Development log

Security update: Typecho 1.2.1

This version is mainly a security update. It is recommended that all users upgrade.

XSS vulnerability

Mainly #1535 , #1539 , #1545 , #1560 The errors mentioned by these ISSUEs. Due to the lax filtering of parameters and submitted data, the site can be exploited by attackers. After this repair, you can safely open the comment data that has been contaminated by the attacker. Of course, we suggest you delete them.

SSL support for MySQL

In some running environments, you may need to connect to the MySQL database through SSL. At present, we have With this support

More minor updates

  1. More support for PHP 8.1
  2. Other bug fixes

Thank you for your selfless work. Please refer to: https://github.com/typecho/typecho/releases/tag/v1.2.1

This is no joke. We are back: Typecho 1.2.0

Yes, you are right. After a long wait, we finally released the official version of Typecho 1.2.0. The development of this version has taken so long that I can't make such a long list of detailed improvements at one time.

In addition to fixing many bugs, our important improvements are as follows:

  1. The new editor real-time preview automatically follows the effect, and the preview function within the theme
  2. Adaptation of background interface to mobile terminal
  3. New Installer
  4. Entering the era of PHP 7.2 and better support for PHP 8
  5. yes Containerization Better support for

In addition to new features, you can also find that our version number rules have changed. The new version number will be composed of three conventional numbers, such as 1.2.0 It is suitable for the development mode of small step and fast run. The specific explanation can be seen in This article

This small software records the best time of many of us in our lives. We use it to leave our mark on the colorful Internet. Happiness, pain, growth, confusion, time flows relentlessly, but we make it meaningful. Now let's look back at the name composition of Typecho: tap the keyboard and wait for the echo. When you write down the words, the ripples have already occurred.

As far as I am concerned, the first line of code typed by the keyboard more than ten years ago also has such a big echo unconsciously. As the spring returns to the earth, I can't help but hope for the future. Let's say it out loud, Typecho is back!

Typecho 1.1 (17.10.30) official release

Note: Since there is a time zone error in 17.10.29, we re released 17.10.30 after fixing it

As predicted, the official version of Typecho 1.1 will be released this weekend. We have fixed several minor errors on the basis of the beta version, mainly supporting time zone and daylight saving time. The major improvements of version 1.1 are as follows:

  1. Fix two high-risk vulnerabilities (XMLRPC and installation file), Please overwrite the install.php file in the original root directory when upgrading
  2. New backup function
  3. Several plug-in hooks and features have been added
  4. Fixed a lot of errors since the last version
  5. Added MySQL adapter
  6. Add daylight saving time support
  7. The anti garbage measures have been revised, and the built-in anti garbage methods have been able to block most robots
  8. The Markdown parsing engine has been replaced to ensure that the preview is strictly consistent with the actual effect

To ensure everyone's install.php Both can be updated. Before upgrading, we have added an automatic security check mechanism to help you check whether the relevant files have been updated. Please Continue to feedback your ideas and suggestions

Typecho 1.1 (17.10.24) beta release

Compared with the previous version, a lot of usability fixes have been made

  1. Fix two high-risk vulnerabilities (XMLRPC and installation file), Please overwrite the install.php file in the original root directory when upgrading
  2. New backup function
  3. Several plug-in hooks and features have been added
  4. Fixed a lot of errors since the last version
  5. Added MySQL adapter
  6. Add daylight saving time support
  7. The anti garbage measures have been revised, and the built-in anti garbage methods have been able to block most robots

This is the last beta before the official release. Since it contains the repair of some high-risk vulnerabilities, we will speed up the release of the official version. Maybe an RC version will be released, and if the version is stable enough, we will skip the RC version.

In addition, it is worth noting that the minimum requirements for the PHP environment in the new version of Typecho have been raised to 5.4. Today, PHP 7 has become increasingly popular, it is time to upgrade your old PHP version.

We will continue to collect bugs and improve this version, please Report at any time The problems you encounter in the use process, of course, this is a beta version, and it is not recommended that you use it in a formal environment.

A sharing about Typecho

After a long dormant period, the new version of Typecho is developing faster and faster. Since my graduation in 2007, this program has accompanied me for the best 10 years of my life, and there are many things worth sharing. So I held a special sharing session on SegmentFault to communicate with you in the form of live broadcast. Since live broadcast also requires traffic costs, it must be set to charge. I specially prepared some limited discount tickets

https://segmentfault.com/l/1500000010496163?c=9b751d9f047fc6c23c94863745109e50

The main content of this sharing is

  1. Some interesting things in development
  2. Evolution of technology
  3. Introduction and experience of secondary development
  4. Future development plan