0byt3m1n1
Path:
/
data
/
applications
/
aps
/
tikiwiki
/
14.1-0
/
standard
/
htdocs
/
lib
/
phpsec
/
[
Home
]
File: CHANGELOG.md
phpSec changelog ================ beta-0.4 -------- * [#83] Added class phpsecOtpcard and moved PS OTP functionality from phpsecOtp to it. * [#84, #85] Improvements to phpsecOtp. beta-0.3: January 4. 2012 - xqus -------------------------------- * [#66] phpSec can now run without storage configured. * [#58] phpsecCrypt now pads data by default. * [#81] phpsecPw now supports PBKDF2, and uses it as default. * Added new password hashing class: phpsecHash. phpsecPw should not be used anymore. * Fixed phpsecFilter::f(). beta-0.2: December 21. 2011 - xqus ---------------------------------- * [#43] Implemented PKCS7 padding in phpsecCrypt. * [#62] Added phpsec::arrayCheck(). * [#63] Improved checking of json data passed to phpSec. * Fixed call to error method in phpsecPw::check() * [#51] phpsecPw now uses a binary salts. * phpsecPw::age() removed. * [#50] Session handler now uses a binary key to encrypt session data. * [#42] Added mySQL support. * Yubikey integration not considered experimental anymore. * [#48, #49] Improvements of the Yubikey integration. * [#75] Fixed: phpsecYubikey::getYubikeyId() could retrive wrong ID. * [#76] Fixed: phpsecYubikey::validOtp() to strict. * [#74] Fixed: phpsecYubikey::getResponse(): Number of attempts and timeout should be possible to configure. beta-0.1: November 7. 2011 - xqus --------------------------------- * [#33, #34]phpsec::f() is now phpsec::t(), and phpsec::f() is a simple XSS filter method. * Removed the examples.php from source. See the online manual for examples: http://phpsec.xqus.com/manual * Don't use session_regenerate_id() anymore, since it causes many bugs. * Generate a stronger PHP session ID. * [#30] Improve session hijacking protection. * Improved the password hashing methods. * Changed default encryption algorithm to RIJNDAEL-256. * Added implemention of PBKDF2 as described in RFC 2898. * Create a PBKDF2 MAC to ensure message integrity in phpsecCrypt. This breaks compability with older versions of phpSec. * [#37] phpsecCrypt don't modify the encryption key anymore. * Regenerate session ID in custom session handler. * Stronger keys for encryption of session. * Better error handling in phpSecCrypt. * [#38] Storage class for general data storage for all sub-classes. * [#41] Separate password, token and filter methods from core. * Many minor fixes.. alpha-0.0.5: August 14. 2011 - xqus ----------------------------------- * Added phpsecRand::arrayRand(): Method to select random keys from an array. * Fixed bug in key generation method in phpsecCrypt(). This means that data encrypted with phpSec alpha-0.0.4 and older will not decrypt in this version. alpha-0.0.4: July 11. 2011 - xqus --------------------------------- * [#25] Empty CSRF token creates hickups. * Added initial GPG/PGP support. Still experimental. * Added phpsecLog class to add better logging support. This means that phpsec::init() has to be called before setting the log dir: phpsecLog::$_logdir = 'filesystem:/var/www/phpSec/logs'; Also phpsec::log() is now phpsecLog::log(). * Added syslog support to phpsecLog. * phpsec::f() now accepts strings a array of data to filter. * Improved error handling. * phpsecCrypt::encrypt() performance improvements. * Greatly improved key generation security in phpsecCrypt(). This means that data encrypted with phpSec alpha-0.0.3 and older will not decrypt in this version. alpha-0.0.3: March 9. 2011 - xqus --------------------------------- * [#21] Use of phpSec session handler is now optional. * [#17] phpsec::pwHash() now returns a JSON encoded array. * Added Yubikey integration. See https://github.com/xqus/phpSec/wiki/Yubikey * Added &type variables to phpsec::f(). * Many minor fixes.. alpha-0.0.2: February 5. 2011 - xqus ------------------------------------ * The library is no longer automatically initialized. You now need to call phpsec::init(). * Added encryption functions. * Added random functions. * Separated the library into smaller files. * Added session encryption. * Many minor changes.. Prealpha 0.0.1: January 16. 2011 - xqus --------------------------------------- January 8. 2011 - xqus ---------------------- * First code written.