Moot2010"

Woo, hoo! It's nice to see the dev team is still on top!

Good work but the "cmsmadesimple-base-diff-1.6.6-1.6.7.tar.gz" file seems to "spurious" empty files in the root, perhaps elsewhere? action.savetoolbar.php function.admin_toolbar.php safari toolbarpanel.tpl Please advise, Russ

Why are you bundling a serious security update with almost 5000 lines of other stuff? That is not a "bonus", it is outrageously impractical! When a serious security issue pops up, you want to be able to upgrade quickly, without using a lot of time for testing. New features or non-critical patches are the exact opposite. I will not rush-install a huge release on a Wednesday morning without testing to see if it will break any of the sites I administer. However, I will gladly apply a 4-line security update (after a quick review of course). Do not misunderstand, I really appreciate your swift response after the bug was made known, but I do not approve of bundling it with a ton of other changes. You should just have released the new lib/classes/class.module.inc.php as a stand-alone security release, and followed it with the non-critical stuff in a separate release, instead of forcing me to dig out the security patch from a 5000 line diff. I'm pretty sure that most of your users are people who would actually consider all that other stuff a "bonus" and would not test the software before upgrading anyway, but please do not assume that this applies to everyone. Serious system administrators do not roll that way. At the very least, we want to delay non-critical updates until when we have time to handle any issues the users might experience. Also, releasing security patches separately clearly shows that you take immediate action, which leaves security-concerned administrators with a very good impression. When you bundle it with a lot of other stuff, it is easy to think that you either made the security patch wait while you completed non-critical stuff, or that you rushed out new features because a security flaw showed up. Both alternatives leave me with a bad taste in my mouth. It could also be the case that you actually had a new release ready at the exact moment you were told about the flaw, but this is not what the security-concerned system administrator will find the most likely scenario. I understand that CMSMS is made by unpaid volunteers, and that I can't expect everything, but in this case it is very easy to make your project look a lot better for administrators concerned with both security and user experience, so I felt I should let you know.

I can understand the frustration here. It could maybe be a good idea to do the following things: - Have an integrate solution for upgrading minor revisions from CMSMS itself (like modules or wordpress) - Reserve the third number only for security and bug fixes while the second number is reserved to extra features (could be complicate to manage tough) What is planned for the CMSMS 2 ? ;-) Anyway, good job folks !

Actually, there's no need for changing anything. Simply releasing 1.6.7 with the security fix as the only change would suffice. One could then release 1.6.8 with the other changes. It could even be done the same day. If you really wanted to, you could give it a separate naming scheme like "1.6.6.1", "1.6.6.r1", "1.6.6 Patch Level 1" or something like that, but I doubt there is any need. These things hopefully won't happen that often anyway. An integrated solution for minor revisions would almost certainly be overkill. WordPress probably probably has one because they have an awful security track record, so they have to push patches quite often. You can find the plans for CMSMS 2 by selecting "Development -> Roadmap" in the menu, by the way.

Very nice, painless and easy update. Thanks for all your hard work.

Easy to upgrade and I get really nervous about such things. Thanks for all the hard work. Made a donation (again) because I have used lots of similar programs but found CMS Made Simple really is simple and has loads of features.

Need some help and don't know where to turn as my web designed as vanished on me with $300 I gave as a down payment to enhance my site!!. Just changed my id and password and can't get in the my admin stuff. now what?