Changelog

Fixes

• Security: Adds some extra rules controlling the types of files that can be uploaded by logged-in users

Features

• API: Adds defeat-restrictions option for disabling runtime restrictions flagged with defeatable=>true
• API: Adds calling options to WHERE and pre-template callbacks

Fixes

• API: Fixes behaviour and improves performance of multiple ‘and’ filters
• Fixes failure to pick subject line from HTML email templates when whitespace is present

Features

• Adds Google API key to static map images

Fixes

• Runway: Fixes a bug with the filename of the database backup file
• Fixes a filtering bug with null values

Features

• Adds PERCH_GMAPS_API_KEY config setting for Google Maps API key
• Runway: Updates the Dropbox SDK for newer certificates
• Assets: Adds M4V as a video asset
• API: Adds option not to include a delete button in listings

Fixes

• Fixes a bug with category-match: all.

Features

• Adds more robots

Fixes

• Fixes a PHP 5.3 compatibility bug with editing page options
• Fixes a bug with checkbox sets outputting incorrect labels

Features

• API: Adds BCC option to PerchEmail class
• Adds support for hidden attribute passthrough on templated forms

Fixes

• Runway: fixes a bug with user permissions on Collections
• Fixes a bug with user edit forms not saving outside Paranoid mode
• Fixes a PHP 5.3 compatibility bug
• Fixes bug with dollar-numbers not showing up correctly in perch:showall output

Features

• Adds a workaround for IIS misbehaving when using valid HTTP status codes (by issuing incorrect ones for Windows instead)

Fixes

• Security: Fixes reflected XSS vulnerability between authenticated users in account section (considered very low risk)

Features

• Paranoid: updates filetypes.ini file
• Paranoid: enables PERCH_VERIFY_UPLOADS option to check accept attribute for file uploads
• Paranoid: enables account lockout with PERCH_MAX_FAILED_LOGINS and PERCH_AUTH_LOCKOUT_DURATION
• Paranoid: New users are sent password token instead of a pre-set password
• Paranoid: Requires existing password before setting a new password
• Paranoid: Requires password before changing user settings
• Paranoid: Always sets secure cookies when PERCH_FORCE_SECURE_COOKIES is set
• Paranoid: Enforces case-sensitivity for usernames when logging in
• Paranoid: Adds account lockout
• Adds PERCH_PARANOID configuration option
• Adds passthrough of autocomplete attribute on perch:form tags

Fixes

• Runway: Fixes a bug with ‘copy regions from page’ not working on page creation
• Runway: Fixes a bug with new subpage paths after moving the parent page
• Fixes bug with perch_content_custom() where pagination is active if ‘paginate’ is set to false
• Fixes bug with radio buttons in templated forms

Features

• Adds count badges to debug output
• API: Adds first-parse render() method for template handlers
• API: Adds duplicate() and redispatch()methods to submitted forms

Fixes

• Fixes a bug with authentication plugins
• Fixes a bug with URL formatting in search results
• Fixes a bug with radio buttons in public forms

Features

• Adds performance traffic lights to debug output
• API: Adds HTML listing formatters
• Disables mouse zooming on map fields once they’ve been initially set

Fixes

• Fixes bug with blocks due to perf optim in Templates in 2.8.22

Features

Adds no new features.

Fixes

• Fixes a parsing bug when a blockquote is the first line of a Markdown field
• Fixes a bug with duplicate entries in the resource bucket filter list
• Fixes a styling bug with errors when validation rules other than ‘required’ stop a form

Features

• Adds support for manaually managed radio button options in public forms
• Adds basic infrastructure for Local Testing Mode
• Adds DB table row count to the extended diagnostics report
• Optimises tag parsing when tags contained no escaped quotes
• Adds count of available disk space to diagnostics report
• API: adds the email.send system event.
• Enforces password rules when creating a new user
• Adds PERCH_PASSWORD_MIN_LENGTH when using PERCH_STRONG_PASSWORDS

Fixes

• Fixes CSS bug with icon sprite displaying strangly in repeaters
• Fixes CSS bug with radio buttons being indented in repeaters
• Runway: makes hidden templates hidden on collection creation screen

Features

• Centralises instantiation of PasswordHash object.
• Runway: updates the Perch logo to the Runway logo on password reset pages
• Adds experimental PERCH_STRONG_PASSWORDS feature
• Changes option in Users to send a password recovery link rather than a new password
• Lessens visual impact of box shadow on repeaters
• Adds new period field type

Fixes

• Fixes a bug whereby forms weren’t rendered when using return-html with skip-template
• Fixes warning issued when senting an email without using a template
• Fixes an issue with category catDepth that was introduced in 2.8.19

Features

• API: Adds SubmittedForm::clear_from_post_env() method
• Runway: adds example Dropbox configuration to default runway.php file

Fixes

• Fixes some database queries for MySQL 5.7 default rules
• Fixes a bug with empty items at the top of select boxes
• Fixes 1px rounding bug on login form submit button in Chrome
• Fixes bug with runtime events starting PHP sessions unnecessarily

Features

• Reduces memory usage when dealing with datasets
• Adds template format detection to outgoing HTML email templates
• Updates PHPMailer
• Updates ParsedownExtra

Fixes

• Aims to fix a resource logging bug for edge cases around block and repeater user

Features

• Adds a Health Check scan for PHP files in the resources folder
• Adds perch:runway template tags and zrunway=”true”z template attribute for Runway filtering
• Runway: improves request startup execution order to enable more flexibility to addons
• Adds additional redundant second-level checks for PHP file uploads