Collabtive Versions Save

Collabtive 3.1

• Fix a bug where the generic female avatar wasnt shown in the user-admin area
• Update PHPMailer to its latest stable release 5.2.2 to mitigate potential issues with PHP7
• PHPMailer dependency now managed by composer
• PCLZip dependency now managed by composer
• Fix CSP header frame-ancestors
• Submit timetracker entries asyncronously
• Display total hours in timetracker report (again)
• Make forms reset by default after they have been submitted.
• Allow users to be assigned to milestones
• When moving the due date of a milestone, the due dates of associated tasks are also moved
• Allow multiple tasklists to be created when creating a milestone
• Display tree view of tasklist assigned to a milestone in milestone details
• Display messages in milestone details treeview
• Make opening an accordion slide a lot faster in accordions with many items
• Replace pixel graphics in the tree view with SVG vector graphics
• Fix the accordion in "late" milestone when creating a new milestone that is late
• Draw milestones associated to messages, with their tasklists, tasks in a tree view
• Draw files associated to messages in a tree view in the message details.

Collabtive 3.0.2

• Fix character encoding issue with special characters in titles of projects, tasks, etc
• Refactor lots of vue.js 1.0 syntax to be compatible with 2.0
• Change default number of projects displayed on the desktop to 15
• Fix font encoding issue in PDF generation
• Change truncation of project titles to 35
• Fix the accordeon in project->milestones
• add an additionalFields field to the model of the viewManager. It facilitates passing unstructured data from an endpoint to a vue template
• Improve pagination with many pages: the pagination control now display only the first, second as well as the current +-1, and the 2 last pages
• Actually load minified JS assets in some places
• Set CSP frame-ancestors to 'self'. this prevents clickjacking attacks, where collabtive is embedded into other website contexts.

This is a bugfix release.

• Fix broken link to task list in upcoming milestones block
• Fix XSS Vector in the user profile
• Fix selection of subfolders when uploading files
• Make truncation of project titles more consistent at 40 characters.
• Correctly display timetracker and projects block in a users own profile
• Fix user profiles when not logged in as admin
• Fix changing the role of an existing user that already had a role assigned.
• use a global HTMLPurifier object in getArrayVal() instead of creating a new one for each variable. this should improve performance by creating a much fewer objects.

Major release with many new features, more responsive UI and more.

• All external library dependencies now live in /vendor/ and are managed using composer.
• Restructured templates. Form templates now live in the /forms/ subdirectory of the template folder.
• Start using native HTML5 form validation instead of a JS library
• Added blockaccordeon for the blocks in the userprofile
• Improved the look of the file list view
• Fix a bug where getThemes() wouldnt finish if a template has no /theme/ folder
• Properly minify all JS assets using closure compiler
• Display the parent message in the breadcrumbs on top when viewing a message
• Messages now can have recursive replies. That is, each reply can have a reply, which can have a reply and so on.
• Private messages can now be added to any project. They can only be viewed by their designated recipient.
• Don't show mobile template in the template selector. these should not be activated directly but set by class mobileDetect()
• Updated the database schema of new installations to use innoDB instead of myISAM storage engine. myISAM is outdated, and innoDB now the default on mysql.
• Moved helper classes to replace inline styles to /theme/css/style_helpers.css
• Most inline styles have been refactored to classes. One of the next releases will disable inline style in CSP
• The sidebar is collapsed by default, giving more room for the main content area It can be expanded by clicking
• Added viewManager functions that make it easy to create, and update reactive vue.js views
• Added helper methods css(), cssAll, cssId() to ajax.js
• All animations now use velocity.js. This removes the dependency on scriptculous and enables HW acceleration on mobile.
• Implemented new modal dialog for the calendar, that is not based on prototype
• Implemented accordeon that does not depend on prototype
• Added example plugin
• Plugin system that is completely modular and cacheable. Plugins are defined as their own classes, and implement the collabtivePlugin interface Arbitrary Plugin Hooks can be placed in templates to allow dependency injection
• All forms are now submitted asyncronously
• Rewrite of UI rendering with vue.js to enable more reactive UI
• Changed constructor of SmartyPaginate.class.php to be compatible with PHP 7
• Fixed unfiltered variables
• Refactored helper methods to use the new ajaxRequest object.
• Implemented ajaxRequest() object in ajax.js that wraps native xmlhttprequest to create POST and GET ajax requests.
• Improved database checks in init.php (srichter)
• Fixed file download link in file upload email notification
• Performance improved in getMyProjects() SQL query by using a JOIN (srichter)
• Fixed a bug in thumb.php where not-logged in users could load thumbnails of images they know the path to
• Converted the filetype check int he user image upload to a whitelist to be more secure from malicious file uploads.
• Added code for excel import
• Code refactoring to use arrays $cleanPost, and $cleanGet - these supply the value of $_POST and $_GET sanitized from XSS vectors
• Converted a few remaining SQL queries to prepared statements
• Converted loading of content on the desktop to an asyncronous method using vue.js. This speeds up the loading of the desktop page considerably.
• Adding of projects now done asyncronously
• Refactoring of code
• Converted several queries into JOINs to improve performance
• Converted loading of project tasks to asnycronous loading
• Converted loading of timetracker to asyncronous loading
• Converted loading of milestones to asyncronous loading
• Converted loading of messages to asyncronous loading
• Made adding of projects asyncronous
• Late, Current and upcoming milestones are now displayed in a block accordeon
• Project tasks are now arranged as a block accordion
• Rewrote accordion code to no longer depend on prototype.js
• Added feature to optionally adapt all lower-level deadlines upon changing a project or milestone deadline

This is a pre-release. Use for testing purposes only.

THIS IS A PRE RELEASE. ONLY USE FOR TESTING PURPOSES.

• All external library dependencies now live in /vendor/ and are managed using composer.
• Restructured templates. Form templates now live in the /forms/ subdirectory of the template folder.
• Start using native HTML5 form validation instead of a JS library
• Added blockaccordeon for the blocks in the userprofile
• Improved the look of the file list view
• Fix a bug where getThemes() wouldnt finish if a template has no /theme/ folder
• Properly minify all JS assets using closure compiler
• Display the parent message in the breadcrumbs on top when viewing a message
• Messages now can have recursive replies. That is, each reply can have a reply, which can have a reply and so on.
• Private messages can now be added to any project. They can only be viewed by their designated recipient.
• Don't show mobile template in the template selector. these should not be activated directly but set by class mobileDetect()
• Updated the database schema of new installations to use innoDB instead of myISAM storage engine. myISAM is outdated, and innoDB now the default on mysql.
• Moved helper classes to replace inline styles to /theme/css/style_helpers.css
• Most inline styles have been refactored to classes. One of the next releases will disable inline style in CSP
• The sidebar is collapsed by default, giving more room for the main content area It can be expanded by clicking
• Added viewManager functions that make it easy to create, and update reactive vue.js views
• Added helper methods css(), cssAll, cssId() to ajax.js
• All animations now use velocity.js. This removes the dependency on scriptculous and enables HW acceleration on mobile.
• Implemented new modal dialog for the calendar, that is not based on prototype
• Implemented accordeon that does not depend on prototype
• Added example plugin
• Plugin system that is completely modular and cacheable. Plugins are defined as their own classes, and implement the collabtivePlugin interface Arbitrary Plugin Hooks can be placed in templates to allow dependency injection
• All forms are now submitted asyncronously
• Rewrite of UI rendering with vue.js to enable more reactive UI
• Changed constructor of SmartyPaginate.class.php to be compatible with PHP 7
• Fixed unfiltered variables
• Refactored helper methods to use the new ajaxRequest object.
• Implemented ajaxRequest() object in ajax.js that wraps native xmlhttprequest to create POST and GET ajax requests.
• Improved database checks in init.php (srichter)
• Fixed file download link in file upload email notification
• Performance improved in getMyProjects() SQL query by using a JOIN (srichter)
• Fixed a bug in thumb.php where not-logged in users could load thumbnails of images they know the path to
• Converted the filetype check int he user image upload to a whitelist to be more secure from malicious file uploads.
• Added code for excel import
• Code refactoring to use arrays $cleanPost, and $cleanGet - these supply the value of $_POST and $_GET sanitized from XSS vectors
• Converted a few remaining SQL queries to prepared statements
• Converted loading of content on the desktop to an asyncronous method using vue.js. This speeds up the loading of the desktop page considerably.
• Adding of projects now done asyncronously
• Refactoring of code
• Converted several queries into JOINs to improve performance
• Converted loading of project tasks to asnycronous loading
• Converted loading of timetracker to asyncronous loading
• Converted loading of milestones to asyncronous loading
• Converted loading of messages to asyncronous loading
• Made adding of projects asyncronous
• Late, Current and upcoming milestones are now displayed in a block accordeon
• Project tasks are now arranged as a block accordion
• Rewrote accordion code to no longer depend on prototype.js
• Added feature to optionally adapt all lower-level deadlines upon changing a project or milestone deadline

Fixes a database problem in version 2.1

• Removed accordion-related JS legacy code from desktop
• Added default charset to all create table statements
• Removed creation of unnecessary table
• Added collation info to install-readme files
• Fixed bug in start date vs. end date comparison when adding or editing a task
• Fixed bug to return correct customer for a project
• Made customer selection available in admin area
• Localized customer-related labels and labels for the installation procedure
• More SQL queries use prepared statements now
• Remove file upload for IE versions 9 and older
• Removed several calls to htmlspecialchars(). they are obsoleted by the html purifier lib and caused issues
• Removed several calls to stripslashes(). they are obsoleted by html purifier
• Fixed a problem with ambiguous field names
• Fixed a missing GROUP BY clause
• Implemented SQLite support. It can be chosen in the installer.
• Removed the tags class for good
• Add folder /files/standard/ics/ to the installation package
• Removed call to file_exists in getArrayVal() - it worked around an edge case in the installer. This safes a lot of calls to file_exists()
• Fixed a bug that prevented files from being attached to messages
• Fix the link in the file-uploaded email notification
• Made mylog object global. This safes a lot of object instantiations and improves performance. (srichter)
• Reuse $myOpenProjects from init.php in index.php , improving performance (srichter)
• Improved SSL recognition (srichter)
• Improved the timetracker widget on the project dashboard to alternatively take working hours directly as input
• Re-added closed projects on the desktop
• Fix deleting of task assignments when deleting a project
• Enable deleting and editing of customers
• Make the password field in add user obfuscated
• Fix replying to messages on the desktop
• Fix cancel buttons in desktop->add task and desktop->edit project
• Fix inserting uploaded images from the tinyMCE image list
• Make the datepicker fade out faster

• Fixed notice on desktop that resulted from missing network connection during update check
• Fixed deactivation of error reporting during update
• Merge existing members and new members when adding project
• Error reporting globally set to E_WARNING
• Changed redirection after project creation from desktop or project administration to project dashboard
• Improved translations: German, Polish, Farsi, Norwegian (Bokmal & Nynorsk), Simplified Chinese
• Improved project tree's handling for special characters
• Removed file upload from the add reply form. Now only previously uploaded files can be attached to replies.
• Lots of code beautification in templates files
• Make filemanager behave more like explorer (i.e. no pagination - show all files in each folder at once)
• Revert to gridview as the default file view (this was changed in 1.2 b/c of issues)
• Added edge case for SSL detection
• Removed .htaccess file as it was causing trouble with some servers
• Added start date functionality for tasks
• Fixed several typos in style_form.css
• Fixed typo in paginate-first function
• Fixed cancel button for deleting folders in list view
• Corrected label for edit button in project members view ("edit file" -> "edit user")
• Changed permission for adding users to an existing project from "administration" to "project edit"
• Implemented HTML Purifier filter for all user input. This will give us STRONG protection against all kinds of XSS attacks, while preserving rich formating options. It will also enhance well formedness.
• Implemented some Content-Security-Protection header options. No framing,only load css from same origin, only load .js files from same origin, only load images from same origin
• Remove force-compile option from template engine. This disabled caching and caused performance problems for some users.
• Add compileAllConfig() to force a recompile of the config files in certain cases.
• Fixed possible sql vulnerability in manageajax.php
• Dont expose plain filesystem links to uploaded files. Downloads are routed through download.php
• Added AES encryption of uploaded files
• Added CSS theme functionality. Now the CSS and image files for each template set reside in a /themes/ subfolder. This way, there can be CSS only variations of templates created more easily.
• Change color of tab info string, making it more readable
• Set cache directory for HTML purifier definitions to /files/standard/ics/
• Messages can now be edited asyncronously
• Messages can now be replied to asyncronously
• Implemented a new structure for the desktop. It is now an accordeon where clicking each section slides it open and closes all others.
• Implemented a new structure for the project dashboard. It is now an accordeon where clicking each section slides it open and closes all others.
• Customer profiles can be added in admin->customer
• A customer can be assigned to projects
• Remove user pictures from the onlinelist
• Added translation of install-readme: Simplified Chinese
• Removed unfunctional links from the day numbers in the desktop calendar
• Fixed white page when editing of task failed.
• Fixed conversion of umlauts when uploading files.
• Fixed accordeon in tasklist view
• Fixed a bug where the list view in project->files could not be selected if the user's role had file:add deactivated.
• Files in subfolders can now also be attached to messages
• Fixed filetype detection in message::getAttachedFiles - needs more refactoring to use file::getFile
• Fixed a problem with file uploads and visibility string
• Fixed cancel button submitting the form in task->edit
• Localized project tree labels
• Localized label for name in list view for files
• Added a new CSS theme: spring
• Fixed various display bugs