ITL-Huge/CHANGELOG.md

CHANGE LOG

For the newest (und unstable) version always check the develop branch, for beta check master branch, for really stable stuff check the releases (the ones that have a real version number :))

master branch

• [slaveek/panique] PR [#770] fix for sending user back to last visited page after login
• [slaveek] PR lots of code styling fixes
• [panique] [#729] Fix, mail sending now returns true or false success status (https://github.com/panique/huge/issues/729)
• [OmarElGabry] PR session id regeneration in certain situations
• [OmarElGabry] PR encrypted cookies
• [OmarElGabry] PR new encryption class
• [OmarElGabry] PR anti-CSRF feature (used in login and username change forms)
• [josh-bridge] PR logged-in user can now change password
• [justincdotme] PR better code for brute-force blocking when logging in
• [panique] soft autoinstaller improvements
• [panique] updated dependencies to current versions
• [Kent55/panique] XSS protection filter
• [FAlbanni] XSS protection with better session/cookie, now only allowed on used domain
• [panique] there's now a simple Favicon and a fallback to avoid browsers hammering the application requesting favicons
• [panique] application has now a page title
• [panique] avatar upload feature can now handle jpg, png, gif
• [panique/tankerkiller125] avatars folder now does not run any PHP code (security improvement)
• [tysonlist] [#657] send user back to last-visited page after successful login (when not being logged in first)
• [sandropons] anti-brute-force feature for login process
• [panique] removed old Facebook texts (as Login-via-Facebook feature was removed since 3.0)
• [oisian/ldmusic] [#608] Deletion / suspension of users, Admin menu
• [panique] #654 little frontend navi bug fixed
• [Dominic28] PR added checkboxes to request class
• [Dominic28] PR code style fixes
• [M0ritzWeide] PR added browser caching
• [modInfo/panique] PR added missing view table column

3.1

Code Quality at Scrutinizer 9.7/10, at Code Climate 3.9/4

February 2015

• [panique] several code quality improvements (and line reductions :) ) all over the project
• PR [owenr88] view rending now possible with multiple view files
• [panique] lots of code refactorings and simplifications all over the project
• PR [Dominic28] Avatar can now be deleted by the user
• [panique] First Unit tests :)
• [panique] several code quality improvements all over the project
• [panique] avatarModel code improvements
• [panique] renamed AccountType stuff to UserRole, minor changes

3.0

Code Quality at Scrutinizer 9.3/10, at Code Climate 3.9/4

February 2015

• [panique] removed duplicate code in AccountTypeModel
• PR [upperwood] Facebook stuff completely removed from SQL
• [panique] tiny text changes

January 2015

• [panique] added static Text class (gets the messages etc)
• [panique] added static Environment class (get the environment)
• [panique] added static Config class (gets config easily and according to environment)
• [panique] new styling of the entire project: login/index has new look now
• [panique] massive refactoring of all model classes: lots of methods have been organized into other model classes
• [panique] massive refactoring of all model classes: all methods are static now
• [panique] EXPERIMENTAL: added static database call / DatabaseFactory, rebuild NoteModel with static methods
• [panique] massive refactoring of mail sending, (chose between PHPMailer, SwiftMailer, native / SMTP or no SMTP)

December 2014

• [panique] lots of refactorings
• [panique] refactored LoginModel'S login() method / LoginController's login() method
• [panique] removed COOKIE_DOMAIN (cookie is now valid on the domain/IP it has been created on)
• [panique] Abstracting super-globals like $_POST['x'] into Request::post('x')
• [panique] entirely removed all the Facebook stuff [will be replaced by new proper Oauth2 solution soon]
• [panique] lots of code refactorings and cleaning, deletions of duplicate code
• [panique] moving nearly all hardcoded values to config
• [panique] new View handling: you'll have to pass vars to the view renderer now
• [panique] completely removed Facebook login process from controller (incomplete) [will be replaced by new solution]
• [panique] less config, URL/IP is auto-detected now
• [panique] added loadConfig() to load a specific config according to environment setting (fallback: development)
• [panique] added getEnvironment() to fetch (potential) environment setting
• [panique] replaced native super-globals access by wrapper access (Session:get instead of $_SESSION)
• [panique] complete frontend rebuilding (incomplete yet)
• [panique] massive cleaning of all controllers
• [panique] added Session::add() to allow stacking of elements (useful for collecting feedback, errors etc)
• [panique] complete rebuild of model handling
• [panique] View can now render(), renderWithoutHeaderFooter() and renderJSON
• [panique] using Composer's PSR-4 autoloader (in a very basic way currently)
• [panique] DB construction needs now port by default
• [panique] removed (semi-optional) hashing cost factor (as it's redundant usually)
• [panique] email max limit increased to 254/255 (official number)
• [panique] simpler and improved core
• [panique] improved architecture, controllers are now named like "IndexController"
• [panique] moved index.php to /public folder, new .htaccess, new installation guideline
• [panique] MVC naming fixes
• [nerdalertdk] betters paths, automatic paths
• [panique] removed legacy PHP stuff: 5.5.x is now the minimum
• PR [Malkleth] allow users to request password reset by inputting email as well as user names
• PR [pein0119] cookie runtime calculation fix