Two weeks ago, I launched the initial beta of my Neptune framework. As I am prone to do, I missed something obvious in the released files (failing to include a needed file), causing the example in the documentation not to work. Tom Hubbard was nice enough to point this out to me.
In addition to that, my CF-Talk announcement, generated quite a discussion on the security of file uploads in Neptune. Consequently, I have made some adjustments in response to that discussion.
I felt these to changes were significant enough that I wanted to get them out right away, but not significant enough to call this release "Beta 2", so I punted and called it "1.0 Beta 1.5" - kind of a lame version number, but oh well.
For file upload security, I did the following:
- Added a file.cfm that can serve up uploaded files securely (using CFCONTENT)
- Changed a default setting so that files are served up by file.cfm by default (I may change this back, however).
- Added a page about file uploads in the documentation.
- Added notes to the installation page recommending storing files outside of the web root.
As always, I would love to hear any comments or suggestions
Neptune is open source and free for any use.