Post #3941857

Hey all, just getting the word out since our instance was a target - there is a critical security and feature update for Writefreely that was released two days ago - the big one is that previously even with registrations disabled or set to invite-only on multi-user instances, the registration page could still be accessed and used to create accounts. The zoner instance had some 1800 bot accounts registered and posting spam before I shut it down. We've since updated and I've rolled back to before the accounts were created, but I wanted to get the awareness out since wf updates otherwise are very infrequent and even the best of admins may not be looking at their site regularly. Link to release page: https://github.com/writefreely/writefreely/releases/tag/v0.17.0