Flarum Versions Save

Added

• Nginx rules to prevent access to sensitive files (#65)
• IIS configuration added (#66)

Changed

• Minimum PHP requirement is now 7.2+

Fixed

• Logo path in readme didn't resolve correctly (#68)
• Removed
• Social auth drivers removed (#67)

Read the Flying Fox release announcement.

Changed

• Prevent access to authorisation tokens saved by composer next to the composer.json file (adada64).

See the release announcement.

Changed

• Consolidate site setup into shared file (#63).

See the release announcement.

See the release announcement.

See the release announcement.

See the release announcement.

Added

• Add public directory
• Add extend.php file
• Add storage/locale and storage/sessions directories
• Add .nginx.conf file

Changed

• Update for beta 8

Removed

• Remove admin.php and api.php

Fixed

• Fix workaround for HTTPoxy vulnerability.
• Deny access to composer files and git directories in Apache config. (@Luceos)
• Fixes for Vaprobash environment. (@Strobotti)

Changed

• Update to Studio 0.11.

Security

• htaccess: Block access to .git directory.
• Fix for https://httpoxy.org vulnerability.

Changed

• Use new extension package names (with flarum-ext- prefix).
• Update to Vaprobash 1.4.2.
• Use sensible version constraint for Studio.

Removed

• extensions directory and dependency on flarum/composer-installer. Extensions are now installed into the vendor directory like other Composer packages.
• Unused build.sh script.