Ch-Ch-Ch-Ch-Changelog.

Directus 5.1.b – March 20, 2012

  • Several internal XSS points sanitized
  • Added PHPass for encrypting passwords using bcrypt
  • Password restrictions removed, except 3+ characters
  • Forgot password reset link valid for 30 minutes
  • Ability to lock users from editing their credentials
  • Updated .htaccess file with conditionals
  • Cookie now stores token instead of user data
  • Session now stores user id instead of credentials
  • User verified media deletion, "Delete All" removed
  • Fixed issue with non-existant table on edit page
  • Allow more URL formats for Youtube/Vimeo Embeds
  • Mailers combined to function
  • Added datatype: Table View CSV (Beta)
  • Install script semicolon error fixed
  • Other small fixes
  • --
  • Database changes in this version:
  • directus_users => token (varchar 255) field added
  • directus_users => reset_token (varchar 255) field added
  • directus_users => reset_expiration (varchar 255) field added
  • directus_users => editable (tinyint 1) field added
  • directus_users => password (varchar 255) field length changed
  • directus_users => salt field removed

Directus 5.0.b – January 30, 2012

  • Initial public release of Directus 5 (beta)