Hey everyone,

It's amazing how fast time flies by and if we neglect it then we should put the blame upon our shoulders. This is not only related to Chyrp but it relates to every aspect of this life. There's an important thing I learned between the time when we released 2.5 Beta 1 and now, that is I should never again set a release date. Sometimes keeping a promise varies due to other life circumstances which mostly are out of our competences and there's nothing we can do about it. I will seriously try to remember this hint everytime a new Chyrp version is about to come out.

Though the delay has it's pros and cons, I strongly believe we could pull more advantages off it than critically judging. Chyrp 2.5 has been cooking for a while now but if you've followed along with development, you (should) have realized by now the exciting new stuff this release will bring with.

The beginning of this year was a great start. If you recall from the last blog post Jack talked about Chyrp possibly being added to certain instant installers and yes we got in. The first one to support Chyrp was Softaculous by adding it to the list of web apps shipping with their instant installation script. This is very important for us, and Chyrp in particular because Softaculous happens to be used by the majority of web hosting providers and this might just bring Chyrp close to users that are yet unaware of its existence.

The second event that made us even happier was the cool generous deed by AppFog to include Chyrp in their PHPFog Jumpstart web apps list. PHPFog is an extremely flexible PHP Cloud Hosting provider with an extremely user-friendly interface and very convenient prices. I mean, they didn't only add it but after fiddling a bit with Chyrp and working to get it up there, @phyre5 was impressed with Chyrp's simplicity and how lightweight it actually is.

@phyre5: You're quite welcome! Thank you for making such a lightweight blogging engine with a one-step setup process. It was fun!

This in return is a bonus point comment and pushes our morale up high to keep working even harder and bring great results eventually.

And many other cool things which closely relate with the 2.5 release but I'll leave them for the follow-up post since it's going to be a bit longer.

The release of Chyrp 2.1.2

Last but not least, the good guys over at High-Tech Bridge Security Research Lab in Switzerland found a tiny potential XSS issue on Chyrp. There's no need to panic tho, normally the attacker would need to gain login access to your admin panel in order to execute malicious code, but anyhow we take your and Chyrp's security close to our heart thus we fixed the issue.

If you're running whatever version of Chyrp we recommend you go ahead and update it. The easiest way to patch your installation would be to grab the only changed file below and replace it in your server, that would do just fine. When I say 'whatever Chyrp version' I mean 2.5 Beta 1 users should do the same if they don't want to wait for the next beta to come out. Newer Chyrp versions, starting with 2.5 Beta 2 (due this weekend) will already be patched so if you haven't tried the last beta yet, hold on to what you currently have, Beta 2 brings the new Firecrest theme along. Until then, download below and go patch your Chyrp powered site. See you again very soon.

Download Patched File

ajax.php

• Arian