Upcoming moOde 9.0.7 release

[Tim Curtis]

Hi,

Here are the latest WIP release note for upcoming moOde 9.0.7 bugfix release.

Note the Security section. In our continued effort to improve the security of moode software for you, several enhancements have been made to help protect against remote code and SQL injection.

Code:

################################################################################
#
# 2024-MM-DD moOde 9.0.7 (Bookworm)
#
################################################################################

Security

- UPD: Filter GET/POST and other variables for unwanted characters and commands

Radio stations

- UPD: NPO Radio 4 changed to NPO Klassiek

Bug fixes

- FIX: IQaudIO Pi-Amp+/DigiAmp+ unmute during startup
- FIX: Footer include not being minified for Bluetooth Control
- FIX: Several lowercase sysCmd() calls in worker.php and renderer.php
- FIX: Add-to-playlist path variable getting overwritten causing script crash
- FIX: Replace CRLF with LF in moode-sqlite3.db.sql file

[nosferatu_cat]

Thanks for the increased frequency of updates. The CRLF fix sounds like something I would have had to do when I was working.