Everyblog

Jay Matwichuk - October 9, 2008 - 14:23

Does anybody know what happened to the Everyblog module? I was using a beta version, and all of a sudden today, without any warning, I got a message saying that the module wasn't being developed anymore and that I should remove it from my system. Is leaving it on going to cause me troubles?

.

US421 - October 9, 2008 - 15:56

I received a security alert for the module yesterday:

The module does not follow Drupal best practices for database queries and
handling of user submitted data, leading to a number of vulnerabilities. Of
special concern is that an unprivileged user may become logged in to the account
of an existing user, including an administrator.

Looks like your site will be more secure if you remove the module.

Security Flaws

ntroutman - December 25, 2008 - 00:01

Everyblog was taken down due to some security concerns. I have now fixed everything and will be releasing EveryBlog 2.0 as soon as I get the go ahead from the Drupal security team.

Regards,
NTroutman

EveryBlog 2.0

roydean - August 4, 2009 - 03:36

When is this going to be released?

 
 

Drupal is a registered trademark of Dries Buytaert.