Releases/1.1.8

This is a stable release of Mahara 1.1. Stable releases are fit for
general use. If you find a bug, please report it to the tracker:

https://bugs.launchpad.net/mahara/+filebug

This release includes an upgrade path from 1.0. If you wish to
upgrade, we encourage you to make a copy of your website and test the
upgrade on it first, to minimise the effect of any potential
unforeseen problems.

Changes from 1.1.7:

• Security fixes to bundled copy of smarty (CVE-2008-4810, CVE-2008-4811 and CVE-2009-1669)
• Fix for SQL injection in MNET usernames (CVE-2010-0400)
• Fix sql error preventing blocks being moved down two or more places within the same column
• Respect orderby search parameter in mysql search_user()
• Solves group pagination problem with Safari and other browsers (LP: #547521)
• Don't refuse to serve files from inside dataroot when dataroot has a symlink in it (LP: #547289)
• Fix delete group heading (LP: #547639)