Security

It might seem kind of weird to mention it, but I had somewhat of a big scare when Secunia sent us an e-mail entitled "Security Patches in Dokeos 1.8.5". If my fears had been right, it would have meant that we would have needed to re-package 1.8.5 only two days after the official release.

Please note that this patch has been integrated in Dokeos 1.8.5, released on the 12th of June 2008, and that there is also a Dokeos 1.8.4 SP3 patch available on the security page indicated below.

There's a new security patch out there for you if you have a Dokeos 1.8.4 portal (if you have below that, I recommend you upgrade to 1.8.4). As stated on my "Dokeos 1.8.5" page, the release has been delayed a bit more in a hope to provide a few additional and essential features to this version (notably, and extended system of templates for exercises, that will allow for rapid

It's already in the code for Dokeos 1.8.5 since 2 weeks ago: files extensions filtering. It was possible, in 1.8.4, to filter files extensions coming from ZIP files, but I didn't have time back then to include a widespread file filtering. It is included now. There is still a problem whereby Windows interprets files looking inside them, so it does not need the extension to be wrong in order to execute the file as is needed for a virus to spread.

I don't know why exactly, maybe it's because some system administrators go on holiday, or maybe it's because evil students (understand young crackers) are on holiday themselves, but the festive season is always a time when we have more attempted security attacks on our servers. Oh, by the way, hackers are just people looking into the code to change it, they're not evil. Crackers are people getting onto other's systems and trying to misuse it.