Coblynau: What to expect
So we originally planned to release Enano 1.0.2, aka Coblynau, in early October. That was over a month ago. What happened?
We've been finding a number of issues with the old and crusty code in Enano that hasn't been looked over in a while. Stuff like XSS vulnerabilities in the admin panel. Since per-session keys that only last 15 minutes are always used on admin panel URLs, exploiting such vulnerabilities through CSRF is just a hair shy of impossible. Nevertheless, work is being done to patch these vulnerabilities.
There have also been issues with installations not completing properly due to a number of reasons, and to help alleviate this we have modularized the installation process completely. The installation is now performed in "stages", with each stage having opportunity for throwing errors and allowing the installation to be stopped and resumed once the error is corrected.
We're also working to make CAPTCHAs more secure by preventing multiple images of the same code from being requested. This is being done by changing the code each time a refresh of the image is performed.
Lastly, we have been trying to improve compatibility with diverse ranges of servers. Not everyone will be running Enano on a VPS where they have root access and the latest Apache, PHP, and MySQL, and we realize that. We're trying hard to get Enano working well, especially on Windows platforms. One of the features added as a result of this campaign is the ability to scale images using the GD library instead of the default method, ImageMagick.
Coblynau is now undergoing the final stages of testing and QA. We would greatly appreciate it if you could pull the latest revision from Mercurial (also in bz2 or zip) and give it a whirl. You might like the new features, and you'll love the additional stability. We hope to release by the end of the week of November 18.





