September 14, 2015
View 0d35e71

Password authentication changed from ancient MD5 to bcrypt for PHP 5.5 and above, and crypt for PHP versions 5.0 to 5.4.x. Will be more precise later.

Clarissa Walker authored on 2015/09/14 06:58:30
View f9be7aa

Start of reviewing filtering practices. Also fixed hash filtering in dltorrent as referenced here: http://www.osvdb.org/79805

Clarissa Walker authored on 2015/09/14 04:19:18
September 11, 2015
View 076009a

Install script now supports MySQL databases with dashes. Seems CREATE $database was missing backtick quotes.

Clarissa Walker authored on 2015/09/11 02:50:34
September 10, 2015
View 5329127

Cosmetic change. Originally no space between ID and version. Fixed.

Clarissa Walker authored on 2015/09/10 19:47:27
View a027ad4

Proper version handling instead of the original form. Variable was undefined, so every time the index was hit, the error log would get flooded with the same undefined variable message.

Clarissa Walker authored on 2015/09/10 19:41:49
View fe7b538

Version bumped to 1.05.1

Clarissa Walker authored on 2015/09/10 03:25:52
View 47e4375

This fixes the scrape data issue that has long plagued this software (2012). Filtering other data is fine, but scrape data ends up going to and from the torrent client and the tracker anyway, and they don't like the custom filters. This was confirmed by finding and going through the original PHPBTTracker software code and comparing it with RivetTracker.

Clarissa Walker authored on 2015/09/10 03:10:09
View 00bd859

Fixed badly handled procedure of clients originally done in the name of security. Initailly, hash/peer handling failed from the first escaping 'fixes'... ...then eventually, tracker responds with HTTP Status 404 after the second validation 'fix'. Finally tracked down after two years... shame.

Clarissa Walker authored on 2015/09/10 01:59:36
September 9, 2015
View 150efd9

Fixes current session username display for hidden tracker --Simply log out and log back in to reset session

Clarissa Walker authored on 2015/09/09 23:40:14
View 2d3ada6

Old XSS fix from 2012/03/14; somehow evaded getting updated!

Clarissa Walker authored on 2015/09/09 23:38:09
August 30, 2015
View e0861e2

Checks added to some files: torrent_functions.php, tracker.php dltorrent.php's check changed to authenticate no matter what Some fixes and modifications from 2014: index.php, funcsv2.php, batch_upload.php, newtorrents.php, install.php, editconfig.php Version bumped up to 1.05

Clarissa Walker authored on 2015/08/30 00:06:28
January 24, 2014
View 1c8ad06

Import from the old rivettracker git repository at sourceforge (amisaph/amisapphire branch)

Clarissa Walker (ami-sapphire) authored on 2014/01/24 14:02:23