[Summary view] [Print] [Text view]

   1  YOURLS Changelog
   2  ================
   3  
   4  _This file lists the main changes through all versions of YOURLS.  
   5  For a much more detailed list, simply refer to [commit messages](https://github.com/YOURLS/YOURLS/commits/master)._
   6  
   7  1.9.2
   8  ---
   9  - added: Support PHP 8.2 (#3474)
  10  - improved: Googlebot indexing now filterable for plugins, for your SEO needs (#3517)
  11  - improved: Use safe sandbox for all included files (#3478)
  12  - fixed: bookmarklets with URL containing special chars (#3527)
  13  - fixed: unwanted cookies could interfere with YOURLS (#3516)
  14  - fixed: cosmetic bugs in the admin interface (#3485, #3431, #3518)
  15  - fixed: support usernames containing brackets (#3365)
  16  - updated: third party libs and binaries
  17  
  18  1.9.1
  19  ---
  20  - fixed: error `Undefined constant "intval"` when upgrading (#3332)
  21  - fixed: warnings on PHP 8.1 (#3317)
  22  - fixed: incorrect HTTP status header with the API when shortening a duplicate (#3355)
  23  - fixed: no hyphen in random keywords (#3353)
  24  - added: required/suggested PHP extensions in composer.json (#3339)
  25  - updated: third party libs and binaries
  26  
  27  1.9
  28  ---
  29  - removed : support for PHP prior to 7.4
  30  - improved: the API plugin with more plugin functions (#3281), a sandbox and a plugin uninstall procedure (#3282)
  31  - improved: inline documentation, [online documentation](https://docs.yourls.org/) and unit tests
  32  - improved: concurrency during mass shortening (#3233)
  33  - improved: minor security fixes - sanitize step name during upgrade (#3055),
  34      nonce on the logout link (#3264), salt cookie with newer hash (#3278)
  35  - improved: Remove ozh/phpass library and use native PHP password_* functions (#3232)
  36  - added: more hooks in the admin view & search (#3265)
  37  - fixed: incorrect notice when "prefix and shorten" while not logged in (#3189)
  38  - fixed: UI sometimes not responsive after editing a URL (#3244)
  39  
  40  1.8.2
  41  ---
  42  - fixed: display SVG logo for IE 11 (#2864)
  43  - fixed (again) : DB upgrade procedure (#2933)
  44  - fixed: cosmetic issue with Docker falsely warning about unencrypted password (#3040)
  45  - improved: minor security improvements - iframes clickjacking and login nonce (#3034), potential XSS (#3041)
  46  - improved: SSL support for proxies (#3044)
  47  - improved: inline documentation and unit tests
  48  - added: more filters in admin pages (#2912), HTTP requests (#2951), to deal with user defined consts (#3048)
  49  - added: documentation for API action "version" (#2957)
  50  
  51  1.8.1
  52  ---
  53  - fixed: upgrade procedure with MySQL 8 & table names containing dashes (#2844, #2846) 
  54  - fixed: function to make public some pages on private installs (#2859)
  55  - added: `all` hook to debug YOURLS and plugins (#2860)
  56  - improved: plugin inline documentation
  57  
  58  1.8
  59  ---
  60  - fixed: support for PHP 8
  61  - removed : support for PHP prior to 7.2
  62  - improved: IDN domain, and UTF8 URLs and titles (aka Number One Issue Since Day One)
  63  - improved: timezone management
  64  - improved: YOURLS UI and logo, now in SVG
  65  - improved: several little things
  66  - fixed: several little bugs
  67  
  68  1.7.9
  69  ---
  70  - improved: compatibility of YOURLS with proxies and reversed proxies
  71  - improved: accept timestamped signature in API requests with [arbitrary hash](https://docs.yourls.org/guide/advanced/passwordless-api.html#use-other-hash-algorithms-than-md5)
  72  - improved: YOURLS pages are now located in `user/` and [documented](https://docs.yourls.org/guide/extend/pages.html)
  73  - improved: accessibility, with labels and aria tags in the main admin screen
  74  - fixed: various little things here and also there
  75  
  76  1.7.6
  77  ---
  78  - improved: due to popular demand, "Random Keywords" is now a core plugin bundled with YOURLS
  79  - fixed: JSONP parameters now match the documentation, duh
  80  - fixed: various little things here and also there
  81  
  82  1.7.5
  83  ---
  84  - fixed: long referrers or client name won't trigger errors
  85  - fixed: some little bugs
  86  
  87  1.7.4
  88  ---
  89  - fixed: type juggling vulnerability in the API
  90  - improved: several little things and several little updates
  91  - dropped: PHP <= 5.5 support
  92  
  93  1.7.3
  94  ---
  95  - improved: some little things
  96  - added: some hooks here and there to allow more pluginness
  97  - fixed: some little bugs
  98  - updated: jquery and some javascript stuff
  99  
 100  1.7.2
 101  ---
 102  - improved: stat graphs, regarding accuracy and time zones
 103  - improved: navigation in the admin interface
 104  - improved: several little things
 105  - fixed: several little bugs
 106  - updated: all third party libs
 107  - dropped: PHP 5.2 support
 108  
 109  1.7.1
 110  ---
 111  - added: compatibility with PHP 7
 112  - added: allow hooks with closures (see [Advanced Hook Syntax](https://docs.yourls.org/development/hooks.html))
 113  - improved: you can now search across all fields at once in the admin interface
 114  - improved: bookmarklets are now human readable in the PHP source, and minified on the fly
 115  - improved, still not perfect: support for URLs and page titles with encoded chars
 116  - fixed: timezone warnings
 117  - fixed: cookie mismatch preventing login when multiple YOURLS installs on subdomains of the same domain
 118  - fixed: lotsa bugs
 119  - improved: lotsa things
 120  
 121  1.7
 122  ---
 123  - added: support for PDO and MySQLi
 124  - added: social bookmarklets - share on Twitter, Facebook or Tumblr in a click
 125  - added: check api.yourls.org if a new version of YOURLS is available
 126  - added: proxy support - install YOURLS behind a firewall!
 127  - improved: security regarding SQL injections
 128  - improved: security regarding your credentials - now auto-encrypted
 129  - improved: external HTTP request handling
 130  - improved: ƒυηкƴ UTF-8 titles handling
 131  - fixed: compatibility with Apache mod_security blocking bookmarklets
 132  - fixed: lots of bugs
 133  
 134  1.6
 135  ---
 136  - added: مرحبا العالم! Hej verden! 你好世界! Kumusta mundo! Ciao mondo! Hello world! Translation API.
 137  - added: custom API actions
 138  - added: support for URLs with common protocols
 139  - fixed: search and pagination in the admin interface
 140  - updated: third party libs jQuery, ezSQL, GeoIP
 141  - improved: sanitizing and escaping functions
 142  
 143  1.5.1
 144  -----
 145  - added: full jsonp support
 146  - added: ability to use encrypted passwords in the config file
 147  - fixed: support for http://www.sho.rt/bleh and http://sho.rt/bleh
 148  - added: support for any favicon dropped in the /user directory
 149  - updated: Google Visualization API instead of deprecated Google Charts
 150  - fixed: bugs, bugs, bugs
 151  - added: hooks, hooks, hooks
 152  - improved: things, things, things
 153  
 154  1.5
 155  ---
 156  - added: plugin architecture! OMG plugins!!1!!1!
 157  - added: directory /user, config.php can be moved there
 158  - added: new "instant bookmarklets"
 159  - added: 1 click copy-to-clipboard a la bitly
 160  - change in logic: now all request are handled by PHP and don't rely on .htaccess
 161  - added: saving URL titles
 162  - added: support for prefix-n-shorten: sho.rt/http://example.com/
 163  - added: core plugin to allow hyphens in URLs
 164  - added: core sample plugin to wrap redirected URLs in a social toolbar
 165  - added: core sample plugin to show how to create administration page in plugins
 166  - added: core plugin to display a random pretty background
 167  - changed: layout now using a more consistent palette, see http://yourls.org/palette
 168  - added: anti XSS and anti CSRF measures
 169  - added: interactive map if possible in stat traffic by countries
 170  - fixed: lots of bugs
 171  
 172  1.4.3
 173  -----
 174  - fixed bug no-stats-showing-ffs due to inconsistency in DB schema
 175  - improve error reporting with API method url-stat
 176  
 177  1.4.2
 178  -----
 179  - fixed: bug in auth function
 180  - added: sample public API file
 181  - added: check in API requests for WordPress plugin when adding a new short URL
 182  - prettier sample public interface
 183  
 184  1.4.1
 185  -----
 186  - fixed: base 62 URLs (keywords with MiXeD CaSe)
 187  - new & secure auth method for API calls, with no need to use login & password combo
 188  - allow SSL enforcement for admin pages
 189  - new API method: stats for individual URL.
 190  - prevent internal redirection loops
 191  - filter and search URLs & short URLs by date
 192  
 193  1.4
 194  ---
 195  - added: an upgrader from 1.3 to 1.4
 196  - change in logic: now using a global object $ydb for everything related to DB and other globally needed stuff
 197  - change in logic: include "load-yourls.php" instead of "config.php" to start engine
 198  - change in DB schema: now storing URLs with their keyword as used in shorturl, allowing for any keyword length
 199  - change in DB schema: new table for storing various options including next_id, dropping table of the same name
 200  - change in DB schema: new table for storing hits (for stats)
 201  - improved the installer, with .htaccess file creation
 202  - layout tweak: now prettier, isn't it?
 203  - stats! OMG stats!
 204  
 205  1.3-RC1
 206  -------
 207  - added bookmarklet and tools page
 208  - improved XSS filter when adding new URL
 209  - code cleanup in admin/index.php to separate code and display
 210  - added favicon
 211  - stricter coding to prevent notices with undefined indexes
 212  - hide PHP notices & SQL errors & warnings, unless YOURLS_DEBUG constant set to true
 213  
 214  1.2
 215  ---
 216  - don't remember. A few tiny stuff for sure.
 217  
 218  1.1
 219  ---
 220  - don't remember. Some little bugs I guess.
 221  
 222  1.0.1
 223  -----
 224  - don't remember. Trivial stuff probably.
 225  
 226  1.0
 227  ---
 228  - initial release