I'll start off this forum with a new version for PHPlist: 2.5.8
Thanks go to "datalyte" on the PHPlist bugtracker, for spotting a major security flaw, that allows anyone to get the details of users in the system, without authentication. This is a major problem, so everyone is advised to upgrade to the latest version as soon as possible.
Other issues that have been resolved:
- fixed bug 626, a sub admin cannot see any messages
- fixed bug 623, sending a message when no users are found by criteria
sends it to everyone
- fixed bug 620, saving user and listmembership in one go
- fixed import to not overwrite html status of a user if it hasn't been
specified in the import file
- fixed remembering sort order in list of users when going to the next page
- added feature request 616 prefill From field with configuration valueseased yesterday