What's new in ImpressCMS 1.5.0 Beta
Oct 10, 2022
- What's Changed:
- Prepare the documentation for 1.5.0
- Updated branch references & readme
- Remove TinyMCE
- Remove openid
- Align syntax of DB interface and mysql implementation with PDO
- Prepare for 1.5.0 beta
- Fix mailuser
New in ImpressCMS 1.4.4 (Mar 9, 2022)
- Applying the filters to inner elements of arrays by @skenow in #1162
- Additional input filtering - mailusers, findusers, checkVarArray inner elements by @skenow in #1163
- Filtering updates for blocksadmin and mailusers by @skenow in #1164
- Prepare 1.4.4 by @fiammybe in #1171
New in ImpressCMS 1.4.3 (Feb 6, 2022)
- Fixed some warnings and notices in installer for newer PHP versions by @MekDrop in #882
- Protector get_magic_quotes_gpc fix for php 7.4 by @MekDrop in #884
- Smiles in misc.php now are escaped by @MekDrop in #890
- Fix "#881 trying to send mails with SMTP auth gives missing smtp class" by @MekDrop in #889
- Added exception handler by @MekDrop in #888
- Fixed bug when handlers from module separate files cant be loaded by @MekDrop in #887
- Fixes 'Notice: Only variables should be passed by reference in /home/vagrant/impresscms/htdocs/libraries/icms/config/Handler.php on line 237' by @MekDrop in #886
- Fixed bug when admin menu can't regenerate when module folder is removed before uninstalling by @MekDrop in #897
- Fixed syntax error in include/registerform.php by @MekDrop in #896
- fix vulnerability in autoloader by @fiammybe in #913
- block path traversal in image editor, transform .. to _ by @fiammybe in #915
- Fixes/ipf table filtering - limitsel missing POST value by @skenow in #937
- Adjusted template file inclusion for correct path. Fixes #603 by @skenow in #944
- Increase input sanitizing for system module and submodules by @skenow in #943
- Dev/jquery inclusion by @skenow in #935
- Fix for modules admin; user language files - fix #948 by @skenow in #949
- Update release_notes.md by @fiammybe in #1058
- Added filtering to the input in setSortOrder in icms_ipf_table by @fiammybe in #966
- filter url variable in findusers.php by @fiammybe in #967
- Remove the old FCKEditor - no longer supported by @fiammybe in #833
- add CKEditor 4.17.1 by @fiammybe in #1095
- Protector updates - PHP8 compatibility, update and remove legacy code by @skenow in #1098
- Preparations for the 1.4.3 RC release by @fiammybe in #1099
- Add a default parameter to addSlashes by @fiammybe in #1108
- Improvements in findusers logic and filtering by @skenow in #1110
- Undefined language constants for CKeditor in general preferences by @skenow in #1111
- Accept token for valid users only by @skenow in #1115
- User cookie could be contaminated - filter added by @skenow in #1117
- Protector enhancements and added security by @skenow in #1118
- Prepare 1.4.3 RC2 release by @fiammybe in #1109
- Making sure protector gets installed during the site installation by @skenow in #1137
- Changing filter method for request_uri to filter_sanitize_string by @skenow in #1136
- Fix for information displayed in protector admin and debug console by @skenow in #1154
- release 1.4.3 by @fiammybe in #1155
New in ImpressCMS 2.0.0 Alpha 12 (Feb 6, 2022)
- Features:
- Themes installed as composer dependencies @MekDrop (#1106)
- Added posibility to specify default block weight, position and visibility @MekDrop (#1105)
- Enable migrations for modules in module installer/updating/removing @MekDrop (#1104)
- RedirectResponse now can be used for same things as redirect_header @MekDrop (#1092)
- Move content.php to content module @MekDrop (#1082)
- Misc.php as controller @MekDrop (#1080)
- Rewrite admin.php as controller @MekDrop (#1079)
- Add smarty url function @MekDrop (#1078)
- Replaced league router with sunrise http router @MekDrop (#1077)
- Install system module from composer @MekDrop (#1075)
- Rewritten privpolicy.php with controller @MekDrop (#1071)
- Corrected DataFilter class usage @MekDrop (#1070)
- image.php rewritten as controller action @MekDrop (#1068)
- PHP 8.0 & PHP 8.1 support @MekDrop (#1053)
- Bug Fixes:
- Fixed incorrect urls for PageNav generated links @MekDrop (#1107)
- Enable migrations for modules in module installer/updating/removing @MekDrop (#1104)
- Fixed module block titles/names from constants resolving @MekDrop (#1103)
- Fixes few issues with page_modulesinstall.php for installer @MekDrop (#1102)
- Add IcmsPersistableController to legacy class resolving map @MekDrop (#1101)
- Remove few system module services that was previously defined in core @MekDrop (#1093)
- Fixes system module upgrading from installer @MekDrop (#1091)
- Fixes some old class references resolving for some older modules @MekDrop (#1087)
- Fixes crash when not correct order comes from user data for table @MekDrop (#1086)
- Fixed namespaces issues for never PHP in footer.php and header.php @MekDrop (#1083)
- Fixed legacy url index.php resolving when they are described as paths @MekDrop (#1084)
- Use new version imponeer/smarty-db-resource @MekDrop (#1013)
- Corrected DataFilter class usage @MekDrop (#1070)
- Fixed crashing translator when translation folder contains index file @MekDrop (#1072)
- Fixed bug when HTTP headers for modules that doesn't use controllers where stripped @MekDrop (#1061)
- Fixed media uploader sizes checks when there is no limit set @MekDrop (#1069)
- image.php rewritten as controller action @MekDrop (#1068)
- Fixed 'Class "ImpressCMSCoreDatabaseLegacyUpdaterReflectionClass" not found' bug @MekDrop (#1066)
- Fixed fatal error (PHP 8.x) when config item doesn't have a description @MekDrop (#1067)
- Fixed bug when legacy module crashed due translations constants not loaded at correct time @MekDrop (#1065)
- Fixed rights check for legacy URL modules @MekDrop (#1064)
- Fixed module model resolving to be able to work with PHP 8.x @MekDrop (#1063)
- Fixed module submenu counting bug for PHP 8.x @MekDrop (#1062)
- Fixed bug when version getting failed for never PHP in system admin @MekDrop (#1060)
- Fixed translation loading for module admin menus @MekDrop (#1059)
- PHP 8.0 & PHP 8.1 support @MekDrop (#1053)
- Maintenance:
- Bump .homestead from 9cbb84c to 6dd850d @dependabot (#1116)
- Bump .homestead from 56650de to 9cbb84c @dependabot (#1097)
- Bump actions/cache from 2.1.6 to 2.1.7 @dependabot (#1094)
- Add smarty url function @MekDrop (#1078)
- Bump .homestead from ee603d7 to 56650de @dependabot (#1076)
New in ImpressCMS 1.4.3 RC (Dec 5, 2021)
- Fixed some warnings and notices in installer for newer PHP versions by @MekDrop in #882
- Protector get_magic_quotes_gpc fix for php 7.4 by @MekDrop in #884
- Smiles in misc.php now are escaped by @MekDrop in #890
- Fix "#881 trying to send mails with SMTP auth gives missing smtp class" by @MekDrop in #889
- Added exception handler by @MekDrop in #888
- Fixed bug when handlers from module separate files cant be loaded by @MekDrop in #887
- Fixes 'Notice: Only variables should be passed by reference in /home/vagrant/impresscms/htdocs/libraries/icms/config/Handler.php on line 237' by @MekDrop in #886
- Fixed bug when admin menu can't regenerate when module folder is removed before uninstalling by @MekDrop in #897
- Fixed syntax error in include/registerform.php by @MekDrop in #896
- fix vulnerability in autoloader by @fiammybe in #913
- block path traversal in image editor, transform .. to _ by @fiammybe in #915
- Fixes/ipf table filtering - limitsel missing POST value by @skenow in #937
- Adjusted template file inclusion for correct path. Fixes #603 by @skenow in #944
- Increase input sanitizing for system module and submodules by @skenow in #943
- Dev/jquery inclusion by @skenow in #935
- Fix for modules admin; user language files - fix #948 by @skenow in #949
- Update release_notes.md by @fiammybe in #1058
- Added filtering to the input in setSortOrder in icms_ipf_table by @fiammybe in #966
- filter url variable in findusers.php by @fiammybe in #967
- Remove the old FCKEditor - no longer supported by @fiammybe in #833
- add CKEditor 4.17.1 by @fiammybe in #1095
- Protector updates - PHP8 compatibility, update and remove legacy code by @skenow in #1098
- Preparations for the 1.4.3 RC release by @fiammybe in #1099
New in ImpressCMS 1.4.2 (Dec 27, 2020)
- Fixes:
- #574 Test 1.4 on PHP 7.4 PHP7 (fiammybe)
- #692 Include new version of profile PHP7 (fiammybe)
- #845 PHP 7.4 : access array offset on value of type null in include/functions.php 1037 php 7.4 (fiammybe)
- #852 anti-clickjacking security vulnerability (report #1055589 by jrckmcsb on HackerOne) (fiammybe)
- #825 Improve path sanitizing bug security vulnerability (MekDrop)
- #814 Better sanitize database queries in installer bug (report #983710 by solov9ev on HackerOne) (fiammybe)
- #637 Notice on admin pages in PHP 7.4 duplicate php 7.4 (fiammybe)
- #843 Fix the amount of cookies (fiammybe)
- #805 Missing templates in system module (skenow)
- #838 Remove whitesource config (Mekdrop)
- #834 + #836 Limit maximum length of password (report #1033373 by f1v3 on HackerOne) (fiammybe)
- #821 Fixed possible file system exposing due language cookie on installer (MekDrop)
- #812 Prevents using submitted filenames with ../ for controller (report #1035311 by siva12 on HackerOne) (MekDrop)
- #815 Better sanitize database queries in installer (report #983710 by solov9ev on HackerOne) (fiammybe)
- #811 Remove phpopenid example folder bug (report #1042838 by hackerone_success on HackerOne) (fiammybe)
- #810 more strict comparison of variables (report #1036883 by hodorsec on HackerOne) (fiammybe)
- #806 Include the missing templates for the image manager (skenow)
- #603 Issue with image inclusion on TinyMCE (fiammybe)
- Improvements:
- #636 errors in form fields on admin account creation page of the installer (fiammybe)
- #848 Cleanup deprecated functions in functions.php (fiammybe)
- #694 remove the icms_banner reference. No longer present (fiammybe)
- Download ImpressCMS
New in ImpressCMS 1.4.0 (Jan 6, 2020)
- Improvements:
- curl extension in installer now is requirement not optional (#530) @MekDrop
- PHP7 improvements based on mamba7x PR (#507) @fiammybe
- make expiration header dynamic in the past (#504) @fiammybe
- check mysql using PDO now (#487) @fiammybe
- Add a warning when PHP used is below 7.2
- Fixes:
- Move prototype inclusion so trust_path creation works fixes #569 (#571) @skenow
- Fixed PathStuffController's constructor (#528) @MekDrop
- Fixed suppressed warning if variable $options['folderName'] is undefined or empty when creating theme (1.4.x) (#510) @MekDrop
- Fixed function signatures in icms_image_Handler (1.4) (#512) @MekDrop
- Fixed installer collation selection (#529) @MekDrop
- Fix the template handling in the system module (#503) @fiammybe
- Add a warning when PHP used is below 7.2
- Added missing template for version checker @fiammybe
- Update:
- Protector update for PDO SQL sanitizing Close #496 (#497) @skenow
- Update Protector for PHP7 (#492) @skenow
- Update php requirements to 5.6 (#505) @fiammybe
- Update of Smarty to 2.6.31 (the latest 2.x release)
- Update of CSS-tidy to work in PHP7
- PHPMailer update to 5.2.7
- PHPOpenID updated for better PHP7 compatibility
- Removed:
- Removed installation_notify (#566) @MekDrop
- Remove admin template folder in system module on upgrade (#509) @fiammybe
New in ImpressCMS 1.2.3 (Dec 15, 2010)
- Removing inclusion to deprecated sqlutility classes
New in ImpressCMS 1.1 (Nov 19, 2008)
- Issues with content menu in RTL.
- Issues with registration not completed with passwordmeter.
- Issues with too easy captcha configs.
- #2190687: When saving a block, if $options was a multi-levels array, StopXSS was failing to save array. StopXSS is now recursive and will all levels of $text parameter if it's an array
- #2192679: Leading space in cache/index.html
- Fixed issues with spambots.
- Fixed issues multiple time stamps.
- Fixed security issue in snoopy.php
- Fixed issue on the pagination links of the image manager tinyMCE plugin.
- The WYSIWYG group permission per module was confused when trying to know if a user should have permission to use WYSIWYG when posting a comment in a module that had such permission
- Fixed a bug with RTL, if this is not implemented, we will have troubles while sending posts in some modules like newbb
- Stop Spam Registration class and its experimental use in extra/anti-spam/register.php It is now possible to specify in which modules Webmasters can use WYSIWYG editor
- Automatically check the Enable HTML check box and uncheck the Enable Linebreaks when using TinyMCE in a comment post form
- Improved the installer so it is now possible to install ImpressCMS even with safe_mode ON
New in ImpressCMS 1.0 Beta 2 (Feb 6, 2008)
- w3c validation in impresstheme and impresstheme_light (sato-san)
- 1870346 System blocks not visible to added group (skenow/dave_l)
- No nice path from getNicePathFromId (MacDonald/malanciault)
- the $tpl XoopsTpl object used in htdocs/cp_functions.php and htdocs/admin.php had a too generic name which was creating conflict (with AltSys for example). The variable name was renamed for $icsmAdminTpl (malanciault)
- Error in xoops.css (display: inline-block) (MacDonald/malanciault)
- Problems in the queries executed when editing User Ranks (malanciault/vaughan)
- Adding a few @ in install/page_pathsettings.php to prevent the display of some errors that would confuse users (rplima/malanciault)
- Small display bug in user.php (incama/malanciault)
- Several security improvements (DSecRG/malanciault/fx2024)