Du Vien Trang is a Freelance Web Designer / Developer based in Scotland. This is his portfolio, blog and his digital playground.

Just when i thought it was going to be awhile before the next release of Joomla was made available, it came as a surprise to suddenly see yet another release. This is a minor fix but a critical one so i decided to update a8eJoomla to version 1.0.15 to keep up with security. It is a minor fix but a critical one as it addresses the remote file inclusion vulnerability.

In Joomla! 1.0.13, the following line was added to the configuration.php file: if(!defined('RG_EMULATION')) { define( 'RG_EMULATION', 0 ); }

This file is located in the root directory of your Joomla! Web site. Including this extra line protects against possible remote file inclusion.

Web sites created with Joomla! 1.0.13 or later already contain this line. However, Web sites upgraded from 1.0.12 or earlier are missing this line. All this upgrade does is add that line to the configuration.php file if that line does not already exist. Another way to address the vulnerability is to simply add the line to your configuration.php file manually.

joomla.org

If you are running a8eJoomla then it is advise you update your version to this latest one. The download file can be obtained at a8eJoomla