Version 3.1.3

Release Date: Jan 09, 2017

• Security
  • Fixed an XSS vulnerability in Security Library method xss_clean().
  • Fixed a possible file inclusion vulnerability in Loader Library method vars().
  • Fixed a possible remote code execution vulnerability in the Email Library when ‘mail’ or ‘sendmail’ are used (thanks to Paul Buonopane from NamePros).
  • Added protection against timing side-channel attacks in Security Library method csrf_verify().
  • Added protection against BREACH attacks targeting the CSRF token field generated by Form Helper function form_open().
• General Changes
  • Deprecated $config['allow_get_array'].
  • Deprecated $config['standardize_newlines'].
  • Deprecated Date Helper function nice_date().

1. Download
2. ChangeLog
3. Upgrad Guide