Thanks DT. Pretty serious vulnerability then. Glad its been fixed.

I can understand not explaining what the security issue was now - untill all users could be made aware. But I think the trumpet should be blowen long and hard now to get all users on 4.8.1