doc/README

   1 Jyraphe, your web file repository
   2 =================================
   3
   4 Jyraphe is a web application of file repository, easy to install and easy to
   5 use. Jyraphe is an entirely free application, it is distributed under the
   6 terms of the GNU Affero General Public License, version 3 or later. See the
   7 COPYING file in this directory.
   8
   9 For more information, see:
  10 http://home.gna.org/jyraphe/
  11
  12 Jyraphe 0.4 (20 april 2009)
  13 ---------------------------
  14
  15   - SECURITY: possible path traversal by uploading a file R0...0 (32 zeroes)
  16     and calling file.php?h=../files/R0..0
  17   - BUG: possibility to download a protected file without a key
  18   - FEATURE: better form (without tables)
  19
  20
  21 Jyraphe 0.3 (28 may 2008)
  22 -------------------------
  23   - SECURITY: a forged link file could be uploaded and accessed with
  24     get.php?h=../files/forgedfile so that any readable file could be accessed
  25   - FEATURE: install.php script with randomised name of the var/ directory
  26   - FEATURE: password protection
  27   - FEATURE: time limit
  28   - FEATURE: Javascript to show the extended options
  29   - FEATURE: support for multiple CSS and better handling of images in the css
  30   - FEATURE: better Content-Type handling and XHTML validation
  31   - SECURITY: now prevent .php from upload, rename it in .phps
  32   - FEATURE: renamed get.php in file.php (in prevision of thumb.php)
  33
  34
  35 Jyrahe 0.2 (22 april 2008)
  36 --------------------------
  37   - SECURITY: .htaccess could be uploaded and change the access of var/
  38   - BUG: infinite loop when renaming a file in case of a collision
  39   - BUG: warning of the substr_compare when null mime-type
  40   - BUG: substr_compare not defined for old PHP4
  41
  42
  43 Jyraphe 0.1 (12 april 2008)
  44 ---------------------------
  45   - First release of Jyraphe
  46   - KNOWN BUG: when not defining $cgf['web_root'] in config.local.php, and
  47     having $cfg['use_redirect'] = true, the CSS does not appear in case of 404
  48     error. Workaround: define $cgf['web_root'] in your config.local.php