+++ /dev/null
-Jyraphe, your web file repository
-=================================
-
-Jyraphe is a web application of file repository, easy to install and easy to
-use. Jyraphe is an entirely free application, it is distributed under the
-terms of the GNU Affero General Public License, version 3 or later. See the
-COPYING file in this directory.
-
-For more information, see:
-http://home.gna.org/jyraphe/
-
-Jyraphe 0.4 (20 april 2009)
----------------------------
-
- - SECURITY: possible path traversal by uploading a file R0...0 (32 zeroes)
- and calling file.php?h=../files/R0..0
- - BUG: possibility to download a protected file without a key
- - FEATURE: better form (without tables)
-
-
-Jyraphe 0.3 (28 may 2008)
--------------------------
- - SECURITY: a forged link file could be uploaded and accessed with
- get.php?h=../files/forgedfile so that any readable file could be accessed
- - FEATURE: install.php script with randomised name of the var/ directory
- - FEATURE: password protection
- - FEATURE: time limit
- - FEATURE: Javascript to show the extended options
- - FEATURE: support for multiple CSS and better handling of images in the css
- - FEATURE: better Content-Type handling and XHTML validation
- - SECURITY: now prevent .php from upload, rename it in .phps
- - FEATURE: renamed get.php in file.php (in prevision of thumb.php)
-
-
-Jyrahe 0.2 (22 april 2008)
---------------------------
- - SECURITY: .htaccess could be uploaded and change the access of var/
- - BUG: infinite loop when renaming a file in case of a collision
- - BUG: warning of the substr_compare when null mime-type
- - BUG: substr_compare not defined for old PHP4
-
-
-Jyraphe 0.1 (12 april 2008)
----------------------------
- - First release of Jyraphe
- - KNOWN BUG: when not defining $cgf['web_root'] in config.local.php, and
- having $cfg['use_redirect'] = true, the CSS does not appear in case of 404
- error. Workaround: define $cgf['web_root'] in your config.local.php
git.p6c8.net / jirafeau / mojo42.git / blobdiff