The Habari Community has released version 0.6.4. This release centers mainly around security enhancements and workarounds for changes made to PHP itself.

For those unfamiliar with the project, Habari is a free, open-source blog engine written in PHP.  It supports several database backends, including MySQL, PostgreSQL, and SQLite.  The initial developer release, version 0.1, was launched on April 3, 2007.  Since then, point releases have come every few months, and version 0.6 (the current release) was launched on April 6, 2009.

Release notes for Habari 0.6.4 are available, and include a list of all the changes.  Of interest to many Habari users will be the changes made to work around how PDO creates objects in PHP 5.2.12 and 5.3.1.  Users of Habari that have either of these versions of PHP installed will need to update to Habari version 0.6.4 to restore functionality.

Also of note is a security-related change to inline editing—this has been moved from core code to a plug-in, as mentioned in the release notes.

You can download Habari 0.6.4 from their download page if you’d like to give it a try.  If you’re upgrading from a previous version, make sure you’ve backed up your existing database before you perform the upgrade, lest something go wrong!

As always, the Habari Project welcomes feedback on potential security vulnerabilities.  Thus, if you think you’ve found a problem with this release, you’re encouraged to contact security@habariproject.org to alert them to the issue.