26 Sep 2006

This security patch is intended for all H-Sphere 2.4.3 owners running SiteStudio on their servers and eliminates vulneability that allows sending unsolicited messages via SiteStudio Custom Form.

Update Instructions

1. Stop H-Sphere.
2. Download the updatess-hs234.sh script:
   On linux boxes:
   
   $ wget http://www.sitestudio.psoft.net/updatess-hs243.sh
   On FreeBSD boxes:
   
   $ fetch http://www.sitestudio.psoft.net/updatess-hs243.sh
3. Run the patch:
   
   $ sh updatess-hs243.sh
4. Start H-Sphere.

Important: After the patch, forms published with the 1.7rc1 version will stop working. To make them working again, SiteStudio end users have to republish their sites.