update to movim upstream, block ?infos

CHANGELOG

@@ -1,5 +1,9 @@
 **Changelog**
 
+2.0.5 2017-03-15
+- Update to movim 0.11alpha1 git2017-03-15
+- Fix /?infos public access issue.
+
 2.0.4 2017-02-09
 - Update to movim 0.10 git2017-02-09
 

README.md

@@ -5,7 +5,7 @@ Movim is a decentralized social network, written in PHP and HTML5 and based on t
 
 It is recommended to use a "valid" certificate to use Movim, auto-signed is sometimes problematic. You might want to take a look a StartSSL or Let's Encrypt.
 
-Provided Movim version : 0.10 git2017-02-09
+Provided Movim version : 0.11alpha1 git2017-03-15
 
 Please read CHANGELOG.
 

TODO

@@ -0,0 +1,3 @@
+-vhost nginx
+https://src386.org/movim/?infos
+correction bug patch

conf/nginx.conf

@@ -9,6 +9,11 @@ location PATHTOCHANGE {
 	try_files $uri $uri/ /index.php;
 
 	location ~ [^/]\.php(/|$) {
+
+                if ($request_uri ~ "\/movim\/\?infos") {
+                        return 403;
+                }
+
 		fastcgi_split_path_info ^(.+?\.php)(/.*)$;
 		fastcgi_pass unix:/var/run/php5-fpm-movim.sock;
 		fastcgi_index index.php;
@@ -48,6 +53,8 @@ location ^~ /movim/config/ {
         return 403;
         }
 
+location ^~ /movim/?infos
+
 # Include SSOWAT user panel.
 #include conf.d/yunohost_panel.conf.inc;
 

scripts/_common.sh

@@ -6,7 +6,7 @@
 GIT_REPO="https://github.com/movim/movim"
 
 # Commit to checkout
-HEAD_COMMIT="00ef035b92ae78cce34521deee7a12634444878d"
+HEAD_COMMIT="be53a7412454c8269e08f8c333d72c2c5b623c9e"
 
 # Source code destination directory
 DESTDIR="/var/www/movim"