Date: December 31st 2007

Hello,

I've just posted SuperCali version 1.0.4 which fixes a security vulnerability in the show_event.php file. You can visit:

http://supercali.inforest.com/downloads.php

and download the patched file. The archives include new versions of add_event.php and edit_event.php which are for users who have had issues with the add_slashes code of previous versions.

Instead of downloading, you can change line 28 of your show_event.php file from:

if (!$_REQUEST["id"]) {

to

if ((!$_REQUEST["id"]) or (!ctype_digit($_REQUEST["id"]))) {

Thanks,

Dana Hutchins
Inforest Communications
http://supercali.inforest.com/