TrioLive 1.58.7 Released

[pevans]

We have just released version 1.58.7.

Here is a list of changes:

Bug Fixes:

• The chat questions report was not obeying the View Reports operator group permission.
• A potential SQL injection and cross-site scripting vulnerability has been patched in the department offline context.

Here is a list of changed files:

• Please re-upload these files:
• /ac_global/cpaint/cpaint2.proxy.php
• /ac_global/css/default.css
• /ac_global/functions/ajax.php
• /ac_global/functions/http.php
• /ac_global/functions/import.php
• /ac_global/functions/instup.php
• /ac_global/functions/interface.php
• /ac_global/functions/mime.php
• /ac_global/functions/php.php
• /ac_global/functions/pop3.php
• /ac_global/functions/prefix.php
• /ac_global/functions/sql.php
• /ac_global/functions/sync.php
• /ac_global/js/dom.js
• /ac_global/js/editor.js
• /ac_global/js/form.js
• /ac_global/loginsource/phpbb3.php
• /ac_global/loginsource/smf.php
• /ac_global/loginsource/vbulletin.php
• /ac_global/scripts/updateri.php
• /ac_global/smarty_plugins/function.ac_headercol.php
• /ac_global/templates/ac_strings.js
• /ac_global/templates/group.list.js
• /ac_global/templates/import.js
• /ac_global/templates/settings_mail.js
• /ac_global/templates/sync.delete.js
• /ac_global/templates/sync.form.js
• /ac_global/templates/sync.list.js
• /ac_global/templates/sync.run.js
• /ac_global/templates/user.list.js
• /admin/context/reports_cfields.php
• /admin/functions/pchat.php
• /admin/functions/versioning.php
• /admin/sql/update_database.php
• /admin/templates/chat_block.tpl.htm
• /context/department_offline_context.php
• /docs/Changelog.txt

Enjoy using TrioLive.

[jvandeboom]

If you would like to patch the security update without having to upgrade to the latest version please follow these steps:

• Download the department_offline_context.zip file
• Unzip / extract the ZIP file
• Upload the department_offline_context.php file into your /triolive/context/ folder overwriting the existing department_offline_context.php file.
• That is all!