-
Notifications
You must be signed in to change notification settings - Fork 21
/
Copy pathCHANGELOG
340 lines (289 loc) · 12.8 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
* 0.13.3 10/21/2016
- Bill Shupp (hostmaster@shupp.org)
- Fixed axfr_get exploit GH #27. tnx to wireghoul for the poc.
- Allow IPv6 PTR domain suffixes in PTR type, GH PR #26. tnx tombii.
- Update copyrights
* 0.13.2 11/30/2015
- Bill Shupp (hostmaster@shupp.org)
- Fixed more PHP SQL type issues, GH #24
- Fixed static data in default soa template, GH #24
* 0.13.1 10/20/2015
- Bill Shupp (hostmaster@shupp.org)
- Fixed PHP SQL type issue for owner ids when creating a new domain
tnx Pablo Murillo
* 0.13.0 10/5/2015
- Brian Hartvigsen (brian.andrew@brianandjenny.com)
- Added A+PTR support
- Bill Shupp (hostmaster@shupp.org)
- Fixed bug where errorInfo() is called on the wrong object on exports
upon query failure
- Added validation for CNAME record values to avoid empty values
- create_tables.php did not have the current "val" column size for
records and default_records tables
- Fixed lack of IPv4 dotted decimal support in ipv4_to_octal() function
- Added optional mysql session handling to support load balancing. See
$use_mysql_sessions in src/config.php.
- Upgraded smarty from 2.6.26 to 2.6.28 to get security fixes
- Upgraded Net_IPv6 to 1.2.2b2 to get invalid character fix
- Updated validate_domain_name() regex to be more specific
- Added optional $vegadns_generation_txt_record in config.php for
monitoring data set version in VegaDNS and tinydns. Unset by default.
- Update copyrights again
- Records - use fixed table layout, wrap address/values - GH Issue #19
* 0.12.1 6/16/2013
- mufus (GH PR #16)
- Fixed incorrect preg introduced in 0.12.0
* 0.12.0 4/8/2013
- Bill Shupp (hostmaster@shupp.org)
- Removed all deprectated PHP functionality
- Migrated from legacy mysql driver to PDO
(Requires PHP 5.1 for pdo)
- Moved from ereg to preg functions
- Removed PHP 4 specific stuff
- Removed register_globals/safe_mode checks
- Removed Type=MyISAM in create_tables.php (GH #14)
- Fixed display in editing SOA records
- Fixed wildcard search for records
- Got rid of legacy md5upgrade directory
- axfr_get.php now uses $dns_tools_dir for axfr-get and tcpclient
* 0.11.3 4/4/2013
- Bill Shupp (hostmaster@shupp.org)
- Updated records_update.sql - the val column needs to be much bigger
(changing to 512) for SPF records - See UPGRADE
- Added RFC 4408 support (SPF via type 99)
- Added CIDR suport for $trusted_hosts, you can now optionally use
1.2.3.0/24 in the list instead of single IPs
- Moved $trusted into src/config.php so you can easily set to 1 if you want
to remove application level IP limits to exports
- Removed specific version from update-data.sh, doesn't make sense to
maintain it here
- Set 403 status when forbidding access to exports
* 0.11.2 3/22/2013
- Bill Shupp (hostmaster@shupp.org)
- Added support for RFC 2317
- Update copyright notices
* 0.11.1 2/25/2012
- Bill Shupp (hostmaster@shupp.org)
- Fixed a number of XSS issues reported by Sebastiaan Tesink
- Whitespace cleanups
* 0.11.0 2/22/2012
- Bill Shupp (hostmaster@shupp.org)
- Integrated Logan Michel's IPv6 patch, with the following changes:
- Updated PEAR Net_IPv6 library to 1.2.1
- Refactored helper code
- Made the support optional
- Fixed IPv6 validation bug
- Set session.use_only_cookies to 0 (it defaults to 1 since 5.3.3, breaking things)
- Updated logging:
- Disabled displaying of errors - that was a stupid idea
- Don't display or log E_DEPRECATED by default
- Trimmed tailing whitespace in index.php
- Fixed some column markup for listing records (GH #11)
- Updates to INSTALL based on feedback from new users
- Updated copyrights
* 0.10.0 12/15/2010 (SEE UPGRADE)
- Bill Shupp (hostmaster@shupp.org)
- Integrated Darrel O'Pry's srv patch.
(integration sponsored by OpenDNS)
- Upgraded smarty from 2.6.14 to 2.6.26
- Increased records tables val column to support longer records (like TXT)
- Fixed a couple of notices for incorrect variable references
* 0.9.10 9/5/2006
- Bill Shupp (hostmaster@shupp.org)
- Update CREDITS
- Fix php notice in records.php
- Fix default soa records problems
- Update Copyrights for 2006 in vegadns-stable
* 0.9.9.6 7/31/2006
- Bill Shupp (hostmaster@shupp.org)
- Add serial record support
* 0.9.9.5 7/18/2006
- Bill Shupp (hostmaster@shupp.org)
- Fix typo in line 60 that generated a warning
* 0.9.9.4 7/5/2006
- Bill Shupp (hostmaster@shupp.org)
- Fix problems in add_account_now and import_domains
* 0.9.9.3 6/15/2006
- Bill Shupp (hostmaster@shupp.org)
- Re-add md5() in authenticate_user(). Its removal broke logins in
0.9.9.2. Doh.
- Remove mysql escapes inside md5() for changing passwords, which would
break logins for passwords with escapable characters.
- Update version numbers this time.
* 0.9.9.2 6/14/2006
- Bill Shupp (hostmaster@shupp.org)
- Fixe wrong mail() argument in domains.php
- Added Robin Bowes changes
- Change error_reporting to E_ALL
- Add "-R" to the tcpclient command.
- Add quotes to md5() function when creating default password.
-tnx Bob Hutchinson.
- Lots of undefined index error fixes
- Removed MD5 function from query in authenticate_user function
* 0.9.9.1 9/7/2005
- Backported changes from 1.1.5:
* SECURITY *
- Fix path disclosure warning due to illegal "_" in session_name
* SECURITY *
- Moved all messages into _SESSION['message'], accessed via the
set_msg(), set_msg_err(), and display_msg() functions
- Backported changes from 1.1.4:
- Moved session_start.php code into index.php
- Fix order of alphanumeric listing searches - tnx ringo@vianet.ca
* 0.9.9 12/4/2004
- Bill Shupp (hostmaster@shupp.org)
- Update Smarty to 2.6.7
- remove src link in md5upgrade directory. Use ini_set() instead
- update string escapes in authenticate_user() for mysql queries
- tnx Darrel O'pry
- updates to check_domain_name_format() to allow for wildcards, as well
as DOMAIN substitutions in default records (0.9.8 broke these). Also
disallow ".." in any record name.
* 0.9.8 12/8/2004
- Bill Shupp (hostmaster@shupp.org)
- Use case insensitive eregi() instead of ereg() for domain sanity check
11/21/2004
- Len Padilla (vegadns.users@padilla.net)
- Add sanity checking when adding domains
10/21/2004
- Len Padilla (vegadns.users@padilla.net)
- Add sanity checking when adding RRs
* 0.9.7 10/15/2004
- Bill Shupp (hostmaster@shupp.org)
- Update version this time.. -tnx Roger Tulen
- Bob Hutchinson (hutchlists@midwales.com)
- Bugfix for records sort code -tnx Roger Tulen
- Fixed pagination math domains.php
* 0.9.6 10/11/2004
- Bill Shupp (hostmaster@shupp.org)
- Minor fixes for new sorting code. - tnx Bob Hutchinson
* 0.9.5 10/9/2004
- Bill Shupp (hostmaster@shupp.org)
- Change background.png to a jpeg for IE display problems
- Added pngfix.js for more IE png bug workarounds
(script is from http://homepage.ntlworld.com/bobosola/index.htm)
- Rewrote much of the sorting code logic, made it available to
all pages.
- Bob Hutchinson (hutchlists@midwales.com)
- New sorting code
* 0.9 9/23/2004
- Bill Shupp (hostmaster@shupp.org)
- Allow for default TXT records
- Updates to update-data.sh - added error checking/reporting, and is
safer. Also runs under sh instead of bash.
- Removed "> /dev/null" from INSTALL instructions of update-data.sh.
* 0.9b1 9/18/2004
- Bill Shupp (hostmaster@shupp.org)
- Added DNS Query tool (frontend to dnsq[r])
- Update TODO
- Update for menu template
- Set "Content-type: text/plain" for get_data - tnx Conny Brunnkvist
- Updated Smarty to 2.6.5
- Updated INSTALL to mention turning off register_globals and safe_mode
9/7/2004
- Rodrigo Borges Pereira <rbpereira@interacesso.pt>
- List domains by first character
8/22/2004
- Karl Shea <karl@karlshea.com>
- only run "make" if the data file has changed (to eliminate
unnecessary ixfr traffic)
7/28/2004
- Bill Shupp (hostmaster@shupp.org)
- New vegadns logo, colors
7/27/2004
- Ondrej Novy (onovy@nomi.cz)
- added ability to use default values during AXFR imports.
7/14/2004
- bob <hutchlists@midwales.com>
- Fix for missing distance value in default MX record creation
4/6/2004
- Conny Brunnkvist <kop@ninzin.net>
- update order by argument in data.php for better sorting
* 0.8.1 6/18/2004
- Bill Shupp (hostmaster@shupp.org)
- Fix for type display in edit_records
- Small bug in update records SQL statement
- Allow for optional trailing "." in records
* 0.8 6/17/2004
- Bill Shupp (hostmaster@shupp.org)
- Make sure PTR records are within the appropriate zone
- Added multiple trusted_hosts example in config.php
- Added ability to edit records
- Bill Shupp (hostmaster@shupp.org)
- Added more logging
- Updates to INSTALL,TODO
5/19/2004
- Bill Shupp (hostmaster@shupp.org)
- Added md5upgrade script, UPGRADE documentation.
- Updated create_tables.php to support md5 passwords
- Updated text in help.tpl
4/27/2004
- Ondrej Novy (onovy@nomi.cz)
- Switched from clear text to md5 passwords
4/25/2004
- Bill Shupp (hostmaster@shupp.org)
- Added view_log mode
- Cycle <tr> bgcolors in list templates - tnx Ryan White
* 0.7 4/22/2004
- Bill Shupp (hostmaster@shupp.org)
- Added domains/record searches
- Some cleanup in soa display logic
- Upated TODO
* 0.6.6 4/21/2004
- Bill Shupp (hostmaster@shupp.org)
- Fixed pagination errors when a user has no domains
- Addeded new timeout variable to verify_session(), it's now in sync
with authenticate_user()
* 0.6.5 4/21/2004
- Bill Shupp (hostmaster@shupp.org)
- Fixed multiple missing $ in config.php
- Added pagination of records
- Moved timeout to config.php
- Added trusted hosts to config.php. Only allow trusted hosts to
access get_data (127.0.0.1 by default) - tnx Ryan White
- Added version to header.tpl
- Updated TODO, INSTALL
* 0.6.1 3/20/2004
- Ondrej Novy (onovy@nomi.cz)
- Fix for multiple VegaDNS server support in update-data.sh
* 0.6 3/19/2004
- Ondrej Novy (onovy@nomi.cz)
- Escape shell command in axfr_get.php
- Disable register_globals in .htaccess instead of httpd.conf
- Fix variable name typo in index.php (for error message)
- Update to style sheet
- Added support for multiple VegaDNS servers in update-data.sh
- Updated all templates to be valid HTML 4.01 - Thanks!
- Bill Shupp (hostmaster@shupp.org)
- Set content type via meta tag
- Switch to wget instead of lynx
- Updated Smarty to version 2.6.2
- Default mysql user info now matches that in INSTALL
- Use FULL path to index file for VEGADNS variable in update-data.sh
- session cleanups
* 0.5 1/25/2004
- Bill Shupp (hostmaster@shupp.org)
- Added check for existing default records before trying to add them
- Removed link for view log until it's done
- Added TXT support
* 0.4 1/21/2004
- Bill Shupp (hostmaster@shupp.org)
- Added Style Sheet, updated design/logo
- Moved remaining html (style related) from src to templates
- Updated INSTALL, TODO
- Updated copyright notices
* 0.3 12/27/2003
- Bill Shupp (hostmaster@shupp.org)
- Fixed many "undefined index" errors
* 0.2 12/25/2003
- Bill Shupp (hostmaster@shupp.org)
- Ported to Smarty template engine for separation of html from php
- Added Default Records
- Removed nameservers array, since default records are now in place
- Updated INSTALL, README, TODO
- Fixed some things in the help section
- Many cleanups
- Added Email notifications for inactive domains
- Fixed typo in update-data.sh
* 0.1 11/26/2003
- Initial Public Rlease