News

Security notice - Please update your prepend.php file

# The 2006-02-16 at 15:47 by Loïc d'Anterroches.

For security reason explained in this Secunia advisory please update the file prepend.php in the document root of your website by adding the following line just after the license block:

if (basename($_SERVER['SCRIPT_NAME']) == 'prepend.php') exit;

New releases of Plume CMS with the fix will be released shortly.

Note: If you are the one having discovered the problem, I would have been pleased to be informed before your submission to Secunia. In the future, please contact the developers of Plume CMS directly if you find a security flaw.