1.2-RC1 The Breaking sysPass

Before a long time of efforts it's out, the new sysPass version is almost ready.

General improvements:

• Security improvements preventing common threats (SQL Injection, XSS, CSRF)
• Fully MVC allowing themes support
• Using PKI for forms passwords encryption
• Using TOTP for 2-factor authentication
• Export to sysPass encrypted XML file
• API authorizations
• New visual theme with Material Design Lite by Google
• 60% of code rewriting for improve performance and reusability (2x faster)
• And many more features

Test it, Share it!!

Upgrade info at http://wiki.syspass.org

Moving torwards 1.2

• [FIX] Fixed error on saving files extensions.
• [FIX] Fixed checking for updates issue.
• [FIX] Closes #109
• [FIX] Closes #116, Closes #107
• [MOD] Changed behaviour on getting security token for customers, categories, groups, users and profiles edition.
• [MOD] Changed application logo and description.
• [MOD] Added version umber on update title.
• [MOD] Updated translations.

Minor fix

• [FIX] Customer description not being added when it was created. Thanks to @tejadon

Russian translation and more...

• Added cookies enabled detection
• Added Russian translation. Big thanks to @TitovLab
• Added javascript doc
• Added cached language settings
• PHP warnings|notices|deprecated are not displayed. Hope no more javascript response breaks
• Minor bugfixes

Zlib bugfix

• Fixed javascript compression behaviour with zlib module. Thanks to @tejadon
• Fixed javascript header
• Fixed UI on installation template style

Minor Bugfixes

• Added database connection port
• Fixed some UI errors
• Fixed error recursion on database connection error (needs more testing)

Minor bugfixes

• Some notices messages are removed
• Source host ip address used for remote database installations
• Accounts' password length set to 255 characters
• Removed array key that wasn't used anymore.
• Account password not saved when importing some accounts.
• Needs DB upgrade (see http://wiki.syspass.org/en/upgrade)

LDAP fixes

• Fixed LDAP group membership. Thanks to @danislav
• Fixed LDAP email attribute retrieving. Thanks to @danislav
• Updated translations
• Fixed accounts list notes showed for accounts that don't have.
• Fixed LDAP users' password salt saving.

1.1 is out!!

More than 1 year of deployment (many blackouts for personal stuff) and a lot of efforts makes this version a great point in sysPass history.

A lot of code rewritten, fixed security bugs, new functionalities, etc. and keeping in mind that there is too much work to do yet.

I hope that this work can help to many people to get a free password manager with features that can be useful, because it's made with a sysadmin in mind.

And lastly, give big thanks to those that have been testing and supporting this work. Special thanks to:

• Uwe Steinmann
• Tóth Tamás
• Daniele
• Cyril
• @maxmarkus
• @Chefkeks

Keep pushing!! ;)

1.1 Release Candidate 2

Almost done, but I keep fixing some minor bugs and translations:

• Translated to French. Big thanks to Cyril
• Fixed "option unavailable" on reset password page when email notifications are disabled
• Fixed mime type detection on csv file import from windows
• Fixed js minimized output when special chars are present