CHANGELOG.md (6180B)
1 # CHANGE LOG 2 3 For the newest (und unstable) version always check the develop branch. 4 5 ## develop branch 6 7 - [panique] [#729] Fix, mail sending now returns true or false success status (https://github.com/panique/huge/issues/729) 8 - [OmarElGabry] [PR](https://github.com/panique/huge/pull/693) session id regeneration in certain situations 9 - [OmarElGabry] [PR](https://github.com/panique/huge/pull/693) encrypted cookies 10 - [OmarElGabry] [PR](https://github.com/panique/huge/pull/693) new encryption class 11 - [OmarElGabry] [PR](https://github.com/panique/huge/pull/693) anti-CSRF feature (used in login and username change forms) 12 - [josh-bridge] [PR](https://github.com/panique/huge/pull/689) logged-in user can now change password 13 - [justincdotme] [PR](https://github.com/panique/huge/pull/684) better code for brute-force blocking when logging in 14 - [panique] soft autoinstaller improvements 15 - [panique] updated dependencies to current versions 16 - [Kent55/panique] XSS protection filter 17 - [FAlbanni] XSS protection with better session/cookie, now only allowed on used domain 18 - [panique] there's now a simple Favicon and a fallback to avoid browsers hammering the application requesting favicons 19 - [panique] application has now a page title 20 - [panique] avatar upload feature can now handle jpg, png, gif 21 - [panique/tankerkiller125] avatars folder now does not run any PHP code (security improvement) 22 - [tysonlist] [#657] send user back to last-visited page after successful login (when not being logged in first) 23 - [sandropons] anti-brute-force feature for login process 24 - [panique] removed old Facebook texts (as Login-via-Facebook feature was removed since 3.0) 25 - [oisian/ldmusic] [#608] Deletion / suspension of users, Admin menu 26 - [panique] [#654](https://github.com/panique/huge/issues/654) little frontend navi bug fixed 27 - [Dominic28] [PR](https://github.com/panique/huge/pull/645) added checkboxes to request class 28 - [Dominic28] [PR](https://github.com/panique/huge/pull/644) code style fixes 29 - [M0ritzWeide] [PR](https://github.com/panique/huge/pull/635) added browser caching 30 - [modInfo/panique] [PR](https://github.com/panique/huge/pull/647) added missing view table column 31 32 ## 3.1 33 34 Code Quality at Scrutinizer 9.7/10, at Code Climate 3.9/4 35 36 **February 2015** 37 38 - [panique] several code quality improvements (and line reductions :) ) all over the project 39 - [PR](https://github.com/panique/huge/pull/620) [owenr88] view rending now possible with multiple view files 40 - [panique] lots of code refactorings and simplifications all over the project 41 - [PR](https://github.com/panique/huge/pull/615) [Dominic28] Avatar can now be deleted by the user 42 - [panique] First Unit tests :) 43 - [panique] several code quality improvements all over the project 44 - [panique] avatarModel code improvements 45 - [panique] renamed AccountType stuff to UserRole, minor changes 46 47 ## 3.0 48 49 Code Quality at Scrutinizer 9.3/10, at Code Climate 3.9/4 50 51 **February 2015** 52 53 - [panique] removed duplicate code in AccountTypeModel 54 - [PR](https://github.com/panique/huge/pull/587) [upperwood] Facebook stuff completely removed from SQL 55 - [panique] tiny text changes 56 57 **January 2015** 58 59 - [panique] added static Text class (gets the messages etc) 60 - [panique] added static Environment class (get the environment) 61 - [panique] added static Config class (gets config easily and according to environment) 62 - [panique] new styling of the entire project: login/index has new look now 63 - [panique] massive refactoring of all model classes: lots of methods have been organized into other model classes 64 - [panique] massive refactoring of all model classes: all methods are static now 65 - [panique] EXPERIMENTAL: added static database call / DatabaseFactory, rebuild NoteModel with static methods 66 - [panique] massive refactoring of mail sending, (chose between PHPMailer, SwiftMailer, native / SMTP or no SMTP) 67 68 **December 2014** 69 70 - [panique] lots of refactorings 71 - [panique] refactored LoginModel'S login() method / LoginController's login() method 72 - [panique] removed COOKIE_DOMAIN (cookie is now valid on the domain/IP it has been created on) 73 - [panique] Abstracting super-globals like $_POST['x'] into Request::post('x') 74 - [panique] entirely removed all the Facebook stuff [will be replaced by new proper Oauth2 solution soon] 75 - [panique] lots of code refactorings and cleaning, deletions of duplicate code 76 - [panique] moving nearly all hardcoded values to config 77 - [panique] new View handling: you'll have to pass vars to the view renderer now 78 - [panique] completely removed Facebook login process from controller (incomplete) [will be replaced by new solution] 79 - [panique] less config, URL/IP is auto-detected now 80 - [panique] added loadConfig() to load a specific config according to environment setting (fallback: development) 81 - [panique] added getEnvironment() to fetch (potential) environment setting 82 - [panique] replaced native super-globals access by wrapper access (Session:get instead of $_SESSION) 83 - [panique] complete frontend rebuilding (incomplete yet) 84 - [panique] massive cleaning of all controllers 85 - [panique] added Session::add() to allow stacking of elements (useful for collecting feedback, errors etc) 86 - [panique] complete rebuild of model handling 87 - [panique] View can now render(), renderWithoutHeaderFooter() and renderJSON 88 - [panique] using Composer's PSR-4 autoloader (in a very basic way currently) 89 - [panique] DB construction needs now port by default 90 - [panique] removed (semi-optional) hashing cost factor (as it's redundant usually) 91 - [panique] email max limit increased to 254/255 (official number) 92 - [panique] simpler and improved core 93 - [panique] improved architecture, controllers are now named like "IndexController" 94 - [panique] moved index.php to /public folder, new .htaccess, new installation guideline 95 - [panique] MVC naming fixes 96 - [nerdalertdk] betters paths, automatic paths 97 - [panique] removed legacy PHP stuff: 5.5.x is now the minimum 98 - [PR](https://github.com/panique/php-login/pull/503) [Malkleth] allow users to request password reset by inputting email as well as user names 99 - [PR](https://github.com/panique/php-login/pull/516) [pein0119] cookie runtime calculation fix