3.35 (2007.04.12)
Show
Movable Type Enhanced Installation Process
When no `mt-config.cgi` file is present, Movable Type will now redirect the user to an installation wizard that will guide users through the process of setting up their Movable Type installation. At the end of the process the wizard will generate the mt-config.cgi file automatically.
XSS Vulnerability fix: script injection is allowed in author and email parameter of mt-comment.cgi
Default templates have been modified to include the encode_html="1" attribute to properly escape user submitted data found in the "Comment Preview" system template. Users are required to apply this fix manually to any pre-existing blog they may have in their system.
Fixed broken help links
Fixed an invalid documentation link found on Movable Type's "Log in to Movable Type" index.html page.
Fixed MTDate tags to display correct timestamp under daylight savings
MTDate tags now publish properly adjusting for DST when using the "utc" attribute.
SQLite BerkeleyDB to MySQL migration script fixed
Using the mt-db2sql.cgi and convert-db scripts to migrate from either BerkeleyDB or SQLite (respectively) to a SQL database may have resulted in garbled data. The bug has been fixed.
48741: convert-db garble characters sometimes
Using convert-db to migrate from SQLite to SQL database may have resulted in garbled data. The bug has been fixed.
Increased the size of "template_name" column
The length of the template name column has been increased to support the additional space that many localizations may need.
