WebCrossing server security update

Posted by on Nov 13, 2017 | No Comments

This update provides an update for sites running with encryption (an SSL certificate).

If a site is enforcing SSL connections for registered users, this update also enforces the secure, encrypted connection for “missing pages” (the standard HTTP 404 error page).

Remember, in WebCrossing, which is highly customizable and scriptable, it’s possible to override the missing page template with your own customized functionality. If you are running a secure server, this update prevents registered users from manually reloading such pages as unencrypted http-only pages.

The last two builds have also used newer libraries when compiling, for added stability.

We particularly encourage all sites using secure encryption, as well as all larger, highly active self-hosted sites to upgrade. We will make sure sites hosted by us are upgraded as needed.

The latest release version is now WebCrossing 6.4-1333 2017-11-09.

All self-hosted customers with valid support and maintenance contracts can download this new version at no cost.

If you are running a self-hosted site we recommend upgrading your WebCrossing server to this new build. If you are a self-hosted customer and have a valid support and maintenance contract, please contact support for access to the new server. If your support and maintenance contract has expired, please contact us to renew so we can provide you with this important update.