Skip to content

ABCD v4.1.0

Latest

Choose a tag to compare

@rogercgui rogercgui released this 08 Nov 20:02
· 3 commits to master since this release
06c68a3

Release Notes: ABCD v4.1.0

We are pleased to announce the release of ABCD v4.1.0. This version brings important improvements to stability, security, new data import features, plugin management, and general optimizations to the updater and user interface.


New Features and Highlights

Header-Based Text Imports (#779)

  • Added support for loading CSV/TSV files with encoding selection.
  • Introduced a conversion-table mode that maps header names directly to fields, including support for repeated occurrences.
  • Implemented unmatched column reporting and added localized interface text.

Plugin Management and Compatibility (#782)

  • Added ABCD version compatibility checks for plugins.
  • The system now displays version requirements and compatibility warnings, blocking incompatible installations and activations.
  • Improved plugin manager error handling with new translated messages.

Data Entry Hooks (#781)

  • Exposed extension hooks for the data entry toolbar search area and the page footer.

Search Term Expansion (#780)

  • Multiword search terms are now split, applying the configured field prefix to each unqualified word and joining adjacent terms with the ISIS AND operator, while preserving explicit operators and existing prefixes.

Update System, Lifecycle, and Migration

Updater Self-Update (#772)

  • Added a pre-download check that safely validates and replaces the update manager when a newer release is available.
  • Standardized batched update statuses and fixed migration script discovery.

Lifecycle and Migration (#771)

  • Prevented extract-loop hangs and restored the protected config across partial-update batches.
  • Improved v4 config migration checks and localized update-manager and migration messages (English, Spanish, French, and Portuguese).

Progress and Text Encoding (#775)

  • Normalized update logs and release notes for reliable UTF-8 display.
  • Capped progress below completion during source installation and added elapsed time tracking for slow requests.
  • Added a cleanup announcement before removing temporary files so the update remains visibly active.

Security and Fixes

CloudAV False Positive Fix and API Hardening (#776, #777)

  • Refactored central/settings/api_manager.php to eliminate the SMW-INJ-CLOUDAV-php.dropper.content_include-PHPTRP2-4 heuristic false positive triggered by CloudAV / Imunify360 malware scanners on Linux hosting environments.
  • Strict Extension Whitelist: Added explicit validation using basename() and pathinfo(..., PATHINFO_EXTENSION) so file_put_contents() only writes .i2x and .pft files inside /resources/mappings/, preventing arbitrary file extensions.
  • Safe Config Generation: Refactored how API configuration files are written and loaded so the script no longer interpolates $_POST parameters into raw <?php strings.

General Adjustments

  • Removed the MAX_TMP_STRING parameter (#778): This parameter does not exist in the CISIS binary build. For UTF-8 binaries, its presence in .xis scripts caused errors. The buffersize parameter alone is sufficient.
  • Layout Fix (#773): Set a 350px maximum width for the database heading select, fixing layout breaks when a database has a very long name.
  • Preserve Return Script (#773): Added a hidden backtoscript field in the JSON export form so the configured return destination is properly submitted.

What's Changed

Full Changelog: v4.0.2...v4.1.0