Hi, I'm running 7.1.2 on live government website, and just noticed when logged in as host, that I have a red "Critical Update" link on the toolbar.

I wasn't planning (or have time for) an upgrade at this time. Is this really critical? Will it cause problems if I wait to upgrade? Please advise me.

Thanks

Tom

yes, there is a critical update for the automated spam registrations. Strictly speaking that falls into the "moderate" category based on our levels at http://www.dnnsoftware.com/platform/manage/security-center as it only affects sites with registration, and the attack is limited to created new users and does not cause other issues, however as it is a growing issue and for those it affects it can mean hundreds or even thousands of fake users (and impact performance), I choose to declare it as a critical issue, hence the warning. If you site does not use registration you can ignore the warning, but if you use public or verified registration I recommend upgrading. Note: Please read "2014-02 (Critical) improve captcha logic & mitigate against automated registration attacks" at http://www.dnnsoftware.com/platform/manage/security-center for full details - there were a number of captcha fixes, the key one of which was a fix to stop one captcha challenge being used for multiple registration (we also changed the colour range and distortion of the image, but that's a much less important fix)

---

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US