September 14, 2015
View 3b22652

Version bumped to 1.05.2

Clarissa Walker authored on 2015/09/14 07:58:58
View cbba459

Updated changelog (former forgotten file)

Clarissa Walker authored on 2015/09/14 07:58:06
View 6eaf13c

Filtered page number link to prevent further maniuplation. Also, provided a way to have the upload user log out, clearing the session cookie.

Clarissa Walker authored on 2015/09/14 07:49:45
View 7b17afc

End of reviewing filtering practices. Final change to this file as of: http://www.osvdb.org/79805

Clarissa Walker authored on 2015/09/14 07:39:24
View 5406794

Continuation of reviewing filtering practices

Clarissa Walker authored on 2015/09/14 07:36:02
View 45c4ca1

Continuation of reviewing filtering practices

Clarissa Walker authored on 2015/09/14 07:20:48
View 4cd2df3

Continuation of reviewing filtering practices

Clarissa Walker authored on 2015/09/14 07:16:10
View 0d35e71

Password authentication changed from ancient MD5 to bcrypt for PHP 5.5 and above, and crypt for PHP versions 5.0 to 5.4.x. Will be more precise later.

Clarissa Walker authored on 2015/09/14 06:58:30
View f9be7aa

Start of reviewing filtering practices. Also fixed hash filtering in dltorrent as referenced here: http://www.osvdb.org/79805

Clarissa Walker authored on 2015/09/14 04:19:18
September 11, 2015
View 076009a

Install script now supports MySQL databases with dashes. Seems CREATE $database was missing backtick quotes.

Clarissa Walker authored on 2015/09/11 02:50:34
September 10, 2015
View 5329127

Cosmetic change. Originally no space between ID and version. Fixed.

Clarissa Walker authored on 2015/09/10 19:47:27
View a027ad4

Proper version handling instead of the original form. Variable was undefined, so every time the index was hit, the error log would get flooded with the same undefined variable message.

Clarissa Walker authored on 2015/09/10 19:41:49
View fe7b538

Version bumped to 1.05.1

Clarissa Walker authored on 2015/09/10 03:25:52
View 47e4375

This fixes the scrape data issue that has long plagued this software (2012). Filtering other data is fine, but scrape data ends up going to and from the torrent client and the tracker anyway, and they don't like the custom filters. This was confirmed by finding and going through the original PHPBTTracker software code and comparing it with RivetTracker.

Clarissa Walker authored on 2015/09/10 03:10:09
View 00bd859

Fixed badly handled procedure of clients originally done in the name of security. Initailly, hash/peer handling failed from the first escaping 'fixes'... ...then eventually, tracker responds with HTTP Status 404 after the second validation 'fix'. Finally tracked down after two years... shame.

Clarissa Walker authored on 2015/09/10 01:59:36