View Articles

TikiWiki.org site is open again to submission of news by users & developers, Mod creators, etc. Feel free to contribute with your news!

To submit some news, proceed as usual, click in the main Menu on "Articles > Submit article", and fill the form with your news.

For more information, see doc: http://doc.tikiwiki.org/Articles+User

During the last few days, Tiki CMS/Groupware joined Freshmeat's top-50 most popular projects.

Freshmeat's Top 50 projects by popularity

Freshmeat's Top PHP projects

Congratulations to all the Tiki community!

For security reason, you must upgrade to php 4.4.1 at least if your register_globals is turned on.
See http://www.hardened-php.net/advisory_202005.79.html

After the longest day of the year (daylight-saving time), the TikiWiki community released version 1.9.2 right in time for halloween.
This compatibility release for PHP5 and MySQL 4.1 includes lots of valuable bug-fixes.

A new release of ))TikiWiki(( is now available on SourceForge.net: version 1.9.1.1 for the 1.9 -Sirius- branch.

This maintenance release includes fixes for a recently identified security flaw.

After long hours of intensive fixing/testing/fixing, two new versions of TikiWiki are now available on Sourceforge: version 1.8.6 for the 1.8 -Polaris- branch, and 1.9.1 for the 1.9 -Sirius- branch.

These 2 releases include fixes for recent major security flaws (some disclosed, some not yet). The 2 recent XMLRPC flaws have been corrected. (http://phpxmlrpc.sourceforge.net/)

This article is mainly a notice to all users of the internal Tiki messaging system. Since a recent change in 1.9, in order to receive messages from other site users, you need to visit your user preferences through MyTiki and enable the option Allow messages from other users. Until then you cannot receive internal messages including replies to messages you send out.

With many users posting in the forums and coming into our IRC channel requesting help as their TikiWiki site after a recent upgrade to 1.9 has started to generate blank or half drawn pages, I feel its needed to highlight the PHP memory_limit requirement again. Read more for the various links relating to this problem and solutions.

Gulftech Research pointed us to a bug in the xmlrpc library. This bug can be used to execute any php code remote. This is a serious security flaw and we encourage you to either use a workaround or to install updated xmlrpc libraries immediately.