psychon of the ZNC Bouncer project has just tagged version 0.090 of their popular IRC connection bouncing software.
The new version is a major improvement in terms of features and bugfixes which is also noticeable in the large jump in version numbers from the last release, version 0.080.
The biggest change users of the previous versions will notice is the new Webadmin interface which has gotten both a feature-wise as well as a look&feel makeover. The HTTP server now has moved into ZNCs core which gives all modules the possibility to interact with the Webinterface – 3 of the modules that ship with ZNC already make use of this (lastseen, stickychan and notes).
Below are three screenshots of the new Webadmin in action:
Besides of changes to the URL structure – which will require you to adopt to them if you’re interfacing with ZNC through scripts – the authentication method has changed from HTTP Authentication to Session-Cookie based Auth. To prevent any kind of tricking admins into clicking possibly malicious links that for example could enable attackers to delete your ZNC users, the developers implemented measures that prevent Cross-site request forgery (CSRF) type attacks. Additionally, although generally considered security-by-obscurity, ZNC now doesn’t leak its version number to unauthenticated users through the web interface any more so attackers will have a harder time getting to know which version of ZNC you are running.
The *status and *admin modules have gotten a few new commands which now enable you to specify listening ports as well as loading and unloading modules from IRC. Users which are in a different timezone than where their bouncer is hosted can now define a timezone offset in the webinterface which will make timestamped log replays display the right time.
Another neat feature is the possibility to add certain strings to the MOTD which enable ZNC to display the bouncers uptime, vHost and lots of other cool vanity things upon connect:
which becomes this upon connect:
Of more practical use is the new charset module that lets you convert between character encodings, in case the server you’re connected to forces a certain encoding.
To get an overview of all other fixes and new features (of which there are still quite a few more) please take a look at the detailed changelog here which also has instructions on upgrading from previous versions. As usual the downloads of ZNC 0.090 can be found either on their SourceForge page or you can view the instructions on how to check out a copy of their SVN repository here.