Skip to content

PHP security fixes and a new form editor

Choose a tag to compare

View all tags
@PhilReinking PhilReinking released this 22 Oct 10:53
v2.3.0
3a8aee6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Every Docker install should update: the image moves to PHP 8.5.12 for the October 2026 PHP security fixes (CVE-2026-109618, CVE-2026-109619). This release also rebuilds the form editor, so your whole form is one page you edit in place. Back up your database and APP_KEY first, as always.

Before you update

  1. Own php.ini: if you mount your own php.ini into /etc/php83/conf.d, move it to /etc/php85/conf.d. Otherwise PHP no longer reads it. (#296)
  2. Forms API sort: if your API scripts sort GET /api/forms by published_at, id or uuid, switch them to name, created_at, updated_at or latest_submission_at. The old values now give the default order. (#242)

What's new

  • New form editor: your form is one column. Open a question right where it is, also on a phone. Add a question between others, type "/" to pick its type, and move questions with Alt+Up/Down, the menu or by dragging. (#282)
  • Live preview beside the editor, and ?preview=1 on a form link to try it without storing anything. (#266, #270, #282)
  • Rules you can read: each rule shows as a sentence under its question, and a rule that points to a deleted question shows in red. (#264, #282)
  • Save status: the editor shows "Saving…", "Saved" or "Not saved" with Retry, and a change survives a quick reload. (#234, #267)
  • Find forms faster: search by name, status tabs with counts, and sort by latest submission. (#248, #250)
  • One top bar per form with Draft or Live, Preview and Publish. Publish checks for empty questions and broken rules first. (#265)
  • Safer deletes and archives: deleting a question or archiving a form asks first, and archiving also unpublishes. (#245, #247, #269)
  • Clear errors instead of server errors for values that are too long or don't fit, in forms, questions, templates and answers. (#239, #259, #261, #293)

Full changelog: https://github.com/deck9/input/blob/v2.3.0/CHANGELOG.md

Full diff: v2.2.0...v2.3.0

Assets 2
Loading