11 years agoFixed typo in batch_upload.php master v1.05.2
Clarissa Walker []
Fixed typo in batch_upload.php

11 years agoFixed filtering with newtorrents.php
Clarissa Walker []
Fixed filtering with newtorrents.php
dltorrent.php authentication behavior slightly changed
batch_upload.php reverted

11 years agoReverting change to filter; breaks tracker.php
Clarissa Walker []
Reverting change to filter; breaks tracker.php

11 years agoVersion bumped to 1.05.2
Clarissa Walker []
Version bumped to 1.05.2

11 years agoUpdated changelog (former forgotten file)
Clarissa Walker []
Updated changelog (former forgotten file)

11 years agoFiltered page number link to prevent further maniuplation. Also, provided
Clarissa Walker []
Filtered page number link to prevent further maniuplation. Also, provided
a way to have the upload user log out, clearing the session cookie.

11 years agoEnd of reviewing filtering practices. Final change to this file as of:
Clarissa Walker []
End of reviewing filtering practices. Final change to this file as of:
http://www.osvdb.org/79805

11 years agoContinuation of reviewing filtering practices
Clarissa Walker []
Continuation of reviewing filtering practices

11 years agoContinuation of reviewing filtering practices
Clarissa Walker []
Continuation of reviewing filtering practices

11 years agoContinuation of reviewing filtering practices
Clarissa Walker []
Continuation of reviewing filtering practices

11 years agoPassword authentication changed from ancient MD5 to bcrypt for PHP 5.5 and
Clarissa Walker []
Password authentication changed from ancient MD5 to bcrypt for PHP 5.5 and
above, and crypt for PHP versions 5.0 to 5.4.x. Will be more precise
later.

11 years agoStart of reviewing filtering practices. Also fixed hash filtering in dltorrent
Clarissa Walker []
Start of reviewing filtering practices. Also fixed hash filtering in dltorrent
as referenced here:
http://www.osvdb.org/79805

11 years agoInstall script now supports MySQL databases with dashes. Seems CREATE $database
Clarissa Walker []
Install script now supports MySQL databases with dashes. Seems CREATE $database
was missing backtick quotes.

11 years agoCosmetic change. Originally no space between ID and version. Fixed.
Clarissa Walker []
Cosmetic change. Originally no space between ID and version. Fixed.

11 years agoProper version handling instead of the original form. Variable was
Clarissa Walker []
Proper version handling instead of the original form. Variable was
undefined, so every time the index was hit, the error log would get
flooded with the same undefined variable message.

11 years agoVersion bumped to 1.05.1 v1.05.1
Clarissa Walker []
Version bumped to 1.05.1

11 years agoThis fixes the scrape data issue that has long plagued this software (2012).
Clarissa Walker []
This fixes the scrape data issue that has long plagued this software (2012).
Filtering other data is fine, but scrape data ends up going to and from the
torrent client and the tracker anyway, and they don't like the custom filters.
This was confirmed by finding and going through the original PHPBTTracker
software code and comparing it with RivetTracker.

11 years agoFixed badly handled procedure of clients originally done in the name of
Clarissa Walker []
Fixed badly handled procedure of clients originally done in the name of
security.
Initailly, hash/peer handling failed from the first escaping 'fixes'...
...then eventually, tracker responds with HTTP Status 404 after the second
validation 'fix'.
Finally tracked down after two years... shame.

11 years agoFixes current session username display for hidden tracker
Clarissa Walker []
Fixes current session username display for hidden tracker
--Simply log out and log back in to reset session

11 years agoOld XSS fix from 2012/03/14; somehow evaded getting updated!
Clarissa Walker []
Old XSS fix from 2012/03/14; somehow evaded getting updated!

11 years agoChecks added to some files: torrent_functions.php, tracker.php v1.05
Clarissa Walker []
Checks added to some files: torrent_functions.php, tracker.php
dltorrent.php's check changed to authenticate no matter what
Some fixes and modifications from 2014: index.php, funcsv2.php,
batch_upload.php, newtorrents.php, install.php, editconfig.php
Version bumped up to 1.05

12 years agoImport from the old rivettracker git repository at sourceforge (amisaph/amisapphire branch)
Clarissa Walker (ami-sapphire) []
Import from the old rivettracker git repository at sourceforge (amisaph/amisapphire branch)