Bare 1.2.9.1

This is a bugfix and maintenance release addressing an errant $status variable. This version has now been tested on PHP 8.3. Bare users are strongly encouraged to upgrade PHP 8.3 was released 9 months ago, as of this writing, and 8.2 active support will end by the end of this year.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Full Changelog: 1.2.9...1.2.9.1

Bare 1.2.9

This is a maintenance release which improves embedded media detection and removes the show_modified configuration. The show_modified setting was a holdover from the early versions which allowed Bare to not send the last-modified header on a binary file. Removing the setting resolves cache conflicts and, if a specific last-modified header is required for certain media, changing the metadata on the file itself is recommended.

This version also changes any "Utreon" embedded media tags to "Playeur" as the hosting service has changed names. The [utreon] media tag is retained for backwards compatibility.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Full Changelog: 1.2.8.1...1.2.9

Bare 1.2.8.1

This is a quick feature release which simplifies search URLs to be shared on external pages. Search links now follow the format https://example.com/?find=cabins where your blog is hosted on example.com. Bare previously had token and nonce data added to search requests. Token and nonce checking isn't as critical for search, unlike for certain plugins, which may use usernames and passwords.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Full Changelog: 1.2.8...1.2.8.1

Bare 1.2.8

This is a maintenance and bugfix release which addresses incorrect or broken rendering on some syndication feed readers. The original RSS feed syntax was a holdover from the early beta releases where it wasn't quite RSS or Atom. This has been changed to RSS 2.0 syntax.

A bug in the SQLite database helper dataBatchExec() been fixed where it was returning empty results.

The option to turn off prefixed cookies has been removed. Bare will always prefix cookies by default when the connection is over TLS, regardless of any previous cookie prefix setting in index.php or config.json. This may break some third-party analytics and tracking.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Full Changelog: 1.2.7...1.2.8

Bare 1.2.7

This is a maintenance release which simplifies form field validation for future plugins and updates the documentation. Bare's previous form validation may occasionally cause forms to expire prematurely, especially for users on unreliable connections such as Tor and some VPNs.

Bare now creates visitor session cookies by hashing the host name instead of using the software name. This makes makes it easier to hide the fact your blog is using Bare, especially when the default "Generator" meta tag is also removed in index.php.

The cache.db in the CACHE folder must be removed or renamed after installing this update. Bare will build a new cache database on the next visit to your blog.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Full Changelog: 1.2.6...1.2.7

This is the last update of 2023.

Happy New Year!

Bare 1.2.6

This is a maintenance and bugfix release which addresses a file streaming issue when Bare is hosted on Windows 11 via Apache and mod_php. Large embedded video and audio files may not stream correctly to the end of the requested range on previous versions, especially if the visitor skips ahead in the middle of playback to another location.

If you are using Bare to host podcasts or similar content with large downloads on Windows, updating is strongly recommended.

This version also makes hosted file URLs relative. Cached content on one domain will not reference attached media to another domain, while searching posts, if Bare is used to host multiple blogs on different domains and/or paths with the exact same content and files. Note: This will only take effect if the URL in the post is also relative E.G. /posts/file.mp4 and not https://example.com/posts/file.mp4.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Full Changelog: 1.2.5...1.2.6

Bare 1.2.5

This is a feature and bugfix release which adds greater settings flexibility. Previously, many of the settings were shared globally with all hosted blogs, however, it is now possible to specify far more independent settings for multiple blogs hosted on completely different directories and domains. Bare is now more resistant to abusive/junk requests by default and more tolerant of configuration errors.

This release also fixes a compatibility error with security enhancements in newer SQLite versions when the "trusted_schema" setting is off. Bare creates the storage database (used for searching, tags, and related posts) dynamically on first run, or if the database file is deleted, and so turning "trusted_schema" to on shouldn't impact normal operation. Other defensive measures for SQLite remain.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Bare 1.2.4

This is a feature release of Bare which adds custom site setting functionality for page titles, subtitles/taglines, number of posts per page, and the default blog language. Each blog with these settings are currently configured as defined constants in index.php and may also be set in config.json, which is the recommended way to preserve settings between upgrades.

This version also streamlines content type detection which fixes a previous bug where image files (extensions .jpeg, .gif, .tiff etc...) larger than 32MB were being served with the incorrect MIME type on some platforms.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Bare 1.2.3

This is a feature and bugfix release. A Utreon tag has been added for embedding media on that platform in posts. Very basic Markdown syntax for adding quick tables to posts has been included. For complex table structures, using HTML <table> tags is recommended instead. Documentation has been edited for clarity.

This version also removes the session-based request throttling feature, present since the first beta release of Bare, which was prone to generally problematic operation. Bare should now run more smoothly on older machines with limited memory and systems using IDE-to-CF adapters for storage.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser to visit the Tor mirror.

Note: If Bare is hosted over a DSL connection on Tor, hosting large embedded files with range seek, such as video, is not recommend.

Bare 1.2.2

This is a feature release which adds helpers for generating file digests for integrity checking and makes file streaming behavior adjustable. Plugins can now independently call streamChunks() for large files with their own flush and abort actions for logging or other purposes.

This release is in use on the author's personal blog also mirrored on Tor, along with the firewall and templates plugins. Use the Tor Browser Bundle to visit the Tor mirror.