phpMussel Files

Version/Release 1.1.0

• [2017.08.22; Minor code change; Maikuolan]: Improved ability to scan within specific PE sections (can identify PE sections intended for being scanned and confine source data to the associated offsets). Added new options for offsets in signatures.

• [2017.08.26; Sub-minor code change; Maikuolan]: The front-end updates page now reports the number of added/removed bytes and the total time required for when updating/installing/uninstalling components.

• [2017.09.01; Minor code change; Maikuolan]: Added an optional directive to determine whether to detect and block encrypted files ("detect_encryption").

• [2017.09.01; Bug-fix; Maikuolan]: Found and fixed a bug introduced on 2017.08.22 relating to signature offsets.

• [2017.09.08; NEW FEATURE; Maikuolan]: Added support for Argon2 hashing for passwords and sessions (requires PHP => 7.2.0; updating from older versions of the package won't affect compatibility with older PHP versions, but the option for using Argon2 simply won't be provided for versions < 7.2.0). A new configuration directive ("default_algo") has been added, to allow users to switch between the defined PHP default password hashing algorithm, BCRYPT, and Argon2 (all options are still considered cryptographically secure at this time and remain safe to use, but adding this additional support provides additional choice and control to the end-user regarding encryption). Also rewrote the code for the front-end accounts page accordingly.

• [2017.09.25; Sub-minor code change; Maikuolan]: Added rollback capability to the front-end updates page for failed updates/installs (this should help to prevent any corruption or broken installs from occurring due to unforeseen problems, failed connectivity, etc). Added disk space/usage information to the front-end file manager. Added links to vulnerability and compatibility charts onto the front-end homepage.

• [2017.09.27; Minor code change; Maikuolan]: Added a pie chart to the file manager, allowing users to visually interpret the footprint imposed by the various files attributed to phpMussel and its components (requires installing Chart.js via the front-end updates page). Also did some general refactoring of the front-end code.

• [2017.09.27; Bug-fix; Maikuolan]: See issue [#138] (update bug preventing some specific components from updating at all).

• [2017.10.02; Sub-minor code change; Maikuolan]: Slightly improved the way that the front-end logs page behaves.

• [2017.10.03; NEW FEATURE; Maikuolan]: Added a new page to the front-end for viewing phpMussel usage statistics, and a corresponding configuration directive to enable/disable tracking phpMussel usage statistics.

• [2017.10.07; Sub-minor code change; Maikuolan]: Added a simple metadata cleanup routine to the front-end updates page.

• [2017.10.09; Sub-minor code change; Maikuolan]: Added the ability to fetch component names and extended descriptions from the L10N data.

• [2017.10.15; Sub-minor code change; Maikuolan]: Improved L10N pluralisation.

• [2017.10.16; NEW FEATURE; Maikuolan]: Added a new page to the front-end for viewing and handling quarantined files.

• [2017.10.26; Sub-minor code change; Maikuolan]: Added CI reports/tests to the front-end updates page. Split the functions file into two distinct files (one containing closures specifically intended for the front-end, and one for everything else; this should increase code maintainability and make things less confusing for future contributors).

• [2017.10.27; Sub-minor code change; Maikuolan]: Removed old PHP < 5.4.0 array syntax in favour of newer, short array syntax.

• [2017.10.28; Sub-minor code change; Maikuolan]: Added cookie notice to the front-end login page. Made the categories on the front-end configuration page collapsable/expandable (this should help to make the page look less cluttered and easier to navigate).

• [2017.10.28; Bug-fix; Maikuolan]: Bug found preventing the activation or deactivation of components via the front-end updates page for multi-domain installations when certain specific conditions were met; Fixed.

• [2017.10.29; NEW FEATURE; Maikuolan]: Added an API for Cronable, allowing phpMussel to be updated automatically via cron.

Caleb M (Maikuolan), 29th October 2017.