Change log.                                                                                                                  
=====================================                                                                                        
Inprotect 0.20 - November 25, 2004
+ admin.php: When deleting a user, also delete any private zones they own
+ checkupdate.php: New url to find updated versions
+ defaults.php: Dynamic config page and Nessus 2.2.x compatability
+ getnessus.php: Cosmetic code reformat
+ help.php: New bugreport url
+ portscan.php: General code cleanup
+ respdf.php: Convert to new PDF module
+ results.php: Date is formatted a little nicer.
+ settings.php: Dynamic config page and Nessus 2.2.x compatability
+ fpdf library: New PDF library - Thanks to Dave King
+ fetchnes.pl: Keep your nessus files up-to-date on your console server (Does not install nessus yet)
+ fetchupdates.pl: Fixed a few minor bugs
+ sched.pl: Range scanning option fixed.
+ inprotect.sql: The username was only 25 chars long. Other tables were 255 chars long. Fixed to match.
  Also, Old un-used tables removed, and a general cleanup of this script.
+ update019-020.sql: Upgrade your database. Note: Follow the UPGRADE instructions carefully.
+ updateplugins.pl: Minor bugfixes
+ updateprefs.pl: New. Populates a table with a data dictionary of nessus config parameters.


Inprotect 0.19 - November 2, 2004                                                                                            
+ Cleaned and restructured a lot of the perl code.                                                                           
+ install.sh: Incorporated patch supplied by "JC" to fix install where the mysql password is not empty                       
+ install.sh: It is now safe to re-run the install script without creating duplicate cron entries.                           
+ nessus_run.pl: "uninitialised variable" error messages all fixed.                                                          
+ nessus_run.pl: Fix formatting in output table; Fix an undefined variable error                                             
+ nessus_run.pl: Fix assorted bugs and code reformat                                                                         
+ sched.pl: Fix a scheduling bug I introduced earlier - Some scans were disappearing                                         
+ settings.php: Only owner can modify a profile                                                                              
+ admin.php: Unable to add a new user - Temp fix. Need to debug further                                                      
+ graph.php Print an error message when doing a trend graph with only one element.                                           
+ sched.php: Check the myiponly database flag (Getting ready for online demo)                                                
+ Bugfix: [ 1047488 ] Private profiles are not private                                                                       
+ All html output is now HTML 4.01 Transitional Compliant                                                                    
+ Assorted other code cleanup / reformatting / bugfixes                                     

Inprotect 0.18 - February 12, 2004
+ Added rh_install.sh (install.sh) from 0.14 release, to simplify
  software installation.
- Removed NESSUSHOST, FROMADDRESS, NESSUSPORT, RESULTURL, MAXNESSUSSCANS, NESSUSUSER, NESSUSPASSWORD
  from inprotect.cfg (This now managed through web interface)
+ Added ability to check for Inprotect updates from the web interface.
  (No automatic update downloads yet)
+ Added new configuration webpage to specify Inprotect settings.
+ Added ability to verify MD5 of the Nessus plugins and download 
  them only if they were changed.
+ Changed default location of inprotect.cfg from /usr/local/bin
  to /usr/local/etc
+ Added init.d script to start and stop Nessus
+ Added inprotect_reset.pl script to run clean-up jobs on the 
  database after scanner host is rebooted.
+ Added a modified "nessus-update-plugins.in" file, which can
  accept location of the Nessus plugins as a command line parameter.
+ Added new parameter UPDATEPLUGINS in inprotect.cfg,
  this is used to specify which server will keep plugins updated in the database

Inprotect 0.17 - December 14, 2003
+ Added "Intelligent" profile option.
	This feature will allow to perform a scan with a full
	set of plugins from the selected category or family
	first time (if autoenable option is selected).
	The following scans will be
	performed using new or modified plugins since the
	last scan and all the plugins, which detectected
	vulnerabilities during previous scans.
	Using this feature it is possible to reduce scan time,
	but it is possible that few vulnerabilities will be
	missed.
	Nessus "Auto enable dependencies" option must be
	selected.
	Improvement to this feature will be made in the future
	releases - perform a full scan after certain number
	of "intelligent" scans.
+ Fixed bug in user.php. Users allowed to change their settings.
+ Fixed bug in search.php. Search is available to users.
+ Fixed bug in updateplugins.pl. Script will remove obsolete
	Nessus plugins from the database and scan profiles.
+ Fixed bug in sched.pl. On scan completion email notification
	and scan results comparison will be send.

Inprotect 0.16 - December 9, 2003
+ Distributed functionality added.
+ User permitions
+ Enhanced reporting.
+ Tons of new bugs!!!

Inprotect 0.15 - Nov. 2003
Internal release only (see 0.16 changes).

Inprotect 0.14 Beta - September 25, 2003
+ Added support for new version detection feature of Nmap 3.45+
+ Added option to perform ping before Nmap scan (default disabled)
+ Added a new feature to load IPs to scan in bulk, this feature is incomplete
  and requires additioanal input validation
	Accepted list separators:
	<New Line>
	,
	;
+ Fixed bug in admin.php, which was ending admin sessions
+ Added a new feature to stop running Nessus scan
+ Added a new feature to allow admin to logon as a user (bypassing password)
+ Fixed bug with the inprotect.sql file introduced in version 0.13


Inprotect 0.13 Beta - September 15, 2003
+ Updated port_scan.pl script to support Nmap 3.30
+ Added: New variable in the config.php file to specify path to the Inprotect
  files. (It should fix graphs errors)
+ Bug fix: Proper Nessus Nmap port range config options should be created
  from the web interface.
- Removed nessus_timestamps table
+ Updated list of ports to scan by default
+ Minor changes to the Nessus profile setup.


Inprotect 0.12 Beta - June 27, 2003
+ Bug fix: updateplugins.pl script was not properly handle plugins
  with new families or categories.
+ Added Nmap port scan results are sent to the database.


Inprotect 0.11 Beta - June 11, 2003
+ Changed web interface, needs more improvement
+ Enhanced user management functionality
+ Added permissions to manage users and Nessus profiles


Inprotect 0.1 Beta - May 14, 2003
+ Added search capabilities.
+ Added links to the CVE and BID vulnerabilities description.
+ Added vulnerability trends by date and by scan (needs further enhancements).
+ Added live scan statistics.
+ Added timeout value to each schedule. (Replaced global timeout value).
+ Bug fix: Nessus scans were not killed on timeout.
+ Bug fix: Modifing schedule will reset scan profile to the first one in the
  list.
+ Bug fix: register_globals=Off support.
+ Bug fix: Perl script waited to answer "paranoia" question on a first
  nessus run.
+ Bug fix: updateplugins.pl may fail connecting to Nessus server.

Inprotect Alpha 0.09 - April 18, 2003
+ Bug fix: port_scan.pl script referenced non existent
  PostNuked table
+ Added start of scan email notification
+ Added current and previous scan summary info to the end of scan
  email notification.
+ Added ability to delete scan results from the DB
+ Added ability to mark scan results as false positive
+ Added ability to make notes for scan results/plugins.
+ Bug fix: updateplugins.pl script will fail if nessus is
  not in the PATH. Replaced nessus call with the full path to nessus
  from the config file.
- Removed annoing email validation check.

Inprotect Alpha 0.08 - April 10, 2003
- Removed dependancy on Korn shell
+ Bug fixes in updateplugins.pl script, made proper mysql
  system call, passing username, hostname and password.
+ Enhanced nessus_sched.pl script to be a default and only script to
  execute Nessus scans.
+ Added scan stats on the home page.

Inprotect Alpha 0.07 - Mar. 25, 2003
+ Applied pacth to properly read configuration file
+ Made the changes to run several concurent Nessus and Nmap scans
  Number of concurent scans can be changed in the config file.

Inprotect Alpha 0.07 - Mar. 20, 2003
- Temporary removed PostNuke module from the distribution.
+ Added PHP Adodb to the distribution
+ Added support for multiple .nessusrc profiles
+ Added one common cfg file for backend scripts.
+ Minor bug fixes.

Inprotect Alpha 0.0.6 - Feb. 16, 2003
+ Added web page to generate nessus configuration file (nessusrc).
	This is not yet used by the backend scripts, but rather is a proof of
	concept used for testing and it's a first milestone to make configurable nessusrc
	files from the web interface.
+ Minor bug fixes
+ Added the following db tables:
	nuke_nessus_preferences - keeps the nessusrc settings
	nuke_nessus_multiple - keeps values for nessus multiple selections
				(radio buttons)  
+ sql folder now contains two mysql files, one for PostNuked and another for standalone
	version of the Inprotect webinterface for Nessus. 

Inprotect Alpha 0.0.5 - Feb. 1, 2003
+ Added SSL support to the standalone version of the software
+ Added PDF report generation using PDF-PHP class - http://www.ros.co.nz/pdf
  - standalone version only
+ Added user authentication to the standalone version of the software
+ Bug fix: Added mysql_standolone_fix.sql file to fix errors with previous
  standalone versions of the software and to enable user authentication.

Inprotect Alpha 0.0.4 - Jan. 13, 2003
+ Minor changes to the scheduled scans standalone script.
+ Added perl script to download nessus updates and put plugins description to the database.


Inprotect Alpha 0.0.3 - Dec. 17, 2002
+ Added standalone scripts (non-postnuke module) for Nessus & Nmap security
  scans.
- Fixed bug in php scripts preventing scanning of private IPs.
- Fixed bug in sql setup file - missing "timestamps" table.


Inprotect Alpha 0.0.2 - Nov. 28, 2002
Nessus module
+ Added $allowscan php variable and minor changes to the scan.php and
  $top20.php scripts to allow scan of any IP address or host.
  (Enabled by default)
+ Added $enableprivate php variable to allow scan of private IPs.

PortScan module.
+ Added $allowscan php variable and minor changes to the index.php file
  to allow scan of any IP address or host. (Enabled by default)
+ Added $enableprivate php variable to allow scan of private IPs.



Inprotect Alpha 0.0.1 - Nov. 15, 2002
First release of the software.

