[xlang:en]
= CHANGES = 

CHANGES are moved into README after 2.57

2.57 (2006/07/17)
- fixed treating blob on backing up in prefix_manager (thx fbs777)
- fixed some notices
- updated gticket into version2
- disabled onInstall (2.57a)

2.56 (2006/03/30)
- modified error handling when config can't be received
- modified DOS/CRAWLER skipping for nocommon=1 module (thx sleo577)
- updated german (thx rene) 2.56a

2.55 (2006/02/11)
- fixed anti-multiple-content-type allows .tar.gz (thx gusagi)
- updated mymenu for compatibility with XC2.1
- updated Spanish language files (thx bezoops)

2.54 (2005/12/08)
- added backup feature into prefix_manager (experimental)
- added a check multiple dot file uploading (=multiple content-type for apache)
- updated portuguesebr language files (thx Izzy)
- modified anti camouflaged image file uploading system with some open_basedir restrictions (thx stefan88) - 2.54a
- modified some initial settings and documents - 2.54a

2.53 (2005/11/30)
 - added anti camouflaged image file upload (==IE Content-Type XSS)
 - modified the action when DB is busy
 - fixed some bugs cause Notices
 - modified imcompatibities with XOOPS 2.2.3
 - moved document files under docs/ (for hiding protector's version)
 - updated mymenu into 0.15a
 - modified the action against PHP_SELF/PATH_INFO XSS
 - modified the module icon (thx Argon)
 - updated and renamed Polish language files from polski (thx Tomasz)
 - updated French language files (thx marco)
 - updated Italian language files (thx Defkon1)
 - fixed packaging errors in zip files (thx Dave_L) 2.53a

2.52 (2005/8/27)
 - changed the feature of disabling xmlrpc.php in any path (wordpress etc.)
 - modified the logging rule about xmlrpc.php
 - added Russian language files (thx Sergey)

2.51 (2005/8/24)
 - added an option of IP mask bits against session hi-jacking
 - added an advisory about session.use_trans_sid
 - modified codes against PHP_SELF XSS
 - updated French language files (thx HEMON)

2.50 release (2005/8/22)
 - added a protection against PHP_SELF XSS
 - updated Brazilian Portuguese & Spanish language files (thx Yuji)

2.50 beta2 (2005/7/31)
 - changed "2.0.9.2 holes" into "disable features"
 - added "num" select box
 - updated Traditional Chinese language files (thx Kikuchi)
 - updated Brazilian Portuguese & Spanish language files (thx Yuji)

2.50 beta1 (2005/7/22)
 - added an option "DOS/CRAWLER skip modules"
 - modified adding some indexes of tables which protector accesses
 - added an option "reliable IPs"
 - added a feature of anti-BruteForceAttacks

2.40 release (2005/7/21)
 - added a protection from 'criteria attack' for xoops <= 2.0.10*
 - modified Italian language files (thx Defkon1)
 - added Finnish language files (thx kokko)
 - added Polish language files (thx Tomasz)

2.40RC2 (2005/4/4)
 - modified the updating routine to delete old protector block (thx Dava_L)
 - updated Brazilian Portuguese & Spanish language files (thx Yuji)

2.40RC (2005/3/31)
 - modified URI of attacking simulation in advisory (thx satanas)
 - modified checking *check.inc.php included in advisory (thx peter & Dave_L)
 - modified password for disabling bad_ips to be encrypted
 - eliminate protector block
 - modified only GET vars will be checked with "doubtful file spec"

2.38 (2005/3/18)
 - modified system of rollbacking .htaccess in DoS or CRAWLER
 - updated Italian language files (thx Defkon1)

2.37 (2005/3/9)
 - fixed missing dbname quoting in prefix manager (thx king76)
 - modified log level of Null-byte to 64

2.36 (2005/3/9)
 - modified the pattern of bad_ext

2.35 (2005/3/5)
 - updated myblocksadmin 0.27 & mymenu 0.12
 - added a logging level
 - added an option for disabling whole of Protector for debugging (thx Dave_L)
 - updated Traditional Chinese language files (thx Kikuchi)
 - updated French language files (thx HEMON) 2.35a
 - updated Brazilian Portuguese & Spanish language files (thx Yuji) 2.35a

2.34 (2005/2/18)
 - fixed a typo in protecting session hijacking (thx blues)
 - modified messages on forced exiting against specifical features (thx suin)
 - added an option of 'Deny by .htaccess' against DoS experimentaly

2.33 (2005/2/11)
 - modified the action when '../../' found (thx mayor)
 - modified IP check disabled with XoopsGTicket

2.32 (2005/2/1)
 - modified enabling "MySQL/Blocks debug" with strict checking (thx jseymour)

2.31 (2005/1/30)
 - fixed recognization of root controllers (thx nobunobu)
 - modified compatibility with IIS (thx okuhiki)
 - updated French language files (thx HMN)  (2.31a)
 - added German language files (thx Rene)  (2.31b)

2.30 release (2005/1/30)
 - modified some default values of configs.
 - updated Italian language files (thx Defkon1)
 - updated Brazilian Portuguese & Spanish language files (thx Yuji)
 - added Dutch language files (thx Dirk Louwers)

2.30RC5 (2005/1/22)
 - fixed some non-harmful typos
 - updated Italian language files (thx Defkon1)

2.30RC4 (2005/1/21)
 - fixed postcheck.inc.php with $xoopsConfig['nocommon'] (thx dendeke)

2.30RC3 (2005/1/21)
 - modified anti null-byte from die to sanitize
 - modified prefix manager a little
 - added French language files (thx HMN)
 - added Italian language files (thx Defkon1)

2.30RC2 (2005/1/20)
 - fixed prefix manager

2.30RC (2005/1/19)
 - added prefix manager
 - added 2.0.9.2 specific patches (Special thx to zx team!)
 - added checker against null-byte attack
 - modified doubtful file specifications (thx minahito)
 - added anti session hi-jacking
 - added include/postcheck.inc.php (Notice: mainfile.php should be rewritten)
 - modified options about contami & SQL Injections

2.22 (2005/1/4) (not so important fixes)
 - fixed a typo in check_dos_attack_* (thx Mithrandir)
 - modified with REQUEST_URI for IIS
 - updated myblocksadmin 0.22 & mymenu 0.07

2.21 (2004/12/31)
 - fixed a missing pattern with contami checking (thx onokazu)

2.20 (2004/12/27)
 - fixed a missing pattern with contami checking (thx JM2)
 - fixed typo missing global for HTTP_*_VARS
 - added logging doubtful file spec
 - updated Brazilian Portuguese & Spanish language files (thx Marcelo Yuji Himoro)
 - updated traditional Chinese language files (thx Kikuchi)

2.20RC3 (2004/12/18)
 - added "Patch doubtful file specifications" (thx JM2)
 - added Spanish language files (thx Marcelo Yuji Himoro)

2.20RC2 (2004/12/16)
 - updated myblocksadmin (0.12) & mymenu (0.06)
 - modified Brazilian Portuguese language files (thx Marcelo Yuji Himoro)

2.20RC (2004/12/15)
 - modified to use $_GET or $_POST instead of $HTTP_*_VARS (for PHP5)
 - added a feature to rescue
 - added to store user_agent
 - modified Anti-DoS routine radically
 - added each settings of "F5 attacks" and "high load crawlers"
 - fixed not to "Force intval" against array
 - modified a pattern finding UNION

2.11 (2004/9/30)
 - fixed some typos

2.10a (2004/9/27)
 - modified Brazilian Portuguese language files (thx Marcelo Yuji Himoro)

2.10 (2004/9/22)
 - added checker to uploaded files
 - added security advisory
 - modified as selectable whether sanitizing or not against SQL Injections
 - fixed short tags (thx t_miyabi)
 - added traditional Chinese language files (thx Kikuchi)

2.01 (2004/9/11)
 - added some checks of contamination to some super globals
 - modified Brazilian Portuguese language files (thx Marcelo Yuji Himoro)

2.0  (2004/9/10)
 - The 1st release as Xoops Protector.



[/xlang:en][xlang:ja]

ѹ

3.0ʹߤˤĤƤREADME˰ư

2.57 (2006/07/17)
- ץեåޥ͡ΥХååפBLOBνäΤ (thx fbs777)
- ĤФƤNotice
- gticket2 ˹
- onInstall᤿ (2.57a)

2.56 (2006/03/30)
- եʤȤΥ顼λѹ
- common.phpɤ߹ޤʤ⥸塼ˤĤƤ⡢DOS/CRAWLERˤʤͭˤ

2.55 (2006/02/11)
- ʣ.¸ߤեǤ⡢.tar.gz̤褦˽ (thx gusagi)
- mymenuˤXoopsCube 2.1Ȥθߴ
- ڥե빹 (thx bezoops)

2.54 (2005/12/08)
- PREFIXޥ͡PREFIXΥХåå׵ǽĤ (ޤ¸ʳǤ!)
- ʣ.¸ߤե򥢥åץɽʤ褦ѹ (Apacheλк)
- ֥饸ݥȥեι (thx Izzy)
- եåopen_basedir¤ˤҤääƤΤ (thx stefan88) - 2.54a
- Ƽνͤ򤤤ĤȡɥȤν - 2.54a

2.53 (2005/11/30)
 - ե륢åץɤˤIEXSSкɤɲ
 - ǡ١busyPath DisclosureȤʤäƤ
 - NoticeȯƤĤΥߥ
 - ̤ XOOPS 2.2.3 ǥ顼򵯤Ƥߴβ
 - ɥȤdocsǥ쥯ȥ˰ư (ɥȤΥСϳɻߡ
 - updated mymenu into 0.15a
 - PHP_SELF/PATH_INFO XSSк⤦ˤʶλurlencodeˡ
 - ⥸塼륢ѹ (thx Argon)
 - ݡɸեι (thx Tomasz)
 - ե󥹸եι (thx marco)
 - ꥢեι (thx Defkon1)
 - zipեΥѥåߥ (thx Dave_L) 2.53a

2.52 (2005/8/27)
 - WordPress⥸塼ˤĤƤ⡢xmlrpc.phpǽ̵褦˻ѹ
 - xmlrpc ˤĤƤΥʣϤʤ褦˻ѹ
 - եɲ (thx Sergey)

2.51 (2005/8/24)
 - åϥåкǡIPޥǤ褦ˤ
 - session.use_trans_sid ˤĤƤսɲ
 - PHP_SELF XSS кɤβ
 - ե󥹸ե빹 (thx HEMON)

2.50  (2005/8/22)
 - PHP_SELF XSS кɲ
 - ֥饸ݥȥ졦ڥե򹹿 (thx Yuji)

2.50 beta2 (2005/7/31)
 - "2.0.9.2η"ȤY/Nܤ򼰤"ǽ̵"ѹ
 - ǥڡɽѹǤ褦ˤ
 - ե򹹿 (thx Kikuchi)
 - ֥饸ݥȥ졦ڥե򹹿 (thx Yuji)

2.50 beta1 (2005/7/22)
 - DoS/Crawlerå򥹥åפ⥸塼פȤץɲ
 - indexĤ˺Ƥեɤˤ餿indexͿ
 - ֿѤIPɥ쥹ץץɲ
 - ѥؤйɲ

2.40  (2005/7/21)
 - criteria attack ؤкɲ (xoops <= 2.0.10*)
 - ꥢե빹 (thx Defkon1)
 - եɸեɲ (thx kokko)
 - ݡɸեɲ (thx Tomasz)

2.40RC2 (2005/4/4)
 - ⥸塼륢åץǡȻ˥֥å褦ˤ (thx Dava_L)
 - ֥饸ݥȥ졦ڥե򹹿 (thx Yuji)

2.40RC (2005/3/31)
 - ֥åǤΥå
 - ưåURIν (thx satanas)
 - *check.inc.phpƤ뤫ɤΥåˡ (thx peter & Dave_L)
 - IPݲѥɤμưϥå岽
 - ֵ路եζػߡפGETоݤˤ褦ˤ

2.38 (2005/3/18)
 - DoSкʤɤǡ.htaccess DENYȤ硢ե뤬줿ΥХåɲ
 - ꥢեι (thx Defkon1)

2.37 (2005/3/9)
 - prefix manager DB̾Υƥ˺ (thx king76)
 - Null-byte ⡢quite Ǿä褦

2.36 (2005/3/9)
 - ػ߳ĥҤȴäΤ

2.35 (2005/3/5)
 - updated myblocksadmin 0.27 & mymenu 0.12
 - ٥ƳʾܤMEMOȡ
 - ŪΤưOffˤ륪ץĤ (thx Dave_L)
 - ե򹹿 (thx Kikuchi)
 - ե󥹸ե򹹿 (thx HEMON) 2.35a
 - ֥饸ݥȥ졦ڥե򹹿 (thx Yuji) 2.35a

2.34 (2005/2/18)
 - åϥåкǥȤνְäƤΤ (thx blues)
 - ѥɸǶλΥå (thx suin)
 - DoSɸǡ.htaccess  DENY FROM 񤭹Ȥץ¸Ūɲ

2.33 (2005/2/11)
 - ֵ路եפ̵¤ .륳ɤ (thx mayor)
 - åȥƥफIPåӽ

2.32 (2005/2/1)
 - ̵ƤMySQL/֥åǥХååƤ̤褦ˤ (thx jseymour)

2.31 (2005/1/30)
 - ⥸塼ե롼ȥȥȸǧβ (thx nobunobu)
 - IISߴβ (thx okuhiki)
 - ե󥹸ե빹 (thx HMN)  (2.31a)
 - ɥĸեɲ (thx Rene)  (2.31b)

2.30 ꡼ (2005/1/30)
 - ĤΥǥեͤѹ
 - ꥢե빹 (thx Defkon1)
 - ֥饸ݥȥ졦ڥե򹹿 (thx Marcelo Yuji Himoro)
 - եɲ (thx Dirk Louwers)

2.30RC5 (2005/1/22)
 - ٤typoν (ۤɽפǤϤʤΤǤƤƾ񤭤ɬפϤޤ)
 - ꥢե빹 (thx Defkon1)

2.30RC4 (2005/1/21)
 - postcheck.inc.php ˤơnocommon֤Υ顼Fix (thx dendeke)

2.30RC3 (2005/1/21)
 - ̥Хʸؤк򡢶λ饵˥ѹ
 - PREFIX ޥ͡Ĵ
 - ե󥹸եɲ (thx HMN)
 - ꥢեɲ (thx Defkon1)

2.30RC2 (2005/1/20)
 - PREFIX ޥ͡ν

2.30RC (2005/1/19)
 - PREFIX ޥ͡κ
 - 2.0.9.2ͭؤб (Special thx to zx team!)
 - ̥Хʸؤк
 - ǥ쥯ȥ̤åŤäΤ (thx minahito)
 - åϥåкɲ
 - postcheck.inc.php ɲ (ѥåѤäƤޤ
 - ѿSQL Injectionˡѹ

2.22 (2005/1/4) (ʤ˽פʤǤ)
 - check_dos_attack_* ˤtypo (thx Mithrandir)
 - IISREQUEST_URIǤʤȤؤб
 - updated myblocksadmin 0.22 & mymenu 0.07

2.21 (2004/12/31)
 - ѿΥåϳ콤 (thx onokazu)

2.20 (2004/12/27)
 - ѿΥåϳ콤(thx JM2)
 - HTTP_*_VARS global˺콤
 - ե̤Ͽ褦ˤ
 - ֥饸ݥȥ졦ڥե򹹿 (thx Marcelo Yuji Himoro)
 - ե򹹿 (thx Kikuchi)

2.20RC3 (2004/12/18)
 - ֵ路եػߤץץɲ (thx JM2)
 - ڥեɲ (thx Marcelo Yuji Himoro)

2.20RC2 (2004/12/16)
 - updated myblocksadmin (0.12) & mymenu (0.06)
 - ֥饸ݥȥե򹹿 (thx Marcelo Yuji Himoro)

2.20RC (2004/12/15)
 - HTTP_*_VARSѻ (PHP5)
 - 쥹塼ǽɲ
 - Ȥ⵭Ͽ褦ѹ
 - Anti-DoSΥ롼ޤޤ񴹤
 - F5å顼ޤ٤󥸥ǡ줾ʬ
 - intvalФƤԤƤޤäƤΤ
 - UNIONȯѥȴäΤ

2.11 (2004/9/30)
 - typo ĤäΤǽ

2.10a (2004/9/27)
 - ֥饸ݥȥե򹹿 (thx Marcelo Yuji Himoro)

2.10 (2004/9/22)
 - åץɥեγĥҥåɲ
 - SQL InjectionߤΥ˥ǽȤ
 - ƥɤɲ
 - 2սꤢä short tag ٤ (thx t_miyabi)
 - եɲ (thx Kikuchi)

2.01 (2004/9/11)
 - ѿå­ʤäΤɲ
 - ֥饸Υݥȥե򹹿 (thx Marcelo Yuji Himoro)

2.0  (2004/9/10)
 - Xoops Protector ȤƤκǽΥ꡼



[/xlang:ja]
