Legend: !important +added -removed ~changed #fixed
Info: access to the beta versions and pre-releases are reserved to users with a valid pro subscription.
iCagenda™ is distributed under the terms of the GNU General Public License version 3 or later; see LICENSE.txt.
iCagenda 3.1.5 Security Release and enhancements! (2013.08.19)
!
Security Release : fixed a XSS vulnerability discovered by Stefan Horlacher from Compass Security AG (www.csnc.ch) (many thanks Stefan to keep the web clean and secured!). Another issue was resolved, discovered by Giusebos, which allowed sending spam to the administrator and the creator of the event, using cookies via registration form. And that's not all! As we always want to add much more security, some filtering enhancements have been added to the registration form (see below).!
Change : Now, when an event over a period with an end date and its time set to 00:00:00, this end date is displayed in frontend (list of events, and modules).+
Added : New options in filtering events in menuitem. Now you can display all events, upcoming events, past events, events of the day and upcoming, or today's events.+
Added : Page 404 when event not found.+
Added : Enhancement of Email control during registration. Test if provider is valid.+
Added : Test of the Name during registration. Now, a name cannot start with a number and cannot contain any of the following characters: / \ < > "_QQ_" [ ] ( ) " ; = + &.+
Added : Control in front-end if dates of events are valid (control was before only in admin edit)#
Fixed : was counted archived events in header of list of events, and should not.#
Fixed : if end time is lower or equal to start time of an event over a period, end date is displayed.#
Fixed : Author name and username were not correctly displayed in admin events list, and now display correctly the user selected in 'created by'.Changed files in 3.1.5
~
admin/models/events.php~
admin/tables/event.php~
admin/views/events/tmpl/default.php~
site/helpers/icmodcalendar.php~
site/helpers/icmodel.php~
site/views/list/tmpl/default.xml~
site/views/list/tmpl/event.php~
site/views/list/tmpl/registration.php
