security update v9.72 take 2

Bruce - you mentioned:
>>It is recommended that anyone running either Web Wiz Forums on Windows 2000 IIS5 or Windows 2003 IIS6 upgrade to these latest versions as soon as possible.<<

How about folks hosted with you - if I recall, you are running IIS7 on 2008R2.

Does this mean we're ok?

I intend to update soon anyway simply because now we're I think 2 builds behind and you keep putting really nifty stuff in the forums, but wonder about how quickly now due to a security thing...

Just after "years" a message form myself again: thx for the great maintenance and support!

We have done some customisation of the asp code to integrate the forum code with the parent web site.

Is there a way of knowing what specific changes we need to make to the code to fix the security issue?

thanks

Derek

MrTWS wrote: WebWiz-Bruce wrote: Windows 2008 IIS7 is more secure so would not run files uploaded with the files names that have the vulnerability. Anyone hosting on our Windows 2008 platform would not be affected. That means I take it that anyone running the software through web wiz servers would not be in any immediate danger then? Just to clarify Bruce?

Most customers who host with us will be on Windows 2008 R2 and so would not be vulnerable, but we do have a small minority of around 100 customers left the old Windows 2003 platform who would be.

If customers are using WebsitePanel as their Control Panel they are on Windows 2008 and so would not be vulnerable, those using Helm as their Control Panel wioll be on Windows 2003 and would be vulnerable if running Web Wiz Forums.