Serendipity

Serendipty 1.3 has been released. This new version of the blogging applications introduces 41 changes. Not only are enhancements and additional features introduced, but also changes to address a nasty cross site scripting issue (security exploit).

Some of the more significant features and enhancements for Serenditpity 1.3 include:

• The karma rating plugin has been upgraded to support nice, CSS-based rating graphics and an overall rehaul on the its coding.
• Make the Spartacus plugin be able to use FTP upload, a workaround for SafeMode PHP restrictions. Also add a remote backend for plugin update checks.
• Import scripts for phpNuke and lifetype.

A new version of the blogging application Serendipity is now at the beta stage, Serendipity 1.2 Beta 1.  The most significant changes in this new version of Serendipity is the authentication and session scheme for easier plug-in interaction.  Also support for theming/template authoring has been improved using Smartyfield.

The following is a list of some of the new enhancements according to the Serendipity 1.2-beta1 announcement since Serendipity 1.1:

• Templates for Backend (Entry Editor, Master Template) via Smarty
• New session/login system
• Improved database support for SQLite3 and PDO::Postgresql
• IPv6 support

Serendipity 1.1.1 was released to fix a few bugs. This is the first update to Serendipity 1.1 since it was first released at the end of 2006. The 1.1.1 update does not include any security fixes so you may not even need to update unless you've experienced one of these bugs:

• Windows IIS server cookie/session authentication problem when not running via HTTPS
• Change execution order of trackbacks to properly send them when a failure occurs
• Display proper plugin permissionship restrictions when the admin user is not part of the group that is restricted
• Fixed a bug that some plugins were not able to properly execute in the entry detail view

In a blog post at the Serendipity site, Garvin also commented on the feature improvements that can be expected for Serendipity 1.2. Users of the weblog application can expect the following in Serendipity 1.2 once it is released :

• Improvements on the authentication/plugin API sequence to better support future plugins like OpenID.

The folks at Serendipity have released version 1.0.2 to address cross-site scripting (XSS) vulnerabilities "on the admin backend which could happen if registered authors can be tricked into following a specially crafted URL." The 1.1 Beta 5 also contains this fix along with the following new changes since Beta 1:

Serendipity's own Garvin has some helpful hints. While only those using the blogging application Serendipity will likely only have interest in this post, I thought I would post it up front anyway. There have not been a huge amount of real news from the various blogging applications except for a couple exceptions. Regardless, I like to promote blogging applications as much as I can.