Hooray! After waiting for so long, I got my activation code for AllPeers. This is news of the day for me. I would like to try it out right now. The version that I tried is AllPeers Beta 0.39. I choosed Linux 32-bit with libstdc++ version 6 that is default for my Dapper box. Installation went fine and next to restart to activate the installation.

Drupal is becoming more popular this year. One of noticeable sign is security vulnerability report. During this year, Drupal already officially reported 8 advisories. The last two advisories was announced yesterday via e-mail followed by a post on the web. Fortunately, upgrading to Drupal 4.7.2 is very easy. Just to run a single command as below.

cvs update -d -P -r DRUPAL-4-7

According to announcement, I have upgraded all drupal sites in my control to 4.7.1 with just one command as follow. Fortunately, I checked out Drupal source from the CVS repository directly so I can synchronize so easy.

cvs update

It’s time to upgrade to fix vulnerabilities. In addition, don’t forget to limit access in files directory to prevent intrusion by uploading malicious codes. To do so, please make sure you have .htaccess in files directory with below content.

SetHandler This_is_a_Drupal_security_line_do_not_remove

According to the previous post, the patch is not complete for all functions. I found a problem according to attributes mapping. The attributes changed in Drupal are not synchronized to LDAP because of missing some options in administer interface. So below is the new patch.

zendz found some problem regarding to Hall of Fame module. Its menu at the top of all pages has disappeared. I tried to directly access https://howforge.com/hof. The error message was "access denied". Fortunately, I found a patch at http://drupal.org/node/53875. Thanks chrisd and Steven for the patch of External URL support for menus broken by SA-2006-001.

Since I have just upgraded howforge.com to Drupal 4.7.0 beta 5, the common task is to test the functionality of all modules. The first module I found bug is ip2cc module. The symptom is that you will never see all flags. This is because Drupal 4.7.0 beta 5 doesn’t rely on base tag anymore! This is very interesting and exciting feature since Drupal use base tag to simplify path creation for so long. For all module maintainers, they have to call url() function to make sure all URLs are valid. Below is the list of modules I have to patch in Drupal 4.7.0 beta 5. Most of them has problem with CSS.