From b67c9b3415dd5f642d362fa6479d417d87ec46c5 Mon Sep 17 00:00:00 2001
From: "Marcel Kapfer (mmk2410)" <marcelmichaelkapfer@yahoo.co.nz>
Date: Wed, 18 May 2016 14:46:10 +0200
Subject: [PATCH 1/3] FIX: Password verification not implemented in RCC login
 page

---
 rcc/index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/rcc/index.php b/rcc/index.php
index 4dfe5d8..3dd445d 100644
--- a/rcc/index.php
+++ b/rcc/index.php
@@ -106,7 +106,7 @@ if ($config["rcc"]["rcc"] == "on") {
 
     <?php
     } else {
-        if ($passwd == $password) {
+        if (password_verify($passwd, $password)) {
             $_SESSION['login'] = true;
             include_once "./../res/php/BlogListGenerator.php";
     ?>

From 71f67d506ee20b8fd5751fae2f94037ec5d3cdd8 Mon Sep 17 00:00:00 2001
From: "Marcel Kapfer (mmk2410)" <marcelmichaelkapfer@yahoo.co.nz>
Date: Wed, 18 May 2016 14:47:51 +0200
Subject: [PATCH 2/3] Update Script for 1.4.2

---
 update-scripts/1-4-1_1-4-2.sh | 48 +++++++++++++++++++++++++++++++++++
 1 file changed, 48 insertions(+)
 create mode 100755 update-scripts/1-4-1_1-4-2.sh

diff --git a/update-scripts/1-4-1_1-4-2.sh b/update-scripts/1-4-1_1-4-2.sh
new file mode 100755
index 0000000..55af9e5
--- /dev/null
+++ b/update-scripts/1-4-1_1-4-2.sh
@@ -0,0 +1,48 @@
+#!/bin/bash
+# Update script for Rangitaki from version 1.4.0 to 1.4.1
+
+version="1.4.2"
+new="./rbe-new"
+
+echo -n "Downloading version $version from GitLab... "
+git clone -q https://gitlab.com/mmk2410/rangitaki.git "$new"
+
+if [[ $1 == "--debug" ]]; then
+    cd $new
+    git checkout master
+    cd ../
+fi
+echo "done"
+
+echo -n "Updating RCC... "
+mv ./rcc/password.php ./
+rm -rf ./rcc
+mv $new/rcc ./
+rm ./rcc/password.php
+mv ./password.php ./rcc/
+echo "done"
+
+echo -n "Updating Changelog... "
+
+if [ -f ./CHANGELOG.txt ]; then
+    rm CHANGELOG.txt
+fi
+
+mv $new/CHANGELOG.md ./
+echo "done"
+
+if [[  $1 != "--debug" ]]; then
+    echo -n "Cleaning up... "
+    rm -rf $new
+    echo "done"
+fi
+
+if [ -d "./update-scripts" ]; then
+    echo -n "Remove obsolete update scripts folder... "
+    rm -rf "./update-scripts"
+    echo "done"
+fi
+
+echo "$version" > ./VERSION
+
+echo "Your Rangitaki installation is updated to version $version"

From a6019319a2c0278a9c825d1e1753f8b672ccd536 Mon Sep 17 00:00:00 2001
From: "Marcel Kapfer (mmk2410)" <marcelmichaelkapfer@yahoo.co.nz>
Date: Wed, 18 May 2016 14:51:13 +0200
Subject: [PATCH 3/3] Version bump 1.4.2

---
 CHANGELOG.md | 3 +++
 package.json | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 20bb40c..e6a67e3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,9 @@
 
  - [S] release are always compared to the previous [S] release.
 
+## Version 1.4.2 (2016-05-18) [S]
+ - [FIX]: Password verification not implemented in RCC login page
+
 ## Version 1.4.1 (2016-05-18) [S]
  - Switch to HTTP Basic Auth for the RCC API
  - Store password as hash
diff --git a/package.json b/package.json
index 6765a59..60f926b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "rangitaki",
-  "version": "1.4.1",
+  "version": "1.4.2",
   "description": "A simple PHP blogging engine without any database dependencies",
   "main": "index.php",
   "scripts": {