Thanks to chbi of https://chbi.eu for the security reports and helping us to make Tiki much safer application again!

Visit https://tiki.org/Download to get the latest version.

We, the Tiki community, warmly encourage current Tiki users to update to - and new users to try out - Tiki 18.1 and benefit from the new features, options and fixes. Thanks to the hundreds of reports and wishes submitted by Tiki testers and community members, the changes from 15 to 18 have been impressive and this update continues that trend. This is another occasion to remind you that updating your site regularly will ease your own update and maintenance process as well as keep your site as secure as possible.

This is also the time to say goodbye to Tiki 17, which has come to the end of its support period and won’t be further upgraded.

The security team would like to give thanks and credit to Pranav Digambar Jagtap @pranavH4x0r, chbi of https://chbi.eu, Karim of ripstech.com and Omar Kurt of netsparker.com for their security reports and help to make Tiki a safer application.

If you like Tiki and find it useful, we invite you to join the Tiki community and to help fund our open source project.

Tiki 18, originally scheduled for an December 2017 release but pushed back for extra fixes and enhancements, brings a number of significant new features including a Composer web installer, integration of better GUI (drag and drop interface), a new Style-Guide tool, a major upgrade of the external libraries for H5P, the open source platform for creating rich HTML5 content, and many improvements around trackers, wiki plugins and the system admins tools (for detailed info and list, visit: https://doc.tiki.org/tiki18).

For the most polished and feature-complete Tiki Wiki CMS Groupware experience, an upgrade to Tiki 18.0 or new installation as a first Tiki website is highly recommended!

On October 8, Tiki Wiki CMS Groupware marked 15 years of continuous development. Many thanks to everyone who has contributed to the project over the years by coding and bug-fixing, creating and hosting websites, and providing great feedback for further improvement.

Happy Birthday, Tiki!

The Tiki Community has released updates to all supported branches of the Tiki Wiki CMS Groupware project. These updates address several vulnerabilities found in Tiki, as well as bringing miscellaneous bug fixes.

Special thanks to:

• chbi at https://chbi.eu
• leon.zhao
• Pradeep Kumar
• Tim Coen of https://www.curesec.com/
• xu yue (aka cdxy or Xyntax)

for reporting and assisting in verifying fixes for the security issues!

All Tiki website administrators are strongly encouraged to upgrade their sites to the latest Tiki versions: Tiki 17.1, Tiki 16.3, Tiki 15.5 LTS, and Tiki 12.12 LTS.

Visit https://tiki.org/Download to get the latest version.

Tiki 17, originally scheduled for an April 2017 release but pushed back for extra fixes and enhancements, brings a number of significant new features including support for modern favicons, password blacklists, and a new method for annotations.

New external libraries integrated as features include H5P, the open source platform for creating, sharing, and reusing interactive HTML5 content; and CasperJS, a browser navigation scripting and testing utility written in JavaScript for PhantomJS or SlimerJS. (Correction: A previous version of this article stated that Exposé IDS (intrusion detection system) is a new feature in Tiki 17. This feature will debut in Tiki 18. Sorry about any confusion.)

Feature advancements include a massive improvement in PDF generation via mPDF, tracker additions and enhancements including a more versatile user selector field type, typography enhancements based on PHP SmartyPants, and a number of new wiki plugins.

For the most polished and feature-complete Tiki Wiki CMS Groupware experience, an upgrade to Tiki 17.0 or new installation as a first Tiki website is highly recommended!

The Tiki Community has released updates to all current versions of Tiki Wiki CMS Groupware. These updates address a cross-site scripting vulnerability in Tiki (CVE-2016-9889). The updates also include many other fixes and improvements.

Special thanks to 0xExploit for the cooperation and assistance in reporting the security issue.

We highly encourage all Tiki administrators to upgrade their sites to the latest Tiki versions: Tiki 16.1, Tiki 15.3 LTS, and Tiki 12.10 LTS.

Visit https://tiki.org/Download to get the latest version.

You can show your support by taking a moment to vote for Tiki! Voting is open until November 1, 2016. Winners will be announced November 10, 2016.

To vote, visit https://www.cmscritic.com/awards/.

The Tiki Community is planning two TikiFest (code sprint) events in the next month:

• TikiFest FrOSCon will be held in Bonn, Germany from August 13-23 (during FrOSCon, Aug 20-21). Visit https://tiki.org/TikiFestFrOSCon2016 for details.
• TikiFest Hungary will be held in Budapest, Hungary from August 23-29. Visit https://tiki.org/TikiFestHu2016 for details.

All members of the Tiki Community, as well as anyone interested in wikis and content management systems (CMS) are invited to join us! Many of the most active contributors to Tiki will be present to plan, design, and code upcoming Tiki releases.

What is a TikiFest? It is a tradition in the Tiki community, a TikiFest is a meeting between Tiki community members (that usually only meet online). This is an opportunity to socialize, code and discuss about wiki technology and culture, etc. Learn more at https://tiki.org/TikiFest.