MiaCMS Official Website

As you may or may not be aware, within the last day or two there has been a MiaCMS SQL injection security report making rounds on the web. We have taken time to carefully review the report and wanted to make you aware of our findings. The report can be found here for reference - http://secunia.com/advisories/31584/.

The reported exploits claim that input passed to the "id" parameter in index.php (when "option" is set to "com_content" and "task" to "view", "category", or "blogsection") is not properly sanitized before being used in SQL queries. The report is accurate and this problem is due to incorrect sanitization of the $id variable within the mod_socialbits.php file of the Socialbits module. We have corrected the issue and released a patch for 4.6.5 called "MiaCMS_v4.6.5_SecurityPatch_1". The patch file can be found on our main project downloads page (http://code.google.com/p/miacms/downloads/list).

It is strongly recommended that all users apply this update to their MiaCMS installation. There are upgrade instructions contained within the zip file. Thank you for your patience and understanding.

MOStlyCE, version 3.1.0.1, was released this week.  The biggest change for this release was an upgrade of the TinyMCE core from 3.0.7 to the latest version available 3.1.0.1.  This brings in lots of bug fixes and better support for Opera 9.50 and the Firefox 3.0 . Their full changelog can be found here.

There was also some general reworking of the compression feature in MOStlyCE.  It had not been functioning properly in recent versions of Opera and/or with the new FireFox 3.0 release.  Editor compression is important because it reduces the overall size of the editor by up to 75% and reduces the number of HTTP requests required to load the editor.  As always you can find the latest version on the projects SourceForge page.  Upgrade instructions can be found here.

This is a reminder that this release is for MiaCMS only.  The final release of MOStlyCE for Mambo was version 3.0.5.

Mia's 4.6.5 code name Eclipse was great, but also somewhat trivial. Well, it sorta relates to Sunset, Sunrise like names used by .....(not saying)

So, when we were at the verge of kicking off the development of MiaCMS 4.7 (later versioned as 4.8) version, and been looking for a striking code name. Something funny, controversial, witty !!!

Things, animal, places, acronyms, abbreviations.... all done. How about a person!

Here comes Annabel Port (code name annabelport), the very Annabel of the Geoff Show on Virgin (Absolute) Radio UK. A perfect fit for the codename profile we were after, plus we like Annabel and the show. And with her blessing, we are cleared to use her name. Thank you very much Annabel.

Here are some controversial remarks from Annabel at Porting Controversy.