CodeIgniter Forums
v4.3.5 security fix released - Printable Version

+- CodeIgniter Forums (https://forum.codeigniter.com)
+-- Forum: General (https://forum.codeigniter.com/forumdisplay.php?fid=1)
+--- Forum: News & Discussion (https://forum.codeigniter.com/forumdisplay.php?fid=2)
+--- Thread: v4.3.5 security fix released (/showthread.php?tid=87694)



v4.3.5 security fix released - kenjis - 05-21-2023

We released the new security fix of the framework.

This provides two SECURITY related bug fixes.
If you use Validation Placeholders, upgrade as soon as possible,
or apply workround in the Security Advisory.
It is the most serious vulnerability ever.

ChangeLog: https://codeigniter4.github.io/userguide/changelogs/v4.3.5.html
Upgrading Guide: https://codeigniter4.github.io/userguide/installation/upgrade_435.html

Note: Unfortunately, due to deployment trouble, the official User Guide in codeigniter.com is not yet updated.
Please read the User Guide in GitHub Pages.


RE: v4.3.5 security fix released - luckmoshy - 05-21-2023

Thank @CI_TEAM


RE: v4.3.5 security fix released - ijurisic - 05-22-2023

Thanks for updates and care for CI.


RE: v4.3.5 security fix released - foxbille - 05-22-2023

Thank for updates, unfortunately i putted 4.3.4 online just a few days ago.
Does someone use a tool or a linux shell script to detect modified files and automate ftp send to put them online ?


RE: v4.3.5 security fix released - kenjis - 05-23-2023

Quote:There are some third-party CodeIgniter modules available to assist with merging changes to the project space: Explore on Packagist.
https://codeigniter4.github.io/CodeIgniter4/installation/installing_composer.html#cons



RE: v4.3.5 security fix released - kenjis - 05-23-2023

@zannhe Are you sure that you configured it correclty?
See https://codeigniter4.github.io/CodeIgniter4/incoming/routing.html#enable-auto-routing
If a method receives both 'get' and 'post', Auto-Routing (Legacy) is used.


RE: v4.3.5 security fix released - InsiteFX - 05-23-2023

Thank you very much CodeIgniter Development Team.


RE: v4.3.5 security fix released - 5flex - 05-31-2023

Oh, God!!! Dark theme in documentation!! Awesome! Thank's!


RE: v4.3.5 security fix released - Alok Insan - 06-10-2023

Thanks for the updates. kenjis Sir.