Browse code

Updated changelog (former forgotten file)

Clarissa Walker authored on 2015/09/14 07:58:06
Showing 1 changed files
... ...
@@ -1,7 +1,36 @@
1 1
 RivetTracker is a modified version of PHPBTTracker Version 1.5rc3, written by "DeHackEd".
2
+As of version 1.04, this is my version section. - Ami Sapphire
2 3
 
3 4
 Changes:
4 5
 
6
+---Version 1.05.2---
7
+
8
+-Proper version variable handling; prevent error log flood upon undefined version variable
9
+-MySQL databases with dashes supported (finally)! Simple backtick quotes around $database previously missing
10
+-Login password hashing no longer MD5, now either crypt or bcrypt depending on PHP version
11
+-More filtering behavior (Another reference: http://www.osvdb.org/79805)
12
+-Upload user can now have the ability to actually log out
13
+
14
+---Version 1.05.1---
15
+-Fixed really broken tracker.php from previous versions, especially from 1.05! This also fixes the torrent data scrape issue.
16
+-More changes to install.php (better PHP and MySQL check behavior), came from alpha MySQL to MySQLi conversion attempt of this tracker
17
+-Fixed username session display when hidden tracker is enabled
18
+-Old css.php XSS fix evaded in 1.05 (regression!), now fixed
19
+
20
+
21
+---Version 1.05---
22
+
23
+-Short announce feature is removed, as it is now integrated into the tracker, as is short scrape; replaced with a(n admittedly hardcoded) optional additional tracker URL behavior, can add up to five additional URLs
24
+-Authentication checks added to torrent_functions.php, tracker.php, dltorrent.php; the latter checks no matter what (2012 CVE report: http://www.cvedetails.com/cve/CVE-2012-4996/)
25
+-Old fixes from 2014 that I didn't keep track of or even remember (!): index.php, funcsv2.php, batch_upload.php, newtorrents.php, install.php, editconfig.php
26
+
27
+---Version 1.04---
28
+
29
+-More XSS attack prevention: css.php, among a few other files (old reference on forums)
30
+-Added short announce URL feature
31
+-Custom date feature
32
+-Added version display
33
+
5 34
 ---Version 1.03---
6 35
 
7 36
 -Prevented XSS attack on index.php page with htmlspecialchars (Thanks to report on forums)