CMS Development Tracking

After almost 18 months in the making, Geeklog 1.5.0 is now officially out and available for download.

To recap: This version incorporates the results of the 2007 Google Summer of Code, namely:

• New user-friendly install script by Matt West
• New Configuration GUI (replacing config.php) by Aaron Blankstein
• New Webservices API based on the Atom Publishing Protocol by Ramnath R. Iyer

A big round of applause please for Aaron, Matt, and Ramnath for adding these great new features to Geeklog. And a big thanks to Google for running the Summer of Code program and making all this possible!

Geeklog 1.5.0 also brings support for OpenID and LDAP, subcategories in the Links plugin, support for XHTML, and more.

We also owe you information about some security issues in Geeklog that we haven't disclosed yet: All Geeklog versions prior to 1.5.0 are vulnerable to cross-site request forgery attacks. There are also some security issues in kses, the HTML filter we're using in Geeklog.

Documentation for the new features is available from the Geeklog Wiki or from the included documentation, e.g.

• Using the Webservices
• OpenID support in Geeklog
• LDAP Remote Authentication
• XHTML support in Geeklog 1.5.0

Plugin authors may also be interested in these articles:

• Implementing the Configuration GUI for plugins
• Implementing CSRF protection

Related CMS news: