Posted by Heine on January 30, 2008 at 8:56pm
| Download | Size | md5 hash |
|---|---|---|
| comment_upload-4.7.x-0.1.tar.gz | 10.78 KB | e28f76a25df1822d54f94ce88ee12b03 |
| comment_upload-4.7.x-0.1.zip | 11.99 KB | 380cf4b74ee83dc7c2200abf76ad8dec |
Last updated: December 24, 2010 - 22:39
The release fixes an arbitrary file upload issue. See SA-2008-015 for details.
Changes since DRUPAL-4-7:
- #72235 - fixed incompatability with private download method by creating a hook_file_download and designated comment u
pload tables. - fix table prefixes in .install
- #88495 - make sure files and table entries are deleted when the parent node is removed.
- Improved README.txt
- #111931 - don't save to sequences, when there are no comment uploads to be upgraded
- #110962 - Support PostgreSQL, make sure MySQL definition matches.
- #113585 - fix sql error in create table statement
- #113258 - Backported support for multiple inline images
- #126312 - records were removed but actual files were not deleted, due to a missing file_delete.
- #216024 (SA-2008-015) - cast $comment to an object before passing it to validation routines.