-
Notifications
You must be signed in to change notification settings - Fork 0
/
NEWS
2375 lines (2175 loc) · 117 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
[============================]
[ Mrbs NEWS Legend: ]
[ ]
[ + Added feature ]
[ * Improved/changed feature ]
[ - Bug fixed (we hope) ]
[============================]
-------------------------------------------------------------------------------
Version 1.7.3 (Web Jab 23rd 2019):
[-] Fix for problem editing long custom fields described in
[support-requests:#1658]
[-] Fixed problem upgrading to DB schema 56, see SF Support Requests #1658.
[-] Updated to latest phpCAS client to fix problem with '"continue"
targeting switch is equivalent to "break". Did you mean to use
"continue 2"?' warning messages in PHP 7.3.0.
[-] Fixed 'headers already sent' problem when using the 'cookie' session
scheme.
[*] Made the upgrade message look less like an error message. See SF
Support Requests #1661.
[-] Fixed bug when a field is disabled in the edit_entry form. See SF
Support Requests #1664.
[-] Fixed a number of issues with custom "checkbox" type fields, see SF
Bugs #429.
-------------------------------------------------------------------------------
Version 1.7.2 (Web Dec 19th 2018):
[*] Updated included time zone files.
[*] Fixed some Javascript warnings/deprecations. Updated jQuery UI.
[*] Improved session/auth selection.
[-] Fixed problem with text inputs and textarea widths not being the
same in some browsers, eg Firefox.
[*] Added trimming of input fields on the Edit User form to remove
accidental whitespace.
[-] Fixed bug with Prev and Next links in Search results, resulting in a
session expiry because no CSRF token was being passed. Only happens
when JavaScript is disabled.
[-] Fixed problem with Search ignoring Search From date.
[*] Added a date to the search results so that it's clear when the
search started.
[-] Fixed bug in finding best language file.
[-] Fixed bug when resizing a booking on a day that's not today.
[*] Relaxed CSRF token checking, so that the token isn't checked for GET
requests to read-only pages such as Search and Report.
[*] Changed MySQL schema/connection to use "utf8mb4" character set, in
order to support full Unicode. This adds a requirement on MySQL
5.3.3 or later.
[-] Fixed bug causing edit_entry_handler to go to today when finished
rather than the day of the start of the booking.
[+] Added CAS session/authentication scheme.
[+] Maded 'php' session scheme store sessions in the MRBS database,
rather than relying on the system having a working session storage
configuration.
[*] Moved config.inc.php to config.inc.php-sample. This means that new
releases of MRBS won't conflict with/overwrite users' own config.inc.php
files.
[-] Fixed a bug when using Joomla authentication.
[-] Made settings for $edit_entry_field_order consistent.
This fixes a bug (see SF Support Requests #1562).
[-] Fixed bug with confirmation status, introduced during recent
changes. See SF Support Requests #1562.
[*] Updated Mail_Mime package to version 1.10.2 to avoid the use of the
deprecated each() function.
[*] Updated PEAR to 1.10.5.
[*] Updated Net_SMTP to 1.8.0.
[*] Updated Net_Socket to 1.2.2.
[-] Fixed bug causing language file not to be used when in CLI mode. See
SF Support Requests 1583.
[*] Increased the length of the id column in the sessions table from 32
to 255. See SF Feature Requests #158.
[*] Updated stated minimum PHP version number to 5.4.0.
[-] Fixed bug when multiday bookings are not allowed. See SF Bugs #416.
[-] Fixed problems to do with caching of the user level in JavaScript
code. See SF Bugs #415.
[-] Fixed bug when db_ext password_format is not defined.
[-] Fixed bug when using db_ext and
$auth['db_ext']['column_name_level']. See SF Bugs #417
[-] Fixed problems with (a) the URL growing longer and longer when
logging in and logging out and logging in again etc. and (b) the
Back button on the edit_entry page not working after a login.
[-] Fixed problem with checkboxes on forms not being filled properly.
See SF Bugs #418.
[-] Fixed problem with disabled required fields on the edit_users form.
See SF Bugs #419.
[-] Fixed a bug (SF Bugs #420) causing an "invalid id" message if you
try an edit an entry without first having logged in.
[-] Fixed a bug that was causing the username_suffix to be stripped out
of a username wherever it occurred, rather than just at the end.
[-] Fixed bug causing series not to be approved. Might be related to SF
Support Requests #1623
[*] Disabled the default duration field on the area form if "All day" is
checked.
[*] Clarified upgrade instructions. See SF Support Requests #1622.
[-] Fixed bug causing "Empty or invalid search string". See SF Bugs
#421.
[-] Fixed bug in date_default_timezone_set() that was causing it to set
the current area timnezone rather than the config timezone if no
timezone was specified.
[-] Fixed bug that allowed areas with no enabled rooms to appear in the
area select.
[*] Switched to using the REQUEST_URI instead of PHP_SELF in order to
get the cookie path. See SF Support Requests #1634.
[-] Fixed bug that prevented users with emojis in their usernames from
logging in when using MySQL.
[+] Added 'last login' functionality to 'db' auth scheme.
[*] Added a note about how to include files from the config file. See SF
Support Requests #1649.
[*] Set the session.gc_maxlifetime to the same time as
$auth['session_php']['session_expire_time'] so that users aren't
logged out by the garbage collector before the session cookie is due
to expire.
[*] Upgraded PHPMailer to Version 5.2.27.
-------------------------------------------------------------------------------
Version 1.7.1 (Sun Feb 11th 2018):
[*] Updated PHPMailer to use latest code (5.2.5+) from the 5.2-stable
branch. Note that MRBS cannot yet use PHPMailer Version 6.0+ because
that requires PHP 5.5 or later.
[*] Improved error reporting when PHP sessions aren't working. See SF
Support Requests #1364.
[*] Improved fix for SF Patches #62.
[-] Fixed bug resulting in a function not found error. See SF Support
Requests #1390.
[-] Fixed problem with updating users table. See SF Support Requests
#1390.
[-] Fixed bug resulting in a "session expired" message when the "You are
xxx" link is clicked. See SF Support Requests #1393.
[*] Removed "You are " text from "You are xxx" link. See SF Support
Requests #1393.
[-] Fixed bug in formatting date for policy violations.
[-] Fixed another date formatting problem.
[*] Improved internationalisation of some language tokens
[-] Fixed bug where access was being denied if the Joomla username
looked like an integer, eg "1234". See SF Bugs #401.
[-] Fixed bug resulting in unwanted colons appearing after labels in
dataTables (eg the Report output)
[-] Fixed problem with textarea values not being displayed.
[*] Put the new period name input in focus when Add Period is clicked.
[+] Added the ability to restrict IMAP authentication to usernames from
a certain domain, using the new config setting
$auth['imap_php']['user_domain']. See SF Support Requests #1407.
[*] Reorganised mail settings. See SF Support Requests #1412.
[*] Improved mail debugging information, giving 'From', 'To', 'Cc' and
'Bcc' addresses.
[*] Made the field order on the view_entry page the same as that on the
edit_entry page. See SF Support Requests #1426.
[*] Added and id to custom field divs to make selection in CSS easier.
See SF Support Requests #1429.
[*] Fixed CSS syntax error.
[+] Added authLdapGetName() function in auth_ldap.inc. This isn't used
by MRBS currently, but people customising MRBS will be able to use
it.
-------------------------------------------------------------------------------
Version 1.7.0 (Thu Nov 16th 2017):
[-] Set the default value of $smtp_settings['secure'] to '', so that TLS
will not be attempted without the SMTP server advertising TLS support.
[-] A number of different changes to improve behaviour of browsers caching
MRBS resources which shouldn't be cached.
[*] Capitalised "goto" button. See SF Support Requests 1167.
[*] Moved MRBS's .htaccess file into 2 separate example .htaccess files
for different versions of Apache. The old .htaccess caused 500
errors with a stock Apache 2.4 configuration.
[-] Fixed bug when using custom themes. See SF Support Requests #1170.
[+] Added ability to authenticate with either username or email address,
if the authentication scheme supports it.
[+] Added Server Software information to the Help information.
[*] Restricted server details to admins, for security reasons.
[*] Removed "ExpiresActive Off" directive as it is no longer necessary
given other fixes and could interfere with a site's caching policy.
See SF Bugs #379.
[*] Eliminated $locale_warning global and moved reporting of locale
setting problems to the error mechanism rather than the browser.
[*] Improved localisation, especially for French, colons are no longer
hard-coded in HTML and instead populated by CSS.
[*] Removed the supplementary information in the 'fulldescription' text
string. It didn't help and indeed was misleading as things like the
type have their own form field.
[-] Stripped out HTML tags and entities from validation messages. See SF
Bugs #380.
[*] Added a warning symbol on the edit_entry page instead of a green
tick when an admin makes a booking that would normally violate one
or more of the policy rules. See SF Support Requests 1171.
[*] Updated Portuguese translation. Thanks to Paulo Resende.
[*] Added even more options for configuring PHPMailer TLS settings.
[*] Set PHP's default charset.
[*] Changed the way that period names are defined so that they can now
contain special chars and are put through htmlspecialchars() before
being output to the browser. (Previously the site administrator had
to encode special chars).
[-] Fixed a bug with the display of entries starting at 0000 in the
month view. See SF Support Requests #1186.
[*] Added Swedish translations. Thanks to Lars Olsson.
[*] Added some CSS classes to the minicals.
[-] Excluded seconds from the default representation of start and end
time. See SF Bugs #381.
[+] Added new config variable $weekdays to define weekdays and weekends,
allowing for the possibility that weekdays are not the same as
working days.
[*] Restricted passing of username and password to POST variables as a
security measure. See SF Feature Requests #351.
[-] Changed access level for check_slot_ajax to match edit_entry.
[*] Made the default access level 1 for the report, search and
view_entry pages to prevent usernames being revealed. See SF Feature
Requests #351.
[*] Disallow password changes from edit_users.php via GET.
[*] Removed new lines from JavaScript confirm messages. Modern browsers
can handle long lines.
[*] Restricted more form handlers to only accept POSTs.
[*] Improved word breaking slightly on webkit browsers. See SF Support
Requests #951 and #1200.
[-] Fixed bug causing a booking occupying a single slot at the end of
the day not to show in the day and week views. See SF Support Requests 1207.
[*] Made the DB connection DSN more strictly correct, and also support
setting $db_host to "" (or unset), to indicate you'd like
MRBS to use the default Unix domain socket instead of TCP. See
[bugs:#384]. On Linux at least, this works for both MySQL and
PostgreSQL.
[-] Fixed database transaction problems. See SF Support Requests #977.
[*] Altered transaction methods to use PDO transaction methods.
[*] Updated Spanish language file. Thanks to JLMartin.
[+] Added the ability to have different period names in each area. See
SF Support Requests 1214.
[*] Added a little more description around $ldap_dn_search_dn config
variable.
[-] Fixed bug causing ordinary users sometimes not to be able to change
their own passwords. See SF Support Requests #1238.
[*] Added a timestamp column to the users table, and support for viewing
it. Added function and triggers for updating the timestamp columns when
using PostgreSQL.
[*] Added sorting by the real date on the timestamp column in the users
table.
[-] Fixed a problem with buttons not appearing if the user is logged in
with a username in a different case to the creator of the booking.
[+] Added a Romanian language translation, thanks to Mihai Andreana.
See SF Support requests 1285.
[-] Fixed problem with validation of multiple email addresses - see SF
Support Requests #1290.
[*] Added some error handling in the event of an invalid user id in
edit_users.php.
[-] Fixed bug in password rehashing (auth_db).
[+] Add SAML auth and session schemes, thanks to Jørn Åne.
[*] Updated to jQuery 3.2.1 and jQueryUI 1.12.1, which includes XSS fixes.
[*] Added more error reporting to mutex_lock() [DB classes].
[-] Fixed a number of security issues in MRBS that were disclosed to
the project by SySS GmbH, including XSS, CSRF protection and session
fixation.
[SYSS-2017-021, SYSS-2017-022, SYSS-2017-023, SYSS-2017-024]
[*] Improved error reporting around database mutexes.
[*] All forms now only accept POST submission.
[*] Implemented a new set of Form classes, though not all sections of
MRBS are using them yet.
[*] Added CSRF protection throughout MRBS.
[*] Added a new config setting, $auth['allow_custom_html'], to determine whether
custom HTML is allowed in rooms/areas. This defaults to off, so if you
are using this feature and upgrade to 1.6.2 you will need to set
the variable to true in your config.inc.php.
[*] Dropped support for Internet Explorer 9 and lower.
[-] Implemented a fix for when "All day" is checked and the area "eveningends"
is past midnight. See SF Patches #62.
-------------------------------------------------------------------------------
Version 1.6.1 (Sun Feb 26th 2017):
[-] Fixed bug with the LDAP authentication scheme. See SF Support Requests
#1143.
[*] Added ability to specify the "Room admin email" on creating a room.
See SF Support Requests [support-requests:#1137]
[*] Added an unset() for $booking_types in systemdefaults.inc.php to make it
clearer how they work - see SF Bugs #374
[-] Fixed bug to do with the booking day.
[-] Fixed bug in cookie session scheme causing getUserName() to return ''
instead of null in the case of a user not being logged in when.
[-] Fixed bug causing incorrect status to be given on mails sent out
when an entry is approved. See SF Bugs #320.
[-] Fixed header layout problem in IE11 and below when using a tall
logo. See SF Support Requests #1158.
-------------------------------------------------------------------------------
Version 1.6.0 (Sat Feb 11th 2017):
[*] Decreased cache expiry time for timezone files, to allow for more rapid
updated for timezone changes.
[*] Caching added into LDAP authentication to improve performance, see SF bugs
#335
[-] Fixed bug with unquoted column names. See SF Support Requests #816.
[*] Added a check to make sure that custom field names don't contain
spaces. (See SF Support Requests #816)
[*] Improved debugging in auth_ldap a bit, to show errors from the ldap
extension.
[-] Fixed a problem with the end time not being selected on the booking
form if the default duration is not an integral number of slots
[-] Moved the PHP version check to happen earlier, otherwise MRBS will
fail with obscure error messages if the PHP version is too low. See
SF Bugs #337.
[-] Fixed bug in reports: the case sensitivity of types was not being
recognised (see SF Support Requests #776)
[-] Fixed problem with day links in the wek view. See SF bugs #339
[-] Fixed bug that caused MRBS to miss conflicts with single entries
when modifying a series. See SF Bugs #338.
[-] Fixed bug whereby the limit on the number of bookings isn't applied
properly if an existing series is being modified and there is at
least one single entry in the same interval.
[-] Fixed bug whereby the conflict checker wasn't firing when the repeat
end date changed
[*] Changed MRBS default behaviour to be *not* to use persistent
database connections, as they can cause problems with transactions
and locks. At the same time changed the config variable to be
$db_persist instead of $db_nopersist.
[*] Added sha256 authentication support for db_ext auth scheme. [Markus Gilli]
[*] Added ablility to read user access level from external database to
db_ext auth scheme.[Markus Gilli]
[-] Fixed bug in CSV reports when running on Windows (see SF Support
Requests 860)
[-] Fixed bug causing a booking to be made even if the specified repeat
results in no bookings (eg a weekly repeat for Thursdays starting
and ending on the same day, which isn't a Thursday)
[*] Changed the behaviour of MRBS when making a repeat booking that
results in just a single entry (for example a daily repeat starting
and ending on the same day). Previously this was treated as a
special case and converted into a single entry. However it seems
more logical to treat it as a series with just one entry. This
enables the repeat characteristics to be edited in the future.
[+] Allowed the type field to be mandatory (see SF Support Requests 876)
[-] Fixed problem whereby the locale could not be set when automatic
language changing was disabled and no override locale was set. See
SF Support Requests #891.
[-] Fixed bug when requesting More Info. See SF Bugs #347.
[*] Updated Polish translation. Thanks to Anonymous from SF Bugs #347.
[*] Added room name to conflict details following suggestion on general
mailing list.
[*] Added some email address validation (see SF Support Requests #897)
[+] Added a sort key for the area table.
[*] Changed the default character encoding for CSV files as the latest
versions of Excel now seem to recognise UTF-8 automatically.
[*] Removed disabling off error reporting for the connection to the
database during a database upgrade. If the site admin wants errors to
go to the browser, eg for debugging, then they should.
[-] Fixed datalists so that empty strings aren't presented as options
[*] Added a datalist input to report inputs when the standard fields
have select_options or datalist_options defined. See SF Support
Requests #909
[*] Improvements to debugging in LDAP auth scheme
[*] Fixed problem with long words in brief descriptions causing unequal
width columns in the calendar views. See SF Support Requests #951.
[*] Added '' as an option for $smtp_settings['secure']. See SF Support
Requests #954.
[-] Fixed problem with week number link in mincals. See SF Bugs #357.
[*] Modified show_colour_key() so that the colour key is not shown if
there are fewer than two types. (See SF Support Requests #1019)
[*] Improved behaviour of MRBS when only one type is defined, so that
type options are not shown.
[-] Fixed problem with Chrome not showing datalist options (see SF bugs
#360).
[+] Added config options to allow users (or just admins) to specify that
an email shouldn't be sent when making a booking. Useful if you are
just making a minor change or are creating a whole lot of bookings
at the beginning of a term or season. See SF Support requests #974.
[-] Fixed problem with the endtime selector not having a selected value
in the very rare case that the area's morningstarts or resolution is
changed in between refreshes of the browser on the edit_entry page.
See also SF Support Requests #983.
[-] Fixed problem with Bulk Delete on the report page. See SF Bugs #361.
[-] Fixed problem with Schedule and Policy tabs not appearing. See SF
Bugs #362.
[-] Fixed potential problem with end time selector in edit_entry.php
being blank when coming from the month view. See SF Support Requests
#983.
[+] Added Wordpress authentication scheme.
[*] Got rid of usage of $HTTP_GET_VARS, $HTTP_POST_VARS and
$HTTP_SERVER_VARS (no longer necessary)
[*] Allowed custom fields in the users table to be writable only by
admins
[-] Fixed bug causing password validation not to be performed in the user
admin page, and a few other minor issues.
[*] Changed German translation for rep_num_weeks. Thanks to Michael
Hellwig.
[*] Disabled page refresh if running over a metered network connection.
[-] Fixed bug causing form validation to fail when using datalist inputs
[*] Changed refresh mechanism for month view to Ajax from meta refresh.
[-] Fixed bug whereby bookings for the last slot were not being
displayed properly in the month view
[*] Wrapped the edit procedure in a transaction. See SF Support Requests
#1064
[*] Updated German translations from Andrea Beranek
[*] A few improvements to checklang.php
[*] Upgraded to latest version of jQuery 2.x branch
[*] MRBS now uses a DB abstraction class utilising PHP's PDO. All SQL
input is now parameterised, greatly improving security from SQL injection
attacks.
[-] Fixed bug that resulted in possibly wrong values for enable_periods
and reminders_enabled being shown on the Edit Area form.
[-] Fixed a performance problem when clicking on an empty cell in the
week view when using hidden days on a large table.
[*] Improved formatting of error messages, including errors accessing the
MRBS database.
[+] Added Joomla authentication scheme.
[*] Made the default setting for the "Do not send email" checkbox a
configuration variable
[*] Changed report form so that for custom checkbox fields you can now
select checked, unchecked or both. See SF Support Requests #1087
[-] Fixed bug that gave a double border on printing. See SF Support
Requests #1078. Also fixed another bug at the same time - there was
no border around bookings in the month view on printing.
[*] Changed the behaviour of the printed month view, getting rid of
horizontal and vertical scrollbars. Instead, horizontal overflow is
hidden and the table cell expands to accommodate vertical overflow.
[-] Fixed problem with (a) right border of bookings not appearing when
using the 'both' option for monthly listings and (b) listings
wrapping when using 'slot' or 'description'.
[-] Fixed bug causing fatal error when trying to delete a series.
[-] Fixed fatal error when exporting an entry from the view_entry page
[*] Improved error reporting when $mail_settings['from'] not set.
[-] Fixed problem with default_duration not going past the end of a
booking day. See SF Support Requests #116
[-] Fixed problem when the default duration takes a booking beyond the
start day and multiday bookings are not allowed.
[*] Made sure that the default duration for new bookings doesn't exceed
the maximum duration
[*] Added a new option to disable "Opportunistic TLS" in PHPMailer.
[-] Fixed bug causing bookings to be shown as private when they weren't.
[-] Fixed bug that allowed the type colour to be shown even when the
type was private. See SF bugs #372.
[-] Fixed bug preventing an event whose room name includes the area-room
separator from being imported.
[*] Added the ability to recocgnise type information in imported .ics
files using the X-MRBS-TYPE property.
[*] Added the ability to specify a default room if no LOCATION property
is given when importing a VEVENT
-------------------------------------------------------------------------------
Version 1.5.0 (Fri Oct 23rd 2015):
[*] Updated Simplified Chinese translation, provided by 'Tide'.
[*] Added logging of SQL errors to PHP log, see SF Support
Requests #560
[*] Improvememnts to import system, including performance and support
for compressed files.
[+] Added Slovakian language support.
[-] Fixed bug causing triggering spurious policy violations when using
periods and $max_duration is set. See SF Bugs #306
[*] Simplified the display of periods in the month view when a booking
is just one period long. See SF Support Requests #575
[-] Fixed problems with CSV reports, see SF Support Requests #585
[-] Fixed bug which prevented exported reports being imported by some
calendar apps, eg Outlook. See SF bugs #313
[*] Made MySQL database schema definition more explicit, in case of
MySQL servers with changed defaults. See SF Support
Requests #605
[*] Ensured that the $timezone configuration variable is valid. See SF
bugs #312
[*] Added server-side validation to check that mandatory standard fields
(eg the full description) are present
[-] Fixed false warning given on session_save_path readable check. See
SF bugs #316
[+] It is now possible to set booking policies which distinguish between
creating new bookings and editing or deleting existing bookings. (An
edit requires a new booking to be created and the old one to be deleted).
[*] jQueryUI 1.11.12
[*] Added rollback of outstanding transactions to the shutdown function
in an attempt to prevent duplicate bookings when using persistent
database connections. See SF bugs #314
[*] Changed the handling of nb and nn languages so that explicit
language files are provided for nn and nn rather than being mapped
onto no. See also SF Support Requests #649.
[-] Fixed language auto-selection for locales which use comma as the
decimal separator. See also SF Support Requests #649.
[*] Made the 'modified_by' field private by default, to match
'create_by'.
[-] Fixed bug in checking number of slots when the booking day goes past
midnight
[*] Datepicker visual improvements.
[+] Added floating headers to day and week view, as discussed in
[support-requests:#559].
[-] Fixed bug causing page refresh not to work if the user wasn't logged
in
[-] Fixed empty cell selection so that if you drag over a floating
header the selection is cancelled.
[*] Updated cached copy of 'tzurl' files.
[-] Fixed bug causing resizing performance to get worse and worse the
longer the browser has been open
[*] Converted all MySQL tables to use the InnoDB engine.
[*] Removed support for early versions of MySQL and PostgreSQL.
[*] Enhanced get_vocab() to allow sprintf() style formatting to give
more flexibility on inserting parameters into language tags.
[-] Fixed bug causing an HTML5 validation error when
$auth['only_admin_can_select_multiroom'] = TRUE;
[*] Added foreign keys to the MySQL and PostgreSQL database schemas,
to improve database consistency.
[*] Added better error handling for the case when the MRBS tables have
not been installed or cannot be accessed
[+] Made max_duration a per-area setting.
[-] Fixed bug in calculation of periods in report summaries. See SF
Support Requests #667
[-] Fixed bugs in calculation of periods in time slot selectors in
edit_entry form
[*] Changed minimum PHP version to 5.3.3
[-] Fixed bug that caused the number of periods in the Report Summary to
be incorrectly calculated if the report start or end date happened
to fall in the middle of a multi-day booking.
[-] Fixed bug causing invalid .ics files to be created when exporting
bookings from view_entry or report.
[-] Fixed bug preventing the booking date being changed when multi-day
bookings are not allowed
[-] Fixed "undefined method isValidInetAddress()" message when saving
the edit_area form and using a Turkish locale [caused by the capital
'I' in the method name]. Also other changes to support the behaviour
of I/i in the Turkish locale.
[-] Fixed bug that allowed '0' to be entered as a valid email address
for a user
[*] Added a stack trace to the fatal_error error log
[-] Fixed bug that caused the end time selector on the edit_entry form
to be wrong when using periods and trying to make a new booking for
a slot that wasn't the first of the day.
[*] Got rid of the $maxlength config variable and calculated it
automatically
[*] Fixes to Indonesian language file. See SF Patches #44
[-] Fixed bug - 'ical' text string was not being passed through
get_vocab()
[-] Fixed a bug with default_duration_all_day. See SF Support Requests
#782
[*] Updated/added instructions on upgrading into UPGRADE. See SF Support
Requests #609
[+] Added support for LDAP dereferencing behaviour, based on
[patches:#56]
[*] Updated the 'db' auth scheme to default to storing password hashs in
PHP's 'password_hash' format, if the password_hash() function is
functional.
[-] Fixed bug causing problem upgrading when using PostgreSQL with
$db_schema defined
[*] Changed email code to utilise PHPMailer instead of the previous
PEAR class
[*] Removed 'mysql' $dbsys config option, now that it has been replaced
by 'mysqli'
[*] Updated to DataTables version 1.10.9
[*] Changed default authentication scheme to 'db'.
[*] Removed sample/test data, and any mention of them in the
documentation.
[+] Added more flexible LDAP filtering support, as supplied by Steve
Cleveland. Adds configuration variables $ldap_filter_base_dn and
$ldap_filter_user_attr.
[-] Corrected the distinction between the translation tokens 'private'
and 'unavailable'.
[*] Italian translation updates, courtesy of Germano Massulo.
[*] Changed the 'cookie' session scheme to use HMAC hashing instead
of Blowfish encryption.
[*] Restructured mail debug code and made default output destination the
error_log
[-] Fixed bug which caused bookings to be made for all day if any of the
areas had a default duration of all day
[-] Fixed bug causing ical_uid not to be generated for a series when
conflicts are skipped (see SF Bugs #334). Added upgrade code to fix
existing database entries with no ical_uid.
[-] Fixed problems with database schema version upgrades 17, 24 and 25.
-------------------------------------------------------------------------------
Version 1.4.11 (Wed Jun 18 22:00:00 BST 2014):
[+] Implemented an inactivity time out that will log users out after
a period of inactivity.
[-] Fixed problem with Strict error messages being generated when
mail messages are sent using PHP versions < 5.4. See SF Support
Requests #367.
[*] Added support for Estonian in Windows and Unix.
[+] Added ability to use custom CSS files.
[-] Fixed bug causing the approval buttons not to be displayed on the
view_entry page in some circumstances (see SF Support Requests
#356).
[+] Added ability to specify the database port with the config variable
$db_port.
[+] Added the ability to set a maxlength attribute for custom fields
on the edit_entry page.
[*] Changed default database system for 'db_ext' authentication from
mysql to mysqli.
[*] Added quoting of table and column names when using 'db_ext'
authentication.
[*] Updated Czech translation.
[-] Prevented output of headers when running reports in CLI mode.
[*] Removed closing PHP tags (?>) at the ends of files as they are
unnecessary and can cause problems with unexpected output.
[-] Fixed problem with alignment of room and area selects in the week
and month views. Thanks to William Haller.
[*] Improved error reporting in the week view when there are no rooms.
[+] Implemented an earliest booking date using absolute dates,
controlled by the new config variables $min_booking_date_enabled
and $min_booking_date.
[*] Added the ability to specify a schema as a database config
variable and thus the ability for MRBS to work with databases
containing multiple schemas.
[+] Added 'modified_by' field so you can see who last modified an
entry.
[+] Added Bahasa Indonesian translation.
[*] Upgraded to jQuery 2.1.0, jQuery UI Release 1.10.4.
[*] Modified import.php so that it is tolerant of blank lines at the
start of the file and also between components.
[-] Fixed some errors in the Windows language map and expanded the
Windows codepage map.
[-] Fixed a problem in the day and week views with resizable bookings
not filling the whole time period when $clipped is set to FALSE.
[*] Changed the ORGANIZER in an iCalendar event to be a new email
address, defined as $mail_settings['organizer'] and not the
creator.
[*] Added nofollow to robots meta tag.
[-] Fixed problem with colour key and trailer shifting downwards
during a booking resize in IE.
[-] Fixed problem with resizing bookings in IE. See SF Bugs #293 and
#300.
[-] Changed form action link to a relative path name from an absolute
path name, which was causing problems on some sites with reverse
proxy rules.
[*] Made the default area and room consistent on import and export of
an event.
[-] Fixed bug in export of an event: the description included the
complete booking details instead of just the description.
-------------------------------------------------------------------------------
Version 1.4.10 (Mon Jul 08 22:00:00 BST 2013):
[+] MRBS now supports booking days that span midnight. At the same time a number of problems to do
with DST handling have been fixed, particularly the display of
the transition hours and the operation of MRBS in timezones where
the DST change is not 1 hour.
[-] Fixed bug causing fault in formatting of month view.
[-] Fixed bug in upgrade procedure causing the upgrade to fail if the
number of rows affected by a query was zero.
[+] MRBS now has a simplified interface for making repeat bookings
and the range of monthly repeats has been expanded. It is now
possible to have monthly repeats on the last, second last, third
last and fourth last weekdays of the month.
[-] Fixed formatting problem on Report page in some languages.
[-] Fixed bug preventing bulk delete working.
[-] Fixed problem with filtering and sorting of reports (column
numbers off by one)
[*] Lots of code restructured and simplified for improved
maintenance/flexibility.
[+] Added a config variable to allow the order of the fields in the
Search Criteria section of the Report form to be changed.
[+] Added a config variable to allow the order of the fields in the
Presentation Options section of the Report form to be changed.
[*] Converted autocomplete fields to use HTML5 <datalist> elements if
supported, otherwise to fall back to the jQuery UI Autocomplete
widget. Added ability for users to define $datalist_options in
the config file to force a field to be treated as a datalist.
[-] Fixed various undefined index/variable problems.
[-] Fixed some HTML5 validation issues.
[*] Prevented E_USER_NOTICE errors being reported during normal MRBS
operation.
[-] Fixed problem with French translation.
[-] Fixed bug where <span>s used for sorting the HTML table were
appearing in the CSV and iCalendar reports.
[+] Added Serbian (Latin) support - translation provided by 'knjigor'
on the Sourceforge tracker.
[*] Upgraded jQuery from Release 1.7.2 to 1.8.2.
[*] Upgraded jQuery UI from Release 1.8.22 to 1.9.1.
[-] Fixed syntax errors in a number of upgrade "post.inc" files.
[-] Fixed occurrences of != '' being used instead of !== ''. Causes
bugs such as Confirmed as well as Tentative reports being shown
in reports when only tentative have been requested.
[-] Ensured that rooms in the room list are sorted by the room sort
key.
[+] Added the ability to specify the "fifth" and "fifth last"
weekdays of the month when making monthly recurring bookings.
These are strict interpretations and will result in no bookings
for months where there are only four of the specified day of of
the week. (Using "last" or "first" will give you the fourth or
fourth last weekday if there are only four weekdays in the
month).
[-] Fixed bug causing the wrong mode (periods/times) to be used in
certain circumstances for reporting durations.
[-] Fixed major bug when editing an individual entry in a series that
caused a new series to be created alongside the original series.
[-] Fixed bug resulting in button labels in the report form not being
translated.
[-] Fixed bug causing an infinite loop if a negative day value is
given in the query string. Thanks to Neil Carter.
[-] Fixed bug causing incorrect email notifications to be issued when
members of a series were deleted (see SF Bugs #247).
[-] Translate approval status and confirmation status radio buttons
in report.php.
[*] Improved the way the "start of last slot" field is displayed on
load.
[*] Mark emails from mrbs as auto-generated, so that vacation mailers
don't answer mrbs mails.
[-] Fixed problem with misleading email notifications (see SF Bugs
255).
[*] Add room description as tooltip for room list in header (only in
list mode for now).
[*] Updated German translation.
[*] Add space before () when showing capacity for room
names.
[*] Add room description as tooltip for room list in
header (also in select mode) Newer browsers seem to support
tooltips for select options - nice :).
[+] Make clipping of bookings in month view configurable via
$clipped_month.
[*] Updated in-built timezone definitions.
[*] Changed default $dbsys to 'mysqli' from 'mysql', which is now
deprecated in PHP 5.5.0.
[-] Fixed typo in Dutch translation. Thanks to Dieter Adriaenssens - see SF
Patches #35.
[-] Fixed bug preventing singular form of the duration units being
shown.
[-] Fixed a bug causing Ajax conflict testing not to work after a
failed HTML5 form validation event.
[*] Updated Danish translation. Thanks to Søren O`Neill.
[-] Fixed warnings/errors from require_once() calls in
session_cookie.inc.
[-] Fixed bug causing time selectors not to work properly after the
area has been changed. See SF bugs #258.
[-] Fixed bug where no room was selected on changing area. See SF
bugs #259.
[-] Added client and server side validation to check that at least
one room is selected. (See SF Bugs #259).
[-] Disabled Ajax conflict checking and day/week/month page refresh
when the page is not visible (subject to browser support of page
visibility).
[-] Fixed bug whereby the repeat entry row is not deleted if you do a
bulk delete from the Report page of all the entries in a series
(see SF bugs #260).
[*] Updated Italian translation. Provided by Diego Zuccato.
[-] Fixed bug causing clicking outside the datepicker to result in
date selection, rather than cancelling the datepicker. See SF
Bugs #263.
[-] Disabled page refreshing while resizing is in progress.
[-] Fixed bug causing interval timer to stop occasionally.
[-] Fixed a bug causing multiple timers to be fired when the page is
hidden and then unhidden.
[-] Prevented page refresh when the mouse is hovering over a resize
handler (ie the user is about to start a resize).
[*] Improved performance of drag selection, especially with large
tables.
[-] Made sure that page refresh isn't restarted while we are in the
middle of a drag selection when we pass over the handles for
resizable bookings.
[-] Fixed bug causing incorrect checking of resolution and number of
slots when the booking day stretches past midnight.
[-] Fixed some label problems on the report page. See SF Bugs #265.
[-] Fixed bug resulting in no end time options being offered if there
is only one enabled area.
[-] Fixed incorrect quoting of id column, resulting in error messages
when running under PostgreSQL. See SF bugs #266.
[*] Updated Swedish translation. Thanks to Anders Henhammar.
[*] Moved the site_faq files into their own directory.
[+] Added a Swedish site_faq. Thanks to Anders Henhammar.
[-] Fixed bug causing the "Goto" datepicker to be reset if it was
open at the time the booking table was refreshed.
[-] Fixed bug when approving bookings and using PostgreSQL (removed
LIMIT clauses from UPDATE statements as they are not supported by
PostgreSQL).
[*] Updated Finnish translation. Thanks to Tuomas. See SF Patches #38.
[-] Fixed bug causing error messages when there are no mail
recipients. Thanks to Tuomas. See SF Patches #37.
[*] Disabled E_STRICT errors (see SF Bugs #272).
[-] Fixed bug when using an SQL reserved word as a custom field name.
-------------------------------------------------------------------------------
Version 1.4.9 (Wed Oct 03 22:00:00 BST 2012):
[-] Fixed bug that caused the '+' button for a booking to not work correctly.
[+] Added Hebrew support, as contributed by Michal Kastro.
[+] Added Thai language support, as contributed by Suthep.
[*] Improved language detection code.
[-] Fixed JavaScript error produced if you have a mandatory textarea
field. Thanks to Neil Brown. See SF ID 3472380
[*] Changed "max_book_ahead" to stop people getting around the restriction
with long bookings.
[-] Fixed a number of user interaction problems.
[-] Fixed auth_ldap configuration variable handling, thanks to Kevan
Carstensen.
[-] DataTables AJAX requests now use relative URLs in order to stop
cross-domain requests.
[+] Added ability to import iCalendar (.ics) files.
[*] Updated Turkish translation from Ahmet YILDIZ.
[*] Updated German translation - thanks to JWiemann.
[+] Introduced the $vocab_override config variable, allowing MRBS
text strings to be customised without editing the lang files.
Thanks to dwpoon.
[-] Improved SQL escaping so that it uses the database escaping
routines and not PHP's addslashes() function. Thanks to
Henry S. Thompson.
[-] Fixed bug which meant that the correct timezone wasn't
necessarily being used when dragging a booking.
[-] Fixed performance issue when using LDAP authentication and HTTP
sessions. Thanks to dwpoon.
[-] Fixed bug causing an entry of '0' in a mandatory custom field to
be rejected.
[*] Changed font colour for row and column labels in the calendar
view when printing to make them show up better in Google Chrome
[*] Improved CSV output, including removal of the requirement
of having PHP's 'iconv' extension.
[-] Fixed infinite loop in setting the time zone when
$timezone configuratation variable wasn't set.
[+] Added support for setting limits on the maximum number of
bookings that can be made per day, week, month, year and for any time
in the future. You can set limits globally as well per area,
enabling you to set policies of the sort "Max 2 bookings per week
in this area and max 5 bookings per week across the system". Note
also that setting 0 bookings per period for an area is a way of
stopping ordinary users from making bookings in a particular
area.
[-] Fixed bug that caused the ticks and crosses on the edit_entry
page not to appear properly in some browsers (eg Chrome and IE8)
on some systems.
[+] Added Portuguese Brazilian translation - thanks to Gleise S. O.
Teixeira
[+] Added Hungarian translation. Thanks to Gergely Kiss.
[*] Made use of HTML5 form element attributes (eg "required") so that
client-side form validation can be done by the browser where
possible, instead of by JavaScript.
[*] Tidied the MRBS distribution, so that different types of files
live in different directories.
[*] Updated Norwegian translation. Thanks to Thomas Haukland.
[+] Added an array of substitute languages, for example to substitute
'no' for 'nb-NO'.
[-] Fixed bug causing resizable bookings not to work properly when
using periods.
[*] Added a couple of extra headers to expires_header() to encourage
caching.
[*] Simplified presentation of output options on report form.
[*] Improved reports.
[-] Fixed bug preventing resizable bookings from working when there's
only one time slot or period in the day.
[*] Added an HTTP header to prevent IE going into Compatibility View.
[+] Added a new config setting, $max_booking_date, to prevent
bookings after a certain date, eg the end of term. Thanks to a
suggestion by Matthew Hilling.
[*] Made the users table use an Ajax data source for better
performance with large numbers of users
[-] Fixed bug on pending page where only a maximum of 10 members of a
series were being displayed
[*] Added some positive visual feedback when bookings are altered by
dragging the cell border.
[-] Fixed bug giving incorrect previous repeat end date in email
notification when a booking is changed from an individual booking
to a series.
[*] Upgraded jQuery and jQuery UI.
[-] Fixed some issues in the some of the upgrade steps.
[*] Updated Japanese translation. Thanks to Takanori Matsuura.
[*] Updated Czech translation. Thanks to Ondřej Kopka.
[*] Implemented page refresh in the day and week views using Ajax
requests if possible instead of through a <meta> tag.
[*] Improved Javascript code correctness.
[-] Improved error handling when updating VTIMEZONE definitions. Now
if MRBS is unable to download a new definition from the web, as
will happen on sites that do not have external internet access,
the last_updated field is updated anyway so that MRBS does not
attempt to retry for another 28 days.
[*] Kept track of how many Ajax requests are outstanding on the
server so that we don't swamp the server with requests if for
some reason the server is taking a long time to process them.
[-] Made utf8_bytecount() PHP4-safe.
[-] Fixed problem with users being unable to login when MRBS is
running on IIS
[-] Fixed sorting and styling of integer custom fields in
edit_users.php
[-] Fixed a bug in 'db' and 'db_ext' authentication schemes when
using MySQL whereby a login was validated successfully even if
the username contained trailing spaces. This then caused problems
subsequently when comparing the creator of a booking with the
user. See SF Bugs #245.
-------------------------------------------------------------------------------
Version 1.4.8 (Sun Jan 01 22:00:00 GMT 2012):
[-] Fixed bug that meant that '0' was treated as an invalid search
string.
[-] Fixed auth_ext authentication for users or passwords that contain
a $ character followed by a number.
[*] Allowed entries to be deleted even if they are longer than the
max_duration or beyond the max_book_ahead date. Following
suggestion from Marco Tedaldi.
[*] Made the week numbers and months in the mini calendars into
links, following a suggestion by Marco Tedaldi.
[-] iCalendar notifications expanded to allow more applications to
understand times/time zone information. See SF tracker 3324122.
[*] Added database error checking and handling to sql_*_field_info().
[-] Corrected a minor error in edit_entry Javascript, thanks to Guenter
Boehm.
[*] Improved SQL error reporting.
[*] Made the date range for the date selectors a config variable.
[*] Added an option on the booking form to skip past conflicting
bookings when making repeat bookings.
[+] Added a "Skip and book" button to the page listing conflicting
entries if you try and make a repeat booking where some of the
entries have conflicts.
[*] Upgraded jQuery UI from version 1.8.11 to 1.8.16.
[+] Added a config setting to disable email sending, overriding any
other settings. Useful for testing MRBS without having to worry
about sending mail to people not expecting it.
[*] Added a Back button to the edit_entry page.
[*] Added a list of dates of repeat bookings to email notifications.
[-] Fixed bug whereby email notifications would not be sent if MRBS
failed to find an address for those on the "To" line but there
addresses on the "Cc" line.
[*] Improved the message in email notifications for a list of deleted
repeat bookings
[*] Removed the privacy radio buttons from the Report form when the
user is not logged in as they're then redundant because only the
"user" will only be able to see public bookings. Thanks to a
suggestion from Jörg Wiemann in SF Tracker ID: 3405402
[*] Added an Ajax capability to the edit_entry form so that a booking
is checked for scheduling and policy conflicts as the booking
parameters are changed.
[-] Fixed bug causing disabled rooms to be displayed incorrectly in
view_entry.php
[*] Converted language FAQs to UTF-8.
[*] Added a timer so that a potential booking on the edit_entry form
can be periodically rechecked for validity, in case someone else
makes or releases a booking while the page is open. Can be
disabled and the interval set by means of a config variable.
[*] Revamped the LDAP authentication scheme somewhat. You can now
specify most of the configuration parameters as arrays, so that
you can have multiple servers or multiple base DNs that are
configured in different ways.
Additionally, you can now determine whether a user is an
administrator by defining LDAP configuration parameters:
$ldap_group_member_attrib and $ldap_admin_group_dn. See
systemdefaults.inc.php for details.
[-] Set PostgreSQL client encoding to UTF8. Thanks to Andreas Lange
for the patch (SF ID 3413080)
[*] Added a Back button to the Add/Edit users form.