Alpha v2.5.0

NOT RECOMMENDED FOR PRODUCTION USE.

• Clickjacking prevention
• CSS improvements
• More configuration options
• Upgradability (upgrade script, better config management, software stores version information)
• Redirects for actions on most pages for smoother user experience
• Support for installing somewhere other than the web root (e.g. example.com/blog instead of just example.com)
• Installer improvements, better error catching
• Logins are rate limited (5 logins/attempts per hour)
• Registrations are rate limited (10 minute delay)
• Max number of accounts per IP limit (3 per IP)
• Post creation is rate limited (a 5 minute delay)
• Post editing is rate limited (a 5 second delay)
• All of those delays are configurable
• Users can now actually set their names
• Many minor visual fixes and enhancements

This version of the software is still an alpha version. However, it is relatively usable and has enough rate limiting in place to be resilient against most spammers. There are an almost total lack of administration features, however, and multi-user blogs would definitely push the software's current limits. There is no CAPTCHA to help stop or slow automated spam. Technically, the software can be used in production for one person's small blog. This is not recommended, as there are likely bugs and there may be serious security flaws present at this stage in development. A great many features are planned and not yet implemented. Use at your own risk.