[Summary view] [Print] [Text view]

   1  CHANGELOG - ZIKULA 1.3.1
   2  ------------------------
   3  
   4  - Fixed issue with FileUtil::getFiles() not respecting nestedData arg (issue #3139).
   5  
   6  - Updated DoctrineExtensions.
   7  
   8  - Added Imagine image manipulation library - https://github.com/avalanche123/Imagine
   9  
  10  - Added standard-fields, attributable, category and metadata extensions for Doctrine 2.
  11  
  12  - Fixed DoctineUtil::renameColumn() - was corrupting TEXT to VARCHAR(255) and TINYINT(1) for TINYINT(4) when renaming.
  13  
  14  - Added support for DateTime objects to DateUtil.
  15  
  16  - Fixed XSS issues in Theme module.
  17  
  18  - Clean up remaining table prefix reference closes #77.
  19  
  20  - Increased hook name field lengths from 60 to 100 characters.
  21  
  22  - Upgraded jQuery to 1.6.3.
  23  
  24  - Fixed issue with DoctrineExtensions plugin and short URLs - issue #91.
  25  
  26  - Adjusted installer to handle multilingual custom SQL files.
  27  
  28  - Upgraded PHPIDS to 0.7.0.
  29  
  30  - Fixed issue where restoring defauls for a module, the localization wasn't used (issue #71)
  31  
  32  - Fixed issue where pager wasn't able to parse array with three dimensions (issue #111)
  33  
  34  
  35  CHANGELOG - ZIKULA 1.3.0
  36  ------------------------
  37  
  38  - Moved minimum PHP version to 5.3.2.
  39  
  40  - Removed support for PHP register_globals and magic_quotes_gpc.
  41  
  42  - Created new OO MVC module format.
  43  
  44  - Introduced event notification system and added various events through out the core execution cycle for easy customisation and extension.
  45  
  46  - Added system-wide and module specific event based plugin system (called 'system plugins' and 'module plugins'.
  47  
  48  - Introduced a completely new module hooks system.
  49  
  50  - Deprecated the old hooks system.
  51  
  52  - Removed ADODB.
  53  
  54  - Introduced Doctrine 1.2.4 and shifted entire object library to use Doctrine.
  55  
  56  - Introduced Doctrine 2.0.5 as a plugin (was introduced after the PHP requirements were changed mid development).
  57  
  58  - Introduced SwiftMailer as a plugin service.
  59  
  60  - Upgraded to PHPMailer 5.1.
  61  
  62  - Replaced SafeHTML with HTMLPurifier.
  63  
  64  - Added PHPIDS intrusion protection support.
  65  
  66  - Introduced LivePipe UI library.
  67  
  68  - Added support for jQuery 1.6.1. with noConflict automatically set.
  69  
  70  - Created a new Zikula.UI ajax interface and library.
  71  
  72  - Large overhaul of interfaces to introduce AJAX into administration and give a more modern look and feel in the administration areas.
  73  
  74  - Replaced CSRF protection system with new token system to make false hits less frequent and does not break with tabbed browsing.  Introduced an additional option which does not interfere the browser back button.
  75  
  76  - Improved installer - less steps, less fiddling required and no need to
  77  delete installation/upgrade scripts and less post install/upgrade steps like the requirement to delete install- and upgrade.php to access
  78  administration.
  79  
  80  - Merged all templating and rendering control to Theme module and overhauled caching.
  81  
  82  Users Module
  83  ------------
  84  
  85  There has been a significant overhaul of Users module:
  86  
  87    - Admin can now resend a verification e-mail for a pending registration.
  88  
  89    - Admin can now send a password reset e-mail to a user.
  90  
  91    - Improved password recovery workflow. (issue #1631).
  92  
  93    - Added user name recovery. (issue #243).
  94  
  95    - Removed old Authentication API.
  96  
  97    - Changed old password checker js sytem to "passwordchecker" library (issue #1841).
  98  
  99    - Introduced new Authentication API capable of dealing with modern
 100  authentication (login) methods.
 101  
 102    - The Users module configuration variable 'changepassword', which
 103  indicated that the Users module did not manage an account's password, has
 104  been deprecated. To provide alternate management, override the appropriate
 105  template(s) and/or function(s). To provide full authentication services,
 106  implement the Authentication API in a module.
 107  
 108    - The mechanics of the authentication (login) process have changed, and
 109  the templates and functions have been updated accordingly. Templates that override the standard templates used for the login process will need to be
 110  updated, or removed.
 111  
 112    - Added the ability to register a new account that is associated with an
 113  authentication method other than a username and password (Users module
 114  authentication).
 115  
 116    - The mechanics of the registration process have changed, and the
 117  templates and functions have been updated accordingly. Templates that
 118  override the standard templates used for the login process will need to be
 119  updated, or removed.
 120  
 121    - Several functions throughout the Users module have been either
 122  deprecated or removed entirely, in order to support the new log-in and
 123  registration paradigms. Customizations at the function level must be
 124  updated accordingly.
 125  
 126    - Elements of the Legal module that were found in the Users module have
 127  been removed, and their functionality replaced with hooks or events. The
 128  age-check during registration has moved to the Legal module.
 129  
 130    - Removed MD5 as a valid hash method for user passwords.
 131  
 132    - Permission checks in the Users module were made more consistent
 133  throughout (issue #1872).
 134  
 135    - All e-mail messages sent by the Users module can now be
 136  multi-part/alternative messages, containing both a plain-text version and
 137  an HTML version of the message. Templates for both are provided and
 138  automatically used if present.
 139  
 140    - The subject line of all e-mail messages sent by the Users module can now be set from within the e-mail message template. See the templates provided for examples. If multi-part/alternative messages are to be sent, the subject from the HTML version of the message is used (however, the subject should not use HTML).
 141  
 142    - The template file names for all e-mail messages sent from the Users
 143  module have changed. If a site upgrading from 1.2 has created custom
 144  templates for these messages, they should be converted to the new names,
 145  and the ability to send multi-part/alternative messages should be
 146  accounted for.
 147  
 148    - If an attempt is made to log into an account that is pending
 149  registration (either because it is awaiting approval, or is awaiting
 150  verification, or both), the site admin can elect to display that status to
 151  the user in the error message on log-in failure.
 152  
 153    - If an attempt is made to log into an account that is inactive (either
 154  because or is awaiting legacy activation, or because the admin set that
 155  activated state for the user), the site admin can elect to display that
 156  status to the user in the error message on log-in failure.
 157  
 158    - The password recovery work flow has been improved to be clearer to the
 159  user.
 160  
 161    - The new account registration process now collects a password reminder,
 162  and displays this reminder to the user as part of the password recovery
 163  process. For existing sites upgrading to 1.3, existing users will be asked
 164  for a password reminder when they change their password.
 165  
 166    - The option to have the system generate a password and send it to a newly
 167  registering user has been removed as a verification option. Sites
 168  upgrading to 1.3 who have this option set will find this option changed to
 169  verification with a user-selected password.
 170  
 171    - Except in one case, passwords are no longer sent via e-mail to newly
 172  registering users. The one exception is when an admin creates a user
 173  account, sets a password for that account himself, and specifically elects
 174  to send the password via e-mail.
 175  
 176    - Confirmation or verification codes for registration verification,
 177  verification of change of e-mail address, and for password reset requests
 178  all now use the same mechanism and are handled consistently.
 179  
 180    - Requests to change e-mail addresses that go unverified can be set to
 181  expire and be removed a specified number of days after the request is
 182  made.
 183  
 184    - Requests to register a new account where e-mail address verification is required can be set to expire and be removed a specified number of days
 185  after the e-mail verification message is sent. Registrations whose e-mail
 186  verification expires will be removed from the system. Registrations
 187  awaiting approval will not expire until after they are approved.
 188  
 189    - If the registration process is configured for both moderation (admin
 190  approval) and e-mail verification, then the order in which these occur can
 191  be set. Verification can be required before approval, after approval, or
 192  at any time before or after. The admin can override the order and cause
 193  one or the other process to occur at any time.
 194  
 195    - Error checking of registration and user account fields has been improved and unified.
 196  
 197    - All user names and e-mail addresses are now stored in (and thus
 198  displayed in) lower case.
 199  
 200    - New user names are required to consist of only letters, numbers,
 201  underscores and periods. Accented and other non-ASCII characters are
 202  permitted as long as their Unicode type is set to the letter or digit
 203  group.
 204  
 205    - When retrieving user accounts (for any purpose, including for logging
 206  in) by e-mail address, a duplicate e-mail address check is performed even
 207  if the Users module is set to require unique e-mail addresses. This is to
 208  prevent the wrong account from being returned if duplicate e-mail
 209  addresses were allowed at any point or were added by the administrator.
 210  
 211    - A user with rights to delete user accounts is prevented from deleting
 212  his own account.
 213  
 214    - The registration date, last login date, and all other dates saved to the database tables by the Users module are now guaranteed to be UTC
 215  date/times in the database. They might be adjusted for display by other
 216  functions, however.
 217  
 218  ---
 219  
 220  - Introduced new module AJAX workflow.
 221  
 222  - Added advanced feature for themes to process AJAX via their own native controllers.
 223  
 224  - Removed and replaced debugging architecture.
 225  
 226  - Added debugging toolbar (configurable in config.php).
 227  
 228  - Added database caching capabilities to DBUtil.
 229  
 230  - Changed default template plugin delimiter to curl brackets.
 231  
 232  - Fixed UserUtil::getVars & UserUtil::getIDFromName functions can retrieve
 233  by all-numeric username.
 234  
 235  - Removed on-the-fly JS minifier for performance reasons.
 236  
 237  - Removed the need to 'regenerate' module list, this is now done
 238  automatically each time the module list is viewed.  It will also
 239  automatically remove invalid modules that have been removed from the file
 240  system.
 241  
 242  - Fixed problem with deleting group via ajax with insufficient permissions
 243  (issue #1568).
 244  
 245  - Fixed an issue where an incorrect group type was displayed when editing a 
 246  group through the administration panel (issue #2993).
 247  
 248  - Allow module to specify core version requirements.
 249  
 250  - Added missing icons for blocks collapsible function. (issue #1847).
 251  
 252  - Moved search procedure to api function. (issue #1859).
 253  
 254  - Admin panel icons are shown to a user if that user has edit access for
 255  at least one instance. (issue #1026).
 256  
 257  - When accessing the site through the admin.php entry point with no module
 258  specified, if the user is not logged in then he is redirected to a login
 259  screen. (issue #1729).
 260  
 261  - Corrected minor defects that generated notices (issues #1901, #1902).
 262  
 263  - The Mailer module can now send multipart/alternative e-mails with the
 264  specification of a plain-text altbody (issue #1768).
 265  
 266  - Fix a problem with the encodeurl function of the Search module (issue
 267  #1866).
 268  
 269  - Added {modulelinks} navigation plugin (issue #1238).
 270  
 271  - Added new {helplink} plugin for documentation with ability to use Zikula.UI.
 272  
 273  - Searchbox toggle (issue #1810).
 274  
 275  - Link to help page for each security alert (issue #1692).
 276  
 277  - Removed the requirement for block templates to specify language domain manually.
 278  
 279  - Added ability to check all radios in HTML Settings (issue #1551).
 280  
 281  - New APIs DataUtil::decodeNVP(), DataUtil::encodeNVP(),
 282  DataUtil::encodeNVPArray().
 283  
 284  - Adapted the Extensions module for a Zikula multisites system with
 285  multiple domains (issue #1968).
 286  
 287  - Modify html maxlength of block title to reflect the database structure.
 288  (issue #1980).
 289  
 290  - Addition of Zikula_FileSystem class libraries to allow easy interaction with
 291  file systems via local/ftp(s)/sftp (issue #1517).
 292  
 293  - Ability to export CSV file from users module added. (issue #1954).
 294  
 295  - Escaped illegal char in pagelock template (issue #2004).
 296  
 297  - Added minute based refresh times for blocks (issue #1999).
 298  
 299  - Added ability to administrate the "Admin Panel" with using AJAX, drag and drop to move modules to different categories, create/edit/delete admin categories via right click (issue #1919).
 300  
 301  - Improved and simplified `.htaccess` rulesets.
 302  
 303  - Altered ZLanguage::countryMap() for Sweden from sv to se.  Note the
 304  language code should be so, but the country code should be se. (issue
 305  #2017).
 306  
 307  - Blocks module admin section now has filtering options for
 308  block-position, module, language and active-status. The allows remove of
 309  the old showall/showinactive link in the admin section. (issue #2012,
 310  #2020)
 311  
 312  - Blocks module now has sorting options for the main columns in the admin
 313  view. (issue #2012).
 314  
 315  - Fixed Zikula_Form_View::registerPlugin() in environments where the
 316  installation is not in the server document root.
 317  
 318  - Overhauled Category administration interface with Zikula.UI.
 319  
 320  - Added adapter to support the illegal use of DBUtil::executeSQL()
 321  processing the ADODB object manually (without the use of
 322  DBUtil::marshallObjects().
 323  
 324  - Fixed theme list not sorted correctly on Theme view (issue #1974).
 325  
 326  - Fixed pager plugin images always in english (issue #1883).
 327  
 328  - Fixed wrong contents in modvar 'permareplace' (issue #2044).
 329  
 330  - Updated css messages (issue #2043, #2030).
 331  
 332  - Added support for HTTP 500 response in Errors module.
 333  
 334  - Fixed issue with system vars and modvars that prevented retrieval of a
 335  stored NULL value which would return the default value instead.
 336  
 337  - Added exception support in front controller and module controllers.
 338  
 339  - Added const render plugin and modifier to allow class constants in
 340  templates.
 341  
 342  - Added front controller exception handling.
 343  
 344  - Removed Zikula_View singleton pattern, this is now handled via
 345  Zikula_ServiceManager, one instance per module or plugin.
 346  
 347  - Removed need to specify domain= in template {gt} calls.
 348  
 349  - Improved StringUtil::highlightWords() (patch by Gabriele Pohl).
 350  
 351  - When short URLs are enabled, 3-letter or 2-letters can't be used
 352  anymore. This also fixes issues with the RSS theme. (issue #1800).
 353  
 354  - Fixed validation of directory based short URLs to produce 404 if target
 355  not found (issue #923).
 356  
 357  - Removed support for filebased short URL rewriting.
 358  
 359  - Deprecated FileUtil::mkdirs(), use native PHP mkdir() with $recursion
 360  flag set true instead.
 361  
 362  - Merged ObjectData and Workflow table definitions to Settings and deleted
 363  the modules - don't need separate modules just to provide table
 364  definitions.
 365  
 366  - tables.php: $module_column is now unnecessary if the there is no column
 367  prefix, i.e. if name => name.
 368  
 369  - DataUtil::formatForOS() not Windows file path compatible (issue #1838).
 370  
 371  - New location for core stylesheet in /style/core.css (issue #2211).
 372  
 373  - Deprecated ZFeed and SimplePie from the core.
 374  
 375  - New location for core stylesheet in /style/core.css (issue #2211).
 376  
 377  - Added @import handling to css combiner (issue #1801).
 378  
 379  - New button styling (issue #1574).
 380  
 381  - Relocated system fatal error templates (siteoff.tpl, notinstalled.tpl,
 382  dbconnectionerror.tpl and sessionfailed.tpl) to
 383  system/Theme/templates/system.
 384  
 385  - Add date in Zikula error log file (issue #2209).
 386  
 387  - Allow override of style/core.css with config/style/core.css.
 388  
 389  - Provide 'pageutil.addvar_filter' event to override anything added by
 390  PageUtil::addVar, {pageaddvar}, or {pageaddvarblock}.  This allows for
 391  complete override freedom.
 392  
 393  - Added new default pager style (issue #2264)
 394  
 395  - Streamlined user frontend of Themes module (issue #2279, #3034).
 396  
 397  - Added Upgrade All options, and Module API to upgrade all modules with
 398  one click.  This will work for all non-complicated upgrades of Core also.
 399  
 400  - Fixed LogUtil errors in CategoryUtil (issue #2276).
 401  
 402  - Admin icons update of the system modules. (issue #2300).
 403  
 404  - tables.php now supports index options in the _column_idx array.
 405  array(inxname, array('columns' => array(fld1, fld2..), 'options' =>
 406  'unique') (issue #1885).
 407  
 408  - Added the Menutree into the Blocks module.
 409  
 410  - Added horizontal and vertical drop down menu examples for Menutree. (issue #2313).
 411  
 412  - Added htmlentities modifier to properly convert utf8 chars to html
 413  entities.
 414  
 415  - Replaced SetEnvIf with FilesMatch in .htaccess files. Removed extensions
 416  tif, flv, ico, cur from all .htaccess, swf from all except modules/ and
 417  html from all except system/Theme/includes (issue #2334).
 418  
 419  - Added FileUtil::exportCSV() to simplify data export to csv files.
 420  
 421  - Themes can now process ajax request natively (issue #2326).
 422  
 423  - New block with User account links (issue #2374).
 424  
 425  - Deprecated DataUtil::parseIniFile(), use native PHP parse_ini_file()
 426  instead.
 427  
 428  - The Mailer module can now send text-only, HTML-only, and
 429  multi-part/alternative e-mail messages. Multi-part/alternative messages
 430  contain both a plain text message and an HTML-formatted message. If a
 431  recipient's e-mail client does not support HTML messages, then the
 432  plain-text message will be displayed to him.
 433  
 434  - Added option to translate the language changer block option into native
 435  language. (issue #2119).
 436  
 437  - Added {gettext} block (issue #2414).
 438  
 439  - Changed the label for the user's account activated status from
 440  'Activated' to 'Status' in the administrator's Users manager.
 441  
 442  - The users list in the administrator's Users manager is now sortable by
 443  user name, uid (internal ID), registration date, date last logged in, and
 444  status.
 445  
 446  - Added markdown and markdown-extra support and with Smarty modifiers
 447  (issue #2487).
 448  
 449  - Added doctrine support to DropdownRelationlist form view plugin. (issue
 450  #2442).
 451  
 452  - Added more HTML5 tags to allowed HTML settings page (issues #2139 and #2460).
 453  
 454  - Fixed conflict in search module short-urls url (issue #2494).
 455  
 456  - Fixed minor issue in uploadinput form plugin (issue #2551).
 457  
 458  - Added missing member var for display area format in dateinput form
 459  plugin (issue #2552).
 460  
 461  - Added doctrine support to selectmodobject(Array) view plugins (issue
 462  #2542).
 463  
 464  - Included generic url routing classes (issue #2557)
 465  
 466  - Added a new attribute, precision, to the formfloatinput Form plugin,
 467  which controls the number of digits after the decimal (issue #2616)
 468  
 469  - The {userprofilelink} Smarty modifier was splitted on profilelinkbyuid and {profilelinkbyuname} to avoid problems with numeric usernames (issue #2971).
 470  
 471  - Fix bad icon transparency.
 472  
 473  - Recoded all icons to PNG format (issue #2831).
 474  
 475  - Fix inconsistency with styles/ vs. style/ folders (issue #2805).
 476  
 477  - Cleanup RSS icons (issue #2830).
 478  
 479  - Altered style for number fields(issue #2757).
 480  
 481  - Activate new Categories by default (issue #2748).
 482  
 483  - Switchdisplaystate rendering Bug in IE7 and Chrome (issue #2714,
 484  #2707).
 485  
 486  - CSS issues in IE and Chrome (issue #2685, #2702).
 487  
 488  - Removed smilies removed (issue #2640).
 489  
 490  - New color picker solution (issue #2634).
 491  
 492  - Created easy drop-menu for module (admin) links (issue #2646).
 493  
 494  - Dropdown menus (issue #2649).
 495  
 496  - Added a new template block function
 497  {pageaddvarblock}...{/pageaddvarblock} to allow inline scripts, styles,
 498  etc. to be placed in the page's head section or near the closing body tag.
 499  
 500  - Renamed the page variable 'rawtext' to 'header' (Used with PageUtil,
 501  {pageaddvar}, {pagesetvar}, etc.). If operating in legacy mode, 'rawtext'
 502  will map to 'header', if not then 'rawtext' will be treated as just
 503  another page variable name, and will NOT render to the page.
 504  
 505  - Enabled support of persistent data on Zikula_Form_View to let Form
 506  Handlers store data through the process (issue #3023).
 507  
 508  - Theme config .ini files now can handle their own variables, overriding
 509  the themevariables.ini general ones (issue #3034).
 510  
 511  - Forms framework has been extended to allow multiple forms on a single page and does not break in a tabbed environment.
 512  
 513  - improved functionality and usability of advanced block filtering (issue #2875)
 514  
 515  - Fixed CSS/JS combination not working if using personal_config.php (issue #2916)
 516  
 517  - Fixed Render and Theme cache (issue #3030)
 518  
 519  - Theme Admin Panel fixed. Theme config .ini files now can handle their own variables, overriding the themevariables.ini general ones. (issue #3034)
 520  
 521  - Changed template override system from 'scan everywhere' to explicit override mapping.
 522  
 523  - Added indexes to object_attribution (issue #3048).
 524  
 525  - Clear theme cache automatically when it gets disabled (issue #2743).
 526  
 527  - Optimization of the admin templates (issue #3088).