Release info

Created by: Heine
Created on: January 30, 2008 - 20:56
Last updated: January 31, 2008 - 00:49
Core compatibility: 4.7.x
Release type: Security update

Release notes

The release fixes an arbitrary file upload issue. See SA-2008-015 for details.

Changes since DRUPAL-4-7:

  • #72235 - fixed incompatability with private download method by creating a hook_file_download and designated comment u
    pload tables.
  • fix table prefixes in .install
  • #88495 - make sure files and table entries are deleted when the parent node is removed.
  • Improved README.txt
  • #111931 - don't save to sequences, when there are no comment uploads to be upgraded
  • #110962 - Support PostgreSQL, make sure MySQL definition matches.
  • #113585 - fix sql error in create table statement
  • #113258 - Backported support for multiple inline images
  • #126312 - records were removed but actual files were not deleted, due to a missing file_delete.
  • #216024 (SA-2008-015) - cast $comment to an object before passing it to validation routines.