{"action":"published","release":{"url":"https://api.github.com/repos/sbrl/Pepperminty-Wiki/releases/840149","assets_url":"https://api.github.com/repos/sbrl/Pepperminty-Wiki/releases/840149/assets","upload_url":"https://uploads.github.com/repos/sbrl/Pepperminty-Wiki/releases/840149/assets{?name}","html_url":"https://github.com/sbrl/Pepperminty-Wiki/releases/tag/v0.3","id":840149,"tag_name":"v0.3","target_commitish":"master","name":"Login system security fixes","draft":false,"author":{"login":"sbrl","id":9929737,"avatar_url":"https://avatars.githubusercontent.com/u/9929737?v=3","gravatar_id":"","url":"https://api.github.com/users/sbrl","html_url":"https://github.com/sbrl","followers_url":"https://api.github.com/users/sbrl/followers","following_url":"https://api.github.com/users/sbrl/following{/other_user}","gists_url":"https://api.github.com/users/sbrl/gists{/gist_id}","starred_url":"https://api.github.com/users/sbrl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sbrl/subscriptions","organizations_url":"https://api.github.com/users/sbrl/orgs","repos_url":"https://api.github.com/users/sbrl/repos","events_url":"https://api.github.com/users/sbrl/events{/privacy}","received_events_url":"https://api.github.com/users/sbrl/received_events","type":"User","site_admin":false},"prerelease":false,"created_at":"2015-01-10T11:07:29Z","published_at":"2015-01-10T11:08:35Z","assets":[{"url":"https://api.github.com/repos/sbrl/Pepperminty-Wiki/releases/assets/373185","id":373185,"name":"index.php","label":null,"uploader":{"login":"sbrl","id":9929737,"avatar_url":"https://avatars.githubusercontent.com/u/9929737?v=3","gravatar_id":"","url":"https://api.github.com/users/sbrl","html_url":"https://github.com/sbrl","followers_url":"https://api.github.com/users/sbrl/followers","following_url":"https://api.github.com/users/sbrl/following{/other_user}","gists_url":"https://api.github.com/users/sbrl/gists{/gist_id}","starred_url":"https://api.github.com/users/sbrl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sbrl/subscriptions","organizations_url":"https://api.github.com/users/sbrl/orgs","repos_url":"https://api.github.com/users/sbrl/repos","events_url":"https://api.github.com/users/sbrl/events{/privacy}","received_events_url":"https://api.github.com/users/sbrl/received_events","type":"User","site_admin":false},"content_type":"text/php","state":"uploaded","size":34516,"download_count":0,"created_at":"2015-01-10T11:00:48Z","updated_at":"2015-01-10T11:00:56Z","browser_download_url":"https://github.com/sbrl/Pepperminty-Wiki/releases/download/v0.3/index.php"}],"tarball_url":"https://api.github.com/repos/sbrl/Pepperminty-Wiki/tarball/v0.3","zipball_url":"https://api.github.com/repos/sbrl/Pepperminty-Wiki/zipball/v0.3","body":"This is a relatively minor release, but with one critical bug fix.\r\n\r\nIt was pointed out on [reddit](https://www.reddit.com/r/tinycode/comments/2ruam1/an_entire_wiki_in_a_single_php_file_in_1000_loc/cnjebha) that the login system was insecure:\r\n\r\n> **/u/lordastley said:**\r\n> If I'm reading that code correctly, you're storing user auth completely in the cookie instead of using sessions (for instance), which is rather insecure.\r\n> If I can get a copy of someone's cookie, snoop their network traffic, etc, I can authenticate as them.\r\n\r\nThis release switches from using cookies to store login details to using PHP sessions. This does mean that your server must have session support, but hopefully that won't be a big problem.\r\n\r\nInstallation / updating instructions can be found in the README."}}