Today, we are happy to announce that we have released an incremental improvement to your favorite content management system: Version 2.2.8 - Flin Flon. The primary change in this version is to support PHP 7.2 by cleaning up the code to remove most of the warnings and notices due to the changes in PHP. Secondly, we have made a change in the way module argument processing works to better accommodate more complex application building. Additionally, this version fixes some locale and UTF-8 issues, addresses a couple of very minor potential security issues, and fixes some bugs.

We have modified the module functionality so that the core does no longer warn if a module is 'not cleaning input parameters'. For some sites using specific modules, this will significantly clean up the admin log. The RestrictUnknownParamters() method in the module class now does nothing and is deprecated along with the SetParameterType() and CreateParameters() methods. This change frees up module developers to name input parameters, and parse and clean them using PHP's built-in functionality which is very helpful when building complex modules and applications. Module developers can now name their input fields without a prefix and clean the input using PHP's functions such as filter_var(). Using the SetParameterType() method will still result in that module parameter being cleaned in the same way. No breakage should occur, and no security vulnerabilities created as a result of this change.

For purposes of security and stability and support, we encourage you to keep your CMSMS installation up to date. So please upgrade your applications to use version 2.2.8 at your earliest convenience. As per the Dev Team's policy, we only support the last two stable releases of CMSMS. As of this announcement, those are v2.2.7 and v2.2.8.

Thank you, and have fun with CMSMS.