diff --git a/CHANGELOG b/CHANGELOG index eaa73a2..2643542 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,9 @@ **Changelog** +2.0.5 2017-03-15 +- Update to movim 0.11alpha1 git2017-03-15 +- Fix /?infos public access issue. + 2.0.4 2017-02-09 - Update to movim 0.10 git2017-02-09 diff --git a/README.md b/README.md index 6a13e21..f41f9a1 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ Movim is a decentralized social network, written in PHP and HTML5 and based on t It is recommended to use a "valid" certificate to use Movim, auto-signed is sometimes problematic. You might want to take a look a StartSSL or Let's Encrypt. -Provided Movim version : 0.10 git2017-02-09 +Provided Movim version : 0.11alpha1 git2017-03-15 Please read CHANGELOG. diff --git a/TODO b/TODO new file mode 100644 index 0000000..05e8381 --- /dev/null +++ b/TODO @@ -0,0 +1,3 @@ +-vhost nginx +https://src386.org/movim/?infos +correction bug patch diff --git a/conf/nginx.conf b/conf/nginx.conf index 5a82d0b..cb66e3f 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -9,6 +9,11 @@ location PATHTOCHANGE { try_files $uri $uri/ /index.php; location ~ [^/]\.php(/|$) { + + if ($request_uri ~ "\/movim\/\?infos") { + return 403; + } + fastcgi_split_path_info ^(.+?\.php)(/.*)$; fastcgi_pass unix:/var/run/php5-fpm-movim.sock; fastcgi_index index.php; @@ -48,6 +53,8 @@ location ^~ /movim/config/ { return 403; } +location ^~ /movim/?infos + # Include SSOWAT user panel. #include conf.d/yunohost_panel.conf.inc; diff --git a/scripts/_common.sh b/scripts/_common.sh index 1c0f7e9..4cffc82 100644 --- a/scripts/_common.sh +++ b/scripts/_common.sh @@ -6,7 +6,7 @@ GIT_REPO="https://github.com/movim/movim" # Commit to checkout -HEAD_COMMIT="00ef035b92ae78cce34521deee7a12634444878d" +HEAD_COMMIT="be53a7412454c8269e08f8c333d72c2c5b623c9e" # Source code destination directory DESTDIR="/var/www/movim"