Frost And Flame Promisance / News: Recent posts

The Frost and flame website is now locaed at http://www.frostnflame.org . Please update your bookmarks.

We are currently experianceing diffaculities with the domain staronesw.com . Until this is resolved, please use http://staronesw.no-ip.org/faf/ to access the Frost and Flame website.

Analogously to the old UNIX /usr/local directory (which has been perverted from its original intention, but no matter), the newest FAF distribution includes a directory called "local", which mirrors the directory structure of the distribution itself.

As a user, if you want to change something in the code, the new suggested way is to copy the file to its corresponding location under "local", and modify it there. Thus, any time a FAF upgrade is released, it becomes trivial for you to upgrade. Even if you modify some files heavily, merging updates into them will still be a much simpler job this way. In effect, this separates OUR code from YOUR code, and gives easy accountability.... read more

This new release addresses a minor issue in template handling: the templates were not loaded fully for administrators until now. Since this release changes so little code compared to 2.7, all users are encouraged to upgrade. Please note that this release addresses the issue of game URLs displaying the user's salt (nonce).

Unfortunately, the 2.6.5 point release had some bugs, so all users who downloaded that version are encouraged to upgrade to 2.7 to fix the issues.

There is a new point release, 2.6.5 out, to address a small issue with the Guide, as well as some small bugfixes that didn't make it into the 2.6 version.

A code security audit was undertaken and completed for FAF. It was done in a relatively short amount of time, thanks to the robust and reusable programming features of the original promisance and FAF.

===Results===
In total, 28 SQL injection vulnerabilities were found in the codebase.
Of these, 22 were severe.
The other 6 would have required another exploit to get working.
It is estimated that 14 of these exist in other Promisance variants, such as QMT and RWL.
A total of 288 function calls were investigated and marked as secure or fixed.
A total of 384 lines of code were changed.... read more

The FAF team is proud to announce version 2.5 of Frost And Flame. All active bugs have been fixed, and the prominent new features are:
-A thorough and comprehensive Game Guide
-Many new visual styles
-Improved configurability

If you run a FAF game, you are encouraged to update to this latest version.

An incremental 2.5 release is on the way, expected to be released New Year's or on our anniversary, Jan. 10. Most features have been finalized, and are undergoing testing. These include, apart from bugfixes:
-An entirely revamped Guide
-Many new visual styles
-Improved configurability
-Easier configuration
We urge you to keep your eyes on the News and download the release as it comes out, because of the many stability enhancements over 2.0. Converting your current configuration is trivial, as with all of our previous versions.