Disclosure Updates
Posted on 05 Nov '25 filed under Disclosure, Update
There are no new content updates for November. However, over the past few days, I’ve focused on completing updates to my blogging script, Disclosure. The system is now at version 1.2.0, featuring numerous bug fixes and several long-awaited add-ons. While these changes may not be visible to end users, they represent significant improvements on the backend; enhancing performance, stability, and overall developer experience. The about section has also been updated regarding the applied patch (replaces unsafe GETs, queries and pagination generation), and found several problems and fixed the important ones (input handling, SQL safety, pagination bugs, inconsistent vars, XSS notes) for this update.
-
Disclosure v1.2.0
- Implemented PDO compatibility
- Updated listing page to support real category relations (normalized many-to-many table).
- Implemented edge case handling by binding parameters using bind_param('is', $yearParam, $monthname).
- Converted queries to prepared statements.
- Replaced the category and monthly blocks and add safer GET handling and error reporting.
- Fixed logic bugs: $page vs $screen, $next_page assignment, $adjacents as int, current page non-clickable.
- Fixed SQL and HTML output are vulnerable to injection/XSS (no casting/escaping).
- Fixed areas where some mysqli_query results are not checked for errors.
Bugs and Fixes


