|
...
|
...
|
@@ -1,7 +1,36 @@
|
|
1
|
1
|
RivetTracker is a modified version of PHPBTTracker Version 1.5rc3, written by "DeHackEd".
|
|
|
2
|
+As of version 1.04, this is my version section. - Ami Sapphire
|
|
2
|
3
|
|
|
3
|
4
|
Changes:
|
|
4
|
5
|
|
|
|
6
|
+---Version 1.05.2---
|
|
|
7
|
+
|
|
|
8
|
+-Proper version variable handling; prevent error log flood upon undefined version variable
|
|
|
9
|
+-MySQL databases with dashes supported (finally)! Simple backtick quotes around $database previously missing
|
|
|
10
|
+-Login password hashing no longer MD5, now either crypt or bcrypt depending on PHP version
|
|
|
11
|
+-More filtering behavior (Another reference: http://www.osvdb.org/79805)
|
|
|
12
|
+-Upload user can now have the ability to actually log out
|
|
|
13
|
+
|
|
|
14
|
+---Version 1.05.1---
|
|
|
15
|
+-Fixed really broken tracker.php from previous versions, especially from 1.05! This also fixes the torrent data scrape issue.
|
|
|
16
|
+-More changes to install.php (better PHP and MySQL check behavior), came from alpha MySQL to MySQLi conversion attempt of this tracker
|
|
|
17
|
+-Fixed username session display when hidden tracker is enabled
|
|
|
18
|
+-Old css.php XSS fix evaded in 1.05 (regression!), now fixed
|
|
|
19
|
+
|
|
|
20
|
+
|
|
|
21
|
+---Version 1.05---
|
|
|
22
|
+
|
|
|
23
|
+-Short announce feature is removed, as it is now integrated into the tracker, as is short scrape; replaced with a(n admittedly hardcoded) optional additional tracker URL behavior, can add up to five additional URLs
|
|
|
24
|
+-Authentication checks added to torrent_functions.php, tracker.php, dltorrent.php; the latter checks no matter what (2012 CVE report: http://www.cvedetails.com/cve/CVE-2012-4996/)
|
|
|
25
|
+-Old fixes from 2014 that I didn't keep track of or even remember (!): index.php, funcsv2.php, batch_upload.php, newtorrents.php, install.php, editconfig.php
|
|
|
26
|
+
|
|
|
27
|
+---Version 1.04---
|
|
|
28
|
+
|
|
|
29
|
+-More XSS attack prevention: css.php, among a few other files (old reference on forums)
|
|
|
30
|
+-Added short announce URL feature
|
|
|
31
|
+-Custom date feature
|
|
|
32
|
+-Added version display
|
|
|
33
|
+
|
|
5
|
34
|
---Version 1.03---
|
|
6
|
35
|
|
|
7
|
36
|
-Prevented XSS attack on index.php page with htmlspecialchars (Thanks to report on forums)
|