cvs: smarty / RELEASE_NOTES /libs Config_File.class.php Smarty.class.php Smarty_Compiler.class.php

mohrt		Thu Feb  3 10:14:44 2005 EDT

  Modified files:              
    /smarty	RELEASE_NOTES 
    /smarty/libs	Config_File.class.php Smarty.class.php 
                	Smarty_Compiler.class.php 
  Log:
  update version numbers in cvs
  
  
http://cvs.php.net/diff.php/smarty/RELEASE_NOTES?r1=1.49&r2=1.50&ty=u
Index: smarty/RELEASE_NOTES
diff -u smarty/RELEASE_NOTES:1.49 smarty/RELEASE_NOTES:1.50
--- smarty/RELEASE_NOTES:1.49	Fri Jan 21 12:46:13 2005
+++ smarty/RELEASE_NOTES	Thu Feb  3 10:14:43 2005
@@ -1,3 +1,8 @@
+2.6.7
+-----
+
+Those using Smarty with security enabled: a hole was found that allowed PHP code to be executed from within a template file. This has been fixed and you are engouraged to upgrade immediately. Note that this hole does NOT affect the security of your web server or PHP applications, only the ability for someone editing a template to execute PHP code. Other changes in this release can be found in the NEWS file.
+
 2.5.0
 -----
 
http://cvs.php.net/diff.php/smarty/libs/Config_File.class.php?r1=1.76&r2=1.77&ty=u
Index: smarty/libs/Config_File.class.php
diff -u smarty/libs/Config_File.class.php:1.76 smarty/libs/Config_File.class.php:1.77
--- smarty/libs/Config_File.class.php:1.76	Thu Feb  3 09:41:33 2005
+++ smarty/libs/Config_File.class.php	Thu Feb  3 10:14:43 2005
@@ -18,14 +18,14 @@
  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  *
  * @link http://smarty.php.net/
- * @version 2.6.7-dev
+ * @version 2.6.8-dev
  * @copyright Copyright: 2001-2005 New Digital Group, Inc.
  * @author Andrei Zmievski <[email protected]>
  * @access public
  * @package Smarty
  */
 
-/* $Id: Config_File.class.php,v 1.76 2005/02/03 14:41:33 mohrt Exp $ */
+/* $Id: Config_File.class.php,v 1.77 2005/02/03 15:14:43 mohrt Exp $ */
 
 /**
  * Config file reading class
http://cvs.php.net/diff.php/smarty/libs/Smarty.class.php?r1=1.511&r2=1.512&ty=u
Index: smarty/libs/Smarty.class.php
diff -u smarty/libs/Smarty.class.php:1.511 smarty/libs/Smarty.class.php:1.512
--- smarty/libs/Smarty.class.php:1.511	Thu Feb  3 09:41:33 2005
+++ smarty/libs/Smarty.class.php	Thu Feb  3 10:14:43 2005
@@ -27,10 +27,10 @@
  * @author Monte Ohrt <monte at ohrt dot com>
  * @author Andrei Zmievski <[email protected]>
  * @package Smarty
- * @version 2.6.7-dev
+ * @version 2.6.8-dev
  */
 
-/* $Id: Smarty.class.php,v 1.511 2005/02/03 14:41:33 mohrt Exp $ */
+/* $Id: Smarty.class.php,v 1.512 2005/02/03 15:14:43 mohrt Exp $ */
 
 /**
  * DIR_SEP isn't used anymore, but third party apps might
@@ -464,7 +464,7 @@
      *
      * @var string
      */
-    var $_version              = '2.6.7-dev';
+    var $_version              = '2.6.8-dev';
 
     /**
      * current template inclusion depth
http://cvs.php.net/diff.php/smarty/libs/Smarty_Compiler.class.php?r1=1.360&r2=1.361&ty=u
Index: smarty/libs/Smarty_Compiler.class.php
diff -u smarty/libs/Smarty_Compiler.class.php:1.360 smarty/libs/Smarty_Compiler.class.php:1.361
--- smarty/libs/Smarty_Compiler.class.php:1.360	Thu Feb  3 09:41:33 2005
+++ smarty/libs/Smarty_Compiler.class.php	Thu Feb  3 10:14:43 2005
@@ -21,12 +21,12 @@
  * @link http://smarty.php.net/
  * @author Monte Ohrt <monte at ohrt dot com>
  * @author Andrei Zmievski <[email protected]>
- * @version 2.6.7-dev
+ * @version 2.6.8-dev
  * @copyright 2001-2005 New Digital Group, Inc.
  * @package Smarty
  */
 
-/* $Id: Smarty_Compiler.class.php,v 1.360 2005/02/03 14:41:33 mohrt Exp $ */
+/* $Id: Smarty_Compiler.class.php,v 1.361 2005/02/03 15:14:43 mohrt Exp $ */
 
 /**
  * Template compiling class

-- 
Smarty CVS Mailing List (http://cvs.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php