Comments on: Thesis 1.8.4 Makes WordPress Multisite More Flexible (and Other Fixes)

By: TrinityAvatar

TrinityAvatar — Mon, 08 Oct 2012 18:29:47 +0000

Hello! It looks like I’m getting closer to running 1.8.5 for multisite, but I’m still a bit confused. At the moment I seem to have a custom folder for all three of my sites. With Master Control, I was hoping that I wouldn’t have to modify each custom.css & each custom_functions.css file, but it looks like I still need to? When I don’t modify each file, the sites don’t utilize the customization. What am I missing?
Thanks!

By: Ash Nallawalla

Ash Nallawalla — Sat, 14 Apr 2012 13:07:39 +0000

In reply to Mason Disick.

The answer is the same with each upgrade, although I agree if customers were emailed about upgrades and sent a link to the download page and the upgrade instructions:

Bookmark this page: https://diythemes.com/thesis/downloads/upgrade/

By: Mason Disick

Mason Disick — Mon, 02 Apr 2012 12:09:40 +0000

I am currently using 1.8.3 version, anyone here can tell me how to upgrade to 1.8.4 version? I love Thesis theme.

By: Gaurav Dhiman

Gaurav Dhiman — Sat, 31 Mar 2012 21:23:41 +0000

Hello thesis team…
will you please add support for featured images?

so far the only set back..

By: Shaun Snapp

Shaun Snapp — Sat, 24 Mar 2012 03:46:25 +0000

There does not seem to be documentation that updates the document of how to initiate multisite in 1.8.2 which is here… Can anyone respond with where the documentation is for 1.8.4 because I am stuck and having problems with the functions.php file. I would have posted this in the support area, but could not find the new post button.

By: Gouri

Gouri — Fri, 23 Mar 2012 15:45:12 +0000

Looks like I am missing out on updates.. Why don’t I get updates on new releases in my mailbox or thesis admin panel?

By: Robert Schrader

Robert Schrader — Wed, 21 Mar 2012 19:33:43 +0000

Chris:

To be frank, the forums are filled with so many hundreds of threads on this topic — most of which further direct members to other threads, which may or may not even answer their original questions — that I’m offended you ask me to do this. Please answer my question directly.

By: Chris Pearson

Chris Pearson — Wed, 21 Mar 2012 19:02:52 +0000

In reply to Darrin. Darrin, please see my reply to Wendy above for clarification on the TimThumb script in Thesis. The short version is that there is no vulnerability you need to worry about, and there is nothing to patch. The security vulnerability that existed in TimThumb is not—and has never been—present in any version of Thesis.

By: Chris Pearson

Chris Pearson — Wed, 21 Mar 2012 19:01:24 +0000

In reply to Bruce Z.. Bruce, please see my reply to Wendy above. For clarity, there is no need to upgrade/modify/worry about the TimThumb script included in Thesis. It is not vulnerable.

By: Chris Pearson

Chris Pearson — Wed, 21 Mar 2012 18:59:29 +0000

In reply to Wendy. Wendy, many hosts are running roughshod over TimThumb scripts out in the wild, without actually checking to see if the vulnerabilities exist in the scripts they're targeting. In Thesis' case, the included TimThumb script is a modified version of 1.09, which does not contain the security vulnerability. Thesis 1.8.4 is still using a version of 1.09 that has been modified to work with WordPress in both a regular and a multisite environment. Unfortunately, when hosts automatically upgrade the TimThumb script in Thesis, they unknowingly wreck specific functionality that we built into the script to make it work better with WordPress. Once again, however, the TimThumb script included in Thesis does not contain the security vulnerability that many hosts have been targeting. Finally, I'm hoping that TimThumb won't even be a part of Thesis 2.0. We've wasted a ton of time and energy "defending" something that wasn't even an actual problem (simply because hosts didn't do their homework), and I'm not inclined to go down this same path in the future.