I'm not claiming I understand all the tricky things Protector does for us but ...

On the 'security advisory' tab the first thing seems to be a test of the 'XOOPS_TRUST_PATH'. I might be wrong here but it seems to be checking whether it can reach an image file. If the trust path is set correctly it cannot reach the file and therefore doesn't show the image. If it can reach the file it alerts you by showing it - an image with the letters NG.

Those using the upgrade package 2.3.3 to 2.4.4 do not get the image; it's missing, although it's present in the full package. So this test will not find it and therefore give the false impression that it has tested the trust path and found the path OK.

I would be happy to be told this is all bunkum by someone who knows better - but in the meantime can someone slip the missing file into the upgrade package.
---

Upgrade package aside 2.4.4 seems a great job - thanks to all involved.