Elgg

Contributors

• Jeroen Dalsem (2)
• Jerôme Bakker (2)
• Nikolai Shcherbin (1)

Bug Fixes

• groups: don't show 'Invite friends' menu item on the group's members page when 'Friends' plugin is deactivated (5d2f8a32)
• river: river options annotation_ids now work as expected (e1d61594)
• thewire: do not put unlimited description in notification summary (657be642)

Contributors

• Jerôme Bakker (2)

Changes

• several security fixes

Contributors

• Jerôme Bakker (4)
• Jeroen Dalsem (1)
• Nikolai Shcherbin (1)

Bug Fixes

• cache: disable filecache if path isn't writeable (dc807d44)
• likes: don't provide likes data in non default type ajax requests (07d63d43)
• menu: don't show 'invite friends' menu item on the group profile when 'Friends' plugin is deactivated (2783492a)

Contributors

• Jerôme Bakker (4)

Bug Fixes

• db: pass previous database exception (20e07d23)
• icon: use different icon size to check in icon remove (8c42bf4f)
• icons: prevent auto generation of icons during entity updates (918a1193)

Contributors

• Jeroen Dalsem (8)
• Jerôme Bakker (3)

Bug Fixes

• cache: keep server cache in a local file storage (0569862d)
• database: correctly order metadata (32fe6955)
• http: allow access to client IP behind proxy server (159e70ee)
• search: prevent duplicate extras matches in search results (1211ae4d)
• widgets: correctly update widget title after widget update (95535d24)

Contributors

• Jerôme Bakker (7)

Bug Fixes

• ci:
  • move PHPUnit tests from Travis to GitHub actions (55d6d893)
  • move documentation test build to GitHub action (25f3f8a6)
  • move coding style and composer checks to GitHub actions (5b8956dc)
  • move lint checks to GitHub actions (eba126ec)

Contributors

• Jeroen Dalsem (3)
• Jerôme Bakker (2)

Performance

• users: entities metadata preloader logic now works for users (74bfd360)

Bug Fixes

• tests:
  • compare objects that are both serialized and deserialized (1af78826)
  • entity preloader is clean before tests (35a96147)

Contributors

• Jeroen Dalsem (4)
• Jerôme Bakker (1)
• Nikolai Shcherbin (1)
• RiverVanRain (1)

Bug Fixes

• admin: invalid admin section should report 404 not found (bd4eb40f)
• developers: do not log to screen in cli (b1a06491)
• github: make sure we use composer v1 during codecoverage tests (25022dfd)
• river: "created", "river" event trigger regression (718d79c8)
• widgets: content widget shows correct owner content (c3c663d3)

Contributors

• Jeroen Dalsem (3)
• Jerôme Bakker (1)

Bug Fixes

• core: do not save session for serve-file and CLI requests (cf8ee303)
• database: use compatible DBAL version (c5ca05f1)
• likes: comment listings are now correctly preloaded with likes info (f348802a)
• session: correctly set httponly flag for remember_me cookie (91034947)

Contributors

• Jerôme Bakker (12)
• Team Webgalli (1)

Features

• htaccess: added hardening rules to prevent file access (08ea7f7a)

Bug Fixes

• comments: validate canComment in comments save action (883be474)
• composer: define correct autoload namespace (6f874ae2)
• developers: inspect annotations menu no longer crashes (096118a7)
• uservalidationbyemail: show correct login error message (db3cddd6)

Contributors

• Jerôme Bakker (14)
• Jeroen Dalsem (1)

Bug Fixes

• db: handle empty dbprefix in join normalization (fe3d1684)
• search: allow only unique field names to be searched (4e540518)
• tests:
  • set config value in correct location (05c0ff6e)
  • improved access array testing in walled garden mode (c58a1543)
  • validate correct widget id for active plugin (7ddc7743)
  • get correct plugin for deactivation testing (f058db5d)
  • use language keys to validate (e16b0166)

Contributors

• Jerôme Bakker (4)
• iionly (1)

Bug Fixes

• cache: support javascript source map files (5ec82f20)
• uservalidationbyemail: corrected error in EN language file (5e5adca4)
• webservices: implement missing cache functions (deba4203)

Contributors

• Jeroen Dalsem (2)
• Jerôme Bakker (2)
• RiverVanRain (1)
• Team Webgalli (1)

Documentation

• webservices: how to generate HMAC headers for authentication (1a74457f)

Bug Fixes

• comments:
  • allow group owners to edit comments in their group (835478f8)
  • use correct logic to apply default comments list length (c556969e)
• css: admin menu header (01e72dd1)
• navigation: allow configuration of max display items site menu (cbede32e)

Contributors

• Jerôme Bakker (5)
• Jeroen Dalsem (3)

Performance

• likes: bulk delete likes annotations on entity delete (0b1d536c)

Bug Fixes

• db: default case_sensitive not applied for single pair in root (1ecd214c)
• notifications: only register group menu item if member of group (a3a707ef)
• redis: admin information page now works if authorized (7db8bbd8)

Contributors

• Jerôme Bakker (6)
• RiverVanRain (2)
• Dennis Ploeger (1)
• Jeroen Dalsem (1)

Features

• cli: Adds a --refresh option to the list command (#13201) (eed99bfa)

Bug Fixes

• file:
  • validate uploaded file for new files (a3f4ed52)
  • correctly remove icons when updating a file (d215defa)
• friends_collection: display menu items correctly in full view (b170b1f4)
• input: no longer use double submit prevention on widget edit forms (ced827d5)
• mail: improved handling of email recipients name formatting (ff8a425a)
• plugins: disabled plugins should not get a priority (b856c449)
• views: prevent PHP notice during registering views (6b1bf6e4)

Contributors

• Jerôme Bakker (4)
• Jeroen Dalsem (1)

Bug Fixes

• core:
  • use correct input for password reset (5ceaed52)
  • log exceptions by default (3d085449)
• developers: remove entity button in explorer now works (fed4809a)
• logger: correctly support legacy value 'OFF' (df80433c)

Contributors

• Jerôme Bakker (4)
• Jeroen Dalsem (2)

Bug Fixes

• livesearch: use correct relationship options to find groups (dc82fd9e)
• mail: additional library for SMTP e-mail support (d69b90df)

Contributors

• Jeroen Dalsem (6)
• Jerôme Bakker (4)

Bug Fixes

• notifications: listing of settings now contain a link to the item (4a2ae1de)
• webservices: use correct query string for hmac authorisation (1dc4cae9)

Contributors

• Jeroen Dalsem (6)
• Jerôme Bakker (5)

Bug Fixes

• blog: double submit protection prevented correct saving (2460d178)
• file: correctly set forward url (10f48139)
• likes: likes popup will show recent likes first (9b0bf45d)
• plugins:
  • reindex plugins if there is a gap in the priority (ce2d4bfb)
  • default all plugins are listed (5888aa89)
  • correctly flush caches after plugin (de)activation (7a6465b5)
• route: correctly handle route generation for unicode usernames (58766e37)
• views: input/autocomplete correctly passes match_target (1fe233d2)