This release is now available at GitHub.
We strongly recommend that everyone upgrade to this version, for security and quality of life updates.
Security Enhancements
- Skin Uploading Removed: Disabled skin uploads via both the web and UI to prevent malicious code execution in uploaded skins.
- Directory Protection: Prevented script execution within the Data directory.
- Metaweblog Disabled: Web services now disable Metaweblog by default and return a 404 error when disabled.
Bug Fixes & Stability
- Footer Placeholder Resilience: Fixed a critical bug where missing the
phSiteFooter placeholder in a skin would crash the site—the placeholder is now optional.
- Configuration & Scripts: Resolved issues fetching
style.config in the StyleSheetCombiner, and corrected a method name in mojoModalScript.js .
- Database Queries: Fixed an issue causing errors with single blog queries.
You can see the full changelog here.