Elgg

Contributors

• Jeroen Dalsem (7)
• Jerôme Bakker (5)
• Nikolai Shcherbin (1)

Features

• css: added helper class to wrap horizontal fieldset content (c0853ae7)

Bug Fixes

• groups: only select groups to check group invites (17bedb9b)

Removed

• tests: IntegratedUnitTestCase (65f007e6)

Contributors

• Jeroen Dalsem (93)
• Jerôme Bakker (36)

Features

• activity: index page will show registration form if possible (c5b84221)
• admin:
  • server requirements warning for session garbage collection (460134fd)
  • user validation by admin notify user about validation (ab5b3624)
  • added link to add new user form on newest users listing (98d55ca7)
  • admin control panel menu items always visible in title menu (204fd65d)
• blog: added logic to pass archive menu options to sidebar views (221172c7)
• cache: replaced mrclay/minify with matthiasmullie/minify (fd99fccc)
• capabilities: canComment now uses canWriteToContainer logic (f4c3890d)
• comments:
  • added threaded comments capabilities (0875b898)
  • commentable is now an entity capability (475cb0b6)
  • added a site config to control comments on group content (bde859da)
  • show a notice for logged out users to login to comment (60f79376)
  • show that a comment was created by the content owner (32af360d)
• config: added site setting to control who can change language (164965b6)
• core:
  • improved default index pages (f22c071a)
  • replaced internal service provider with PHP-DI (8d997600)
• css:
  • added helper class to stretch a field in a fieldset (be05225c)
  • added helper class for horizontal labels in elgg-field (df095c13)
  • added phone up media query css crush variable (18de6788)
• custom_index:
  • added settings to control homepage modules (54bbf7c0)
  • Front Page Demo plugin is now enabled on new sites (f95afdab)
• db: the required mysql version for new installations now is 5.7 (65c292e0)
• developers: control how elgg_echo strings are displayed (8eb2afb6)
• entities: added entity capabilities service (e93d1c5d)
• forms:
  • elgg_make_sticky_form() now supports ignored field names (5febfa9e)
  • the container has a dedicated input view with more context (6761e981)
• install: admin notice for new installs now mention front page demo (a30ebdfa)
• javascript: sortable features now also work on touch devices (fe2421d5)
• likes: likable now is part of the entity capabilities systems (a149422d)
• menus: added flag to menu items to hide if it has no children (24b05c70)
• notifications:
  • added option to disable subscription filtering (1e58e96e)
  • control over detailed notification configuration (2ae90bf2)
• page_owner: page owner middleware forces page owner detection (829bce49)
• profile: user display name edit is now a separate view (4b485be8)
• routes:
  • add function to get a route based on an url/path (17370a6a)
  • add function to get current route name (7c2a2991)
• site: added the ability to upload a site icon (149f1258)
• site_notifications: allow to configure the cleanup interval (77642349)
• system_log: improved archived log cleanup (024c7aae)
• tests:
  • static config test now check correct upgrades registration (5d146320)
  • logged in user is now always logged out by base test class (c1a97363)
  • entities created during tests are automatically removed (3ec2d614)
• upgrades: the finished upgrades list now has pagination (09a1ea54)
• views: added menu section in elgg_view_messages header output (d9023fcf)

Performance

• comments: added comments count preloader logic (2b6da920)
• site_notifications: cron cleanup uses direct database queries (36969685)

Documentation

• core: added a guide on how to use the entity capabilities service (b8f226ab)

Bug Fixes

• admin: server information now reports correct minimal php version (a2fb0a96)
• collection: correctly implement unset of collection item (3684df75)
• file: prevent path traversal in ElggFile (0a50b762)
• js: no longer close popups on scroll (9b4d2621)
• menus: removed link from topbar account menu item (e1104cf5)
• router: admin gatekeeper reports status code 403 instead of 401 (05340f54)
• tests: custom config values always persist over db values (49ef293b)

Deprecations

• core:
  • ElggEntity->getAccessID() is deprecated (3a9a9e5b)
  • elgg_get_version has been replaced by elgg_get_release (cc71881c)
• i18n: the public DI proxy for elgg()->echo is deprecated (2f65c1ab)
• page_owner: legacy page owner detection has been deprecated (6fec812f)
• views: elgg_does_viewtype_fallback has been deprecated (1e2a135a)

Removed

• admin: control panel widget has been removed (4e8d1cff)

Contributors

• Jerôme Bakker (3)

Bug fixes

Contains the security fix from 3.3.24

Contributors

• Jerôme Bakker (1)

Bug Fixes

• reported_content: sanitize report URLs (c30b17bf) thanks to @brenu for reporting this

Contributors

• Jerôme Bakker (6)

Bug Fixes

• blog: show future access level for draft blogs (68d86899)
• install: correctly determine database installation completion (96a4a469)
• upgrade: correctly interpret database results before migration (b8dcc903)

Contributors

• Jerôme Bakker (1)

Bug Fixes

• ajax: forms in the admin namespace are protected (572d210e) thanks to @brenu for reporting this

Contributors

• Jerôme Bakker (2)

This release contains the security fixes from v3.3.22 and a small security patch for Doctrine/Dbal

Contributors

• Jerôme Bakker (3)

Bug Fixes

• groups: prevent misuse of group membership actions (d9fcad76) thanks to @brenu for reporting this

Contributors

• Jerôme Bakker @jeabakker (4)
• Jeroen Dalsem @jdalsem (2)

Bug Fixes

• core: access collection members should always be users (6de21dbe)
• discussion: comment actor on group discussion no longer notified (41ac24aa)
• views: correctly support passing tagify options to input/tags (7e121f96)

Contributors

• Jerôme Bakker (@jeabakker) (21)
• Jeroen Dalsem (@jdalsem) (6)

Features

• site_notifications: notification byline shows container entity (9f43720d)

Bug Fixes

• blog: don't supply full $vars to the blog/save form (2e23f9dd)
• core: use route generation instead of fixed url (565ae3a7)
• i18n: catch too few arguments provided in elgg_echo() (28609f02)
• js: do not click on parent menu item of tabs with children (9b5d3073)
• messages: use list out of bounds helper (487c174a)
• notifications:
  • continue when no object is found in html output (86eb13cd)
  • set notification url for all ElggData objects (b2ebf498)
  • settings show correct entity icons (27dfac30)
• routes: correctly detect page owner in certain routes (e003a4e9)
• site_notifications:
  • only mark as read when the owner clicks url (16eb05e9)
  • cleanup oldest notifications first (897cc5f5)
  • use list out of bounds helper (b39c55bc)
• views:
  • unset value for tag url (1cf8d2b2)
  • replace unsupported attribute (f0473ca1)

Contributors

• Jerôme Bakker (11)
• Jeroen Dalsem (7)

Bug Fixes

• blog: use route name as page title (ead3647b)
• comments: no longer disable save button after form submission (03651f26)
• core: do not respond with redirect on failure of ajax requests (4222ac92)
• notifications:
  • mute page of a comment shows relevant entities (e297bda2)
  • disable subscribe button if you can't subscribe (ea612bb4)
  • (un)subscribe buttons only for logged in users (824291fb)
• site_notifications: prevent input limit reached in bulk actions (e83df87c)
• systemlog: only log before and after events if there are handlers (5fb8189a)
• thewire: output of the new wire notification in HTML e-mail (c161429b)
• views: correct default behaviour for showing entity menu on PHP 8 (8f9f3827)

Contributors

• Jerôme Bakker (11)
• Jeroen Dalsem (4)

Bug Fixes

• cli: allow batch upgrades to run indefinitely (5b6b4419)
• i18n: allowed languages returns filtered language keys (ff574222)
• upgrade: content owner subscription is now an async upgrade (d8abe11c)

Contributors

• Jerôme Bakker (59)
• Jeroen Dalsem (3)

Features

• cli: upgrade command supports force option (8fb44c7f)
• delayed_email: add intro text to notification (c3750286)
• developers: added link to entity on the entity explorer page (cd1f3753)
• groups: groups edit form tabs navigation help (bd2f94d9)
• notifications: added option to exclude subscribers (e43ae547)
• system_log: allow elgg_call to disable system logging (7f85fd18)

Performance

• db: disable system_log during cleanup of entity properties (4576dff6)

Bug Fixes

• activity: don't show responses on index page when logged out (eaa5c28b)
• bookmarks:
  • don't show filter menu when viewing a bookmark (1a5c9478)
  • unable to save bookmark on PHP 8 (81392414)
• db: use QueryBuilder in query execution (2f2050cb)
• delayed_email: prevent empty notification (ee6bc376)
• developers: theme sandbox is now only available for admins (19bcb892)
• mail: correctly encode ( and ) in e-mail headers (0560c379)
• notifications:
  • serialization exception during delayed enqueue (72b65143)
  • use correct actor for admin notification (6b8d37a0)
• pagination:
  • don't updated browser history on ajax appended lists (823283bd)
  • allow control over base url during Ajax requests (edad75a7)
  • use correct jquery selector during ajax replace (e750622b)
• river: show river responses again on all pages (9e90d95b)
• session: prevent PHP warning when regenerating session (dfe73773)
• site_notifications:
  • limit cleanup to 30 minutes (7229e7e1)
  • prevent deadloop when marking as read (c4467a2c)
• statistics: show readable entity type/subtype (99a68a47)

Contributors

• Jeroen Dalsem (20)
• Jerôme Bakker (17)

Features

• friends: added friends_of widget (05fea8a0)
• i18n: added a config flag to disable browser language detection (00b612dc)
• notifications:
  • notification events are configurable (55c7c909)
  • subscribers to owner will receive notifications (2b0f2bb2)
  • setting to delay notification queue processing (7942f7e0)
• pagination: js loaded listdata triggers a change event (aa478518)
• views: allow custom title to be passed to output/friendlytime (4c88d2d3)

Bug Fixes

• admin: drag/drop plugin ordering has been fixed (7b5fe7df)
• email: added mute link to html email footer (85268538)
• groups: make sure retrieving group tool option always uses hook (1e9ae2b6)
• install:
  • make sure user is logged in during installer (b6248ec7)
  • allow some vendor files to be included (3f857850)
• likes: correctly toggle count badge (fa2be687)
• metadata: elgg_get_tags uses correct default for tag_names (4e8d5326)
• phinx: correctly check for indexes by name during upgrades (22ccaea9)
• plugins: position and required state of plugins are now asserted (948927a3)
• site_notifications: moved buttonbank to top of the list (c158e810)
• tags: always have tags css available (3f9b5a63)
• upgrades: improved completion reporting (863e2627)
• views: prevent incidental incorrect id generation (c2d77bd1)
• webservices: register correct PAM handlers for API authentication (51ebcabb)
• widgets: only update title on non empty href string (7b147a61)

Contributors

• Jeroen Dalsem (1)

Bug Fixes

• http: always disable cache if cookie is being set (30c17f06)

Contributors

• Jeroen Dalsem (13)
• Jerôme Bakker (13)

Features

• discussions: added quick status toggle entity menu item (1b78dc00)

Bug Fixes

• activity:
  • always show tabs on activity index page (3aa6605b)
  • added missing breadcrumbs (db7e2ce3)
• cache: invalidate caches on plugin (de)activate (8bca339c)
• core:
  • prevent exceptions on session save (90345bae)
  • do not draw exception content if there already is output (91d4f03a)
  • correctly handle exceptions in error log formatter (6d6328f1)
• icons: update site menu icons (7292b4c0)
• js: always process error messages in ajax calls (cf070072)
• navigation: prevent pluginsettings menu item name conflicts (cbe3ef6d)
• notifications:
  • dont pass recipient user to default message body (91d45a26)
  • show correct notification labels (9a285350)
• search: do not show social and entity menu in search results (33413407)
• settings: english and site language not correctly disabled (76a099e3)
• views: number formatter not always returning expected results (f5d25392)

Contributors

• Jerôme Bakker (4)

Bug Fixes

• admin: allow admins to be added from the admin listing page (8d94877f)
• database: use correct port number in Phinx migrations (0ee77635)

Contributors

• Jeroen Dalsem (193)
• Jerôme Bakker (144)
• RiverVanRain (1)
• dnovikov (1)

Features

• actions: added generic actions for (un)subscribe and (un)mute (2f7e1702)
• comments: added ability to configure number of comments per page (100e6881)
• config:
  • added configuration option for sendmail in settings.php (91f476ba)
  • added proxy settings to the settings.php (37c1966d)
• core:
  • added first login event for when user logs in the first time (19a2d384)
  • users are automaticly subscribed to content they comment on (a5373f14)
  • added PHP 8 support (11e42800)
  • ElggBatch supports reporting failures (ba601973)
• database: add generic registration function for seeders (a11047b3)
• db: updated to doctrine/dbal 3.1 (32152f3f)
• discussions: the site menu item is now always present (2d19025a)
• email:
  • from address will show original sender name (6fa8fcf0)
  • added html formatted mail template (76b21538)
  • added config setting to limit subject length (4e82113f)
  • Elgg\Mail now supports multiple to, cc and bcc recipients (0f24a524)
• forms: entity field config can be requested from a service (c6b1771a)
• git: extra allowed types for commit messages (c9f1757c)
• groups:
  • allow group specific plugin settings (28f7e6e6)
  • group edit form now uses tabs for different sections (a9103dee)
• js:
  • updated to jQuery 3.5.1 (b9f8a8c5)
  • jquery ui updated to v1.12.1 and can now supports AMD (4914dc8f)
  • allow lightbox to load JS dependencies (fa00e132)
• menu: the title menu will be expanded with the entity menu (a91a7cc7)
• menus: more granular register and prepare hooks (bc6a5e2f)
• messages: allow users to send messages friends only (94208336)
• navigation: more control over the pagination rendering (a9b0680c)
• notifications:
  • plugins can control notification with eventhandler (87ebad4e)
  • added mute notification page (2d724e6e)
  • temporarily disable notifications (2770d4d9)
  • added delayed email to bundle notifications (d522a53e)
  • split salutation and sign-off from message body (5741a414)
  • more detailed notification subscriptions (b018d1a8)
• page_owner: add page owner detection to route definition (f52e4227)
• pagination:
  • added 'infinite lists' pagination options (d8aa00ff)
  • listings are now updated without page reloads (1f3322c2)
• plugins:
  • added ability to configure notification events in config (e3e77234)
  • added ability to register view options in elgg-plugin.php (522feeb6)
  • added ability to register group tools in elgg-plugin.php (9acc7d88)
• reportedcontent: added menu item to report entities (13f07c58)
• router: public API to get the route of the current request (8e3736e8)
• search: moved result formatting logic into views (fe63196f)
• seeder:
  • add option to spread creation time of seeded entities (30385b79)
  • force create new entities during seeding (a21eccf8)
  • limit (un)seeding to a given content type (0485722a)
• site_notifications:
  • site notifications are enabled for new users (51238b15)
  • configure cleanup of site notifications (55ce9da4)
  • split read/unread notifications (9df9bc19)
  • remove notification when content is removed (792705a8)
• subscriptions: added muting possibility to entity subscriptions (6ad73185)
• tags: tags input is now assisted by tagify (bc9d2566)
• thewire:
  • added getParent function to ElggWire entity class (46f406aa)
  • allow database seeding (70a29ddc)
• users:
  • newly created users always have a validation status (04cc3395)
  • uniform storage of notification settings (6fcccafe)
• views:
  • added helpers functions for outputting urls (a23a3ff1)
  • added 'show_owner_block' variable to prevent owner_block output (29cc3323)
• webservices: option to enable / disable API keys (4c5b33cb)
• widgets: dashboard widgets created on first login (9bf117d9)

Performance

• db:
  • add index to annotations table (7c728671)
  • add index to annotations table (af34641a)

Bug Fixes

• collections: corrected implementation of SeekableIterator (a7e70382)
• core: remove_entity_relationships triggers delete event (73626bee)
• css: wide select inputs do not run out of screen (6af60e27)
• db:
  • check for entity existence during metadata creation (0a07fe8d)
  • check for entity existence during relationship creation (d23e7351)
• groups: use guid instead of container_guid in add:group:group route (57146fbe)
• invite_friends: friendship delayed until invited friend validated (2c212dd1)
• js: userpicker stores match_on information in data attribute (1b30d349)
• relationship: saving unchanged relationships won't trigger events (549ee02c)
• river: show less duplicate comments (d172ce94)
• site_notifications: save more notification data (2603e4cd)
• tests: testAccessCaching now makes more sense (466ce221)

Deprecations

• core:
  • drop support for handler in elgg_register_title_button (0529986f)
  • forward() has been deprecated (9497be28)
• database: use QueryBuilder instead of raw sql queries (8aa74ef9)

Breaking Changes

• This update is a major update of the jQuery library. Update your code if
  needed. (b9f8a8c5)
• If you need jquery ui related functionality like sortables, make sure to
  add the correct dependencies to your own javascript (4914dc8f)
• You now can only use the elgg/Ajax async module.

fixes #13175 (5bca9af9)

• when validating the container write permissions the
  type and subtype of the content need to be provided.

fixes #12684 (13070985)

• composer: replace deprecated Zend\Mail with Laminas\Mail (bef90a8c)
• core:
  • admin and banned metadata of a user is now protected (ef54acd0)
  • protected some ElggEntity attributes (aaa6da50)
  • ElggData::save() returns bool (627c2e7a)
  • move exceptions to own namespace (88e12e89)
• i18n: removed some hardly used i18n lib functions (5e768e41)
• icons: old icon names are no longer supported / converted (a00b2599)
• menu: menu vars are required for preparing vertical and dropdown (10125160)
• menus: removed elgg_get_filter_tabs() (37340f99)
• notifications: moved notifications plugin to core (0f141b73)
• web_services: rewrite of the web services plugin (fceb9130)
• widgets: change default widgets event registration (2340f47b)

Removed

• core:
  • support for the composer project as a 'plugin' (f52f167c)
  • the Friendable interface has been replaced by a trait (7f5ea445)
  • legacy plugin hook / event callback parameters (ab19e9e9)
  • some hardly used functions have been removed/replaced (b37e34c0)
• developers: webservices inspection (588534c0)
• diagnostics: the plugin has been removed (4050e21a)
• discussions: no longer add an item to the groups filter menu (c9d36b82)
• navigation: helper view for menu item deps has been removed (a2ed60fa)
• notifications:
  • pre Elgg 1.9 notification support is dropped (949825a9)
  • NotifcationService::getMethodsAsDeprecatedGlobal (835a7218)
• plugins:
  • plugins no longer work with manifest files (a17c8cec)
  • various plugins no longer listen to ECML hooks (d5d922c5)
• system_log: various lib functions have been removed (12108c9d, closes #13089)
• tags: functions related to metadata tag names have been removed (4ca58372)
• upgrades: removed obsolete upgrades (1f0c968c)
• users: replaced validation methods with service functions (821ccd95)
• views: removed elgg_prepend_css_urls is no longer available (53cb8819)

Contributors

• Jerôme Bakker (3)

Bug Fixes

• output: use correct number seperators (536e2b26)

Contributors

• Jerôme Bakker (3)
• Robert Cochran (1)

Documentation

• install: mention necessary SELinux changes (912ca440)

Bug Fixes

• account: use consistent user throughout the account settings (9e59117f)
• search: make sure entity_subtype is a string during search options (94f110c6)
• webservices: correctly evaluate truthy values (86459670)