update CHANGELOG
+ empty attachments dir and restrict access to it via .htaccess ;
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format
code format