Security vulnerability: Upgrade your Prosper202 immediately
Friday, October 31st, 2008Upgrade your Prosper202 immediately. I got this update from the Prosper202 team today.
“Everyone who has Prosper202 install needs to immediately download and upgrade to the newest version. There was a security vulnerability we’ve found that is now fixed in the new update.
Click Here To Download Prosper202.
The Details
Earlier today/yesterday we were notified of a security vulnerability in Prosper202 and have been working non-stop to resolve this issue. We’re happy to announce that the issue has been resolved. It appears that the Zend encryption technology we were using caused this problem. This vulnerability in Zend allows the attacker to break into an individual’s Prosper202 install and potential steal all of the target’s valuable information. This has now been fixed by completely removing all of the Zend encryption that was previously on all of older versions of Prosper202. If you were one of the few using the IonCube encrpyted version of the software, you were not at risk.
We need to say thanks to Dimitrios [ ToughMarketing ] for starting the thread on WickedFire and alerting us of this problem. He was able to bring the security vulnerability to our attention and help us fix the issue. If you see him around, please give him a huge thanks as not only from us at Prosper202, but everyone else who is using the software can thank him for helping find the bug, truly helping out on resolving the issue.
Also we want to say thanks to SlightyShadySeo, UberAffiliate, Jason at Ads4Dough, Harrison at CPA Share, and Amish over at HexaTrack for getting us in contact with everyone who we needed to talk to.
Because the issue was directly related to the usage of Zend Encrpytion, as we have noted earlier, we have completed removed all encryption on the software, which makes Prosper202 now an open-source project. We could have continued encrypting it with IonCube or other encryption software but have been thinking about doing a Developers version. Rather than go through all that, we decided to make the source 100% fully open to developers.
This should be great for any one who now wants to develop onto of Prosper202 and add or edit new functionality. There have been many requests to get access to the source code, and now we’d like to say everyone has access to it. We ask that if anyone has any updates or suggested bug fixes to please submit them so we can together make a better, stronger, and faster application. Our hope is that anyone developing in the community on this open source project would gladly help out by submitting any work done but of course its not a
requirement.
Please forgive us if some of the code doesn’t look that pretty, as because this is a rush update, we haven’t had time to make changes on everything making it easier to work on for outside developers. Some of the code does need to be re-written to make it more optimized, but you’ll now have access to everything.
Because this release was rushed, we did not get a chance to add all the features as planned, the next big update should be on Nov 25th, as scheduled in our development roadmap. There was a few things changed quickly for the new installations however.
- P202 was having a hard time picking up the keywords from the Zango CPV network, it now correctly tracks the bided keyword.
- P202 now picks up the ?keyword variable if it exists, we found some 2nd-tier ppc networks sending the bided keyword in as this
variable in url by default. - We’ve added a few ppc icons: AdSonar, Pulse360, and AdTegrity
You can download the latest version 1.1.1 here, and you can find the upgrading instructions in our documentation docs.
Prosper202 is not only open source now but many users have asked if we’ll start charging for Prosper202. The answer to this has always been no. Prosper202 will remain free. If you truly like help our cause, we gladly accept donations at http://prosper202.com/apps/donate/donations and any development anyone is willing to contribute.”
So start your upgrades people…