I missed this news while doing some SysAd work over the last day or so. Normally I would be all over it. But since I don’t have any hosted MT versions lying around, or clients that still use MovableType I’m a bit behind the times. Sorry about that.
The biggest thing I can see in this is the switch to FastCGI. This would make a huge performance improvement. Not sure why they hadn’t already strongly recommended users do this previously. It seems to really work IMO.
Last night we released version 3.34 of the Movable Type Publishing Platform. Movable Type 3.34:
* Fixes important potential XSS vulnerabilities
* Is a free and recommended update for all Movable Type users
* Enables simple use of FastCGI which yields a 15x performance increaseWe encourage all of our users and customers to upgrade to this latest release of Movable Type because it addresses a hand full of important XSS security vulnerabilities. In addition to security enhancements, this release introduces a feature enhancement that has increased application performance for a number of users by over an order of magnitude.
Source: Six Apart
Originally posted on January 19, 2007 @ 2:03 am
Not sure why they hadn’t already strongly recommended users do this previously.
Page 7 of the installation guide(PDF). in optimization suggestions, or if performance issues had already come up, but in general, it did seem to be more of an after-the-fact upgrade than base option.
Part of the reason is that it wasn’t as simple as it can be now with this release. The Bootstrap.pm file has been updated to take care of some of the work, but previously you would in many cases have to use a wrapper script(which I think might also have to be different for a given host), which is probably getting beyond the average user. Now it’s about to the point where anyone can use it, assuming their hosting plan offers FastCGI.