0.2.0 debutted

The much delayed release is out now. Download it by clicking on download icon!

Here is the list of more prominent changes since 0.1.x version:

  1. Remove markup configuration, and adds lots more config options
  2. Show statistics in dashboard
  3. Clickable image showing music source
  4. Start to migrate to PHP5-style classes
  5. Image conversion routine redone
  6. Allow clearing cache within admin page

However, to be sincere, some of the changes do make me worried, namely:

  1. Requirement of PHP5: though PHP5 growth is a bit stronger after PHP4 end of life, we are still seeing 41% adoption of PHP5 only (statistics by nexen). That means half of potential users can’t upgrade…
  2. Requirement of newer ImageMagick: I can’t stop cursing ImageMagick maintainers for this one. All packagers and software developers used to curse them, now I can feel the hatred in the guts too. ImageMagick can change API, compatilibility and even command line options between any minor, or even patch level releases! Damn it. Software versioning is completely meaningless for ImageMagick. As I have said before, -channel alpha no more creates alpha channel, causing all transparency rendering broken with previous release. However, not that many web servers have newest ImageMagick installed. I’d say the restriction is even more serious than PHP one. Perhaps I may need to think of another way to circumvent the problem in the coming releases.
  3. Potential of XSS on showcode.php: right now showcode.php reads music fragment from POST request and dumps them only after minimal content filtering. I’m a bit worried it can be susceptible to XSS. Perhaps there is need to fire up XSS scanners in short future.

Leave a Reply

Powered by WP Hashcash