Chevereto V3.20.13 announcement

[Rodolfo]

Dear Cheveretos,

👉 V3.20 is still the production standard and you will love to hear that V3.20.13 is already in the making and it will arrive by the end of the month.



For this new release we are focusing in adding more security to the system, by disabling iframe embedding and enforcing .htaccess updates. We are also migrating the build process to GitHub CI, which will make for us dead easy to ship future maintenance updates for V3.20.

We are also adding safety measures that will improve on the remote URL functionality for those that still want to run that unsafe feature. As you may remember, in V3.20.12 the remote URL functionality was taken away for security reasons and while we still insist in that it shouldn't be enabled, we are aware that many of you are stubborn in this regard. That's why we are adding these, for your own protection as is better than nothing.

This release adds a "Chevereto news" section at dashboard. The goal is that nobody misses the announcements and relevant news regarding the software. A lot of stuff is always happening, but for 99% of users that's not the case and we want to amend that.

Chevereto v3.12.3 pre-release notes

• Added IP ranges blocking from URL upload
• Added protocol restrictions for URL upload
• Added enforced .htaccess update
• Added "Chevereto news" to dashboard panel
• Added cron ran status check
• Improved .htaccess configuration
• Removed DRM
• Fixed bug affecting mobile listings

Hope you like the heads-up!

 

[Fumi]

Your .htaccess update just appends to the current . htaccess, right? 😛

 

[Rodolfo]

Your .htaccess update just appends to the current . htaccess, right? 😛

It will override, the change (restriction of arbitrary .php) must be forced for security reasons!

 

[Fumi]

It will override, the change (restriction of arbitrary .php) must be forced for security reasons!

I've made my security updates including what you're probably doing, but thanks for the heads up, I'll make a backup before I update. 🥳🤙🏽

 

[Rodolfo]

😘 What do you think of the Chevereto News section?

 

[Fumi]

I like it, but is it a link? Or a json embedded popup notice?

 

[Rodolfo]

I like it, but is it a link? Or a json embedded popup notice?

Link

 

[Rodolfo]

🥳 For this release we are also removing the DRM and the inclusion of the license file at app/license.php.

We are doing this because the DRM is useless (plus I never liked it) and because we want to introduce license key regeneration, enabling you to revoke old license keys from your client panel. With this, you will be able to easily regenerate your license key and protect your digital purchase against any event 💖.

 

[Rodolfo]

👏 We are also adding a cron status to easily detect when the cron is not running.

 

[Rodolfo]

🥁 Chevereto V3.20.13 will be DRM free, and the app/license.php file and checking won't be required. The license will be required only when you need to upgrade to a new release:



🎉 No more DRM in Chevereto