Skip to content

v1.3.0

Compare
Choose a tag to compare
@stephenlawrence stephenlawrence released this 30 Dec 02:31
· 142 commits to master since this release

OpenDocMan v1.3.0 includes security fixes, bug fixes, and code cleanup. PHP extension pdo-mysql is now used for all database queries. All users are highly encouraged to upgrade. This update includes database modifications.

  • Fix potential XSS exploit
  • Fix potential SQL injection exploits
  • Fix issue #186 - Don't create file records until file upload is verified
  • Fix issue #128 - Move from mysql_query() to PDO for SQL queries
  • Removed the "secure url" admin setting since it was mis-leading and ineffective
  • General code cleanup and refactoring. Removed un-used code. Removed un-used files.

Downloads available here:
OpenDocMan Download Page