@Alanaktion Alanaktion released this Sep 5, 2018

Assets 3

Phproject v1.7.5 includes several bug fixes and new translations, including a complete Estonian translation from bss on Crowdin.

Changelog

Pre-release

@Alanaktion Alanaktion released this Sep 5, 2018 · 1 commit to master since this release

Assets 2

Includes most bug fixes and changes up to v1.7.5

@Alanaktion Alanaktion released this May 1, 2018 · 23 commits to master since this release

Assets 3

Version 1.7.4 includes a bug fix for v1.7.3 and earlier's session management on PHP 7, as well as the latest version of the Fat-free framework, which includes several bug fixes and feature enhancements. Upgrading directly to this release instead of v1.7.3 is recommended to avoid session errors.

@Alanaktion Alanaktion released this Feb 19, 2018 · 32 commits to master since this release

Assets 3

Release 1.7.3 fixes an issue with updating older versions to 1.7.2.

@Alanaktion Alanaktion released this Feb 8, 2018 · 35 commits to master since this release

Assets 3

Phproject 1.7.2 includes several bug fixes primarily focused on PHP 7.2 compatibility.

@Alanaktion Alanaktion released this Jan 3, 2018 · 42 commits to master since this release

Assets 3

Phproject 1.7.1 fixes a critical bug in Phproject 1.7. All 1.7 users should upgrade immediately.

@Alanaktion Alanaktion released this Dec 30, 2017 · 47 commits to master since this release

Assets 3

Phproject 1.7 includes several bug fixes, security enhancements, and feature updates.

  • Keyboard focus and Esc key handling are improved for quick edits to issues
  • Potential XSS vulnerability on dashboard widgets fixed
  • Better text to Emoji conversion
  • Project overview optimized to load much faster on large projects
  • Third-party libraries updated to their latest compatible versions

Full changelog

@Alanaktion Alanaktion released this Sep 25, 2017 · 71 commits to master since this release

Assets 3

Phproject 1.6.2 brings several new features and bug fixes!

  • Previous sprints are now sorted with the most recent sprint at the top
  • Fixed an issue with password reset links not working
  • Cron jobs now work with the new config.php format
  • New repeat cycles were added

@Alanaktion Alanaktion released this Aug 29, 2017 · 84 commits to master since this release

Assets 3

Phproject version 1.6.1 fixes an issue with the config.ini to config.php conversion process.

@Alanaktion Alanaktion released this Aug 29, 2017 · 86 commits to master since this release

Assets 3

Phproject version 1.6 includes significant architectural changes and several minor feature changes, bug fixes, and security enhancements.

Note that the v1.6 upgrade can take several minutes on a large site with many issues due to the table structure changes required. A brief planned downtime is recommended for sites with more than 100,000 issues.

Architecture

  • Third-party PHP libraries are now included via Composer. This allows us to keep our repository leaner and makes updating to new versions of libraries simpler.
  • We've reformatted all PHP files to follow PSR-2 standards, and HTML files now use 4 spaces for indentation for consistency.
  • Travis CI test builds have been updated to use the new Trusty platform, and will be updated to include more PHP versions and additional test cases in the future.
  • The ping system used to keep sessions alive as a workaround for an old session bug has been completely removed. This results in significantly lower resource usage on sites with many users.
  • The unused attribute tables from a long time ago are removed.

Features

  • Emoticons previously converted to Icomoon glpyhs are now displayed as native Emoji! 😃
  • Textile parsing shows a deprecation warning, to prepare for future removal.
  • The Administration page now shows when new releases are available, and the details about the release.
  • Basic site statistics are reported to Phproject developers to help us know which things to focus on building in the future. Users can opt out of this stat reporting if desired.

Bug fixes

  • Users with an avatar uploaded will no longer see links to Gravatar when editing their profile.
  • Native PHP functions are used to write configuration files, which fixes issues with special characters in configuration values.

Security enhancements

  • The old config.ini file is no longer used, and will be migrated to a config.php file, that won't require special server configuration to hide. This helps prevent malicious users from finding your database connection information.
  • Some previously unvalidated issue values now have validation and foreign key constraints, preventing possible XSS vulnerabilities and malicious functionality breakage.
  • A XSS vulnerability on the Browse pages was fixed.
  • Non-image files are no longer allowed to be uploaded for user avatars.
  • Image thumbnail generation dimensions are now limited to prevent a denial of service attack.