Hi, On some servers the variable SERVER_NAME is not set properly while PHP_SELF is. But SERVER_NAME is save agains cross site scripting. So I added some checks to PHP_SELF and this is now as save and therefore I use PHP_SELF now again. So if you have problems with TWG 1.8.3 – Just update 1.8.3… Best, … [Read more…]
Dear JFU/TFU/TWG users, A security company was testing TWG against security problems like cross site scripting and all kind of injections because there are so many different ways to hack a site. Thanks to the researcher Russ McRee who discovered some vulnerabilities and coordinated their disclosure between Secunia and me. TWG 1.8.3 is now the … [Read more…]