Zomplog 3.9: admin area improvements and security fixes

Zomplog 3.9 includes updates to the admin area, and some important security fixes. This is a recommended update for all Zomplog users.

A short rundown of some of the new features and improvements:

* thanks to Frankma, each post can now have a publish date and an expiery date. This way you can decide when a post will be visible on your site, and when it should be hidden again. Write posts in advance, and decide when they should appear, or make sure information is only available for a certain amount of time.

* Some important security issues were pointed out by Sanyi on the forum. This update fixes all those issues, and improves overall data-protection. This is a recommended security update for all users.

* A security issue with the installer was also fixed. Still it's always a good idea to remove the installer after the installation process has finished.

* administrators can now decide how many latest entries and latest comments should be displayed

* The addition of a second upload tool in 3.8.2 has caused some confusion, in this update the image-to-textarea uploader has been moved to the rich text editor itself. Click the image-button on the rich text-editor, and the uploader will appear.

* Three new languages were added: Russion, Hungarian and Malay!

* Frankma worked on the aesthetics of the admin-area: no more boring links, but cute little icons! You'll love 'm!

* improved Lightbox behaviour

* improved theme cross-browser stability

If you don't have the time to run this update, please do make sure you remove the install-directory from your server (if you hadn't done so already).

Zomplog 3.8.2

Easier themeing, better file management, more secure, and featherlight.

For this update, we've made changes to nearly every file in the system. Frank worked days on it, I worked nights, and resulting from this crazy shift is a Zomplog version that's easily the most complete version of Zomplog to date! A lot of attention has gone to detail, to get get some of these issues out that had been lingering too long.

Reworked Theme Architecture.
Frank worked heavily on the themes, so now it has become much easier and more flexible to create your own themes! We've also standardized the default theme, and put all other (updated) themes in our new extensions repository: http://www.zomp.nl/extensions/category/themes. All current themes have been upgraded to work with the new Zomplog version. More detailed information can be found below.

A completely new file-manager.
Many people complained that the file-manager had been removed in version 3.8.1, so we decided to bring it back. But we didn't just put it back in there: we built a completely new and vastly improved filemanager! The new filemanager is integrated with the system, and allows you to upload images and files directly into your rich text editor! Images can then be resized visually, and aligned with the text, offering much more control over the appearance. But what's more: you now have direct access to all files in your upload-directory: you can preview them, insert them into the textarea (images even in two sizes) and delete them. The simple upload-and-go uploader is still there, so you can choose which way of uploading you prefer!

Lightweight
We made Zomplog more Lightweight. Because the number of Zomplog-plugins has so vastly grown (wonderful job, a big up to all Zomplog plugin-developers!), Zomplog had become quite a download. That's why Frank and I decided it was time to create an online repository of plugins, from which additional plugins can be downloaded. The default download contains only a few plugins, and if you need special functionality, grab new plugins from the extensions repository. The same goes for the latest updates in language-files, and the newest themes!

Security
Apart from fixing a security-issue in the navigation, and a security issue in the filemanager, we've also improved security for all theme-files and theme-parts, as well as many other possible vulnerable files in the front-end and back-end. If you're concerned about security, this update is recommended.

More improvements
That's not all! We've done a lot of small improvements to make the system more coherent, and improve the overall look, feel, and functioning:

* Updated Dutch, English, German and Bulgarian Language files, so they're completely up-to-date with the latest version. We still need translators for the other language, so please, translate and post your translation to the forum. All language updates will be posted in the new extensions-section, so check there if you want to see if your language has been updated.
* removed all php short-tags for compatibility with more server-configurations and servers. And old issue in Zomplog has finally been solved!
* Improved the theme-options for the default theme! Now you can easily edit even more aspects of the appearance of the default theme, without knowing any html or css!
* Removed the moblog-functionality. It was buggy, and we could no longer support it. It will become available seperately through the extensions-directory for those who really need it.
* Improved the error-handling of the rss-feed on the dashboard. If your server doesn't support the rss-reader, you'll get a link to the latest news.
* Improved the layout of the admin area

Fixed Bugs
We've fixed many bugs in this version, but I'll mention just the most prominent:
* Embed code gets repeated
* Search doesn't work when friendly urls are enabled
* menutabs
* Empty image rows inserted

For a list of all bugs, see the full list of closed tickets

About The New Theme Structure.
The way themes work is completely revised. This is mainly done to create a clearer and more consistent source code, and to make it easier for users to create new themes. You can now create an individual lay out for almost any element of Zomplog (e.g. in the menu you may highlight the title of teasers, without changing any of the other titles). The files that you need to adjust when creating your own theme have a lot of comment lines to make it easier to see what exactly happens.

The default theme has been rewritten and will be the new standard for the future, from which new themes can be developed. See the readme.txt file in default theme for more instructions.

Other themes, like Kubrick, Modern and Nucleus have been adjusted to fit in the new structure of themes, but they are not completely revised according to the new standard. You can still use them however. The original designers of those themes (or anyone else!) are invited to rewrite their themes according to the new default theme.

Did you make your own theme for an earlier version of Zomplog? Then you will have to convert it to the new standard. See the readme.txt file in default theme for more instructions. Sorry for this inconvenience.

The themes options are extended and improved for default theme. It is possible to change the background image of your header, the menu's font and many other aspects of your Zomplog without knowing anything about HTML. Just log in, click the themes tab and choose theme options from the submenu. Don't hesitate, just play around with it, you can't ruin anything!

Enjoy!

Frank & Gerben,
The Zomplog Development Team.

Zomplog 3.8.11 - security update

There is an important security-issue in versions 3.7.x and 3.8.x, which allows users who are not logged in to upload files to your server (if you've set permissions to the "uploads"-folder to 777).

Today I release a security patch for this, and a Zomplog update:

Download Zomplog 3.8.11 full version with security patch

or download just the security patch: Security Patch

It is strongly adviced to users of 3.7.x and 3.8.x to install the patch.

NOTE:
If you use version 3.7.x and don't want to upgrade, follow the instructions below (because you cannot use the patch in this case):

Open admin/upload_files.php and at the top of the file (before $image_dir =) add these lines:

if(!$_SESSION["loggedIn"]){
echo "You are not authorized to acces this page.";
exit();
}

Do the same for upload_theme_image.php