search

Verlihub / verlihub

Verlihub 1.5.0.0
https://github.com/verlihub/
GNU General Public License v3.0
57 stars 15 forks source link

Old 0.9.8 sources #181

Closed pvgoran closed 3 years ago

pvgoran commented 4 years ago

It would be nice to have source tarballs of old 0.9.8 releases (like verlihub-0.9.8e.tar.gz) somewhere. Right now, I can't find them, no matter where I look. They were previously hosted on SourceForge, but now they are deleted.

RoLex commented 4 years ago

the reason why old 0.9.8 isnt shared anywhere, is because there are 7 exploits in that version, plus alot of very bad bugs. why you need it anyway? anything you miss in new version that was in older version?

pvgoran commented 4 years ago

It's a bit hard to explain... I had a 0.9.8e sitting on my Gentoo home machine for years (not even running), and now I suddenly can't rebuild it because the archive tarball is no longer accessible. And I don't like it when my installed packages break. :)

And upgrading to 1.2 is not that straightforward.

RoLex commented 4 years ago

you need to explain why its not that straightforward. first exploit allows anyone to redirect all your users to any hub. second allows anyone to access your class 10 account without even using your password. third allows anyone who got your class 10 account to execute any os commands via lua interface. meaning taking over your comuter completely. i dont think you really want this. so please explain. verlihub 1.2 series is fully backwards compatible with all older versions.

pvgoran commented 4 years ago

Well, if noone can connect to my hub, all these bad things can't happen, right? :) (But thanks for explaining, anyway.)

I spent several hours today adapting the 0.9.8 verlihub ebuild to 1.2.x. It wasn't easy at all. I got it to compile, but I'm not sure it will run as intended. Database/config migration is another potential problem that I'll have to deal with. I wish I had an option not to do all of this.

On top of everything, I have a plugin developed for an old version. I don't know if it will compile and work, too.

RoLex commented 4 years ago

plugin api is all compatible, as lua api is.

config migration is not needed, you just run new software with old database and you get all you had before.

pvgoran commented 4 years ago

plugin api is all compatible, as lua api is.

Good.

config migration is not needed, you just run new software with old database and you get all you had before.

Why does the vh_migration_0.9.8eto1.0 script exist, then?..

RoLex commented 4 years ago

if you look at its source, it only removes old unused translation variables and fixes single bug by renaming from allways_ask_password to always_ask_password.