Security fix for 0.7 branch

I was contacted by someone who wishes to be referred to as "y3nh4ck3r", who found a cross site scripting bug in Zoph. I have fixed this bug and created a new release for the 0.7 stable branch: 0.7.0.6.

A fix for the v0.8pre1 release will be released soon.

Users of the 0.7 release or one of the 0.7.0.x release are encouraged to upgrade to this version. Users of a 0.7.x release should either upgrade to the 0.8pre2 release when it comes available or apply this patch. This patch should work on any Zoph version.

First prerelease for v0.8

I have posted the first prerelease of Zoph v0.8 to the SourceForge site, this version serves as a release candidate for the upcoming v0.8 release.

Compared to v0.7.5, several bugs have been fixed but no new features have been added.

Users of v0.7.x releases are encouraged to upgrade to this version as it fixes all currently known bugs (except to those related to encoding / utf-8 support, those will be solved in v0.8.1).

Users of v0.7.0.x should probably stay with their current version, as v0.8pre1 should not be considered 'stable'.

A special warning to those who are still using PHP4, as of the release of v0.8, PHP4 will no longer be supported. So, if you are on PHP4 and cannot upgrade to PHP5, install this version and report any bug you find...

Zoph 0.7.5 released

Zoph 0.7.5 is an interim "feature" release that offers a preview on a few of the new features that will be available in Zoph v0.8. Zoph 0.7.5 will be the last feature release before v0.8, which is now feature-frozen.

It also fixes some bugs from the earlier 0.7.x releases.

The new features is this release include: the possibility to save search results and (if you are an admin user) even share them with other users. Furthemore some improvements have been made to the rating system, for example, it is now possible to set whether a user can rate photos or not. You can also give a user the possibility to rate the same photo multiple times, this can come in handy if you use the 'default user' function or otherwise have multiple users who share the same user account. If you go to the user page (via the admin menu) you can now see the ratings this user has made and the comments the user has left.

See the changelog for more details.

0.7.5 is still an unstable release. Download 0.7.0.5 if you're not comfortable with running an unstable release.

Please report any issues you find, so I can make sure they are fixed in the final 0.8 release.

Zoph 0.7.4 released

Zoph 0.7.4 is an interim "feature" release that offers a preview on a few of the new features that will be available in Zoph v0.8.

It also fixes some bugs from the earlier 0.7.x releases.

This release features 2 major improvements: the first is performance, all the new features in 0.7.x had demanded their toll on Zoph's performance, so I have put a lot of work in improving the performance. The second innovation is the 'group access rights', instead of giving each user seperate access rights to the albums, you can now group your users and assign the rights to the group. For those who want to stay with the current model, a script is included in the contrib dir, that will create a group for each user and assign the group the album permissions of that user.

A record amount of bugs have been fixed in this release. See the changelog for details.

0.7.4 is still an unstable release. Download 0.7.0.5 if you're not comfortable with running an unstable release.

Please report any issues you find, so I can make sure they are fixed in the final 0.8 release.

Zoph 0.7.3 released

Zoph 0.7.3. is an interim "feature" release that offers a preview on a few of the new features that will be available in Zoph v0.8.

It also fixes some bugs from 0.7.1 and 0.7.2 Finally, it includes the bugfixes from 0.7.0.5. This includes the security update.

The most important new feature in this release is the mapping support. You can now show the locations of your photos or places on a map. Thanks to Mapstraction you can easily change between 3 mapping providers: Google Maps, Yahoo Maps and Open Street Maps. It should be easy to add support for the other mapping providers Mapstraction supports later.

Furthermore, you can store timezones in Zoph and make automatic calculations between the different timezones. Simply leave your camera on your home timezone (or UTC) and tell Zoph where you went on holiday, and it will automatically compute the right time for you.

Finally, a record amount of bugs have been fixed in this release. See the changelog for details.

0.7.3 is still an unstable release. Download 0.7.0.5 if you're not comfortable with running an unstable release. If you are currently running 0.7.1, 0.7.2 or 0.7.2.1, I recommend upgrading to 0.7.3, because of the security update.

Zoph 0.7.0.5 released

During development of Zoph, I found a couple of possible SQL injections. Although most are not exploitable or only exploitable by an admin user, I have created an updated release for Zoph: v0.7.0.5. I recommend evereyone upgrading to this version. The release also includes a number of extra 'safety nets' that will make exploiting any future SQL injections a lot harder. It also fixes a number of bugs in the 0.7 release.

An updated version of the 'unstable' branch will be available later this week.

Zoph 0.7.2.1 released

I have created a bugfix release for Zoph 0.7.2: I found out that the 0.7.2 release that was released earlier this week did not include the latest version of some files. I also fixed 2 other bugs. For a full overview of the changes, see the changelog.

0.7.2.1 is still an unstable release. Download 0.7.0.4 if you're not comfortable with running an unstable release.

Zoph 0.7.2

Zoph 0.7.2. is an interim "feature" release that offers a preview on a few of the new features that will be available in Zoph v0.8.

The most important new feature in this release is the 'Zoph Pages' feature, that allows you to create your own pages as frontpage for an album, category, place or person.

Also, you can now add smileys and (limited) markup to comments.

The "users" link in the main menu has changed into "admin" and the newly created admin page gives access to the user-administration and the new pages feature, through an icon-based menu.

Francisco Javier Félix provided a patch that allows you to set the default language to something else than English, a patch that makes it possible to translate the login page and a patch that improves the usability of the list of people, by adding some colour to that page. He also updated the Spanish translation.

Finally, this release fixes all the known bugs in 0.7.1 and also includes all the fixes from 0.7.0.3 and 0.7.0.4.

Although this release was tested as well as possible, it is not a "stable" release and you should continue using the latest stable (0.7.0.4) if you are not comfortable using an unstable version.

Jeroen Roos

Translations updated & call for translations

I have updated the table with the current state of translations (see below). Some languages have not been maintained for a long time. Why not check out the table and see if you can be of help? Also, if Zoph has not yet been translated in your language and you're willing to spend a little time, please contact me!

Jeroen Roos

Zoph 0.7.0.4 released

I have created a bugfix release for Zoph 0.7: version 0.7.0.4 which fixes a few small bugs, mainly layout-issues, but also an issue with the sql file that caused installations on some systems to fail. For a full overview of the changes, see the changelog.

Zoph 0.7.0.3 released

I have created a bugfix release for Zoph 0.7: version 0.7.0.3 which fixes a few small bugs.

Zoph 0.7.1 released

Zoph 0.7.1. is an interim "feature" release that offers a preview on a few of the new features that will be available in Zoph v0.8.

Most notable changes are more configurable options to watermarks (position and amount of transparency), possibility to download a set of photos in a ZIP file and some improvement to the thumbnails for albums, categories and places.

Although this release was tested as well as possible, it is not a "stable" release and your should continue using the latest stable (0.7.0.2) if you are not comfortable using an unstable version.

Zoph 0.7.0.2 released

I have created a bugfix release for Zoph 0.7: version 0.7.0.2 that fixes a few bugs. None of them are really serious. The most important change is an update to the installation SQL script, a fix that was created by Raimund Hook. This version also includes an up to date Italian translation, thanks to Francesco Ciattaglia.

Zoph 0.7.0.1 released

During development I found a possibility for SQL injection. As far as I could determine it cannot be used to gain privileges, modify or retrieve data; however, just to be sure, I recommend everyone to upgrade to the fixed version. You can download the new version here, or you can download a patch. If you are running an older version of Zoph, it should not be hard to adapt this patch for your version.

Zoph 0.7 released

After two pre-releases, here it is, Zoph v0.7.

Compared to the last pre-release, a couple of small, but sometimes annoying bugs have been solved, most in the autocomplete keyboard handling and some issues with using the "autothumbnail" feature when not logged in as an admin user.

Compared to v0.6 lots of bugs have been solved and a couple of new features have been added, Most notable new features are a Javascript based autocompletion function on the selectorboxes for albums, categories, places and people; new views for albums, categories, places and people - including a thumbnail view, giving you a preview of what's in that folder.

For full overview of changes, see the changelog.

Dutch, Danish, German, Canadian English, French, Norwegian, Turkish and even Swedish Chef (Bork! Bork! Bork!) are completely up to date now. Italian is almost up to date.

Many thanks to Antoine Delvaux, Francesco Ciattaglia, Håvard Lund, Jesper Skytter and Mufit Eribol for translating Zoph in their languages.

I would appreciate a post in the forum telling me what you think about the new release and, while you're at it, why not vote for Zoph at the Sourceforge or Freshmeat site?

I hope you will all enjoy this new release!

Jeroen Roos

older news