Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
Downloads
Download drupal-4.7.7.tar.gztar.gz
480.29 KB
MD5: b1c9f7f05c1bd8a0ae4627d864ee8c25
SHA-1: 4bdc5c0d9c5115ef15211bbdc2cc471768d9a4f8
SHA-256: a357ccb14f156e1284ca02848d1185e460cf47758e6fabc7a6014bdc5b26102a
Download drupal-4.7.7.zipzip
557.98 KB
MD5: c002b23eb83b434f3a03aa3ecd1fbdf7
SHA-1: 58525d85d6d7a6597df24f69e64c3b379f0d6890
SHA-256: 7c92d42c67bd6d21af07fa142a08ca72bb6d021ca46946a9bbc404811c278ca5
Release notes
The seventh maintenance and security release of the 4.7.x series. Only fixes for a security vulnerability and other bugs have been committed. New features are only being added to the forthcoming 6.0 release.
This release fixes a security vulnerability. Sites are urged to upgrade immediately. For more details, please see the security announcement:
In addition to this security vulnerability, the several bugs have been fixed since the 4.7.6 release:
- #32833 by fgm: Fixed documentation error.
- #114103 by adixon: New profile fields added to registration form show above Account Information.
- #117917 by webchick: Improved documentation for cookie domain.
- #68690 by mindless: New attachments not shown in node preview.
- #121876 by Darren Oh: drupal_to_js() converts empty arrays to objects.
- #133865 by Alexis: Incorrect use of form_set_error in user_login_validate().
- #130215: backport of #60664, 'Comment: duplicate ...' in watchdog, even when editing a comment.
- #101305 by bjaspan: textarea.js is incompatible with IE.
- #150972 by alex_b: limit wget to 1 run per second.
- #133789 by John Albin (port by Omar Abdel-Wahab): Drupal-generated email can look like spam (to SPF).
- #103079 by yched: check_plain('') returns
</p>
. - #158687 by drumm: Fix Drupal.encodeURIComponent() and drupal_urlencode() edge cases.