Today's releases of all 4 supported WSN series include a security update for a potential SQL injection in the RSS feed. The vulnerability may allow access to information the attacker shouldn't be able to see. As far as I can see it doesn't allow data alterations or user privledge escalation or anything like that, but updating is strongly advised. As you may know, the 8.0 series has been scheduled to be discountinued at the end of the year. I've decided to extend that so 8.0 continues to get security fixes until at least Febuary 15th 2016.
A couple of notable changes in today's 9.2.28 Beta 2 release. I've added more microdata markup for the reviews w/comments page so that google recognizes each individual review someone writes of a listing on your site. This improves the chances of google showing the review in their results with a link to your site. At Admin -> Members -> Settings there's now an option to select a password reset method. When password encoding is set to none, the original password is emailed to the member, but that's bad practice.
One of today's changes for the upcoming WSN 9.2.37 is a set of new template variables that provide easier ways to reference files attached to an image in a specific order (the sort order set on upload/edit). There's now {LINKTHUMBIMAGEX[number]}, {LINKTHUMBURLX[number]}, and the associated boolean {LINKHASFILEX[number]}. You can pair these with the preexisting {LINKCAPTION[number]} and {LINKHASCAPTION[number]}. If you want to show the third image on a listing, and include the caption only if it's present, here's all you have to do now: {LINKTHUMBIMAGEX[3]} Caption:
WSN has had an 'add from web search' option for a while which can be very useful for filling up a directory with websites appropriate to a category. For a business directory, however, it would make things a lot easier if WSN could determine the address and phone number of the business which each search result references. With the cooperation and forethought of the website owner, the geo.position and icbm meta tags can help. These meta tags allow a web page to specify its' latitude and longitude.
Thanks to clipboard.js, I've just added cross-platform copy-to-clipboard functionality to WSN's template editor. This replaces an archaic javascript which had only been able to select the contents without copying in most browsers. Are there any other places where cut/copy to clipboard functionality would be useful? Another change today was a formatting change to the RSS Feed template to achieve full Atom feed support by default. WSN's rssfeed.php now outputs a feed which is valid both as RSS 2.0 and Atom. 9.2.30 also brings some fixes.