Release v1.3.2

• Added
  • First-install wizard.
  • Password recovery by email.
  • Database backup and restore.
  • Article SEO metadata and a sitemap.
  • Article table of contents.
  • Pinned marker, test-email button and category style switch.
• Fixed
  • A wrong password can no longer establish a session.
  • Unreadable archive text in the dark reading theme.
  • Database restore no longer hangs or damages tables.
  • Database errors and error pages degrade gracefully.
• Improved
  • The mail password is stored encrypted and never echoed back.
  • Backup filenames are checked against path traversal.
  • Password recovery always answers the same, preventing account enumeration.
  • Login redirects are restricted to on-site paths.
  • Absolute URLs no longer trust the request Host.
  • Comments, replies and likes are rate-limited by IP.
  • Category menus render from a single template.
  • Account email and mail settings merged into one page.
  • Admin page layout unified.
  • Backups use a consistent snapshot.
  • The config template documents every setting.