Crafty Syntax Security Upgrade

[marlene]

I'm using the Crafty Syntax feature through Fantastico in the Cpanel. I just received an email from Crafty Syntax advising there is a security patch upgrade for the program. It requires a payment for the security patch. Will TCH be upgrading the program in cpanel to get the security patch or do I need to do it myself?

 

marlene

 

Here is the email I received:

 

Aloha,

 

Crafty Syntax Live Help Version 2.15.0 was released today.

This new version has 2 security fixes, a new AJAX chat users

list feature, and several other updates.

 

A Moderately Critical SQL injection vulnerability has

been discovered in Crafty Syntax Live Help Version 2.14.6

and prior. So it is *highly* recommended you upgrade or patch

your installation ASAP.

 

To expedite this Crafty Syntax Is offering upgrade/patch

service using the secure webpage at:

 

https://www.craftysyntax.com/upgrade/

 

You will not loose your existing data in your current

installation by upgrading. If you have made a lot of

customizations to the program you can select for the

program to be patched.

 

Please use the form to order your installation to be

patched or upgraded for $15 USD payable by Pay Pal.

Upon filling out this secure

order form you will be re-directed to PayPal for

payment. Only orders paid in full will be patched or

upgraded.

 

If you would like to update / upgrade on your own

you may by visiting :

http://www.craftysyntax.com

 

There are also additional features in the new version such

as the ajax visitors list feature to stop content refreshing

For a full list of what is new with version 2.15.0 visit:

http://www.craftysyntax.com/CHANGELOG.txt

 

Also, for that special page to help keep this project alive

visit:

http://www.craftysyntax.com/special.php

 

Mahalo Nui Loa!

- Eric

[TCH-Bruce]

When Fantastico decides to update the offering it will be pushed out onto the servers. TCH does not control how quickly Fantastico updates the scripts.

 

As for an update costing money that is beyond TCH's control. I would guess that if it becomes a pay script it will be removed.