Geeklog 1.3.9sr2 and 1.3.8-1sr6 fix the following security issues:

1. A cross site scripting issue, due to the use of the (unfiltered) variable $topic in most of the language files (thanks to the anonymous submitter of bug #293).
2. It was possible to post comments to stories and polls for which comments had been disabled. The comments were never displayed, though, but did show up in the What's New block.

The upgrade to 1.3.9sr2 also includes a lib-plugins.php that fixes problems with plugins on PHP 5. The complete 1.3.9sr2 tarball also includes updated PEAR packages that should resolve email problems that some users had (see this story for details).

Looking through the server logs of a low-traffic Geeklog site, I couldn't help noticing that Googlebot and its colleagues had been busy there indexing each and every variation of Geeklog's submission forms, e.g.

/submit.php?type=event&mode=&month=08&day=07&year=2004&hour=2
/submit.php?type=event&mode=&month=06&day=17&year=2004&hour=8
etc.

/comment.php?sid=20020513230754519&pid=0&type=article
/comment.php?sid=20020427185655276&pid=0&type=article
etc.

Obviously, it doesn't make a lot of sense to index these particular pages, or the submission forms in general.

There's an easy way to prevent this: Create a robots.txt file.

I decided to put the titles for the latest stories in the static page centerblock on one of my sites. Here is the code to do this, just place it in a static page, set the centerblock option, set the execute php option to 'execute PHP (return)' and pretty it up however you want. It will display the last date and titles of the last 15 (or whatever you set the $numstories variable to) stories.

Anyway here is the code ...

The first version of a new plugin for Geeklog has been released. The FAQ plugin aims at filling the hole in the plugin collection already available and finally providing FAQ functionality for every geeklog site.

---

The new plugin features a linear topic structure and a translation module. At first, all entries are done in one language, and can then be translated into any other language. Users will see always the entries in their kanguage, as long a translation exists. If not, it will be listed in the default langauge.

Future versions will include: Hitcounters, voting, translation requests, search etc etc.

ATTENTION: This is a BETA release. Future versions will NOT include upgrade functions, so dont spend too much time inserting content! Although it works fine, this is for testing purpose only. Please report any bugs and feature requests.

Please download from the "Downloads" section of my site or on Geeklog.net

I would like to announce that the initial version of phpBBBridge has been released! This plugin is designed to integrate phpBB with your Geeklog install.

Please be sure to read over the enclosed readme very carefully. It contains detailed installation instructions as well as very important information about the plugin.

As this is the first release of the phpBBBridge, I would really appreciate any feedback and bug reports. Let me know what you think!

If you would like to test out this integration before downloading, I have the plugin installed at my demo site.

You can download the plugin from Geeklog.net, here, as well as over at my demo site.