[Mrdby]

Originally Posted by RS_Jelle

We just released version 5.0.5, which fixes some urgent security issues and includes bugfixes for all known bugs. We advise you to update immediately. For update instructions, read the Readme-Install.txt.

Changelog DownloadsII 5.0.5

CyberRanger

• Fixed mixed sort order of files on import page

Jelle

• Fixed hardcoded "Category" phrase in the Manage Files option
• Changed category abbrevation in Manage Files to the full category name in the category dropdown windows
• Updated optional navbar edit as the code to search changed slightly since vBulletin 3.6.7
• Fixed problem with multiple pages being empty for the file manager (caused when you have an empty approval value)
• Improved the downloads log with time and ip address information (+ some link and layout changes)
• Fixed the fact that everyone with upload permissions could upload to every file, now you need to be the file author or need to have editall permissions
• Fixed the update counters function which didn't recount the comment amounts (the comment stats were only resetted to 0)
• Fixed XSS security issue with the optional downloads profile info
• Added xmlns attribute to the html tag of the DOWNLOADS template
• Fixed SQL injection security issues with category sorting and the assign uploader page
• Fixed wrong conditions for displaying the assign uploader link
• Fixed XSS security issues with unclean category and file id's in the templates
• Fixed some other bugs and removed some redundant checks

hmmm was the first..lets see..Thanks!