2013-07-12 12:45:05 by Jonathan Perkin | Files touched by this commit (181) |
Log message:
Bump PKGREVISION of all packages which create users, to pick up change of
sysutils/user_* packages.
|
2013-06-09 06:43:43 by Ryo ONODERA | Files touched by this commit (1) |
Log message:
Fix typo.
|
2013-06-09 06:11:01 by Ryo ONODERA | Files touched by this commit (5) | |
Log message:
Update to 5.6.1.2
* Update MESSAGE
* Create empty directories for out-of-the-box running.
Changelog:
5.6.1.2 Release Notes
Bug Fixes
Fixed bug where sites had no CSS under certain circumstances
Better support for multilingual page names while retaining XSS protection.
Fixed scrollbar not returning on second open of dialog.
Quieter errors if page cache errors out in mkdir or unlink
Fixed JavaScript bugs in Date Nav edit mode (thanks synlag)
Developer Updates
Added a new constant for PAGE_PATH_SEGMENT_MAX_LENGTH, that defaults to 128. \
This is the number of characters that URL segment can be (passed to the URLIfy \
library.)
5.6.1.1 Release Notes
Feature Updates
Sends an email upon user activation (for sites that keep users inactive \
until theyâre approved.)
Bug Fixes
Fixed error installing block add-on if other add-ons had already been installed.
Fixed inability to set advanced permissions on blocks in areas with spaces \
or certain other special characters in them (a previous 5.6.0.2 bug fixed this \
problem at the area level, but not at the block level.)
Fixed broken bulk page delete interface.
Fixed inability to upgrade from 5.5.2.1 to 5.6.1
Fixed incorrect usage of getPermissionCollectionID for cache identifier (it \
was supposed to be used for caching in certain situations but was not. Should \
lessen the amount of queries on some pages.)
Fixed this \
http://www.concrete5.org/developers/bugs/5-6-1/5.6.1-fatal-error-call-to-a-member-function-getcollectionid/
Fixed \
http://www.concrete5.org/developers/bugs/5-6-1/modal-exit-sets-overflowauto-on-body-tag-which-should-actually-b/#discussionpost
Fixed bug where blocks in global headers wouldnât display their custom \
design values in the design dialog (although they would work in the page.)
Fixed: HTML showing as text in file attributes, better display value in file \
attributes in general.
Fixed file version not updating due to cache.
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-1/local-page-cache-doesnt-clear-on-new-version/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-1/cannot-call-method-hide-of-undefined/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-1/layout-loading-preset-buttons/
Fixed UserAttributeKey::getByHandle() returning -1 in some cases.
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-1/intelligent-search-wont-work-when-quick-link-has-been-deleted/
Fixed: http://www.concrete5.org/developers/bugs/5-6-1/another-block-design-issue/
Fixed: Survey Block error if no option is selected
Fixed: Upgrade from 5.6.0.2 - Error: Block Type cannot be installed because \
no db.xml file can be found
Fixed: Words in URLs are removed even if "Excluded URL Word List" \
is empty
Fixed error in setup on child pages if pages had had their page types \
changed in the past.
Fixed: Deleting a basic workflow kills editing in some cases
Fixed: Fatal Error when paste a Page List block with rss enabled
Fixed: PageCache Library fails to Output Cache Headers once cached
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-1/composer-changes-not-published/ \
(Thanks Remo)
Fixed: http://www.concrete5.org/developers/bugs/5-6-1/clash-with-cache-class
Developer
Fixed inability to override text helper in the core.
5.6.1 Release Notes
Performance Improvements
Removed much of the cache library and rewrote calls to dramatically improve \
performance.
Completely New Page Caching Library
Plugabble for working with proxy servers and caching libraries
Fires much earlier and requires far fewer resources to run (and no \
database connections)
Pages can be checked for inclusion in the cache and expired manually \
from within the speed settings dialog (which has been renamed Full Page Caching)
Proper page cache headers are written.
Faster and more reliable customized theme generation (which points to the \
cached CSS file directly for better performance.)
Environment/override cache is now stored in the files/cache/ directory \
(meaning that deleting this directory will clear the override cache, and that it \
can be accessed without hitting the database)
Block caching is now stored in the database for faster lookups
Improved general performance of the dashboard by limiting unneeded database \
lookups
Form block only uses jQuery UI when necessary (thanks jordanlev)
Feature Updates and Behavioral Improvements
Added the ability to control which words are excluded from URLs for SEO \
purposes (found in Dashboard > System and Settings > SEO > Excluded \
from URL Words)
Improved display of Next/Previous block in edit mode. Re-introduced \
âExclude System Pagesâ to the block, defaulted to on.
Now we notify users if their cookies are disabled when they attempt to login \
(thanks olsgreen)
Slideshow Improvements
Slideshow automatically clears, making it work better in Greek Yogurt theme.
Slideshow height doesnât jump around as much (thanks Remo)
Google maps less intrusive on failure.
Added button to delete all form responses for a particular form (thanks \
luisbarresco)
Better fix for this: \
http://www.concrete5.org/developers/bugs/5-6-0-2/5.0.6.2-help-popup-window-sticks-on-the-screen/
Including Italian Provinces (thanks mlocati)
Bug Fixes
Composer now honors approve and move workflow.
Composer now honors advanced property and page attribute permissions.
Fixing permissions loophole where users who couldnât add blocks to \
particular areas could add them to other areas and then move them into the \
areas.
Fixed: When applying design to area, it cascades to other areas
Fixed occasional white page with a JSON response when saving in Composer.
Added back the ability to have periods in additional page path names.
Fixed advanced permission bug where Schedule Guest Access on blocks - locks \
site behind login screen
Re-allowed dashes in File set names (thanks danklassen)
Fixed translation bugs in 5.6.0 that had to do with the localization library \
not returning an object.
Fixed permission bugs on some complicated sites updating from 5.5 to 5.6.
Fixed XSS vulnerability in composer crop image.
Minor XSS vulnerability fixes throughout.
Better integration with Bootstrap themes.
Added SVG to file extension list by default (thanks Remo.)
Fixed incorrect syntax in generated sitemap: \
http://www.concrete5.org/developers/bugs/5-6-0-2/generated-sitemap-incorrect/ \
(thanks Remo)
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/typo-in-uninstall-package-page/ \
(thanks Remo)
Fixed âWrong parameter count for array_uniqueâ that occurred on \
PHP < 5.2.10 on adding/updating user groups (thanks Remo)
Added $_REQUEST variable to the variables sanitized for magic quotes when \
magic_quotes_gpc is enabled (thanks Remo.)
Specifying a user in the legacy permissions XML would fail because it tried \
to use the Group object. This is fixed.
When logging in via email, the email address is now correctly sent in the \
forgot password template.
Fixed \
http://www.concrete5.org/developers/bugs/5-6-0-2/wrong-declaration-in-concretetoolsfilesget_data.php/ \
(thanks Remo)
Fixed \
http://www.concrete5.org/developers/bugs/5-6-0-2/group_set.php-class-name-typo/#discussionpost \
(Thanks Remo)
Fixed event registrations getting lost to new 5.6 class structure and \
singleton pattern.
Fixed lots of bugs with layouts, including moving up and down, layouts with \
presets, some inconsistencies (thanks shelkie and smartwebprojects)
Dashboard Pages can now have their titles localized (in the HTML title tag) \
(thanks mlocati)
Minimum required PHP version updated to 5.2.4 and enforced during install.
Added Loader::job() method (thanks JohnTheFish)
Fixed bug where deleting an administrator group could cause problems in site \
access (thanks jamietellin)
Fixed ugly SQL error that would occur if you tried to save a composable page \
type with a particular parent and then didnât select that parent.
Too small version compare/preview window in Firefox and IE has been fixed
Fixing bugs in basic workflow notification \
(http://www.concrete5.org/developers/bugs/5-6-0-2/workflow-notify-on-approve-event-ignored/)
Fixed breadcrumb auto-nav template not putting a separator between certain \
nav elements
Fixed SQL error on search by theme on sites that upgraded before 5.6.0
Page type names are now less restrictive
Lots of HTML fixes (mis-nested tags, incorrect tags, etc...) (thanks mlocati)
Added SVG to image file types (thanks Remo)
pkgID is now correctly duplicated on pages that have it set
Fixing bug where custom styles on a block would disappear if a layout was \
added to that area (thanks mlocati.)
Fixed: getStyleSheet in conjunction with caching does not make allowance for SSL
ogg, ogv, and as videos (thanks mlocati)
Changing attributes in sitemap or page search in dashboard wouldnât \
trigger a page reindex. This has been fixed.
Better feedback and redirects when adding pages or deleting pages in sitemap \
flat view.
Included newempty-trash-if-a-page-is-not-approved./ (Thanks remo)
Bug Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/editable-styles-with-spaces/ \
(Thanks remo)
Bug Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/survey-block-pie-chart-shown-i \
Fixed \
http://www.concrete5.org/developers/bugs/5-6-0-2/the-result-page-selection-is-not-saved-when-you-add-or-edit-the-/#discussionpost
Fixed \
http://www.concrete5.org/developers/bugs/5-6-0-2/google-maps-error-on-dashboard-when-used-in-global-area/
al odd behavior when numbering default versions in version history.
Fixed \
http://www.concrete5.org/developers/bugs/5-6-0-2/tinymce-basic-breaks-in-ie7/
Fixed âapproveâ button not showing up when deleting a block in a stack.
Fixed \
http://www.concrete5.org/developers/bugs/5-6-0-2/installed-5.6.0.2-now-cant-logoff-or-get-the-top-nav-to-edit-pag/
Fixed bug where file or user attributes couldnât be saved after \
clearing until the page was reloaded
Fixed http://www.concrete5.org/developers/bugs/5-6-0-2/content-import-error/
Fixed bug where you couldnât add groups to combinations in advanced \
permissions if those groups appeared on the second page (or greater) of group \
results.
Dashboards in SSL will load the picture of the day from an https:// URL
Fixed Bulk SEO Page List not displaying all pages in some cases
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/package-id-is-not-set-when-installing-page-types-from-theme-insp/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/fatal-error-when-installing-from-custom-starting-point/
Changed topbar margin to apply to html instead of body
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/page-list-limits-to-20-results-when-no-limit-is-set-in-block/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/form-results-in-dashboard/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/dir_rel-misbehave-at-lower-level-when-concrete5-is-installed-on-/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/versions-popup-action-buttons-are-wrapping-up-to-the-next-line-i/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/upgrading-a-site-where-the-administrators-group-has-been-deleted/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/adding-file-to-sets-custom-checkbox-inconsistency-across-browser/
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0-2/line-break-in-search-index-for-select-attribute/#discussionpost
Developer Updates
Added the SITEMAP_APPROVE_IMMEDIATELY constant. Defaults to true. If set to \
false, pages added via the sitemap will not be approved immediately (or run \
through workflow.) Useful for sites where workflow is prevalent.
added option in code for autonav templates to ignore exclude_nav attributes \
(thanks jordanlev)
Fixing issue with countries/states helpers being extended improperly
Added ENABLE_TRANSLATE_LOCALE_EN_US constant for international users who \
wish to force Zend_Locale to create an object even if using the en_US locale.
Updated SimplePie RSS parsing library to 1.3.1
Added APP_VERSION_DISPLAY_IN_HEADER constant (defaults to true) to control \
whether the version of concrete5 is shown in the meta header section (thanks \
Remo)
Added new Security helper with sanitize functions (Thanks Chris Rosser)
Added new AJAX Helper (thanks mlocati)
New events
on_file_added_to_set
on_get_countries_list
on_get_states_provinces_list (thanks mlocati)
on_file_removed_from_set (thanks danklassen)
on_page_urlify (thanks remo)
on_page_body_index (thanks danklassen)
|
2012-12-25 20:54:51 by Ryo ONODERA | Files touched by this commit (1) |
Log message:
Do not install *orig files.
Thank you, dholland@.
|
2012-12-25 10:35:29 by Ryo ONODERA | Files touched by this commit (1) |
Log message:
Update distinfo.
|
2012-12-24 05:39:58 by Ryo ONODERA | Files touched by this commit (3) |
Log message:
Bump PKGREVISION.
Fix XSS.
Thank you, taca@.
|
2012-12-24 02:35:20 by Ryo ONODERA | Files touched by this commit (1) |
Log message:
Create user and group
|
2012-12-06 15:52:03 by Ryo ONODERA | Files touched by this commit (3) | |
Log message:
Update to 5.6.0.2
Changelog:
5.6.0.2 Release Notes
Behavioral Improvements
Improvements to ccm.app.css and ccm.app.js for coexistence with full \
bootstrap themes. Broke bootstrap.js into a separate JavaScript file.
Bug Fixes
Fixed bugs where certain block dialogs and add stack dialog were blank in IE8.
Fixed IE bugs where the sub-toolbar status bar wouldn¡Çt display
fixed inability to use page picker when register globals was on.
Fixed bug where deleting alias would delete source page (again).
fixing bug where blocks would disappear when adding a layout if the cache was on.
fix bug in simple permissions display when working with deleted groups.
Fixed blank file manager window in IE8.
Attempting to solve intermittent error in PagePermissionAssignments messages \
that happen on certain upgrades.
Fixed error when using group combinations on basic workflow.
Better permissions upgrading when using simple permissions.
Guestbook comments will now no longer be removed on update of guestbook block.
Attempting to solve ¡ÈIllegal Mix of Collations¡É MySQL error that can \
affect some setups when previewing pages.
Fixed: http ://www.concrete5.org/index.php?cID=380195
File manager saved search cosmetic improvements.
Removed old code from user avatar uploader that could cause problems if used \
maliciously.
Fixed bug where Schedule Guest Access would remove all but guest users from \
view permission.
\
http://www.concrete5.org/developers/bugs/5.6.0.1/getpermissionobject-incompatibles-between-5.5.x-and-5.6.x/
Pretty URLs are now honored in the Next/Previous block.
Fixed: \
http://www.concrete5.org/developers/bugs/5.6.0.1/wrong-notice-in-file-permissions-dialogue/
Fixed error where setting custom groups on Access User Search or Assign User \
Groups permission results in showing one group repeated over and over.
Added legacy getPermissionsObject back to Block Controller to fix Reviews \
add-on, others.
Fixed typo in the form block (Thanks Remo).
Fixing the error in loading the editor when using custom code and the \
Concrete TinyMCE theme.
|
2012-10-28 07:31:10 by Aleksej Saushev | Files touched by this commit (600) |
Log message:
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
|
2012-09-20 23:29:08 by Ryo ONODERA | Files touched by this commit (3) | |
Log message:
Update to 5.6.0.1
* Fix security bug
Changelog:
Tar ball is not shipped with changelog...
5.6.0.1 Version History
Behavioral Improvements
Page Type names are sanitized better when created in the dashboard.
Multilingual controls in dashboard now display languages in their native \
language (for easier understanding. thanks patrickheck)
Better display when removing groups or users and having them show up in \
advanced permissions list.
Fixing bug where composer pages weren't being added to the bottom of the \
list. Fixing bug where moved pages weren't getting a rescanned display order
Fixing missing dashboard icons for Stacks and Block Types
Bug Fixes
Fixed inability to use Layout Presets
Fixed bug where blocks couldn¡Çt be copied out to child pages from page \
type defaults on upgraded sites.
Fixed form block bug where you¡Çd be unable to enter an email address in \
the form block for notification.
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0/getthemepath-prints-absolute-paths/
Blocks and packages can now insert header items into the 404 page correctly.
fixed: \
http://www.concrete5.org/developers/bugs/5-6-0/page-type-icons-incorrect-when-included-in-composer/
Fixed ¡ÈOut of range value for column 'uLastIP¡É error that would occur \
with certain IP addresses.
Bulk SEO Tool now shows DIR_REL constant within the URL slug properly.
Group sets now appear on the dashboard home page.
Fixed JavaScript error leading to aborted installation when installation \
routines have apostrophes in them (primarily for translated versions of \
concrete5.)
Theme assets no longer have two slashes in the URLs.
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0/fatal-error-call-to-a-member-function-isglobalarea-on-a-non-obje/ \
by hiding permissions options on the frontend (use the stacks interface \
instead.)
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0/global-area-update-issue-when-using-preview-my-edits/
Date Navigation block now honors the Pretty URLs settings.
Fixed: \
http://www.concrete5.org/developers/bugs/5-6-0/advanced-permissions-dont-work-after-translation/
Fixed: page_types/ directory was incorrectly excluded from overrides detection.
fixing 'Call to a member function getProxyBlock() on a non-object in \
/core/libraries/block_view.php on line 39' when calling an action URL on a \
non-object block
Developer Updates
Validation helpers didn¡Çt extend the core helpers properly. This has been \
fixed.
Clear override cache on adding a single page.
Refreshing overrides cache when installing a block type (fixes Designer \
Content add-on not working with the overrides cache turned on).
5.6.0 Release Notes
Feature Updates
Completely updated permissions system, including:
More granular permission control that maps directly to common concrete5 \
tasks.
Ability to control which users or groups CAN¡ÇT do something, as \
opposed to only allow those who CAN do something.
Ability to grant a permission to only those users in a particular \
combination of groups.
Ability to control which users and groups can add which types of block \
site-wide and in simple permissions mode.
Restrict permissions to various roles, including ¡Èuploader of the \
file¡É, ¡Èpage owner¡É, etc...
Shortcut for enabling guest view access on blocks.
Group Sets can group groups together for organizational purposes, \
permissions.
Fine-grained, granular controls on content types, permission types.
New user permissions to control who can edit which users, assign which \
groups, etc...
Complete new extendable workflow system, including basic workflow and \
waiting for me. Improved, normalized and rewrote a lot of old code for things \
like pending page actions to bring them into the workflow system.
Improved interface work, including bootstrap 2 integration.
Improved Mobile Support
Mobile theme switcher now integrated into core
Improved mobile performance of header on mobile devices.
Improved dashboard on mobile devices; fully responsive dashboard across \
all devices.
You can now choose an individual block or an entire stack when adding a \
stack on the front-end.
Added bulk actions to the user search
New SEO Manager in Dashboard > System & Settings gives you one place \
to modify SEO properties for your entire site.
Made page theme a versionable property.
Make page type a versionable property.
Ability to reorder block types globally (thanks jordanlev!)
You can now copy and paste a stack on the front-end.
Page URL Slugs now use the URLify library instead of our own solution (which \
wasn¡Çt as consistent or effective.)
Additional Features and Behavioral Improvements
When implicitly checking pages out (editing properties in sitemap, etc...) \
they will be checked back in when the dialog is closed. (New in 5.6.0b2)
Added an Add Group button to Groups page.
Rich text editor in dashboard now uses site theme for styles.
Color picker UI more consistent with 5.5 (thanks arcanepain.)
Add new page window no longer cut off on small monitors.
Search Block - Added page selector when posting search results to another page.
Form Block
added date and date time field types that allow a user to use a \
date/time picker to choose values.
Email field now has ability to be set as the default reply-to so \
administrators can reply directly to the form submitter.
No more jumpiness on editing.
Added theme to Page Search.
Removed HTML diff python library (since it didn¡Çt work very well). \
Replaced with tab-based compare that lets you compare more than two versions.
Off-server requests can now be made with a proxy server, found in System \
& Settings (thanks garagan!)
Added copy to the version dialog box. Improved version dialog box appearance.
Improved quick nav experience, reworked dashboard dropdown to use favorites \
for adding. Favorites show up in the dashboard dropdown.
You can now select Gravatar as a fallback user avatar (thanks danklassen!) \
in the profiles section of the dashboard.
Add page can happen with submit.
More consistent sitemap/search overlay, with various searches only loaded \
when needed. Tabs remember last selected sitemap/search option.
Miscellaneous string translation and Internationalization improvements \
(thanks thuic)
Added getSearchableContent method to rss viewer block so it¡Çs content \
will show up in search results (thanks 12345j)
Built-in countries and state/provinces helpers now use Zend_Locale for \
easier management, more consistency and localization.
Added URL Slug in Composer.
Maintenance mode now lets you perform some sitemap and page operations while \
the site is down.
Zend_Translate can now be stored at a different path to fix Zend_Translate \
bug with period in directory. Added TRANSLATE_OPTIONS that can be specified in \
config/site.php (thanks ahukkanen).
Added user to the Log entries screen (thanks klompie!)
Internationalization improvement: Zend_Date now included. Dates are now \
localized into the proper language (thanks patrickheck.). DateHelper::date() \
manages localization.
Block limits set in templates are now updated in realtime without a page \
refresh (thanks bhcarpenter)
Now you can clear your page search index from the ¡ÈSearch Index¡É page \
in the dashboard (which will let you fully reindex it through the reindex pages \
job.)
Form block: Adding the ability to set an email address as the reply-to \
address when replying to the email (thanks danklassen.)
Blog RSS feed now includes categories (thanks stonier)
Complete rewrite of sitemap.xml generation job to improve performance, no \
longer show deleted pages, add new constants for sitemap starting point, default \
change frequency and priority (thanks mlocati.)
Nicer alignment on Next/Previous block (thanks thirdender.)
Using realpath() instead of ../ to fix some base_dir errors, make things nicer.
More consistent ordering of log entries when they happen in rapid succession \
(thanks Johnthefish).
Cleaned up javascript in the google map block (thanks Remo).
Edit in Composer now available in page search.
Installing in a particular language no longer sets that language as the \
default in config/site.php (which would render no other languages selectable.)
Added cookie check to installation preflight.
Added last IP to user detail screen in dashboard.
Forbidden shows up if user can¡Çt view a page but is logged in (thanks mnkras).
Performance Improvements
Added environment library to cache overrides for better performance. \
Overrides cache setting now available from the Cache System and Settings page.
New autod support for better performance with on-demand class loading.
Removing nivo slider from the core for better compatibility with third party \
sliders and smaller file sizes; removing cropzoom from ccm.app.js for smaller \
file sizes.
Rewrote portions used with large blogs (New in 5.6b2)
Additional Bug Fixes
Additional pagination now works in large sitemaps from the front-end (New in \
5.6.0b2)
Flat view pagination looks nicer (New in 5.6.0b2)
On some hosts, manual checking for concrete5 f were being added to the file \
manager.
Improved reliability when using composer with advanced permissions.* Bug \
Fix: events sort by priority (thanks arcanepain)
Fixed replace field in Firefox (width)
Tags and select options will only show \
usag-2-1/automatically-inclusion-of-additional-page-path-when-updating-ca/
data urls should work as background images in customizable stylesheets.
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/registration-errors-when-no-user-attributes-are-selected-to-show/ \
(New in 5.6.0b2)
Fixed: \
http://www.concrete5.org/developers/bugs/5-4-2-2/wrong-path-to-block-template-when-embedded-a-block-element-in-th/
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/url-replacement-in-theme-css-only-replaces-first-url-in-each-lin/#discussionpost
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/user-edit-multiple-of-the-same-group-can-be-added-to-a-user-caus/#discussionpost
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/dashboard-page-search-menu-overridden-if-working-with-overlay-fi/
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/page-attributes-attributes-list-stealing-kepresses-for-up-and-do/
Fixing potential SQL vulnerability in Autonav Preview pane.
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/cant-use-and-in-select-attribute-values/ \
(thanks arcanepain)
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/customize-result-in-user-search-retains-deleted-attribute-column/
Checking for invalid cookie length when starting a session.
RSS Displayer block now only cached for one hour.
http://www.concrete5.org/developers/bugs/5-5-2-1/bug-in-page-search-table/ \
(Fixed in 5.6.0b2)
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/jobs-play-button-url-contains-the-wrong-parameter-to-run-a-singl/
Fixed bug where editing an initial version of a page wouldn¡Çt create a \
new version of the page, until the second edit.
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/numbers-in-version-comments-still-arent-increased-correctly/ \
(thanks remo)
Fixed bug checking for captcha options form in the wrong place.
Fixed bug where custom style elements on blocks in stacks wouldn¡Çt show \
up in page (thanks acliss19xx)
Minor XSS fixes in edit mode.
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/object-doesnt-support-property-or-method-stoppropagation-in-ie8/
Fixed bug in FileList (which would show up in Slideshow blocks or anywhere \
that would filter by set) where selecting a file set and then deleting it would \
cause a SQL error (thanks remo)
Included updated SWFUpload to fix XSS issue.
Fixed bug where file set display order would appear random if files were in \
multiple sets.
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/deleting-composer-publish-location-page-results-mysql-1064-error/
Fix bug where defining LOCALE in config/site.php and then trying to save \
multilingual settings could override the default locale with a null locale.
Fixed potential SQL problems when an admin tried to pass nefarious \
parameters through to the file manager, page search, or metadata/version \
editing.
No longer will you get the ¡Èchecking for updates¡É spinner infinitely \
when in maintenance mode.
Forms/External Forms/Other Items that have been copied and pasted into \
another page will now work from that page.
Forms can now be edited properly when pasted from a clipboard.
More reliable permissions checking on dashboard dropdown for news, add \
functionality and system & settings (thanks arcanepain)
Progress status during installation should now be displayed in proper language.
Fixed pagination in blog index thumbnail (page list custom template.)
FIXED: If images or files were used in content block instances in content \
importer an error would be thrown.
Environment info no longer incorrectly reports all max_execution_time \
settings at 5.
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/insert-link-to-page-with-ie8/
replaced m/d/y with DATE_APP_GENERIC_MDY to jquery date pickers in date time \
helper (thx melat0nin)
Security Fix: Closed Redirect Loophole on Form block
Attempting to resolve this: \
http://www.concrete5.org/developers/bugs/5-5-2-1/fatal-error-call-to-a-member-function-getblocktypehandle/#discussionpost
Proper 404 headers should be sent when browsing to a method that doesn¡Çt \
exist under a single page.
Fixed some bugs and finicky behavior with search paging in file manager, \
page search, other search.
When editing page properties while checking out a page, approval fields will \
now be shown post update (rather than forcing you to refresh the page or exit \
edit mode and then approve the page.)
Fixed bug in block move() method that would copy all blocks from an area... \
(thanks herent)
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/error-on-package-uninstall/ \
(New in 5.6.0b2)
Fixed: Copy to clipboard from editable area then pasting to global area \
causes fatal error (New in 5.6.0b2)
Fixed: \
http://www.concrete5.org/developers/bugs/5-5-2-1/default-date_archive-block-controller-caches-its-active-state/ \
(New in 5.6.0b2)
Developer Updates
You can now pass an optional third parameter to the css() and javascript() \
functions which will be checked for uniqueness. This array contains \
¡Æhandle¡Ç and ¡Æversion¡Ç and can be used to force only the right \
libraries loading at the right time (thanks jordanlev).
Added support for BASE_URL_SSL constant.
If a __call method is present in a controller, it will be used for any tasks \
that don¡Çt exist (thanks remo).
Packaged themes can now be overridden in the root themes directory. This is \
true for included elements (using inc()) and page types/single pages.
You can now add elements/dashboard/install_post.php to your package and it \
will be displayed in a dialog post install.
Updated auto-nav templates to be much nicer to edit.
Moved jQuery.Cookie library into ccm.app.js
Including t2() function for plural localization/translation (thanks mlocati.)
New Events
on_composer_publish
on_composer_save_draft
on_composer_delete_draft
on_block_load (New in 5.6b2)
Better block validation error messages on installation (thanks jordanlev)
Updated simplepie RSS and ATOM parsing library to 1.3 (thanks ahukkanen)
Added closures support to events for PHP 5.3 and greater (just specify an \
anonymous function.
|