/
CHANGELOG.txt
546 lines (439 loc) · 19.1 KB
/
CHANGELOG.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
COMMIT 4/13/2021
v3.5.3 - Calculator to v1.7, ServStat to v1.3, Grabber to v2.0, PHP-AV to v4.1, Weather to v0.7, Calendar to v0.7.
-Calculator to v1.7.
-Fix syntax errors on PHP 7.4.3.
-ServStat to v1.3.
-Make app admin-only until I can make the server.xml file user-specific.
-Fix typo in app declaration block.
-Grabber to v2.0.
-Refactor a lot of old and embarrassing code.
-Remove a lot of redundant checks (does_url_exist being called more than once).
-Add ability to infer the file extension from the URL.
-Users no longer have to type the filename into the filename field. Grabber figures out the file extension and names the file appropriately.
-Fix syntax errors on PHP 7.4.3.
-PHP-AV to v4.1.
-Fix improperly nested code block.
-Fix syntax errors on PHP 7.4.3.
-Weather to v0.7.
-Fix typo in $key declaration.
-Calendar to v0.7.
-Add noStyles variable to prevent default stylesheets from loading.
-Fix syntax errors on PHP 7.4.3.
-Fix the way stylesheet declarations are processed in sanitizeCore.php.
----------
COMMIT 4/8/2021
v3.5.2 - Fix stylesheets, Pell App to v3.5.
-Updated Pell to latest PHP versions (tested 7.4.3).
-Pell to v3.5.
-Discovered that the way we install Unoconv is broken. We wind up installing 0.7 which is old. We want to use pip. The docs need to be updated to reflect this. Not sure if the core needs to be modified yet.
-Update the way commonCore produces stylesheets in santitizeCore.php and commonCore.php.
----------
COMMIT 4/8/2021
v3.5.1 - Finish Weather app, fix ServMonitor HRAI, displaydirectorycontents.
-Add a bunch of features and functionality to Weather app (v0.6).
-Update ServMonitor (v3.3), HRAI (v6.1), & displaydirectorycontents to work with the newer versions of PHP.
-Add missing acpi dependancy to instructions for ServMonitor.
----------
COMMIT 4/7/2021
v3.5 - Add Smart-Lightbulb app, Update to work with latest PHP versions.
-v3.5.
-Updated to work with PHP versions up-to and including 7.4.3.
-Add "Smart-Lightbulb" app for controlling Bluetooth lightbulbs remotely.
-Added more robust variable declarations in commonCore, sanitizeCore & settingsCore.
-Update included WordPress package to v5.7.
KNOWN ISSUES
-Building a client app with electron is broken. Output from the exec() command that calls nativefier to build the app are cut off in the middle of normal output. I'm working on a solution.
-Added more robust sanity checks for when Nativefier fails.
----------
COMMIT 2/20/2021
v3.4.1 - Update installation instructions.
-v3.4.1.
-Add the latest version of PHP to the installation instructions.
----------
COMMIT 1/17/2021
v3.4, Clarify config file settings, improve comments.
-v3.4.
-Update default config.php file with more detailed comments.
-Fixed typos, grammer, and formatting inconsistencies.
----------
COMMIT 8/24/2020
v3.3, JSPaint to v1.1, WordPress to v5.5.
-v3.3.
-Update JSPaint App to v1.1.
-Update included WordPress.org package to v5.5.
----------
COMMIT 11/20/2019
v3.2 - Fix bug with wordpress installation package formatted incorrectly.
-v3.2.
-Issue# 26. https://github.com/zelon88/HRCloud2/issues/26
-The Wordpress installation package was misformatted and as such HRCloud2 was unable to install it.
-Updated included Wordpress package to latest v5.3.
----------
COMMIT 10/22/2019
v3.1.9 - Fix bug in cloudCore.php pdfworkSelected method.
-v3.1.9.
-Sanitizing the wrong $_POST['method'] variable.
-Shouldn't have posed a risk before, as the method was never used to affect UI elements or carry user input through sensitive operations.
----------
COMMIT 6/11/2019
v3.1.8 - Working on adding drag-drop-swap to appIndex.
-v3.1.8.
-Add initial version of drag-drop-swap to appIndex for swapping Apps around.
-Currently very buggy.
-Adapted from https://codepen.io/cilestin/pen/ogQQBP by "Drew" (@cilestin, https://codepen.io/cilestin/).
-Original version only worked for <li></li>.
-Also working on Weather app using OpenWeatherMap API functionality and an App originally by @cmfcmf (https://github.com/cmfcmf, https://github.com/cmfcmf).
-The App will store client supplied locations (optional) for monitoring.
----------
COMMIT 5/7/2019
v3.1.7 - Fix bug with cloudCore directory checking.
-v3.1.7.
-Fix bug with directory checking.
-Change from isDir to is_dir.
----------
COMMIT 4/10/2019
v3.1.6 - PHP-AV App to v4.0. Defs to v3.9.
-v3.1.6.
-PHP-AV App to v4.0.
-Defs to v4.9.
-Improve consistency of scan results.
----------
COMMIT 4/4/2019
v3.1.5 - Fix bugs in search feature. Strenghen security.
-v3.1.5.
-Improve security/sanitization.
-Search now completes much faster.
-Search is now current-directory specific (less than ideal).
-Working on search all folders.
-scandir() is weird.
----------
COMMIT 4/3/2019
v3.1.4 - Fix bug. Improve performance by defering some resources.
-v3.1.4.
-Defer some image resources on Drive and App pages (appIndex).
-Found some more resources without preload or defer attributes in the GUI.
-Fix a bug where appCore would display an error message upon succesfully uninstalling an App.
----------
COMMIT 4/2/2019
v3.1.3 - Fix HTML bugs with Folder, Shared, Favorite icons.
-v3.1.3.
-Fix HTML bugs in Drive items when displaying Folder, Shared, and Favorite icons.
-Stray HTML tags and typos mostly.
----------
COMMIT 4/2/2019
v3.1.2 - Improve JS performance, reduce errors.
-v3.1.2.
-Remove unneeded iframe refresh function from HRC2-Lib.js
-Move HRC2-Lib.js call below HRAI to reduce errors.
-Fix logs directory refresh buttons (pre-existing folders won't be fixed, new ones will).
-Add preload and defer attributes to some scripts to improve performance.
----------
COMMIT 3/29/2019
v3.1.1 - Fix typo in guiCore.
-v3.1.1.
-Fix a typo in guiCore (assignment instead of comparison).
-Thanks to nat on raddle.me
----------
COMMIT - 3/25/2019
v3.1 - PHP-AV to v3.9. Add SHA1 detection, code samples.
-v3.1.
-PHP-AV App to v3.9. Defs to v4.7.
-Add support for SHA1 hash detection ($data3, $virus[4]).
-Add code detection for lots of malicious files.
-Includes malicious code samples for Golang, Python, C++, node.js, Java, Javascript, PowerShell, Ruby, VBS & more.
-Fix obscenely large logfiles by removing filename logging during scanning.
-To continue logging filenames like before (and generate really large log files) set $CONFIG['debug'] = True;
-Fixed indented code blocks.
-Bump included WordPress version to v5.1.1 (latest).
----------
COMMIT 3/22/2019
v3.0.9 - Add Orange/Purple/Green2/Grey/Yellow color schemes.
-v3.0.9.
-Add Orange, Green2, Purple, Grey & Yellow color schemes.
-Improve comments.
-Trivial code reduction.
-Fix yellow <hr>.
-Add more Tips to Resources/tips.php.
----------
COMMIT 3/17/2019
v3.0.8 - Add folder icon to Drive page.
-v3.0.8.
-Add folder icon to Drive page.
----------
COMMIT 3/6/2019
v3.0.7 - Improve Drive & Shared indexes.
-v3.0.7.
-Drive and shared indexes now truncate long filenames.
-Truncation involves chopping the middle out of long names and replacing it with '... '.
-This allows enough room for favorite and shared icons as well as filename, and gives extra long names a breakpoint.
-Add title and alt text to all table row items.
-I need to figure out a way to purge Shared index files from a users Cloud drive.
----------
COMMIT 1/30/2019
v3.0.6 - Improve security, consistency of codebase.
-v3.0.6.
-Add a check to ensure a generated .AppData user-data package actually belongs to the user it's being delivered to.
-Removed redundant code from compatibilityCore.
-Add the backupUserDataNow and downloadUserData API calls to sanitizeCore (their values are never used, but sanitizeCore contains the official API reference so these should really be in there).
-Changed to an exec function from shell_exec.
----------
COMMIT 1/29/2019
v3.0.5 - Add option to export user data.
-v3.0.5.
-Add option to the settings page for exporting user data (logs, cache, bookmarks, notes, ect...)
----------
COMMIT 1/5/2019
v3.0.4 - Fix bugs with backupCore.
-v3.0.4.
-Fix bugs with backupCore on and around lines 61, 81, and 88.
-Revise some of the checks.
-Hide the Backup Now button in settings page when $BackupsEnabled is set to anything but '1'.
-Commit the first version of cron shell script for testing.
----------
COMMIT 1/4/2019
v3.0.3 - Add backupCore, enable on-demand backups.
-v3.0.3.
-Fix typo in commonCore.php
-Add manual backup feature to Admin settings page.
-Add backupCore.
-Still working on a Cron script for auto backups (cron will call backupCore using a shell script).
-Still working on instructions to include auto backup information.
-Added GUI elements to settingsCore for changing backup settings & performing on-demand backups.
-Existing users will need to update their config.php file to contain an $EnableBackups = '1'; line and a $BackupLoc = '/path/to/backup/dir'; line.
----------
COMMIT 12/17/2018
v3.0.2 - Fix log generation issue.
-v3.0.2.
-Fix the special required directory handler so that it correctly creates log file indexes.
----------
COMMIT 12/10/2018
v3.0.1 - Improve security.
-v3.0.1.
-Improve security by adding a directory/user check.
-commonCore will not run if the user attempts to access another users directory.
-There is currently no features to allow a user to view/modify another users data, but this extra check will help ensure that even through some crazy hacker miracle a malicious crafted request should never result in compromise.
----------
COMMIT 11/18/2018
v3.0 - Improve sanitization.
-v3.0.
-Improve sanitization.
-Based on input from neogeovr on Reddit.
----------
COMMIT 11/15/2018
v2.9.9 - Add OpenJSCAD app.
-v2.9.9.
-Add OpenJSCAD app.
----------
COMMIT 10/28/2018
v2.9.8 - Fix HTML syntax, remove unneeded core calls.
-v2.9.8.
-Revisited which cores call which cores and which cores require which cores.
-Improve performance by reducing the number of core calls.
-Fix a bunch of HTML syntax errors through the entire UI.
----------
COMMIT 10/21/2018
v2.9.7.7 - Add Visualizers, m4a, m4v support.
-v2.9.7.7
-Add .m4a and .m4v support to file uploads and conversions.
-Make processing filenames with symbols a non-issue by improving the upload filename cleaning process.
-HRStreamer to v1.1.
-Make streamer more robust.
-Add visualizers.
-Updated getid3 to the latest version.
-Add "New Window" button to Cloud Drive page.
----------
COMMIT 10/13/2018
v2.9.7.6 - Add RSS App.
-v2.9.7.6.
-Add RSS App.
-Add lists of RSS Feeds and save/view/edit/delete them.
-Based on the Notes App, Bookmarks app, and Daniel Reszka's (danielres) Github Gist (https://github.com/danielres/A-minimal-markdown-editor-in-PHP) which I turned into a function and made more robust by adding a trim() function to it.
----------
COMMIT 10/13/2018
v2.9.7.5 - Add JSPaint App.
-v2.9.7.5.
-Add JSPaint App by Isaiah Odhner (1j01).
-https://github.com/1j01/jspaint
----------
COMMIT 10/12/2018
v2.9.7 - Notes App to v2.3, HRAI to v6.0.
-v2.9.7
-Notes App to v2.3.
-Improve note sanitization while allowing more safe characters through.
-HRAI to v6.0.
-Fix errors during "Scan file" core command. Now uses HRScan2 (if installed).
-Fix uptime core command not displaying properly on some servers.
-Remove CMDsync core command.
-Add "Note taker" commands. Takes notes to HRCloud2's Notes App.
-Revise spacing of several core commands.
----------
COMMIT 10/7/2018
v2.9.6 - Update WP package, fix install format.
-Fix the format of the installation package for Wordpress.
-Update included Wordpress package to v4.9.8.
-Revise and simplify the installation instructions.
-Fix CommonCore151 error being thrown if $AdminConfig doesn't exist.
----------
COMMIT 9/24/2018
v2.9.5 - Remove extra check during show Tips. Revise code comments.
-v2.9.5.
-Change the way Tips are displayed to reduce an unneccesary check.
-Revise code comments in commonCore.php.
-I've got a really good idea for adding striping/mirroring support (multiple storage locations). Working on a specsheet and some brainstorm ideas.
----------
COMMIT 9/24/2018
v2.9.4 - Continue refactor. Fix bugs in AV settings.
-v2.9.4.
-Continue refactor through settingsCore and compatibilityCore.
-Fix bugs where Settings page wouldn't update AV related settings.
-Move Shared and Favorited icons to the left of the filename in Drive, instead of the right.
-Add alt text to Favorite and Shared icons in Drive.
----------
COMMIT 9/13/2018
v2.9.3 - Add Favorites and Shared icons to Drive, version to Settings.
-v2.9.3.
-Add favorites and shared icons next to the filename of favorited and shared files on the Drive page.
-Added version info to the bottom of the Settings page.
----------
COMMIT 8/21/2018
v2.9.2 - Update PHP-AV App to v3.8.
-v2.9.2.
-PHP-AV App to v3.8.
-Fix bug with detection.
----------
COMMIT 8/21/2018
v2.9.1 - Add .phar archvies to dangerous files.
-v2.9.1.
-Add .phar archives to dangerous files.
----------
COMMIT 8/17/2018
v2.9 - PHP-AV to v3.7, fix bugs.
-v2.9.
-PHP-AV to v3.7, fix bugs.
----------
COMMIT 8/11/2018
v2.8.9 - Continue Re-factor, Add styles to API.
-Condense code within sanitizeCore.php and securityCore.php.
-Shorten the codebase another ~70 lines without compromising functionality.
-Added support for noStyles, minStyles, maxStyles, and allStyles POST and GET inputs to the API.
-Fix code comments in commonCore that didn't make much sense.
----------
COMMIT 8/1/2018
v2.8.8 - PHP-AV Defs to v4.6.
-v2.8.8.
-PHP-AV Defs to v4.6.
-Playing over a years worth of catch ups. Hopefully it works out.
-Still need to find a way to automate this.
-Added 61x versions of GandCrab SHA256's.
-Added 54x versions of Emotet, file contents, URL's, and SHA256's.
-Added 100+ misc malspam defs of various types.
-Fix "Error sending query packet" bug after file scanning.
----------
COMMIT 8/1/2018
v2.8.7 - Fix bug with allStyles variable.
-v2.8.7.
-Fix allStyles condition in commonCore.
----------
COMMIT 7/25/2018
v2.8.6 - Continue refactor.
-Continue consolidating code.
-Clean up dearchive code in cloudCore.php.
-Weed out legacy log entires from cloudCore.php.
-Fix refresh buttons on log pages (may have to wait for a new logfile to be generated).
----------
COMMIT 7/21/2018
v2.8.5 - Fix syntax errors in log files.
-v2.8.5.
-Fix logs1/.index.php error on line 12 (had an extra curly bracket).
-Delete index3.php.
-Move the "Scan Cloud" button on the Admin Settings page.
-Add a <br /> to the "Build Client" button on the Settings page.
----------
IDEAS 7/10/2018
-Add a Clipboard cache cleaner.
-Add an All cache cleaner (with double verification).
-Fix log index refresh buttons.
----------
COMMIT 7/10/2018
v2.8.3 - Continue refactor. Add stylesheet control
Sneak in 1 more fix!!!
-Fix search feature throwing an error on $item->isDir function, cloudCore.php line 1382 by converting to is_dir($item).
-v2.8.3.
-Fix bug with required directory handler.
-Continue minimizing cores.
-Fix index generator.
-Consolidate stylesheet generators into commonCore.php instead of spreading the both of them out into guiCore and commonCore.
-Add minStyles, maxStyles, and allStyles variables for Apps and plugins. Specify before loading commonCore.php for them to take effect.
-ServMonitor to v3.2, add noStyles variable.
-HRAI to v5.9, add noStyles variable.
-UberGallery to v3.4, add noStyles variable.
-ServStat to v1.2, add noStyles variable.
-PHP-AV App to v3.4, add minStyles variable.
-Notes App to v2.2, add maxStyles variable.
-Contacs App to v2.4, add maxStyles variable.
-Bookmarks App to v1.7, add maxStyles variable.
----------
COMMIT 7/9/2018
v2.8.2 - More refactoring, minimize code, logging.
-Improve logging.
-Improve efficiency.
-Fix bugs with recent required directory handlers not copying log data properly.
-Tweak WordPress installer.
-Rework directory handlers.
-Eval the possibility of checking filesize on InstLoc sync. Totally not worth the 2x filesize scans it would take per InstLoc file.
-Fixed when Apps are uninstalled; HRC2 always reports failure even on sucsess - not anymore.
-Remove sanitizeCore from loading on pages that don't need it.
-Evaluate and tweak which cores are loaded on which pages.
----------
IDEAS 7/9/2018
-HRScan can be either PHP-AV with target towards the uploaded file with dropzone.
-HRDesktop-Scan can be a scanner in python based on PHP-AV and clamAV
-HRDesktop-Convert can be a converter in pythin based on HRConvert2 with as many dependencies as possible rolled up.
-On first click of HRAI it should expand.
-PHP-AV should make .html and .txt logfiles so that it can add a javascript script to auto scroll to bottom. Don't copy both in real-time, create the html first and update it and at the end when scan is done copy to .txt without the javascript and delete the .html original.
----------
COMMIT 7/8/2018
v2.8.1 - Improve security, refactor cloudCore, commonCore.
(v2.8.1 - Improve security, refactor cores.)
-Added checks for dangerous files to all Cloud operations and to the GUI.
-Refactor logging and echo'ing in cloudCore.php.
-Remove (hopefully) any hope of duplicate backslashes in Cloud operations.
-Change "die()" functions to "continue" functions with improved logging so the cloudCore can continue an operation on remaining files after there has been an error with one file.
-Remove "load balancing" text from the "HRAI" setting in settingsCore.php.
-Removed unused .config.php file from a location where it is not copied from.
-Cleaned up the way Udirs are handled for downloads and Playlists.
-Fixed bug where files inside subdirectories couldn't be shared.
-Fixed shared index to clean up old symlinks that are broken due to users removing the original files.
-Removed a bad check in unShare in cloudCore.php that made removing symlinks impossible if they were broken.
-Updated commonCore.php to programatically create required directories with arrays and loops instead of using a bunch of WET static code.
-Added code to purge index.html and .index.php of shared and log .AppData directories when they get older than 1 day.
-Changed a bunch of strpos == TRUE to !== FALSE for reliability, with more to come.
----------
COMMIT 7/7/2018
v2.8 - Update lots of apps!
-Added a changelog to the repo to keep track of commits, notes, and other brainstorming stuff.
-PHP-AV App to v3.3.
-PHP-AV Scan targets now work properly.
-PHP-AV header text now disappears when a scan is started, making more room for a pleasant console experience.
-Improve cross platform support with relative paths throughout a lot of apps.
-ServMonitor App to v3.1.
-ServMonitor labels have been corrected, USB Devices -> Devices, PCI Devices -> Uptime.
-Notes App to v
-Contacts App to v2.3.
-Grabber App to v1.9.
-Calendar App to v0.6.
-Bookmarks App to v1.6.
-Calculator App to v1.6.
-Pell to v3.4.
-HRAI to v5.8.
-Remove HRAI's ability to authenticate users as it is not needed.
-Remove old experimental alpha code for natural language parsing.
-Remove the sesLog creation and verification code.
-Remove a lot of files that are no longer needed.
-Improve HRAI performance by a considerable amount.
-Reduce HRAI disk, memory, and CPU utilization, improve privacy & security.
-Updated the HRConvert2 module of HRAI to use an installed version of HRConvert2 on the local server.
-Added cleanup code to compatCore.php to deal with recent changes in HRAI.
-Enabled the "Check Perms" functionality in settingsCore.php and added the UI elements to finally use it.
-LAST MINUTE (not in some recent commit messages): Fix "PHPAV.php" appearing in Logs pages (added to $defaultApps in commonCore.php).
----------