and easier to follow if you're interested in PHP. A simple file manager may be released with the next version.
Head over to the scripts section to download the updated scripts.
- Scott Lucht
May, 25 2009
Schools almost over and I cannot wait. I should be graduating near the end of this year with my BA in Information Systems Security. It's been a long 4 years of constant classes along with a full time job. I really want to get into creating more scripts and updating my current ones. I have a long list of features requests to add to my current scripts. I apologize for the lack of updates on my scripts for the last couple years, but for the most part they seem to be serving their purpose quite well as I still receive regular emails in regards to how easy they accomplish a specific task. I would like to say thank you to everyone that has emailed me, I read every single email and try to respond to all of them but sometimes that does not happen. If you are looking for support, the best way is to post your question in the forums. That allows more people to answer your question as sometimes I just cannot find the time to answer complex questions. I thank you all for your interest in my scripts!
- Scott Lucht
