Answered evo security patch

- 68 Posts
tomvanminnebruggen Reply #1, 9 years, 10 months ago

hello,

since today there is an Evo Security Patch for version 1.0.12 and above.

if i don't use eform, ajaxsearch or evo gallery, is it necessary to install this patch?

thanks
tom
This question has been answered by multiple community members. See the first response.
discuss.next
discuss.answer
- 41 Posts
avibodha Reply #2, 9 years, 10 months ago

Yes! had some sites hacked from this bug already.

1) unless you uninstall those snippets the code is still on your server and needs to be patched.
2) there is an update to a sanitize function (manager/includes/protect.inc.php) that I'd consider required updating.
- 68 Posts
tomvanminnebruggen Reply #3, 9 years, 10 months ago

thank you

this is the first time i'm going to install a security patch
Can i just replace the files on the server with those from the patch or do i have to do something more?
discuss.prev
discuss.answer
- 41 Posts
avibodha Reply #4, 9 years, 10 months ago

for this patch, that's all that I saw that's needed
- 68 Posts
tomvanminnebruggen Reply #5, 9 years, 10 months ago

thank you very much for your advice