The MAXdev team has been notified of a security issue by http://www.secunia.com the problem was found to be a SQL Injection Vulnerability in MDForum discovered by Stefano Angaram

The patch is available from <img src="modules/Tinymax/tiny_mce/plugins/filemanager/InsertFile/img/ext/zip_small.gif" alt="mdforum_patch_2612.zip" /> mdforum_patch_2612.zip (<span style="font-size: 80%">12.60 KB)  this affects all versions of MDForum 2.xx just replace file in modules/MDForum/includes 

We strongly recommend all users apply this patch to their sites ASAP

TiMax

Post comments

We are not sleeping in MDPro development, in upcoming months we will release MDPro 1.083 stable version! As our earliest concept while launched the MDLite version, our development still focus more on the improvement of the existing core, modules and blocks to make it stable, less of bugs, slim codes and functional. Importantly, the team also prepare some new modules and blocks separately which are not included in this package. Doing this way users are able to select any module that will suite to their production site without have to install features which are not fit with their requirements.
Read more... (548 bytes more) Post comments

New private messages module for MDPro 1.083x

The module is brand new.

• template driven
• customizable last messages block
• attached files management
• personal folder management
• reply, forward without attached file
• new message alert customizable by user
• new message email customizable by user
• automatic reply customizable by user
• attached files receiving/send customizable by user
• attached files receiving/send customizable by admin using permission
• different options managed throught dinamic field
• smilies management
• ajax based
• direct send

Post comments

It doesn't seems, but we're working hard both on latest version 1.083, on new MDPro version 2.0 and on development of new modules, most of them sponsored by MAXS.o.s.

A new version of Admin Messages module was added to our reserved CVS.

The new features are:

• Different messages depending on site language
• Tinymax editor
• Message enabling/disabling
• Message max duration time, the message will be automatically disabled once time is expired
• Message max visit counter, the message will be disabled once the number of visit is reached
• Message disabled by User, the user can disable the message
• Custom messages for group, the administrator can choose the group of users to show the message
• Ajax management
• Module aspect completely template-driven

This module will work only on MDPro 1.083 or greater, a specific download section will be created.

Post comments

It doesn't seems, but we're working hard both on latest version 1.083, on new MDPro version 2.0 and on development of new modules, most of them sponsored by MAXS.o.s.

A new version of Member List module was added to our reserved CVS.

The new features are:

• Some bugs closed
• Search using any user profile field, including listboxes, checkboxes, radiobuttons
• Ajax managed search
• Search field administration
• Module aspect completely template-driven

This module will work only on MDPro 1.083 or greater, a specific download section will be created.

Post comments