Nearly four months after 3.08, next stable release is available. As usual, I didn't have the time to include all the features I wanted to add.
The big task was to include support for SpamAssassin logfiles. You can specify your spamassassin logfilename (the rotation number should be the same as your mail server) or parse your syslog if both spam and mail are logged in the same file. Spam emails have now its own reports.

Icecast support have been improved. You can now parse logfiles with hour/min and hour included in the filename. Many bugs have been fixed.

I had some problems building the debian package as RPM format have changed since my latest Mandriva 2008 (I use now 2010). I had to patch the file /usr/share/perl5/Alien/Package/Rpm.pm, adding 'lzma -d' to cope with new rpm compression :

- $this->do("rpm2cpio ".$this->filename." | lzma -d | (cd $workdir; cpio --extract --make-directories --no-absolute-filenames --preserve-modification-time) 2>&1")
- /usr/share/perl5/Alien/Package/Rpm.pm: open (RPMLIST, "rpm2cpio ".$this->filename." | lzma -d | cpio -it --quiet |")

First Release Candidate available. It include some fixes about icecast logfiles parsing (-d flag now works), using only one logfile with zipcut = 3 (apache rotation), error stats parsing, security within web admin ...

Thanks to Mark D. Anderson, support for icecast logfiles have been improved. I can now parse logfiles with hour/min/sec string in filename. More work need to be done in order to use the -d flag.
Some others problems have been fixed : cron-url skip binaries files, improved installer, cron-w3perl infinite loop ...

Thanks to Luis Ramirez, I have been able to add support for IIS FTP logfiles. A default configuration file is now available for Windows with W3C logformat selected. Both Unix and Windows FTP server are now supported.

Various bug have been fixed. No big changes since 3.083 as I didn't work too much on the package. I hope to include new features soon.

I was not able to work on W3Perl for the last few weeks as I broke my leg when skiing. I will answer to everyone and try to fix problems you sent me as soon as possible.

Finally, spamassassin reports have been completed. Now available in hourly and real time reports. Emails without MIB can be parsed and extracted from Spamassassin entries.
Planning to add support for cups logfiles but some interesting fields are missing as filesize or filename.

SpamAssassin reports are nearly completed. Daily reports have been added.

There are many ways to hack your website. Some are using framework vulnerabilties and they can be logged in your web server.
I'm thinking about adding such feature in w3perl. They are already some basic strings which may be filtered as a request for password file.

Here is a list of useful informations about web security :

http://www.watchguard.com/infocenter/editorial/135142.asp
http://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet
http://www.owasp.org/index.php/Cross-site_Scripting_(XSS)
http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/cross-site-malicious-content.html
http://www.cgisecurity.com/xss-faq.html
http://www.ibm.com/developerworks/web/library/wa-secxss/
http://www.dwheeler.com/secure-programs/Secure-Programs-HOWTO/cross-site-malicious-content.html
http://www.webreference.com/programming/perl/taint/
http://www.technicalinfo.net/papers/CSS.html

Preliminary support for SpamAssassin logfile have been added. The package can now parse your mail logfile (or syslog) and detect spam entries or you can specify a spamassassin logfile. Only SpamAssassin logfile version 3 is supported.
You can choose also to parse only spam entries.

Spam report - Remote emails flaged as spam - Local emails flaged as spam - Highest sender/receiver spam - Number of spam by day - Spam rank histogram - Number of spam flag histogram - Spam sorted by domain - Stats over flag spam

Spamassassin logfiles can now be parsed, allowing to flag emails and make some reports on emails filtering rules.

- SpamAssassin :
http://wiki.apache.org/spamassassin/SpamdSyslogFormat
http://wiki.apache.org/spamassassin/StatsAndAnalyzers