Drupal was updated to version 5.7 on January 29th. No new features are included in this version. Several bugs were fixed, two of which are medium-level security issues:

• The input configuration format page was fixed. This specifies the types of HTML tags that are allowed in nodes, including comments, and when set correctly can filter out potentially malicious HTML code from submitted material.
• A more accurate way to check for PHP's register_globals setting was added. Leaving register_globals turned on is a significant security risk when using Drupal, and is not recommended.

Users of earlier Drupal 5 series versions should upgrade to 5.7. The older Drupal 4.7.x branch is still being maintained as well; if you're using that, it isn't necessary to upgrade to 5.7. The current version of the 4.7 series is 4.7.11.

Drupal 6 release candidate 4 was released Friday for evaluation by users. Use of release candidates on production sites isn't recommended.

New Tech Heroes is powered by Drupal, our open source content management system of choice.