Little Software Stats
Copyright (C) 2008-2013 Little Apps (https://www.little-apps.com/)

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.

- First version publicly released

+ Version 0.1 Released

- Split events table into multiple tables, improving query performance
- Added LSS_API define to check if Little Software Stats was called via the API
- Sessions are no longer created if called via the API
- Outputs error in JSON or XML if unable to connect to database in API
- Fixed bug causing script not to exit properly if unable to connect database
- Fixed get_error() function from outputting error in wrong format
- URL returned by get_file_url() and get_page_url() is encoded with htmlspecialchars() (by default)
- If rewrite is disabled, query values return in get_page_url() are encoded with urlencode()
- Updated GeekMail to PHPMailer
- Fixed check for SMTP username and password options
- Added update script
- If page needs redirecting, URL returned by get_page_url() is not encoded
- Added Session class for storing and getting session data
- Login information is stored in one array instead of different keys in Session data
- Added Config class for reading config.php file
- Configuration is now returned as array by config.php file instead of defines
- If $_SERVER['REMOTE_ADDR'] is not set (because running in command line), a random IP address is set
- Fixed documentation for API::start_app() to show megabytes instead of bytes
- Added PHPUnit tests (which are executed with Travis CI)
- RewriteBase in _.htaccess is commented out by default
- Classes are called via static method instead of global variables
- Added support in API for IPv6 addresses
- Uses built-in (in PHP v5.5+) or user-defined (in PHP v5.3.7+ and v5.4.x) password_hash() and password_verify() for password hashing
- Fixed cross-site scripting (XSS) vulnerabilities
- Fixed vulnerability allowing an attacking with the the username to reset the password
- Uses CDN instead of local web server for HighCharts
- Various other bug fixes and improvements

+ Version 0.2 Released


- Fixed up README.md
- Fixed bug causing username not to be displayed properly in PHP v5.3
- Fixed syntax error when trying create persistent connection with mysqli
- Updated minimum PHP version in inc/version.php to v5.3.7
- A few other minor bug changes

+ Version 0.2.1 Released

- Fixed data types created in install
- Changed pages/settings.php to use builtin password hash functions
- GeoIP database paths are specified by the user during installs
- Various other fixes and updates

+ Version 0.2.2 Released

- Fixed data types in sessions and uniqueusers tables

+ Version 0.2.3 Released