RELEASE NOTES Information about version 2.8.2.4 Fixes: * 2.8.2: * XSS vulnerability from requests not containing a token * Reenable XML option in Export * State in documentation that your browser must accept cookies * CVS link was broken on main page * Adding a user with password containing a backslash * Removing a default value * Setup script: compatibility with security tokens * Setup script: detection of writable config * Reading the database list with MySQL wildcards * 2.8.2.1: * darkblue_orange theme not readable * setup script: protect against PHP code input from user * blank page after Edit in IE6 via IIS * reload default configuration if config.inc.php is removed * 2.8.2.2: * configuration file was not used in case of initial MySQL error 2002 or 2003 * 2.8.2.3: * cookie login on IIS with IE6 * switching from scripts/setup.php to the main script in case of register_globals enabled * 2.8.2.4: * Fix for setup script that 2.8.2.3 broke