Please download the file jorani-1.0.2.zip (as the other files require an extra step for setup)
This release requires PHP>=8.1.
This release fixes security issues and fixes some bugs.
It is recommended to change the file log extension to log instead of php in order to prevent security exploits based on log injection.
If you migrate from an older version of Jorani, please add this variable into the configuration:
$config['log_file_extension'] = 'log';
Don't forget to forbid the access to the log folder in Apache configuration.
Thanks to David Uton (m3n0sd0n4ld) for detailed security analysis