PHP vulnerability

[Keith Beeby <k.beeby@xxxxxxxxxxxx>]

Hi,

Any idea how quickly Tenon will have v4.1.2 ready?

Until then to only option is to:

Disable fileuploads

If upgrading is not possible or a patch cannot be applied, you can avoid
these vulnerabilities by disabling fileupload support. Edit the PHP
configuration file php.ini as follows:

file_uploads = off 
Note that this setting only applies to version 4.0.3 and above. However,
this will prevent you from using fileuploads, which may not be acceptable in
your environment. 

See http://www.cert.org/advisories/CA-2002-05.html for more details,


Regards,

Keith