ExpressionEngine 2.x Change Log¶

Version 2.11.9¶

Release Date: April 13, 2017

• Fixed a bug where floating point numbers could not be used in queries.

Version 2.11.8¶

Release Date: April 10, 2017

• Security Fixes:
  • Mitigated a potential remote code execution vulnerability.
  • Further hardened protections against SQL injection.
• Fixed a bug (#23044) where an “Unable to load the requested file” error may appear when editing a custom field.
• Fixed a bug (#20946) where a memory setting of -1 wasn’t recognized as unlimited.
• Fixed a bug (#23016) where the Template Debugger could break Channel Form’s JavaScript in some environments.
• Fixed a PHP 7.1.0 incompatibility (#22897).

Version 2.11.7¶

Release Date: March 1, 2017

• Security Fixes:
  • Eliminated a timing attack opportunity.
• Fixed a bug where the password reset tokens could expire too soon depending on the server_offset config.

Version 2.11.6¶

Release Date: February 7, 2017

• Security Fixes:
  • Fixed a security bug where some path names were not properly sanitized.
  • Fixed a security bug involving PHP object injection.

Version 2.11.5¶

Release Date: December 30, 2016

• Security Fixes:
  • Hardened security in the Email library, prevents attacks similar to PHPMailer CVE-2016-10033, CVE-2016-10045, and Swift Mailer CVE-2016-10074.

Version 2.11.4¶

Release Date: December 13, 2016

• Fixed a bug (#22054) where saving a Grid with columns marked as searchable in a non-channel content type would show an error.
• Fixed a bug where cache files may be unable to be read by EE in certain hosting environments.
• Fixed a bug where caching a tag with a conditional in it would always generate a cache and never read from it.
• Fixed a bug (#22705) where unsubscribing from the Mailing List on environments where MySQL is not running in strict mode could potentially remove other subscribers.
• Fixed a bug with server response times in New Relic transaction reporting for front-end requests.
• Fixed a bug where relationship fields in Grid would have a value preselected and confusing ordering when you created a new row while editing an existing entry.

Version 2.11.3¶

Release Date: July 27, 2016

• Security Fixes:
  • Improved clickjacking defense by defaulting all requests to SAMEORIGIN framing rules.
  • Added a new config override x_frame_options to control the framing rules.
  • Improved security in the Forums with additional CSRF checks.
  • Improved XSS security when using polls in the Forums.
  • Improved XSS security when searching for members.
  • Improved security by decoding IDN encoded domain names in links.
• Reduced the password reset token’s timeout. This message will self-destruct.
• Fixed a bug (#21918) where parsing Grid fields from multiple content types could show errors in rare cases.

Version 2.11.2¶

Release Date: June 6, 2016

• Bug Fixes:
  • Fixed a bug (#21706) where overwriting a file in the File Manager would show errors under PHP 7.
  • Fixed a bug (#21833) where the Active Record class may show an error in PHP 7.
  • Fixed a bug where layout: globals were parsed in content.
  • Fixed a bug in the XML-RPC Server implementation that could cause XML parsing failures on newer versions of PHP.
  • Fixed a bug where grid with more than one relationship could not parse all of them.
  • Fixed a bug (#21089) where the template editor JavaScript might not be properly instantiated on some multibyte server configurations.
• Developers:
  • Added output_show_message hook for modifying the output of front-end system messages.

Version 2.11.1¶

Release Date: March 15, 2016

• Bug Fixes:
  • Fixed a bug with the 2.11.0 updater.

Version 2.11.0¶

Release Date: March 15, 2016

• General Changes:
  • Added compatibility with PHP 7 and MySQL 5.7.
• Bug Fixes:
  • Fixed a bug (#16426) where the publish page category edit link did not respect the per category-group permission.
  • Fixed a bug where relationships could go unparsed in certain templates.
  • Fixed a bug where updating a site with relationships could result in a PHP error on the publish page.
  • Fixed a bug where checking for relationships inside themselves resulted in errors.
  • Fixed a bug (#20342) where internal quicklinks would generate disallowed key character errors.
  • Fixed a bug (#19419) where the template parser would not fully parse deeply nested code.
  • Fixed a bug (#20554) where the RTE stored full URLs instead of {filedir_n} tags.
  • Fixed a bug (#19901) where search results are not updated for a Grid field when you change a column’s search setting.

Version 2.10.3¶

Release Date: February 1, 2016

• General Changes:
  • Updated the URL for the user-guide.
• Bug Fixes:
  • Bug fix for Markdown URLs with spaces and Safe HTML
  • Fixed a bug (#21481) for PHP 5.3 which would lead to a fatal Using $this when not in object context... error. Time to upgrade PHP!
  • Fixed a bug where stop word removal in the search module was not UTF-8 compatible. Zaro Ağa is no longer Zaro Ğ.
  • Fixed an obscure URI detection bug that could lead to duplicate content duplicate content.
  • Fixed a bug where getting thumbnails for images with special characters in ther filenames resulted in an error.

Version 2.10.2¶

Release Date: December 22, 2015

• Important:
  • Changed password max length to 72 characters.
  • Upload directory synchronization no longer deletes files.
  • No longer filtering file system directories basded on safe MIME types as that was suppressing error notices in the file synchronization process.
• General Changes:
  • Added PASSWORD_MAX_LENGTH constant.
  • Added {password_max_length} template variable.
  • Improved New Relic transaction reporting.
  • Added the following validation rules: greater_than, greater_than_equal_to, less_than, less_than_equal_to
  • get_thumb() now returns the default thumbnail if the file does not exist.
  • The File Fieldtype now displays a notice when its file does not exist.
• Bug Fixes:
  • Fixed a bug (#20593) where search results incorrectly handled search result variables when using conditionals.
  • Fixed a bug (#20945) where the typography library would not be loaded when using Low Variables and Grid.
  • Fixed a bug (#20970) where unselecting all categories in a Channel Form would not save the category selection.
  • Fixed a bug (#21009) where the timezone= parameter would have no effect on Date fields inside a Grid.
  • Fixed a bug (#21005) where PHP warnings may be generated when cleaning the page cache.
  • Fixed a bug where pagination and search in the file browser modal may not work if a file name had a special character.
  • Fixed a bug where redirecting to a 404 template sharing the same layout variable names as the redirecting templates may have the wrong data assigned to them.
  • Fixed a bug (#20972) where file names with special characters may cause the publish form not to load properly.
  • Fixed a bug (#21320) where a PHP error would appear when using the {member_search_path} variable inside an Channel Entries tag pair.
  • Fixed a bug where some channel entry date variables would not work in conditionals without having brackets around them.
  • Fixed a bug (#20969) where the no_results conditional worked inconsistently when using relationships.
  • Fixed a bug where 0 == '' would incorrectly evaluate to false.
  • Fixed a bug where some elseif branches in template conditionals were not pruned correctly.
  • Fixed a bug (#21046) where trying to submit a versioned entry with grid rows that have been deleted resulted in a validation error.
  • Fixing a bug (#20959) where submitting a page that changes the config.php file could result in an error on some servers.
  • Fixed a bug (#20975) where URL titles that began with C## were improperly being parsed as category URLs.
  • Fixed a bug (#21099) where line breaks in member signatures were being converted to literal \n. Literally.
  • Fixed a bug (#20990) where the user success message was empty after successfully submitting a forgotten password reset form.
  • Fixed a bug (#21018) where relationship fields were not parsed across sites.

Version 2.10.1¶

Release Date: May 1, 2015

• Bug Fixes:
  • Fixed a bug where ordering a Grid field by random on an MSM site could break nested relationship tags.
  • Fixed a bug where new versions were not reported consistently.
  • Fixed a bug (#20743) where submitting an empty form while removing plugins caused a PHP error
  • Fixed a bug (#20954) where viewing a member’s account in the Control Panel would result in a white screen.
  • Fixed a bug where the selected entries pane of a relationship field wouldn’t show up when you didn’t have enough entries selected to fill it.

Version 2.10.0¶

Release Date: April 29, 2015

• Important:
  • Added .htaccess to images directory to prevent execution of PHP files.
  • Removed config from the output profiler.
  • Fixed a bug where, given a valid stolen session ID, a malicious user could create a valid session in rare circumstances.
  • Changed the config/mimes.php file format: it is now a whitelist of MIME Types available for upload.
  • Added hidden file upload prevention.
  • Added a config override to blacklist certain filenames from being uploaded.
• General Changes:
  • Added option to enable or disable private messages site-wide.
  • Added option to allow or disallow attachments in private messages site-wide.
  • Added new conditional variable to forum templates, {if pm_enabled}, for conditionally displaying content if private messages are enabled for the logged-in user.
  • Added a DD-MM-YYYY date format
  • Added Channel ID to Channel Management page.
  • Added Field Group ID to Channel Fields Management page.
  • Added Status Group ID and Status ID to Status Group and Status Management pages.
  • Added Channel name to Content Edit page.
  • Channel Form date fields now accept the date and time format setup in your localization settings instead of requiring yyyy-mm-dd hh:mm PM.
  • Added max_url_segments config override. Increased default to 12.
  • Updated some date formatting defaults to use 4 digit years.
  • Optimized queries used in new channel field creation.
• Bug Fixes:
  • Fixed a MySQL deprecation notice in the updater survey in PHP versions 5.5 and greater.
  • Fixed a bug (#20859) where the 2.9.3 updater may show an error. referencing Template Routes when upgrading ExpressionEngine Core.
  • Fixed a bug (#20912) where switch variables were not parsed in Channel Categories.
  • Fixed a bug (#20926) where IS_EMPTY did not account for NULL database values.
  • Fixed a bug with relationships, where some template code combinations could trigger PHP errors.
  • Fixed a bug where private message attachments would not be removed from the file system when the message was deleted.
  • Fixed a bug (#20893, #20941) where some dd/mm/yyyy dates were incorrectly marked invalid.
  • Fixed a bug (#20114) where SVG files were not an acceptable image format.
  • Fixed a bug (#20862) where yyyy-dd-mm date formats would not be accepted.
  • Fixed a bug (#20866) where the upload file button did not work in the File Manager.
  • Fixed a bug (#20864) where the select all checkbox at the bottom of Manage Database Tables did not work.
  • Fixed a bug (#20892) where the valid_date form validation would fail on some date formats.
  • Fixed a bug (#20705) where category custom field creation was not consistent with regard to field types.
  • Fixed a bug (#20708) where the updater could fail when trying to display a survey if PHP short tags were disabled.
  • Fixed a bug (#20939) where member group category permissions were not being saved
  • Fixed a bug (#20745) where channel forms did not respect the “Can edit entries authored by others” permission.
• Developers:
  • Added a new MIME Type library for detecting mime types.

Version 2.9.3¶

Release Date: March 24, 2015

• General Changes:
  • SECURITY: Added autocomplete="off" to idle logout modal.
  • Added the license number and license owner to the control panel footer.
  • Changed all date formats to use four digits for the year.
  • Any date matching the pattern ##-##-## is now invalid.
  • Changed date input interpretation to use the configured date format when parsing dates.
  • Set the default behavior for member deletions to re-assign entries rather than delete them.
  • CSRF tokens stored in cookies refresh with page refresh.
  • Email sending limits no longer apply to Super Admins.
  • Updated usage() method declarations in first-party plugins to be compatible with PHP 5.6.
  • Added a robot meta tag to the intermediate URL redirect page to prevent search engine indexing.
  • Added allow_pending_login config override to allow the Pending member group to log in.
• Bug Fixes:
  • Fix for bug (#20285) where template route variable names were being hashed to an invalid subpattern name in PCRE 8.34
  • Fixed a bug (#20496) where CSS asset links created with {stylesheet=} did not work with a uri_protocol of QUERY_STRING.
  • Fixed a bug (#20525) where periods in URLs resulted in an empty session.
  • Fixed a bug (#20565) where masked CP URLs did not work with a uri_protocol of QUERY_STRING.
  • Fixed a bug (#20576) where variables with NULL values would leave conditional annotations in the output in Member Profile templates.
  • Fixed a bug (#20581) where simple conditionals did not work with the default channel entry date variables.
  • Optimized parameter parsing for single fields in the Channel Fields API (#20590).
  • Fixed a bad link (#20603) on the member search template used for private message recipients and buddy searches.
  • Fixed a bug (#20609) where dates could erroneously be treated as invalid in the Channel Entries form.
  • Fixed a bug (#20614) where action ID URIs would not work with a uri_protocol of QUERY_STRING.
  • Fixed a bug (#20615) where the Metaweblog file preferences ignored file upload overrides in the configuration file.
  • Fixed a bug (#20621) where fieldtype modifiers were not working in conditionals unless they were braced and quoted.
  • Fixed a bug (#20650) where custom url titles were lost when publishing a new entry and the entry did not validate
  • Fixed a bug (#20656) where relative dates weren’t fully translateable
  • Fixed a bug (#20657) in the control panel where deleting a member and their channel entries could leave orphaned channel field data in the database.
  • Fixed a bug (#20659) where editing a file without a category was generating a Javascript error
  • Fixed a bug (#20660) in Forum where the “ignore” link was displaying for logged out users
  • Fixed an error message (#20661) when you try to use duplicate segment variables in a Template Route.
  • Fixed a bug (#20664) where the template cache would not expire when using the Redis cache driver.
  • Fixed a bug (#20665) where the file cache driver may show errors when a concurrent PHP process is also modifying the cache directory.
  • Fixed a bug (#20667) where, in certain cases, Api_channel_entries::save_entry() was returning an array instead of FALSE.
  • Fixed a bug (#20673) where recounting member statistics may show a PHP error when the comment module is not installed.
  • Fixed a bug (#20683) where a PHP error may occur when using PHP’s older Memcache extension.
  • Fixed a bug (#20704) where Grid tags may not parse correctly if multiple Grid tag pairs are present and one tag pair contains no variables.
  • Fixed a bug (#20714) where extension hooks with multiple priorities would clear out the Extensions::in_progress property.
  • Fixed a bug (#20717) where calling an extension hook could potentially unload the package paths.
  • Fixed a bug (#20730) where properties in EE_Template were not declared before use.
  • Fixed a bug (#20731) where EE_Config::_update_config() would not appropriately write array items to the config file.
  • Fixed a bug (#20732) where EE_Config::_update_config() would not set a config item if also unsetting it in the same call.
  • Fixed a bug (#20734) where clicking the submit button on the Edit page with no entries selected would show “undefined” in the error notice.
  • Fixed a bug (#20735) where load_class() would look to CodeIgniter’s classes before trying to load EE’s classes.
  • Fixed a bug (#20738) where using EE’s cache system with Memcached could cause a PHP error.
  • Fixed a bug (#20754) where the title of the Pages module control panel page was wrong.
  • Fixed a bug (#20755) where the new member notifications email field only accepted one email address.
  • Fixed a bug (#20793) where attempting to clear Template revisions resulted in an ‘invalid id’ error.
  • Fixed a bug where Moblog might show a PHP error while processing attachments.
  • Fixed a bug where the caching driver setting could not be set via the control panel.
  • Fixed the Stylesheet library to return a 404 response when a bad path is specified.
  • Fixed a bug where you couldn’t delete a signature image from a member.
  • Fixed a bug where you would be incorrectly redirected when attempting to modify someone else’s signature as an admin.
  • Fixed a PHP notice error (Undefined variable: tgpref) in the Template Manager
  • Fixed a bug where preg_replace_callback was using a deprecated modifier when censoring words.
  • Fixed a bug where redundant queries could be called in the {exp:categories} tag.
  • Fixed a bug where opcode caches obscured config file updates.
• Developers:
  • Added hooks for additional processing after a user resets their password. member_process_reset_password for front end, and cp_member_reset_password for the control panel.
  • Member_field_model::save_field() now returns the modified $data associative array.
  • Table Toggle All checkboxes now fire Javascript change events.

Version 2.9.2¶

Release Date: October 4, 2014

• General Changes:
  • Several fields in the control panel now automatically trim the white space from their contents (URLs, site index, group names).
• Bug Fixes:
  • Fixed a bug (#20594) where you could not create a new channel.

Version 2.9.1¶

Release Date: October 3, 2014

• Important:
  • Fixed potential SQL injection vulnerabilities in various parts of the control panel.
  • Fixed a potential cookie vulnerability (Thanks to security researcher Robin Bailey of Dionach for working with us on this one).
  • Fixed a few control panel XSS issues where someone with CP access could cause problems on the front-end and the control panel.
  • Fixed a potential stored XSS issue in member front end.
  • Fixed a bug where old sessions were not properly destroyed upon password reset.
  • Fixed a few installer XSS issues where one could attack oneself if one was so inclined.
  • Fixed a potential XSS issue in the My Account area of the control panel.
  • Fixed a few stored XSS issues that admins could exploit against one another.
  • Fixed a potential for XSS in data URIs.
  • Improved validation of CSRF token.
  • Improved flood control protection for password reset emails.
  • Improved accuracy of XSS event handler filtering.
  • Improved security of PHP’s native session cookie for sites that use it (matches your cookie security settings).
  • Improved XSS filtering for certain types of file uploads.
  • Improved XSS filtering in the comments module.
  • Improved security in SQL Manager against unintended DB writes.
• General Changes:
  • Made {cp_edit_entry_url} available to Admin Notification of New Entry
  • Added the ability to select MySQLi as the database driver during installation.
  • Added newrelic_include_version_number config override: to the New Relic library.
  • Added a template log item for page cache garbage collection.
  • Optimized conditional parsing for pair variables in the Channel Form.
  • Improved Control Panel custom theme organization: view files can now be stored in a views subfolder.
  • Improved extension hook developer log deprecation messages.
  • Changed the Content Edit table Author column to link to the member account page instead of a mailto: link.
• Bug Fixes:
  • Fixed a bug where orderby="random" in Channel Entries would not work properly with pagination.
  • Fixed a bug (#20346) where thumbnails for files with spaces in the name would not appear in the file browser modal.
  • Fixed a bug (#20471) where the site index template would be rendered after the site’s 404 template.
  • Fixed a bug (#20524) where page cache garbage collection may use excessive memory.
  • Fixed a bug (#20377) where a member with control panel access could not access the control panel if logging in from the front-end.
  • Fixed a bug (#20540) where the next and previous rows could not be accessed inside a Grid field tag pair when the row ID was specified.
  • Fixed a “returned by reference” warning in PHP 5.6.
  • Fixed bugs (#20512, #20586) where Grid may not work with content types other than Channel.
  • Fixed a bug (#20462) where new grid rows would trigger a validation warning.
  • Fixed a bug that caused PHP errors when using the bookmarklet feature on newer versions of PHP.
  • Fixed a bug (#20477) that would result in a PHP warning on member profile pages.
  • Fixed a bug (#20501) where the entity &39; in a submitted entry could cause the application to time out.
  • Fixed a bug (#20535) where using the image button on a text field was not working.
  • Fixed a bug (#20465) where the “Update and Finished” button in the template editor would not return to the Template Manager.
  • Fixed a bug where going directly to the update_signature page would clear out your signature.
  • Fixed a bug where the memberlist sort would not persist between page loads.
  • Fixed two bugs that would cause errors when updating from using Channel Forms.
  • Fixed a documentation bug (#20550) where an extraneous access_cp was listed under Session::userdata.
  • Fixed a bug (#20559) where a deprecation could interfere with a query being generated.
  • Fixed two bugs that would cause errors when updating from ExpressionEngine 1.x to ExpressionEngine 2.x.
  • Fixed a bug (#20294) where a PHP error could occur when database caching was turned on.
  • Altered the site URL so that when sessions are required on the frontend the session ID variable is not included in the URL if logged out (#20315).
  • Clarified a language variable for member profile deletion confirmation (#20312).
  • Fixed a bug (#20419) where a PHP error could occur in the Channel Entries tag when relaxed view tracking was on.
  • Fixed a bug (#20414) in the File module where a MySQL error could occur if there was no file data found.
  • Fixed a bug in the 404 redirect behavior when used inside a no_results tag on an embedded template.
  • Fixed a bug (#20473) in the File module where the category_group parameter was treated as a category parameter.
  • Fixed a minor header error in the control panel’s simple_header view (#20457).
  • Replaced some hard coded terms with language keys in the control panel (#20456, #20461).
  • Fixed a bug (#20529) that affected the Multiple Site Manager, preventing site switching by non-Super Admin.
  • Fixed a bug (#20479) where a MySQL error could occur when updating from version 2.7 or older.
  • Fixed a bug (#20533) where a MySQL error could occur in the 2.1.5 update if the Blogger module was installed.
  • Fixed a bug (#20431) in the Channel Entry tag’s date variable pair where Sunday entries were improperly handled when using Monday as the start day.
  • Fixed a bug (#20485) where the last template global value could be incorrect.
  • Fixed a bug where in the member import where a MySQL error could occur if using MySQLi.
  • Fixed a bug (#20557) where a PHP error could occur when installing the Relationship field type.
  • Fixed a bug (#20556) in the File module where thumbnail data was not populated when more than a single directory was included in the results.
  • Fixed a bug (#20499) in the control panel where the View Members page could have duplicate members across pages.
  • Fixed a bug (#20511) in the Content edit page filter where searches beginning with punctuation characters could be handled improperly.
  • Fixed a bug in the comment entries tag (#20447) where the gmt_comment_date and total_comments variables were not always properly parsed.
  • Fixed a bug (#20563) where a PHP error could occur on sites with large numbers of custom fields when parsing conditionals.
  • Fixed a bug (#20538) on the publish page where autosave silently failed if there were validation errors.
  • Removed some unnecessary queries when displaying category images (thanks to Robson Sobral).
• Developers:
  • Extensions::active_hook() will now return FALSE if allow_extensions is set to 'n'.
  • Moved get_bool_from_string() from the String Helper to Common.php.
  • Removed a stray null parameter from the member_create_start hook.

Version 2.9.0¶

Release Date: July 15, 2014

• Important:
  • Fixed a security issue that could result in arbitrary script execution in certain circumstances. (Thanks to security researcher Matthew Barry for working with us on this one.)
  • Fixed a limited XSS vulnerability relating to URL manipulation. (Thanks to security engineer Mehment INCE for reporting the issue.)
  • Fixed a bug which allowed modification of arbitrary channel fields from Grid Channel Forms in certain circumstances.
• General Changes:
  • Conditionals parser is more performant, consistent, and has new operators.
  • Added new math operators for use in conditionals: +, -, *, /, ^ and **
  • Added string concatenation operator for use in conditionals: .
  • Added new comparison operators for use in conditionals: ^=, *=, &=, and ~.
  • Template Routes can now be reordered for a custom parse order.
  • Added {cp_edit_entry_url} variable to the Channel Entries tag.
  • Added an action= parameter to the Member Login tag.
  • Added the [abbr] bbcode tag.
  • Changed the default hidden template indicator to an underscore (e.g. _)
  • Added License Holder Contact Email and a software license page in the control panel to assist with license registration, organization and management.
  • Added the convert_curly= parameter to the Markdown plugin.
  • Removed the encode_ee_tags= parameter from the Markdown plugin.
  • Added 404 headers for requests for non-existent member profile elements
  • The protect_javascript configuration item was removed and turned into a per-template setting.
  • Upgraded the Markdown parser to Markdown Extra, and the underlying Markdown Lib from version 1.2.7 to 1.4.1.
  • When using Markdown, SmartyPants is now on by default.
  • ExpressionEngine now requires at least PHP 5.3.10.
  • Made layout:contents available to conditionals.
  • Strictly enforcing the reserved status of layout:contents.
• Bug Fixes:
  • Altered control panel URLs to use only a single query marker to ensure compatibility across server environments.
  • Fixed a bug where plugins couldn’t be used in the search parameter of a Channel Entries tag.
  • Fixed a bug where member groups with template editing permissions but without template administration permissions could not navigate template groups in the Template Manager.
  • Fixed a bug where conditionals could fail to parse if advanced conditionals were triggered by an add-on.
  • Fixed a bug (#20176) where valid regex would throw an invalid regex error in Template Routes.
  • Fixed a bug (#19974) where default tab names became untranslatable when saving publish tab layouts.
  • Fixed a bug (#20235) where checking for duplicate routes caused PHP errors.
  • Fixed a bug where EE tags were not being encoded in the member descriptions on the buddy and blocked lists of the member module.
  • Fixed a bug (#20055) where a radio button with an ampersand in the value would be double encoded.
  • Fixed a bug (#18300) where members with the proper permissions could not edit categories from a file edit view.
  • Fixed a bug (#20190) where using an ampersand in a tab name and clicking on it would cause all other tabs to disappear.
  • Fixed a bug (#20248) where date tags inside relationships were not being parsed.
  • Fixed a bug (#20278) where some non-relative dates would be unparsed if a relative date was present
  • Fixed a bug (#20145) where the table headers in the template route manager were not translatable.
  • Fixed a bug (#20172) where a misspelling of library would cause a PHP error when calling deprecated pagination hooks.
  • Fixed a bug (#20149) where the fieldtype uninstallation warning would show when an add-on is being installed.
  • Fixed a bug (#20173) where an error was shown instead of a 404 in the member module when a 404 was not defined in template preferences.
  • Fixed a bug (#20194) where previewing comments would result in a PHP error.
  • Fixed a bug (#20243) where the datepicker did not work while inside of a Grid field in a Channel Form.
  • Fixed a bug where using Markdown in a Channel where only Safe HTML is allowed would result in unparsed HTML.
  • Fixed a bug when parsing with Markdown would parse some variables.
  • Fixed a bug (#20192) where control panel URLs could trigger a disallowed message when overriding the uri_protocol setting.
  • Fixed a bug (#20152) where a PHP error could occur if the category indicator word was the very last segment in a URL.
  • Fixed a bug (#20134) where specifying a backspace parameter value of 0 in the Query module resulted in no results being returned.
  • Fixed a bug (#20115) in the Channel Form display where select fields did not display 0 values.
  • Fixed a bug (#20112) in the Channel Form where default date variables were not parsed for new entries when the datepicker parameter was set to no.
  • Fixed a bug (#20199) in the Moblog where user authorization in emails always failed.
  • Fixed a bug (#20198) in the Channel Form where date fields could cause a JavaScript error if using the single variable tag for display.
  • Fixed a bug (#20123) in the File Field library where the upload link displayed for users without access to the file upload directory specified for that file.
  • Fixed a bug (#20237) on the publish page where the edit categories modal failed if sessions were required in the control panel.
  • Fixed a bug where logout links would fail with an authorization error message when CSRF protection was disabled.
  • Removed some extraneous code from the installer (#20232).
  • Fixed a bug (#20148) in the Metaweblog module where incoming calls were refused.
  • Fixed a bug (#20271) comment pagination did not work properly when the dynamic parameter was set to no.
  • Fixed a bug (#20298) where searching on date fields in Grid did not work with IS_EMPTY when dates fixed dates were used.
  • Fixed a bug (#20292) where image resizing could be off by 1 pixel in some circumstances.
  • Fixed a bug (#20306) in the Category Archive tag where dates were unparsed when using linear style.
  • Fixed a bug (#20310) in Channel Form where the field errors tag pair was not properly parsed.
  • Fixed a bug (#20307) where some emails with newly allowed TLDs were rejected as invalid.
  • Fixed a bug where the updater would not load an add-on’s path before running upgrades causing problems with included libraries and models.
  • Altered the behavior of the pagination library to accommodate add-ons that directly manipulate the site URL configuration (#20334).
  • Fixed a bug where the Channel Form combo loader might be missing from the database on older installations that never used Safecracker.
  • Fixed a bug (#20403) where the MB_ENABLED constant is not defined if UTF-8 support is not enabled.
  • Fixed a bug where a PHP error may show when trying to display entries from an MSM site on a template and the Pages module was not installed.
• Developers:
  • Removed the encode_ee_tags parameter from EE_Typography::markdown().
  • Boolean values in conditionals are now consistent. 0 is always FALSE but "0" is always TRUE.

Version 2.8.1¶

Release Date: March 14, 2014

• Bug Fixes:
  • Fixed a bug (#20165) where HTML elements with certain missing attributes could cause a JavaScript error in the control panel.

Version 2.8.0¶

Release Date: February 28, 2014

• Important:
  • Fixed a security issue that could result in arbitrary script execution in certain circumstances.
• General Changes:
  • Added the ability to create Template Layouts.
  • Added the ability to create Template Routes.
  • Added caching drivers to allow storage of cache items in the filesystem, Memcached or Redis.
  • Added the ability for all date variables to display as relative dates.
  • Added a timezone= parameter for use on all date variables.
  • Added date and time formats to the Localization Settings replacing the choice between “United States” and “European” (fixes bug #19492).
  • Added new parameters (category=, show_expired=, start_on=, stop_before=) to the Relationships field tag.
  • Added a {cp_session_id} global template tag (fixes bug #19501).
  • Added {current_time} as a valid tag to the Wiki module (fixes bug #17299).
  • Added {current_time} as a valid tag to the Forum module.
  • Added the ability to disable an extension without removing database records tied to the extension.
  • Add-ons now prompt to enable extensions if the package has an extension and extensions are disabled.
  • File, Forum, Member, Query, Search, Wiki, and Messages pagination now uses the Channel style of pagination.
  • Added the ability to always show first and last links for pagination.
  • Added the ability to pad pagination page number links to whatever number you want.
  • Changed pagination behavior such that URLs that would request a page that shouldn’t exist (e.g. page 50 in a list of 10 pages) will trigger the {if no_results} conditional.
  • The idle modal now stays open indefinitely and no longer redirects to the homepage after half an hour.
  • Disabled the login modal when Remember Me is checked.
  • Textareas in Grid have the option of showing formatting buttons.
  • Query profiler shows information about where a query was run from.
  • Renamed admin_session_type config item to cp_session_type.
  • Renamed user_session_type config item to website_session_type.
  • All cookies now default to httponly. This may be changed using the cookie_httponly system configuration override.
  • Added a nofollow attribute to the Redirect library’s off-site links.
  • Added an overflow style to the File Manager page to enable scrolling of wide tables.
  • Deprecated Channel Form’s preserve_checkboxes= parameter, all checkboxes are now preserved by default.
  • Disabled CSRF checks for Search module searches, to eliminate that occasional bit of visitor frustration.
  • Cleaned up the default config.php file to remove unnecessary and non-functional config items.
  • Made control panel URLs easier to read.
• Bug Fixes:
  • Fixed a bug where Control Panel forms were being redirected to the homepage after logging back in with the idle modal.
  • Fixed a bug where the Control Panel idle modal destroyed the associated active frontend session.
  • Fixed a bug where back button operation was spotty when using secure forms.
  • Fixed a bug where the login page would continually redirect back to itself.
  • Fixed a potential XSS vulnerability where some HTML entities were handled incorrectly.
  • Fixed a bug in Relationships where long optional branches caused the result set to be truncated.
  • Fixed an issue where the Channel Entries tag was not site aware when using the pages_only= parameter.
  • Fixed a bug (#20043) where global variables inside conditionals would not parse if the conditional included a variable that was substring of the global variable.
  • Fixed a bug (#19936) where the {encode=} tag would fail if used in a Text field or Textarea field using Markdown based formatting.
  • Fixed a bug where a File field’s undo function may not work correctly when inside a Grid field.
  • Fixed a bug (#19966) where deleting a Relationship field from a Grid field may not clean up previous relationships.
  • Fixed a bug (#19975) where adding a Grid row, deleting one, then adding one may cause one of the new rows not to be saved.
  • Fixed a bug where a Grid could not contain a column with the same name as its parent Grid field.
  • Fixed a bug where a Channel Entries loop containing a Grid field and a Relationships field containing that same Grid field would cause the first Grid field not to parse.
  • Fixed a bug (#20034) where a the search parameter in a Grid field that is not in a channel content type would not work.
  • Fixed a bug (#20030) where the backspace parameter would not work in a Grid field.
  • Fixed a bug (#20038) where Channel Form’s preserve_checkboxes= parameter wasn’t being respected.
  • Fixed a bug where Moblog couldn’t parse emails where the entire email was a single inline attachment.
  • Fixed a bug where expiration and comment expiration field defaults were not observing the Channel Preferences settings.
  • Fixed a bug (#19941) where a MySQL error could occur when resetting a member’s publish count to 0.
  • Fixed a bug (#19946) where a MySQL error could occur when changing the field type of a member custom field.
  • Fixed a bug (#19947) where the assigned field format type was not applied to Grid fields for certain field types (Checkbox, Multi-Select, Radio, Select).
  • Fixed a bug in the Moblog control panel where a successful moblog check did not return a success message.
  • Fixed a bug in ExpressionEngine Core (#19972) where a PHP error could occur in the control panel under certain permission settings.
  • Fixed a bug (#19977) where the keyword search could fail on the Content Edit page.
  • Fixed a bug (#20011) in the Channel Entries tag where the show_pages= parameter did not work properly with entry_id set to not show specific ids.
  • Fixed a bug (#19982) in the Channel entry form where a PHP error could occur using certain combinations of add-ons.
  • Fixed a bug in the RSS module’s feed tag where closed entries were not included regardless of the status parameter specifications.
  • Fixed a bug in the Wiki where the logout link did not work if Secure Mode was enabled.
  • Fixed a bug (#19964) where the entry confirmation page would show 0 comments, regardless of how many comments the entry actually had.
  • Fixed a bug (#20056) where dates were properly formatted in the Channel Form if European date formatting was used.
• Developers:
  • Added Cache class which provides a key-value cache store.
  • Added a bool_config_item() helper function to retrieve y/n config file items as booleans.
  • Added a cp_url() helper function to create prettier control panel URLs.
  • Added parse_date_variables() method to the Template class for proper handling of all date variables.
  • Added a no_markup option to the Markdown processor.
  • Reactor: Added channel_search_modify_search_query hook for modifying the query cached by the search module.
  • Reactor: Added channel_search_modify_result_query hook for modifying the query retrieved by the search module.
  • Replaced Magpie with SimplePie for RSS feed parsing.
  • Deprecated channel_module_create_pagination, use pagination_create instead
  • Deprecated channel_module_fetch_pagination_data, use pagination_fetch_data instead
  • Deprecated Functions::set_cookie(), please use EE_Input::set_cookie().
  • Deprecated use of EE_Input::set_cookie() to delete cookies, please use EE_Input::delete_cookie().
  • XIDs are now multi-use, as a result secure_forms_check(), check_xid(), generate_xid(), delete_xid(), restore_xid(), and garbage_collect_xids() in EE_Security are all deprecated.
  • The XID constant is deprecated, please use CSRF_TOKEN.
  • The XID field has been deprecated, please name your hidden fields csrf_token or use one of the form helpers.

Version 2.7.3¶

Release Date: December 10, 2013

• General Changes:
  • Added new parameters (category, show_expired, start_on, stop_before) to the relationship tag.
  • Added “random” option to Grid’s orderby parameter.
  • Added field_row_index and field_row_count variables to Grid.
• Bug Fixes:
  • Fixed a bug (#19772) where saving a Channel Form entry that excludes the channel’s Grid field can wipe out the data in that field.
  • Fixed a bug where an error may appear on a member’s public profile page when the member’s timezone wasn’t set.
  • Fixed a bug (#19797) where multiple channels using the same status group would cause Channel Form default status settings display incorrectly.
  • Fixed a bug (#19824) where some fieldtypes used outside of the Channel content type depended on a Typography library that wasn’t loaded.
  • Fixed a bug (#19852) where Grid couldn’t exclude a single row ID.
  • Fixed a bug (#19871) where {switch=} in Grid stared output with the second option instead of the first.
  • Fixed a bug (#19870) where clicking Select All in template access options would not work.
  • Fixed a bug (#19873) where PHP might get set to the wrong timezone.
  • Fixed a bug (#19865) where Grid column name auto-population would not work as expected upon validation error.
  • Fixed a bug where an invalid date string may throw an uncaught exception on some versions of PHP 5.2.
  • Fixed a bug (#18176) where an extraneous stripslashes was causing inconsistencies between Channel Forms and the control panel.
  • Fixed a bug (#19301) where the status in the Channel Form statuses loop would always be set to current set status for existing entries.
  • Fixed a bug (#19037) where email addresses were being truncated at varying lengths. All email addresses are now stored at 75 characters. If you are using multiple email addresses for admin communication in Simple Commerce you will need to modify those settings. We suggest using Google Groups or a similar group email solution for contacting multiple admins.
  • Fixed a bug (#17434) where the Wiki themes had hardcoded language.
  • Fixed a bug (#18114) where logout links do not have an XID when Secure Mode is enabled.
  • Fixed a bug (#19147) where comments were not included in an IP Search of members.
  • Fixed a bug (#19145) where the actions library did not support the magic __call method.
  • Fixed a bug (#19392) by removing a redundant line from our suggested .htaccess file.
  • Fixed a bug (#19840) where the update button on the edit Wiki template screen returned to the list of templates.
  • Fixed a bug (#19837) in the channel entry form where file fields could be lost on edit if the image field was changed.
  • Fixed a bug (#19243) where searching for phrases via the Entry Title Live Search would fail if the title had punctuation but the search phrase did not.
  • Fixed a bug (#17800) where resizing an image from the image HTML button would insert the image with the old height and width.
  • Fixed a bug where the {comment_total} channel entries tag would sometimes be inaccurate.
  • Fixed a typo (#19800) where there was no space between properties in an HTML input.
  • Fixed a bug (#19843) where the Markdown plugin would cause an error if the typography library wasn’t loaded.
  • Fixed a bug where Channel Form {categories} tags would not adhere to the show_group parameter.
  • Fixed a bug where manually uninstalling and reinstalling the Relationship fieldtype would not have the correct relationship table schema.
  • Fixed a bug (#19782) where custom date fields in the channel entry form could have invalid default dates.
  • Fixed a bug (#19826) in the channel entry form where inline errors would result in an invalid action message upon resubmitting the form.
  • Fixed a bug (#19847) where some forms in the Member Profile templates were being rejected by the secure mode check.
  • Fixed a bug in the Agile themes member templates where the password reset page was missing.
  • Fixed a bug (#19868) in the search module where word searches failed to return a result if the word was the very last word in the field.
  • Fixed a bug (#19828) in the search module where invalid searches were not treated consistently.
  • Fixed a bug (#19885) where the Secure Mode check could fail after image upload, though this had no practical impact on content entry.
  • Fixed a bug (#19891) where improper database configuration settings resulted in a white screen rather than the proper error message.
  • Fixed a bug (#19889) where a PHP error could occur when sending attachments using CI_Email.
  • Fixed a bug in the control panel’s table sorting filter where an AJAX call was run twice, resulting in an invisible secure mode failure the second time.
  • Fixed a bug (#19746) where a PHP error could occur if two template groups with the same name exist.
  • Fixed a bug (#19846) where a JavaScript error occurred in the control panel when filtering content by a custom date range.
  • Fixed a bug (#19443) where Relationship tags did not display category custom field data.
  • Fixed a bug (#19896) in the Simple Commerce module where encrypted subscription links went to the single purchase PayPal checkout.
  • Fixed a bug (#19879) in the Channel Form where including Relationship fields caused a JavaScript error and the fields were not sortable.
  • Fixed a bug where the Channel Form could only upload files to the current site’s directories.
  • Fixed a bug in the frontend member list filter where the form submission always failed the Secure Mode check.
  • Fixed a bug (#19799) where Relationships would throw a PHP error on the front-end if the PHP version was less than 5.2.9.
  • Fixed a bug (#19844) where Simple Commerce purchases were not being recorded after PayPal completed transactions.
  • Fixed a bug where a language key would be exposed when viewing Admin > General Configuration with items present in the Developer Log.

Version 2.7.2¶

Release Date: October 8, 2013

• General Changes:
  • Addressed a security issue where XIDs may not invalidate properly.
  • Changed the email password field in the Moblog settings to a password type field.
• Bug Fixes:
  • Fixed a bug (#19737) where Grid row sorting may not work correctly in Firefox.
  • Fixed a bug where the IP to Nation module may fail to update its database on some non-GNU systems.
  • Fixed a bug in CodeIgniter’s database library where using where_in on a cached query did not apply the conditional operator.
  • Fixed a bug (#19760) where selected relationships were cut off by the field limit.
  • Fixed bugs (#19512, #19096) where the default collation on the files table was resulting in case-sensitive operations returning case- insensitive matches.
  • Fixed a bug (#19745) where the save layout function was grabbing the incorrect tab label.
  • Fixed a bug (#19368) where selecting SMTP as the email protocol and leaving the port blank resulted in a PHP socket error.
  • Fixed a bug (#19704) where trying to add a File fieldtype to a channel group, without file upload preferences set, failed without reporting the error.
  • Fixed a bug (#19728) where changing the text formatting options from editing a channel field, returns to the channel field form with validation errors and missing data.
  • Fixed a bug (#19750) where the override default text format setting was not being accurately displayed when editing a channel field.
  • Fixed a bug (#19751) where text formatting overrides were not working
  • Fixed a bug (#18219) where URLs ending in a period or comma would end up in the wrong place if converted via auto_linker.
  • Fixed a bug (#19648) where “Filter by” ID on view all members did not work.
  • Fixed a bug (#19722) where the generated link to change a forgotten password was wrong if force query strings was on.
  • Fixed a bug (#19721) where showing a formatted entry date inside the entries tag pair in the Channel Entries Calendar tag caused a PHP error.
  • Fixed a bug (#19732) on the publish page where file fields would always be treated as required if an allowed upload directory was specified in the field’s settings.
  • Fixed a bug (#19733) where the mailing list form tag would silently fail adding emails.
  • Fixed a bug (#19624) where conditionals did not work inside checkbox and multi-select custom field tag pairs.
  • Fixed a display issue on the category edit page that occurred when a category image exists.
  • Fixed a bug (#19749) where extra segments in the URL could cause the channel module to fail to identify a single entry indicator.
  • Fixed a bug in Communicate where a PHP error could occur when sending emails to mailing lists and recipients at the same time.
  • Fixed a bug where text columns in Grid may not be able to change data types.
• Developers:
  • Made grid_row_id available for access via the $settings class property for Grid fieldtypes when calling replace_tag() and pre_process().
  • Fixed a bug (#19427) where objects could not be passed through to views.
  • Fixed a bug where the Grid field would send the wrong row ID to post_save.

Version 2.7.1¶

Release Date: September 24, 2013

• General Changes:
  • Added modulus operator to conditionals.
  • Grid column names now automatically populate based on the column label.
  • Added a setting to customize the application name for New Relic reporting.
  • The site label appears next to New Relic web transactions if Multiple Site Manager is enabled.
  • Combined the idle and logout notifications and made their state persistent across browser tabs.
  • Modified the member delete confirmation page to be clearer.
  • Changed parse order of {current_url}, {current_path} and {current_query_string} so they are available for use in conditionals (see bug #19675).
  • Added entry_id and url_title parameters to the Comment module’s Comment Notification Links tag.
  • Removed content preview from post-publish View Entry screen.
  • Reactor: Recursively loaded templates error message now shows the order of template loading that caused the recursion.
• Bug Fixes:
  • Fixed a bug (#19480) where relationships did not parse correctly across MSM sites.
  • Fixed a bug (#19715) where the publish page preview could execute Javascript.
  • Fixed a bug in the Rich Text Editor where lists were with displayed with a lot of additional spacing when editing an entry.
  • Fixed a bug where the template parser could hit the regular expression length limit when processing tags that return randomized data.
  • Fixed a bug where super admins could assign duplicate email addresses to existing users.
  • Fixed a bug (#19605) where the offset parameter did not work on relationship tags unless a limit parameter was also specified.
  • Fixed a bug (#19677) where the redirect to the frontend username update page ignored the member trigger setting.
  • Fixed a bug where Channel Form submission could result in a PHP error when overloading multibyte functions.
  • Fixed a bug (#19717) in Channel Form where the captcha word was not always created despite being required to post.
  • Fixed a bug (#19710) where file syncing would silently fail when adding large numbers of new files.
  • Fixed a bug where Channel Form failed when posting to a different MSM site (also addressed #17605).
  • Fixed a bug in the 2.0 update where a MySQL error could occur trying to alter Trackback dates.
  • Fixed a bug (#17113) in the Channel Form tag where captcha errors were not displayed when using inline errors.
  • Updated the user agents configuration file to properly recognize newer versions of Opera (#19617).
  • Fixed a bug in the Channel Entries tag where a PHP error could occur in related categories mode.
  • Fixed a bug where the updater may show an error on sites that have an RTE field but no Channel entries.
  • Fixed a bug (#19502) where logging items to the Developer Log via the Javascript controller wouldn’t have required dependencies loaded
  • Fixed a bug (#19684) where Grid column names couldn’t be prefixed with the name of the parent Grid field.
  • Fixed a bug (#19685) where some conditionals testing if a Grid field had content may evaluate incorrectly.
  • Fixed a bug (#19696) where uninstalling Grid may show an error.
  • Fixed a bug (#19707) where the class parameter was not working on Channel Form.
  • Fixed a bug (#19702) where some member profile forms may show an error upon submission when Secure Mode is turned on.
  • Fixed a bug where the search parameter wasn’t working in Channel Calendar.
  • Fixed bugs (#17681, #16840) in Channel Forms where a file upload over PHP’s post_max_size limit resulted in the request silently being dropped
  • Fixed bugs (#19388, #19452) where the query for duplicate url_titles was using the wrong regex and preforming inefficiently with a larger number of entries.
  • Fixed a bug (#19226) where CP tab ordering failed with numeric tab names because Chrome sorts numeric object keys by key instead of insertion order.
  • Fixed a bug (#19317) where an incorrect error message was being thrown when GD was not present during thumbnail creation.
  • Fixed a bug in the RTE where the last [code][/code] block would be replaced by the second to last code block when editing an entry.
  • Fixed a bug in the publish form where pressing “enter” in any text area would result in the RTE grabbing focus and the form not being submitted.
  • Fixed a bug (#19700) in the RTE where extra paragraph tags could appear at the end of the content after going to code view.

Version 2.7.0¶

Release Date: August 27, 2013

• General Changes:
  • Added a new fieldtype called Grid for grouping fieldtypes in repeatable rows.
  • Added support for New Relic performance monitoring
  • Added Markdown plugin and field formatting option.
  • Added <, >, <=, and >= numeric comparison operators to the Channel Entries search parameter.
  • Added {entry_id} and {url_title} variables to the channel category archive tag.
  • Added {current_query_string} global variable
  • Merged the safecracker_file field into the default file field.
  • All files regardless of type are now linked for viewing in the File Manager.
  • Added GET support for Dynamic Parameters in Channel Entries tags
  • Removed the Updated Sites module
  • Removed the ability to ping other sites
  • Removed the Corporate theme
  • Removed the use_mobile_control_panel hidden configuration item.
  • Renamed SafeCracker to Channel Form
  • Relationships in channel form can now display their native UI using the display_field or field:fieldname tags.
  • Added a second file type match to the mime configuration for docx files.
• Bug Fixes:
  • Added a second file type match to the mime configuration for docx files.
  • Quoted-printable encoding of email Subject line made more intelligent.
  • Fixed a bug (#19433) where there were problems submitting a channel field form that had failed form validation.
  • Fixed a bug where SafeCracker did not respect the default_entry_title and url_title_prefix settings.
  • Fixed a bug where SafeCracker validation would not correctly set the new value from a prepping validation function.
  • Updated the relationship parser to handle a few of the more esoteric nesting cases more gracefully.
  • Fixed a bug (#19351) where some conditionals with multiple prefixes were not parsed correctly if the channel was related to itself.
  • Fixed a bug (#19414) where the forgotten password tool on the front end redirected to a blank page on submit due to the installer putting the wrong actions in the database.
  • Fixed a bug (#19405) where the Rich Text Editor did not always render with XHTML.
  • Fixed a bug (#19425) where the Rich Text Editor reduced extraneous whitespace too greedily.
  • Fixed a bug where PHP 5.3 did not correctly sort relationship entries.
  • Fixed a bug (#19353) where a PHP error could occur when switch database debug settings in the control panel.
  • Fixed a bug (#19352) where new sites had incorrect forgotten password instructions added to their specialty templates.
  • Fixed a bug (#19363) where a JavaScript error occurred on SafeCracker forms.
  • Fixed a bug (#19360) where BBCode could create bad links when rank denial was on and all HTML was allowed.
  • Fixed a bug (#19367) where a MySQL error could occur when adding a new field if no member groups were included in the publish author list.
  • Fixed a bug (#19374) where a PHP error could occur using parent relationship tags.
  • Fixed a bug (#19378) where control panel redirects to the homepage could be missing an ampersand.
  • Fixed a bug (#19375) where the File Manager directory dropdown was not limited to the current site.
  • Fixed a bug (#19371) where removing the site themes directory would cause a PHP error during installation.
  • Fixed a bug (#19398) where a MySQL error could occur when editing an entry with a relationship field sorted by date.
  • Fixed a bug (#19382) where the ‘Can change the author name’ member group permission was not properly implemented when editing entries by others.
  • Fixed a bug (#19401) where a PHP notice of an undefined constant REQ in Core.php could occur.
  • Fixed a bug (#19410) where an error was falsely triggered when editing in SafeCracker with the author_only parameter on.
  • Fixed a bug (#19406) where a PHP error could occur when viewing someone else’s member profile on the frontend.
  • Prefixed some RTE language keys to avoid collisions on the publish page (#19444).
  • Fixed a bug (#19453) where a PHP error could occur when editing old format file fields that contain the full path instead of a file directory indicator.
  • Fixed a bug (#19451) where the Communicate form did not default properly on the member permission checkbox.
  • Fixed a bug (#19448) in the member import where a PHP error could occur.
  • Fixed a bug (#19458) where the update script created for 2.0 large databases output improper database credentials.
  • Fixed a bug (#19472) in the channel entries tag where month, day and year parameters were not localized prior to use.
  • Fixed a bug (#19460) where Super Admins could not login as another member if using both cookies and sessions.
  • Fixed a bug (#19489) where publish layouts weren’t always properly updated when field group assignments were switched.
  • Fixed a bug (#19488) in the SafeCracker module where the dynamic_title parameter had no effect.
  • Fixed a bug (#19506) where the {comment_url_title_auto_path} variable in the Next/Previous tags used the channel URL instead of the comment path URL.
  • Fixed a bug (#19509) in the comment entries tag where dynamic=”no” did not affect the returned data.
  • Fixed a security bug where certain form parameters could be changed.
  • Fixed a bug (#19553) in the forgotten password email where the name variable was replaced with the username, which was inconsistent with other email notification templates.
  • Fixed a bug (#19528) in the Simple Commerce module where a PHP error occurred on the purchases page of the control panel.
  • Fixed a bug (#19529) where a PHP error could occur when viewing a member profile other than your own on the frontend.
  • Fixed a bug where if the current time is midnight, hours in date fields were represented as zero for the US time format.
  • Fixed a bug (#19578) where IP search results in the control panel had incorrect links to the user profiles.
  • Fixed a bug (#19590) in the 2.0 updater where the large database shell script utf8 conversion did not specifically convert table columns.
  • Altered the column size of site_preferences in the 2.0 update to prevent possible truncation of data.
  • Altered the 2.6.0 updater to be more specific when changing the forgotten password action records (#19586).
  • Altered relationship fields to have an integer type column in exp_channel_data.
  • Altered default text type columns in exp_channel_data to allow NULL consistently.
  • Fixed a bug (#19615) where the channel calendar could show day of the week occurring on the wrong day due to localizing the days of the week.
  • Fixed a bug (#19612) where the File Browser on the publish page did not limit the directories shown in the directory dropdown to the current site.
  • Fixed a reference to a removed view (#19611).
  • Fixed a bug (#19621) where the latest comment date for an entry was being set incorrectly whenever it needed to be recalculated.
  • Fixed a bug (#19661) where whitespace in figures was converted to newlines.
• Developers:
  • New fieldtype method: validate_settings fieldtype settings can now be validated using the Form Validation library.
  • Made the parent element’s content type available to fieldtypes.
  • Entry versioning now works more like autosave in that it stores entry POST data, so it is easier for fieldtypes with external storage strategies to support revisions.
  • Added category_save hook that fires upon saving a new category or editing an existing category.
  • Added category_delete hook that fires when a category or its parent category group is deleted.
  • Fixed a bug (#19500) in the File_field::browser() where the file_field parameter was output as a variable name rather than a string in the resulting JavaScript.
  • Renamed the safecracker hooks to use the channel_form_ prefix instead of safecracker_. The old hooks are now deprecated.
  • Removed server_timezone please always use the default_site_timezone config item.
  • Removed server_timezone from the sites config array
  • Removed default_site_dst from the sites config array
  • Removed honor_entry_dst from the sites config array
  • Dropped localization_is_site_default from the members table
  • Dropped ping_return_url from the channel table
  • Removed the following jquery tools plugins: overlay.apple, toolbox.history, toolbox.mousewheel, tooltip, scrollable
  • Removed the following jquery plugins: crypt, ee_focus, ee_upload, fancybox, simplemodal, thickbox
  • Removed the example markitup button set.
  • Added a custom_field_modify_data hook to modify custom field information before it gets sent to the field.
  • Deprecated Methods
    • Api_channel_entries::send_pings
    • Member_model::get_localization_default
    • Filebrowser::frontend_filebrowser

Version 2.6.1¶

Release Date: May 6, 2013

• General Changes:
  • Increased the size of the Relationships reordering drag target.
  • Made the Relationships field search box more conspicuous.
  • Publish tabs that contain fields with form submission errors are now marked with a flag.
• Bug Fixes:
  • Fixed a bug (#19322) where specifying custom_fields in the disable parameter would cause an error.
  • Fixed a bug (#17895) where the Rich Text Editor did not properly apply heading changes.
  • Fixed a bug (#18272) where text copied into an empty Rich Text Editor was wrapped in span elements instead of paragraphs.
  • Fixed bugs (#19225, #17932, #17956) where the Rich Text Editor did not always handle newlines correctly.
  • Fixed a bug (#19321) where updated Relationship fields would cause an error if they were sorted by date.
  • Fixed a bug (#19196) where Internet Explorer did not load jQuery into an iframe unless the src attribute was set after adding the iframe to the DOM.
  • Fixed a bug (#19257) where hitting enter in the filebrowser search box would submit the publish form.
  • Fixed a bug (#19339) where {date_footer} was shown improperly.
  • Fixed a bug (#19337) where variables added to the channel row data from an extension hook where not always replaced correctly.
  • Fixed a bug (#19346) where {page_url} was not replaced correctly.
  • Fixed a bug (#19326) where email could generate a PHP error when using Sendmail.
  • Fixed a bug (#19327) in the 2.0 updater where an error could occur if a template was set to a custom template type.
  • Fixed a bug (#19328) where a MySQL error could occur on the publish page if no member groups were assigned to the author dropdown.
  • Fixed a bug (#19331) where a PHP error occurred when exporting template groups.
  • Fixed a bug (#19335) where status was not properly set using a SafeCracker form.
  • Fixed a bug (#19342) where a PHP errors was thrown when importing members with custom fields.
  • Fixed a bug(#19338) introduced in 2.6.0 where certain sessions could not be destroyed by logging out.
  • Altered SmartForge library to ignore strict mode warnings when altering database fields (bug #19330).
  • Fixed a security bug where a non Super Admin with Member Administration access could create Super Admins.
  • Fixed a bug (#19329) where the installer may fail in earlier versions of PHP.

Version 2.6.0¶

Release Date: April 23, 2013

• General Changes:
  • ExpressionEngine now requires PHP 5.2.4 and MySQL 5.0.3.
  • Relationships field improvements:
    • New interface
    • Supports multiple relationships
    • Provides infinitely nestable relationship tags
    • Provides access to siblings and parents
    • SafeCracker support
  • Timezone selection menus now include all timezones for automatic date localization and handling of Daylight Saving Time rules.
  • Added Subscriber List tag to the Comment Module
  • Added inline option to paginate parameter.
  • Added new variables to the Channel Next/Previous tags:
    • {channel_short_name}
    • {channel}
    • {channel_url}
    • {comment_entry_id_auto_path}
    • {comment_url_title_auto_path}
  • Added new variable {comment_subscriber_total} to the Channel Entries tag.
  • Modified channel entries to no longer allow conditional parsing within content (See Update Notes for Version 2.6 for details)
  • Entry View Tracking is now disabled by default.
  • Server offset setting has been removed from Localization Settings and is now a hidden configuration variable only, called server_offset.
  • Added SMTP Server Port to the Email Configuration page.
  • Added a hidden config, email_smtp_crypto, that allows you to specify an encryption protocol for SMTP email.
  • PHP’s upload_max_filesize setting is now displayed in the File Upload Preferences form.
  • Added a status_code=”” parameter to the {redirect} tag allowing you to specify the status code of the redirect. Currently only accepts 3xx status codes.
  • smtp_password is now an input of type=”password” in Admin->Email Configuration.
  • Added category_url_title to the category edit page table after Category Name.
  • Changed password reset flow to remove an unnecessary step and force them to change their password.
  • Added channel_short_name variable to the comment entries tag.
  • Added the ability to use the system default thumbnails inside file field variable pairs.
  • Template manager no longer automatically adds files starting with ._.
• Bug Fixes:
  • Fixed (#16355) Remember Me (FINALLY)
  • Fixed bugs (#16939, #17363, #19133) where the DST setting may incorrectly shift stored and displayed times by one hour.
  • Fixed an issue where JSON responses in the control panel were not not always sent as UTF-8
  • Fixed a bug (#18107) where email links may not render correctly in the Forum module.
  • Fixed a bug (#18230) where the edit date was being saved to the database as a localized date on initial entry save.
  • Fixed a bug (#18308) where an entry’s edit date was incorrectly tied to the entry date on the initial save.
  • Fixed a bug with the Channel Entries API when trying to save a custom field with type “real” and no data.
  • Fixed a bug (#19105) where the updater may have problems updating from EE 1.x due to config settings.
  • Fixed a bug (#16951) where the search module ignored the search form’s where field selection and defaulted to searching for all words.
  • Fixed a bug (#16985) where ExpressionEngine tags were not encoded in some category fields.
  • Fixed a bug (#17283) where setting the comment edit time limit to 0 did not result in no time limit on editing.
  • Fixed a bug (#19110) where a MySQL error occurred when using an exact search parameter in the channel entries tag and not including a search term.
  • Fixed a bug (#19130) where an improper cookie domain could be used when switching MSM sites, making it impossible to switch sites via the control panel.
  • Fixed a very rare bug (#19140) where a PHP error could occur when sending comment notifications after a comment status change.
  • Fixed a bug (#19158) where a PHP error could occur when submitting an RTE field with code tags in it.
  • Fixed a bug (#17032) where changes to the Admin localization settings did not affect the default user localization.
  • Fixed a bug (#19180) in SafeCracker File where it was not MSM compatible when used in SafeCracker.
  • Fixed a bug (#19192) where IP country searches and ban checks could trigger a MySQL error using some IPs.
  • Fixed a bug (#18278) in SafeCracker where it was possible to manipulate the parameter behavior.
  • Fixed a bug in SafeCracker where checks on the posted status did not follow member group preference settings.
  • Fixed a bug (#17259) in SafeCracker where the relationships options variable pair was not parsed outside the custom field loop.
  • Modified string cleaning to accommodate an iconv bug that could result in form data being lost it contained invalid characters (#19134).
  • Fixed a bug in the IP to Nation module where environmental factors could cause an erroneous cache full error when attempting to update the IP database.
  • Fixed a bug (#19223) in the Metaweblog API where failed new entries did not elicit a proper fault code.
  • Fixed a bug (#19220) in the Simple Commerce module where a MySQL error could occur after an update from 1.x due to a missing field.
  • Fixed a bug (#19193) in the Comment Module where closing a comment via front end editing did not properly update all associated statistics.
  • Fixed a bug (#19170) where a PHP error could result when $_GET variables included an array.
  • Fixed a bug (#19241) where a PHP error could occur when calling the Channel Structure API’s modify_channel() method.
  • Removed unused error array from the batch update method (#19251).
  • Fixed a bug (#19250) in the file field output where non-existent variables were parsed as if a path existed.
  • Fixed a bug (#19114) where the forgot password language was ambiguous.
  • Fixed a bug where uploading multiple files using the multiple=”multiple” attribute would cause an error in SafeCracker.
  • Fixed a bug (#19063) where URLs mentioned in module descriptions may not be masked.
  • Fixed a bug (#18353) where showing an RTE field as an excerpt in a Search Results tag may be missing spaces between words.
  • Fixed a bug (#18102) where members could only edit entries if the publishing was was enabled.
  • Fixed a bug (#19094) where using the RTE via SafeCracker may show PHP errors upon submission.
  • Fixed a bug (#19231) where SafeCracker File would fail to upload a second file if the file names differed only on suffix.
  • Fixed a bug (#18244) where duplicating a site’s entries via MSM would have duplicate entry data for the newly-created entries in the channel_data table.
  • Fixed a bug (#18221) where using the date-picker in a SafeCracker tool would lose the leading zero on the hour segment.
  • Fixed a bug (#18270) where trying to edit a file with some special characters in the file name would show an Unauthorized error.
  • Fixed a bug (#19102) where the {excerpt} and {full_text} tags in the Search Results tag pair showed regular expression escape characters.
  • Fixed a bug (#19062) where autosaving an empty File field would save the incorrect data and may show a PHP error when editing the entry.
  • Fixed a bug (#18217) where an “Invalid GET Data” error may appear when certain safe characters where part of a query string value.
  • Fixed a bug (#19271) where accessing member logout when already logged out could destroy other user’s sessions.
  • Fixed a bug (#19237) where duplicate field names could be created due to the name being truncated for length.
  • Fixed a bug (#16256) where the status dropdown on the Content Edit page was not always populated with the correct custom statuses.
  • Fixed a bug where variable pairs could be incompletely parsed due to naming conflicts. See bugs #17915, #17673, #19249.
• Developers
  • The Localize class has been rewritten to use PHP’s DateTime class for better localization and daylight savings time handling.
  • Added Localize::string_to_timestamp method for converting a pre- localized or non-localized time string into a Unix timestamp.
  • Added Localize::format_date to convert a Unix timestamp into a formatted date string.
  • Localize::$now property now accounts for server offset.
  • Changed the CP view file structure to inherit from a master template. Please check your view file overrides.
  • Added global ee() function for easy access to the EE super object.
  • String helper is now loaded automatically.
  • Updated underscore.js to version 1.4.4
  • Updated the Email library to be more consistent with CI, including a number of CI bug fixes. Please see the documentation for full details on usage recommendations.
  • Added Email::set_headers().
  • Added the following public Email class variables: smtp_keepalive, smtp_crypto and dsn.
  • Added an override for Email::_mime_types() that uses the mimes config file to define mimes.
  • Email::send() now automatically clears parameters if the request was successful, which may have implications for success messages.
  • Email::clear() should be used instead of Email:initialize() to manually clear parameters.
  • Channel Entries API now allows new or updated entry edit date to be explicitly set.
  • Channel Entries API will use current time as the default entry date when adding or updating an entry if the entry date is not explicitly set.
  • Channel Entries API will use current time as the default edit date when adding or updating an entry if the edit date is not explicitly set.
  • Added SmartForge library, making the Update Wizard’s database changes far more fault-tolerant.
  • Added an update log to record notices, exceptions, and failures from the Updater.
  • Functions::convert_curlies() now also encodes EE conditionals
  • Reactor: Added ability to have multiple fieldtypes in one add-on package.
  • Reactor: Added relationships_display_field hook to alter related entries displayed in the publish field of a muti-select Relationships field.
  • Reactor: Added relationships_post_save hook to alter the entry IDs that get saved upon saving an entry with a Relationships field.
  • Reactor: Added relationships_query hook to alter the entry IDs returned when parsing nested Relationships field tree tags.
  • Deprecated methods:
    • Calls to load the Security library—it’s automatically loaded
    • Using the class name as the constructor for Fieldtypes
    • Modifying load::_view_path, use load::add_package_path instead
    • Accessing the EE super object reference on one of the core classes. Please use ee() or get_instance() instead.
    • Api_channel_entries::submit_new_entry and Api_channel_entries::update_entry, use Api_channel_entries::save_entry instead.
    • Cp::add_to_head should only be used for styles, use Cp::add_to_foot for scripts.
    • Cp::delete_layout_tabs, use Layout::delete_layout_tabs instead.
    • Cp::delete_layout_fields, use Layout::delete_layout_fields instead.
    • Cp::set_variable, set the variable directly on the view object instead, e.g. ee()->view->$name = $value;
    • Cp::secure_forms, use EE_Security::have_valid_xid instead.
    • Cp::fetch_cp_themes, use Admin_model::get_cp_theme_list instead.
    • Email::_get_ip, use Input::ip_address instead.
    • Email::_set_header, use instead.`Email::set_header`
    • Email hidden configuration variable $config['email_smtp_port'], use $config['smtp_port'] instead
    • Functions::remove_double_slashes, use String helper’s reduce_double_slashes() instead.
    • Functions::compile_relationship
    • EE_Javascript::generate_json, use json_encode() instead
    • Localize::timestamp_to_gmt, use Date helper’s mysql_to_unix() instead.
    • Localize::set_localized_time.
    • Localize::set_server_time.
    • Localize::set_server_offset.
    • Localize::set_localized_offset.
    • Localize::set_human_time, use Localize::human_time instead.
    • Localize::convert_human_date_to_gmt, use Localize::string_to_timestamp instead.
    • Localize::simpl_offset
    • Localize::format_timespan, use Date helper’s timespan() instead.
    • Localize::fetch_date_params.
    • Localize::decode_date, use Localize::format_date instead.
    • Localize::convert_timestamp, use Localize::format_date instead.
    • Localize::zone_offset.
    • Localize::zones method and property.
    • Localize::set_localized_timezone.
    • Localize::fetch_days_in_month, use Date helper’s days_in_month() instead.
    • Localize::adjust_date, use Calendar::adjust_date instead.
    • Output::show_user_error, use show_error() instead
    • Services_json::json_decode use json_decode() instead
    • SafeCracker_lib::decrypt_input
    • SafeCracker_lib::encrypt_input
    • Security helper’s do_hash(), use PHP’s hashing functions instead.
    • Session::update_cookies
    • Template::assign_relationship_data
    • Channel::related_entries, use Channel::related_category_entries() instead
    • Safecracker_lib::decrypt_input
    • Safecracker_lib::encrypt_input
  • Removed Methods:
    • Channel_model::get_channel_categories()
    • Cp::add_layout_fields()
    • Cp::add_layout_tabs()
    • EE_Typography::xhtml_typography()
    • EE_XMLParser::data2xml()
    • File_upload_preferences_model::get_upload_preferences()
    • Functions::clone_object()
    • Functions::create_directory_map()
    • Functions::encoding_menu()
    • Functions::hash()
    • Localize::offset_entry_dst()
    • Localize::set_gmt()
    • Login::login_form()
    • Member_model::get_authors_simple()
    • Template::template_authentication_basic()
    • Template::template_authentication_check_basic()
    • Tools_model::delete_upload_preferences()
    • Tools_model::get_files()
    • Tools_model::get_upload_preferences()

Version 2.5.5¶

Release Date: December 20, 2012

• General Changes:
  • Fixed a bug where date single variables with colons in their names would not render.
  • Fixed a bug (#18268) where PayPal addresses may fail validation in the Simple Commerce module.
  • Fixed a bug (#19075) where entries posted via SafeCracker weren’t honoring the channel’s entry versioning setting.
  • Fixed a bug (#19088) where url_title could not be set via dynamic parameters in the Channel Entries tag.
• Developers
  • Fixed a bug where the Member_model::member_delete() method would have issues deleting single members not passed within arrays.

Version 2.5.4¶

Release Date: December 18, 2012

• Important:
  • Custom main menu items are now XSS cleaned.
  • Quick links are now XSS cleaned.
  • Added X-Frame-Options header to deny attempts at iframing the Control Panel.
  • Super Admins are required to re-authenticate before they can login as another user.
  • Super Admins are required to enter their password when changing another user’s email address, username, or password.
  • Generate salt, salted password, and crypt key on user registration.
  • Changed Forgot your Password logic so it always responds with the same message so email addresses aren’t confirmed and denied for spammers.
• General Changes:
  • Added the ability to use status in the Channel Entry tag’s orderby parameter.
  • Added {current_url} standard global variable.
  • Added {current_path} standard global variable.
  • Changed HTTP Auth realm from ‘ExpressionEngine Template’ to ‘Restricted Content’.
  • Added the disable="pagination" parameter to the Comment Entries tag to disable pagination overhead.
  • Altered member validation to ensure duplicate username checks are case insensitive regardless of database settings.
• Bug Fixes:
  • Fixed a bug (#18238) where a temp_ prefix was added to duplicate file names when using SafeCracker File.
  • Fixed a bug where a PHP error could occur when overwriting unsynced files.
  • Fixed a bug where XSS filters in certain browsers could break javascript on the template edit page under rare circumstances.
  • Fixed a bug (#18280) where referrer tracking was not disabled when the Referrer module was uninstalled, causing a MySQL error.
  • Fixed a bug (#18309) where the IP to Nation module did not properly update the update date.
  • Fixed a bug (#18201) where the IP to Nation module updater could call no longer included files, resulting in an error.
  • Fixed a bug (#18313) where IP to Nation database updates could fail silently when the host site is unavailable.
  • Fixed a bug (#18341) where backslashes could be improperly stripped from the View Entry page in the control panel.
  • Fixed a bug where backslashes could be improperly stripped when inside the Next/Previous tags.
  • Fixed a bug (#16862) where the Wiki module returned both categorized and uncategorized entries on the uncategorized entries page.
  • Fixed a bug (#18314) in the Wiki module where the check for duplicate titles when renaming an article was not wiki specific.
  • Fixed a bug (#18344) where the Wiki’s category page could display improperly under certain server environments.
  • Fixed a bug (#18304) where a 404 redirect could result in a PHP error on some versions of PHP.
  • Fixed a bug (#19046) where backslashes were improperly stripped from search results.
  • Fixed a bug (#18199) where IP to Nation was missing a few countries on the ban list.
  • Fixed a bug (#18194) where the total entries and comments fields in the members table could max out before the fields in the channel and stats tables.
  • Fixed a bug where some valid date-based conditionals may show an “Invalid EE Conditional Variable” error.
  • Fixed a bug (#18222) where the comments module could not display comments with a status of closed.
  • Fixed a bug (#18208) where the include_seconds configuration would not be respected after changing the date in a date field.
  • Fixed a bug (#18210) where the File module would improperly show protocol-relative URL paths.
  • Fixed a bug (#18234) where some member permissions may be reset when saving permissions for other member groups.
  • Fixed a bug where formatted date variables in conditionals may not always parse correctly.
  • Fixed a bug (#17802) where the using the legacy $conf variable in config.php may cause the updater to have wrong information.
  • Fixed a bug (#18236) where the cp_url config override may be overwritten by saving the General Configuration form.
  • Fixed a bug (#18265) where file field entries displayed from other sites may not render correctly.
  • Fixed a bug (#18239) where custom settings initialized in the Typography class would not persist through multiple calls of parse_type().
  • Fixed a bug (#18289) where filenames with spaces may not be properly encoded for display on the front-end when synced via the file manager.
  • Fixed a bug (#18285) where the RTE’s image tool may place an image at the top of the editor if browser selection data changes.
  • Fixed a bug (#18263) where PHP may claim an object wasn’t passed by reference to an extension hook.
  • Fixed a bug (#19050) where members sharing the same IP address and user agent may be locked out of the control panel if one of those members triggered a password lockout.
  • Fixed a bug (#18343) where an old javascript plugin was still attempting to be loaded in the control panel.
  • Fixed a bug (#18337) where the {absolute_count} variable in the search results tag returned the value of {count} instead.
  • Fixed a bug (#19056) where the {local_time} variable may not show the correct time in {exp:member:custom_profile_data}.
  • Fixed a bug (#19055) where javascript sent via the cp_js_end hook may be incorrectly cached.
  • Fixed a bug (#18319) where PHP may not be rendered in templates with a SafeCracker {custom_fields} loop.
  • Fixed a bug (#19047) where setting the site URL to a protocol- relative URL would break {path=} variables.
  • Fixed a bug (#17951) where SafeCracker may overwrite another form’s action ID if the SafeCracker form fails to load.
  • Fixed a bug (#19061) where PHP errors may not be shown on the extensions page regardless of the debug config item.
  • Fixed a bug (#18303) where the {edit_date} variable in comment entries may show the wrong date.
  • Fixed a bug (#16814) where the Datepicker field on a multiple entry edit screen would not allow AM to be manually typed into the field.
  • Fixed a bug (#18250) where forum member templates may not fully render when accessing the forum through the forum module tag.
  • Fixed bugs (#18233, #18237) where submitting a SafeCracker form that didn’t include checkbox fields would cause an undefined index error.
  • Fixed a bug (#18248) where the SafeCracker tag’s {status_menu} variable didn’t output statuses in the order designated in the CP status management screen.
  • Fixed a bug (#18264) where the {absolute_count} variable in the comment entries tag didn’t return the correct result.
  • Fixed a bug (#18245) in which member groups were not being created on all sites when Multisite Manager was enabled.
  • Fixed a bug (#18259) where {if editable} in the Comment Entries tag was failing to account for edit timeout.
  • Fixed a bug (#18276) in which members in a user group with out upload permissions on a certain file directory could not view files in that directory when logged in.
  • Fixed a bug (#18258) where file paths with special characters in them were being url encoded and then saved to the database, resulting in the references to them in channel entries being corrupted.
  • Fixed a bug (#18350) where File Manager search was defaulting to filename only search when a search of all fields was expected default.
  • Fixed a bug (#18351) where the username field length was too short in the session time out login form.
  • Fixed a bug (#18321) where “Can administrate design preferences” was not properly controller access to design preferences.
• Developers:
  • Moved the cp_member_login hook so that it is called after control panel logins are logged.
  • Fixed a bug (#19058) where api_channel_structure::get_channels($site_id) ignored the site_id parameter.

Version 2.5.3¶

Release Date: September 11, 2012

• General Changes:
  • Added field searching across multiple sites to Channel Entries. When more than one site is specified along with a field search, all fields with the specified name used in all sites specified will be searched and entries returned. Related to bugs #17298 and #18074.
  • Changed Forgot your Password logic so it always responds with the same message so email addresses aren’t confirmed and denied for spammers.
  • Added autocomplete=”off” to all email, username, and password fields.
  • Altered the display of Standard Global variables to output an empty string rather than the unparsed variable when not set.
  • Added an ID of expressionengine_template_debug to the division containing template debugging output.
  • Reactor: Added path_third_themes and url_third_themes hidden config variables.
• Bug Fixes:
  • Fixed a bug where template files were not checked for a maximum length of 50 characters, which could result in the creation of duplicate template groups.
  • Fixed a bug (#17896) where existing image links could break when a field was switched to a Rich Text field.
  • Fixed a bug (#17995) where a PHP error could occur on the frontend when the category URL indicator was left blank.
  • Fixed a bug (#18129) in the channel entries tag where the parent_id variable was always zero if a subcategories parent was not included in the assigned categories.
  • Fixed a bug (#18131) where the Channel module’s reverse related entries could treat numbers as strings, resulting in improper ordering.
  • Fixed a bug (#18080) where the Channel Entries tag was not properly ignoring category indicators in the URL when dynamic was set to ‘no’.
  • Fixed a bug (#17445) where Ping servers were only populated on the publish page if the user had saved their individual ping preferences.
  • Fixed a bug (#17507) where Subscription pagination was incorrect for administrators viewing a user’s subscriptions.
  • Fixed a bug (#17952) where Communicate’s batch mode displayed unstyled.
  • Fixed a bug (#17762) where the Simple Commerce module could reject a valid ping due to the use of capital letters in the account email.
  • Fixed a bug (#18120) where the Simple Commerce module could reject a valid ping due to slashes added when magic_quotes are turned on.
  • Fixed a bug (#16950) in the Simple Commerce module where entering a purchase manually could cause a MySQL error in strict mode.
  • Fixed a bug (#16607) in the Simple Commerce module where subscriptions could be rejected if Paypal sent the payment notification too soon.
  • Fixed a bug (#18171) where the Content Edit page javascript could silently fail to paginate and filter in rare circumstances.
  • Fixed a bug where the JavaScript on the Template Manager page loaded all template options, slowing page load in some circumstances.
  • Fixed a security issue that could have caused issues in the template manager.
  • Fixed a bug (#18004) where member groups able to create channels were not able to access channels they have created.
  • Fixed a bug (#18087) where some spam filters may falsely mark an email from ExpressionEngine as spam due to extra encoding of the subject line.
  • Fixed a bug (#18069) where modules may not be updated if previous version number contained alpha or beta designation.
  • Fixed a bug (#17989) where some conditionals that contained single quotes no longer worked.
  • Fixed a bug (#17946) where the Template Structure API could not duplicate a template group.
  • Fixed a bug (#17935) where the Typography class may try to include an invalid path.
  • Fixed a bug (#17623) where Functions::delete_directory may fail.
  • Fixed a bug (#16339) where determining a unique URL title may run an unnecessary query.
  • Fixed a bug (#18128) where publish form validation errors regarding the author field would not show an error message.
  • Fixed a bug (#16832) where the Extensions class had some unnecessary code for PHP 4.
  • Fixed a bug (#16909) where cleaning cookie keys may show a “Disallowed Key Characters” error.
  • Fixed a bug (#18073) where clicking a formatting button in an empty rich text editor may output “undefined” in the text area.
  • Fixed a bug (#18054) where RAR files could not be uploaded.
  • Fixed a bug (#18044) where deleting a channel field group would not disassociate the field group from channels.
  • Fixed a bug (#18036) where having the Mailing List module installed but no mailing lists may show a PHP error on the Communicate screen.
  • Fixed a bug (#18040) where the Referrer module wouldn’t log referrers unless the IP to Nation module was installed.
  • Fixed a bug (#18085) where the Database Query Form link would appear for non-super admins.
  • Fixed a bug (#18022) where uploading an animated GIF may produce a PHP error in the File Manager.
  • Fixed bugs (#17878, #18094) where sorting entries by status or paging on the edit screen with a restricted account may fail.
  • Fixed a bug (#16904) where photo_url may not be parsed in a channel entries loop if photos were enabled but avatars were disabled.
  • Fixed a bug (#17966) where hidden templates could not be used as templates for Pages entries.
  • Fixed a bug (#17684) where removing a member photo when avatars were disabled showed an error.
  • Fixed a bug (#18002) where a quote mismatch in a single variable in a channel entries loop may show a PHP error.
  • Fixed a bug (#18012) where Api_channel_entries::delete_entry() may show the wrong error messages for certain member permissions checks.
  • Fixed a bug (#18145) where the RTE extension used the cp_menu_array hook without checking last_call.
  • Fixed a bug (#18092) where the RTE fieldtype wouldn’t automatically turn URLs and email addresses into links if the channel preference was on.
  • Fixed a bug (#17795) where the throttle table may not be automatically truncated if online user tracking was turned off.
  • Fixed a bug (#17775) where the comment form could be validated using whitespace.
  • Fixed a bug (#17903) where custom menu bar links may not work depending on the path saved and the path used to access the control panel.
  • Fixed a bug (#17785) where variables in conditionals were not trimmed for whitespace while the rendered variable was.
  • Fixed a bug (#18071) where masked URLs in the control panel were not URL-encoded to protect characters like ampersands.
  • Fixed a bug (#18032) where the “Invalid GET Data” error would appear to site guests, it now only appears for super admins.
  • Fixed a bug (#17832) where conditionals could not be spanned over multiple lines.
  • Fixed a bug (#18056) where URL titles at least 70 characters long with one hundred thousand duplicates would fail to validate.
  • Fixed a bug (#18157) where pre formatting, post formatting, and properties were not rendering with wrapped file fields on the front end.
  • Fixed a bug (#17954) where the category archive tag would not output markup outside of {categories} and {entry_titles} variable pairs.
  • Fixed a bug (#17766) where having a custom 404 template set would have template fetching behave as if Strict URLs was turned on.
  • Fixed a bug (#18063) where entry titles could contain invisible characters.
  • Fixed a bug (#18096) where conditionals may strip script tags from the evaluated variable.
  • Fixed a bug (#18163) where orphaned categories may not be sorted correctly when sorting alphabetically.
  • Fixed a bug (#17619) where having multiple HTML image formatting buttons with different markup would all output the same markup.
  • Fixed a bug (#18001) where the limit to the amount of banned IPs or emails could be reached easily.
  • Fixed a bug (#18147) where having many member groups may slow down loading of the member group editing page.
  • Fixed a bug (#18165) where custom member select fields with quotes in the selected value would fail validation on the front end.
  • Fixed a bug (#18170) where category groups from other MSM sites may appear as an option in the channel group assignments.
  • Fixed a bug (#17999) where upgrading from pre-1.x versions may show a database error.
  • Fixed a bug (#17433) where the “img” HTML button was still present even after removing all image buttons in the settings.
  • Fixed a bug (#17645) where filtering entries may show a PHP error.
  • Fixed a bug (#17974) where member registration validation may show the wrong error message.
  • Fixed a bug (#17669) where an uploaded file with special characters in its file name may not appear correctly.
  • Fixed a bug (#17670) where a maximum file upload size of 5 or less would allow a file of any size to be uploaded.
  • Fixed a bug (#18172) where saving Rich Text Editor toolsets for other members appeared not to work.
  • Fixed a bug (#17910) where the XML Encode plugin would allow email email addresses to be converted into links.
  • Fixed a bug (#17837) where using modifiers on variable pairs would not work.
  • Fixed a bug (#17557) where pagination links in the file manager were not updated when filters were applied.
  • Fixed a bug (#17992) where the file type and date range filters were not working on the File Manager screen.
  • Fixed a bug (#17554) where syncing an upload directory would not update file sizes in the database.
  • Fixed a bug (#18141) where setting preserve_checkboxes to “yes” on a SafeCracker form would not save the values of on-screen checkboxes if they were unchecked.
  • Fixed a bug (#18133) where values of a SafeCracker form were not being escaped which could break form markup.
  • Fixed a bug (#17936) where the Table library may show a PHP error about an undefined property.
  • Fixed a bug (#18182) where Template::parse_variables() may not parse variables in variable pairs under certain conditions.
  • Fixed a bug (#18184) where the output profiler did not display in the control panel.
  • Fixed a bug (#17646) where SafeCracker form validation for required checkbox fields would fail.
  • Fixed a bug (#18132) where SafeCracker form validation would pass if the encrypted hidden fields containing the rules were edited.
  • Fixed a bug (#18000) where SafeCracker form validation would fail if a file field was required but filled in.
  • Fixed a bug (#18185) where the recent comment date for an entry would be set to zero upon editing the entry.
  • Fixed bugs (#18018, #18019, #18020) where there were unnecessary queries when loading a SafeCracker form.
  • Fixed a bug (#16838) where categories in a SafeCracker tag pair did not have access to category images or descriptions.
  • Fixed a bug (#18118) where WMV files could not be uploaded.
  • Fixed a bug (#17958) where users were not allowed to move an entry between identical channels when the category was “none” due to “none” having two different representations in the db.
  • Fixed a bug (#18104) where the publish page tab translation file was not being loaded, and thus tabs were not being correctly localized.
  • Fixed a bug (#18033) that was causing the option “None” to be absent from the formatting options for category’s custom textarea fields.
  • Fixed a bug (#17298) where field searching was not working when searching across sites using the multiple site manager.
  • Fixed a bug (#18124) that was causing author_id=”CURRENT_USER” in the channel module to fail when Dynamic Channel Query Caching was enabled.
  • Fixed a bug (#18058) where SafeCracker’s settings were not being properly translated and saved from the settings form, result being that users couldn’t uncheck any of the settings checkboxes once checked.
  • Fixed a bug (#17753) where Safecracker was inconsistently formatting large numbers.
  • Fixed a bug where the set of valid category groups was being incorrectly determined in in the channel:entries and channel:category_headings tags when a text category url parameter was given.
  • Fixed a bug where the default form ID for the Tell-A-Friend form was ‘contact_form’ instead of ‘tellafriend_form’.
  • Fixed a documentation error (#17783) where the cp_menu_array hook was not documented.
  • Fixed a documentation error (#17232) where some hidden configuration variables weren’t mentioned on the main hidden configuration variables page.
  • Fixed a documentation error (#17451) where the exp:forum tag’s board parameter was not documented.
• Developers:
  • Added api_channel_entries_custom_field_query hook for altering the custom fields query array result.
  • Reactor: Added file_after_save hook in File_model.
  • Reactor: Moved RTE display code to its library file to be more accessible by third parties.

Version 2.5.2¶

Release Date: June 6, 2012

• General Changes:
  • One-click updating of IP to Nation database, as well as support for IPv6 addresses for nations.
  • Improvements to Blacklist/Whitelist module to handle uncollapsed IPv6 addresses.
• Bug Fixes:
  • Fixed a bug (#17978) where the control panel would sometimes show an error for older versions of PHP.
  • Fixed a bug (#17968) where the Referrer module was attempting to update the comments table instead of the referrer table.
  • Fixed a bug (#17971) where accessing a site with a ‘site_name’ configuration variable set may show errors on older versions of PHP.

Version 2.5.1¶

Release Date: May 29, 2012

• Important:
  • Fixed a potential cross site scripting vulnerability in the member module.
• General Changes:
  • Added support for IPv6 IP addresses
  • Rich Text Editor fields are now available for use with the Metaweblog API module.
  • Made Communicate file uploads more resistant to malformed file names.
• Bug Fixes:
  • Fixed a bug (#17348) preventing field formatting types provided by some plugins from working with the MetaWeblog API module, and especially MarsEdit.
  • Fixed a bug (#17499) where changing a username or password from the front-end did not behave as expected in some cases.
  • Fixed a bug (#16995) where Pages module URIs were case sensitive.
  • Fixed bugs (#17026, #17378) where the Pages module and page_url tags still displayed trailing slashes in some cases.
  • Fixed a bug (#17424) where a “too many URL segments” error would not return a 404 status code.
  • Fixed a bug (#17597) where the email encode tag did not output valid HTML5.
  • Fixed a bug (#17459) where safecracker could be tricked into posting a new entry instead of editing the specified entry.
  • Fixed bugs (#16802, #17442) where package paths were not added consistently.
  • Fixed a bug (#17911) where comments did not expand correctly in the comment control panel.
  • Fixed a bug (#17857) where http authentication did not correctly block some member groups.
  • Fixed a bug (#17140) where set_image_memory always assumed MB.
  • Fixed a bug (#17937) where the admin overview page did not list a description for the RTE settings.
  • Fixed a bug (#17812) where conditional comparisons with strings containing certain punctuation and special characters did not evaluate correctly.
  • Fixed a bug (#17901) where pasting into the rte sometimes did not result in the expected paragraph markup.
  • Fixed a bug (#16548) where publish page permissions were not being observed.
  • Fixed a bug (#16593) where advanced search ignored the status parameter.
  • Fixed a bug (#16619) where saving the SafeCracker extension settings would clear out settings for other MSM sites.
  • Fixed a bug (#16708) where there was an unnecessary query when building the category list for new entries.
  • Fixed a bug (#16610) where importing members would not correctly set the time format.
  • Fixed a bug (#16798) where safecracker file was not obeying the required rule.
  • Fixed a bug (#17892) where the password lockout notice may show number of minutes as a hexadecimal number.
  • Fixed a bug (#17875) where the word ‘or’ was not called from a language file on the RTE toolset editor dialog.
  • Fixed a bug (#17876) where viewing the Search Log without the Search Module installed would show a PHP error.
  • Fixed a bug (#17882) where sort and search on the members table would not work if the initial sort was set to a column not in the table.
  • Fixed a bug (#16989) where SafeCracker categories were not filtered by its group_id parameter.
  • Fixed a bug (#17877) where saving a category image would save the file field data incorrectly in the database.
  • Fixed a bug (#17781) where deleting a member without the Comment module installed would show PHP errors.
  • Fixed a bug where when deleting a member, the option to delete all the member’s entries shows up even if the member has no entries.
  • Fixed a bug (#17906) where the code view of the Rich Text Editor on the front-end may appear too narrow.
  • Fixed a bug (#17905) where some language was not being referenced from language files.
  • Fixed bugs (#17902, #17912) where some subclass method signatures differed from their superclass, causing warnings in PHP 5.4.
  • Fixed a bug where submitting a publish form while the category editor was visible would result in loss of category selections for that entry.
  • Fixed a bug (#17914) where textarea rows setting could not be updated.
  • Fixed a bug (#17918) where the edit_date of an entry wouldn’t update after editing an entry.
  • Fixed a bug (#17898) where trying to add a link to the start of a bullet list item in the RTE sometimes would claim text wasn’t selected.
  • Fixed a bug (#17817) where the template manager table may move to the bottom of the page at high browser window resolutions.
  • Fixed a bug (#17831) where image manipulations may resize image to one pixel larger than desired dimension.
  • Fixed a bug (#17907) where the Rich Text Editor would pass publish form validation even if field was set to be required.
  • Fixed a bug (#17931) where saving an empty RTE field inserts empty paragraph tags into the database, making template conditionals not work.
  • Fixed a bug (#17934) where a textarea with formatting buttons showing wasn’t able to be resized when editing the publish layout.
  • Fixed a bug (#17939) where using the backspace parameter on a categories variable pair in the File Entries tag would not work.
  • Fixed a bug (#17940) where saving an entry with a hidden Rich Text Field would result in loss of new data in that field.
  • Fixed a bug (#17942) where the Help link on third-party module pages was not correct.
  • Fixed a bug (#17929) where sending an email to a member group or mailing list with an attachment may fail.
  • Fixed a bug (#17944) where editing an entry belonging to a non- existent author would show PHP errors.
  • Fixed a bug where the hostname used to access the control panel may affect which tools are loaded in the Rich Text Editor.
  • Fixed a documentation error (#17633) where the example path to the server wizard was not correct.
• Developers:
  • Variable pairs passed to Template::parse_variables() or Template::parse_variables_row() can make use of a backspace and limit parameter.

Version 2.5.0¶

Release Date: May 7, 2012

• Important:
  • Improved XSS filtering of input data to prevent an XSS vulnerability.
  • Improved redirect function to prevent a CRLF injection attack.
• General Changes:
  • Rich Text Editor
    • Added new module and fieldtype for the new rich text editor.
    • Added user preferences for rich text editor under my preferences.
  • Added a Cookie Consent Module, available in the ExpressionEngine Add-on Library.
  • Dropdown for “Preview Layout” in publish layouts sidebar updates to the member group being viewed.
  • When editing publish layouts, the checkbox for the member group being viewed defaults to being checked.
  • Removed IP requirement from sessions check to prevent logout issues for revolving IP addresses.
  • Altered language keys on the New Template page to be consistent with the New Template Group page in the control panel.
  • Reactor: Changed “edit member group” screen to show prefs for the MSM site you are presently using.
  • Reactor: Added option to member delete confirmation page to delete all entries associated with the member being deleted
• Bug Fixes:
  • Fixed a bug (#16519) where adding a pre-defined HTML formatting button could result in the button being added to the wrong member account.
  • Fixed a bug where the Browse Files button had no effect after uploading via the File Manager page.
  • Fixed a bug where the currently selected upload folder on the File Manager page was not used as the default in the Upload File dialog.
  • Fixed bugs (#16802, #17442) where package paths were not added consistently.
  • Fixed a bug (#17391) where the localization link did not show in the My Account menu in the control panel unless the member also had permission to administer members.
  • Fixed a bug (#17443) where the recipient parameter in the Tell-a-Friend tag was ignored.
  • Fixed a bug (#17523) where a PHP error could occur when a member group had permission to create new channels but no channels had been assigned to that group.
  • Fixed a bug (#17523) where a permission error could occur when a group had permission to create new channels but did not have template access.
  • Fixed a bug (#17644) where the codeblock division added to code tags could be converted to entities when allowed HTML formatting was set to none.
  • Fixed a bug (#17647) where deleting a status group did not remove a reference to that group id in the exp_channels table.
  • Fixed a bug where the per page setting in Content Edit did not stick once navigating away from the page.
  • Fixed a bug (#17365) where setting your Default HTML formatting to Convert HTML and turning Automatically turn URLS into links on would cause the auto linking not to work.
  • Fixed a bug (#17440) where Safecracker was attempting to load the file browser even though it can’t use it.
  • Fixed a bug (#17690) where SafeCracker could not use the valid_ip form validation rule.
  • Fixed a bug (#17577) where filtered comments in the control panel may appear out of order.
  • Fixed a bug in the version helper that would display PHP errors if unexpected data was returned from the server.
  • Fixed a bug (#17380) where editing entries while the comment module is disabled would show PHP errors.
  • Fixed a bug (#17375) where loading the file manager with no upload destinations set would show a PHP error.
  • Fixed a bug (#17381) where upload preferences in config.php would be overwritten when preferences were saved via the Control Panel.
  • Fixed a bug (#17390) where backspace parameter would remove pagination markup.
  • Fixed a bug (#17387) where the Simple Commerce module performed an unnecessary query.
  • Fixed a bug (#17392) where file field tags referencing files in other sites’ upload destinations may not render.
  • Fixed a bug (#17402) where template restriction redirects would redirect users to the wrong template.
  • Fixed a bug (#17400) where having third_party_path defined while running the installer will show a PHP error.
  • Fixed a bug (#17406) where the category archives tag may show PHP errors.
  • Fixed a bug (#17417) where the edit entries screen would show a PHP error when converting high ASCII text to entities.
  • Fixed a bug (#17415) where having a category URL trigger word in a URL would show a PHP error if no category URL title was present.
  • Fixed a bug (#17414) where searching the template manager for “0” would show PHP errors.
  • Fixed a bug (#17435) where search parameter in Channel module would not work if keywords used a URI segment that contained special characters.
  • Fixed a bug (#17420) where some error messages did not return an the correct status code, thus improperly handled by some reverse proxies.
  • Fixed a bug (#17453) where listing entries in an MSM site by category URL title would fail if another site used the same category URL title.
  • Fixed bugs (#17449, #17497) where updating template preferences from the template edit screen would update the template type to “undefined”.
  • Fixed a bug (#17450) where where a file field without a file would cause Warnings.
  • Fixed a bug (#17421) where the file field was running excessive queries in the channel entries loop.
  • Fixed a bug (#17500) where changing an entry’s author would not update the last_entry_date field for the authors.
  • Fixed a bug (#17510) where the file entires tag wouldn’t honor the directory_id parameter if the directory ID belonged to another site.
  • Fixed a bug (#17534) where the “Return to Filtered Entries” link was missing after saving an entry selected from a filtered edit screen.
  • Fixed a bug (#17600) where saving a channel field with an field order value of zero would show a PHP error.
  • Fixed a bug (#17601) where the {total_comments} tag would only show the correct number if pagination was enabled.
  • Fixed a bug (#17607) where deleting a member from MySQL servers in ONLY_FULL_GROUP_BY mode would show a query error.
  • Fixed a bug (#17564) where the file manager modal may not fit in smaller browser sizes.
  • Fixed a bug (#17588) where category image tags would render as blank on the front end.
  • Fixed a bug (#17462) where users in GMT-6 or earlier timezones would have their autosaved entries deleted.
  • Fixed a bug (#17454) where users could not switch sites in the control panel if cookie domains were set for each site.
  • Fixed a bug (#17609) where publish layouts may not save correctly and show a PHP error on the publish page.
  • Fixed a bug (#17411) where the table header on the template manager screen may appear improperly styled.
  • Fixed a bug (#17736) where member list initial order by and sort preferences were not honored on member list screen.
  • Fixed a bug (#17732) where thumbnail preview of file fields would fail if a protocol-agnostic URL was entered for the upload destination.
  • Fixed a bug (#17719) where control panel menus were too low in the document z-order, not giving enough flexibility to CP add-ons.
  • Fixed a bug (#17715) where year, month and day fields in channel_titles table may be incorrect depending on a number of timezone factors.
  • Fixed a bug (#16948) where cropped images may sometimes be framed by black bars.
  • Fixed a bug (#17734) where deleting a field from a publish layout may result in PHP errors on the publish screen.
  • Fixed a bug (#17695) where the version helper cached version information in a hard-coded directory instead of using the cache_path config item.
  • Fixed a bug (#17627) where submitting a publish form that fails validation may delete data in that entry’s file fields.
  • Fixed a bug (#16583) where auto-linker behavior differed from 1.x, causing links without a protocol not to be converted.
  • Fixed a bug where the channel calendar day_path did not always match the calendar day shown due to differences in localization.
  • Fixed a bug where the Updated Sites module was rejecting valid pings.
  • Reactor: Fixed a bug where 3rd party module tab fields did not have their data set after an autosave.
• Developers:
  • Reactor: Added $member_ids, an array of members deleted, to the cp_members_member_delete_end hook.
  • Reactor: Re-exposed channel->pager_sql in the channel module.
  • Reactor: Added parameter to Api_channel_fields::field_edit_vars to specify which field types to present as options.
  • Reactor: Altered the Template class to allow plugins/modules to use __call() magic method.
  • Added myaccount_nav_setup hook to modify My Account navigation. See documentation for more information.
  • Added email_send hook to modify emails or take over email sending completely.
  • Added member_member_register_errors hook to allow additional error checking to the member registration form.
  • Added set_cookie_end hook which allows full control of setting cookies after cookie parameters have been normalized according to the cookie configuration settings.
  • Added pre_loop() function to fieldtypes for preprocessing of channel data before the entries loop runs.

Version 2.4.0¶

Release Date: Jan 24, 2012

• Important:
  • Fixed a security issue that could have caused all mailing list subscribers to be unsubscribed.
• General Changes:
  • Removed the ability to enable SQL Query Caching via the Control Panel. It is now only accessible via the ‘enable_db_caching’ hidden configuration variable. Note that this form of caching is not recommended in most environments.
  • Added the ability to apply image watermarks without having to also resize the image.
  • Added the ability to use image manipulations in custom file fields, using both a single tag and a tag pair.
  • Changed the member module to display a proper 404 page when an action could not be found.
  • Altered the handling of the control panel cookie domain for MSM sites.
  • Optimized the encode_ee_tags() method in the Functions library.
  • Disabled the ability to type over the field shortname on the ‘Admin- Channel Fields’ main page when selecting a field short name.
  • Abstracted file browser and file field into the File_field library.
  • Changed the category image field to use the new File_field library and image browser.
  • Abstracted channel pagination into the EE Pagination library.
  • Implemented new EE Pagination library with comment pagination.
  • Implemented new EE Pagination library with search pagination.
  • Added file metadata to the file upload modal.
  • Removed accordions from image edit in the file upload modal.
  • Added check to make sure that version constant matches version in config file.
  • File upload paths can now be overridden via configuration variables.
  • Added active conditional variable to category listings for determining the active category.
  • Added link to publish another entry after publishing an entry.
  • Added “credit” and “location” metadata fields to files.
  • Added url_title parameter to Channel module’s next_entry and prev_entry.
  • Channel Categories and Category Archive tags now support multiple channels in the channel parameter.
  • Files in file browser modal can now be sorted and filtered by keywords.
  • Reactor: Added the list of Channels to dropdown under Edit.
  • Reactor: Added third_party_path config item.
  • Reactor: Changed default text formatting from XHTML to none.
  • Fixed an issue where remember me functionality was not working correctly.
• Bug Fixes:
  • Fixed a bug (#16814) where the Datepicker would not allow AM to be manually typed into the field.
  • Fixed a bug where more than one Member Group could have the same name.
  • Fixed a bug (#16277) where extra line breaks were not handled in some Moblog tags.
  • Fixed a bug (#16401) where setting a Text Input’s maximum length to zero or empty could result in invalid markup.
  • Fixed a bug (#16402) where SafeCracker would not use a Channel’s ‘Allow Comments’ preference if the allow_comments= parameter was not specified.
  • Fixed a bug (#16436) where the installer could incorrectly determine the theme path if the base path contained the name of the system folder.
  • Fixed a bug (#16431) where a Fieldtype’s settings would default to NULL instead of an empty array when not specified.
  • Fixed a bug (#16434) where SafeCracker’s CAPTCHA could fail to appear in some cases.
  • Fixed a bug (#16488) where IP Search results could fail to display members with a matching IP.
  • Fixed a bug (#16578) where editing an image could result in a PHP error in some rare cases.
  • Fixed a bug (#16846) where some standard member groups could be assigned privileges that did not make sense.
  • Fixed a bug (#16563) where comment edit dates were not correctly updated.
  • Fixed a bug (#16799) where the list of Moblogs in the Moblog Module did not paginate if there were more than 100 Moblogs.
  • Fixed a bug (#17057) where the Channel Field Management table did not span correctly if there were no Channel Fields.
  • Fixed a bug (#17051) where some characters were not allowed to be used in the database password when installing ExpressionEngine.
  • Fixed a bug (#17106) in the installation wizard where some inputs that could not logically allow spaces were not trimmed.
  • Fixed a bug where date fields containing a date prior to 1970 were not displayed in the preview shown after creating or editing an entry.
  • Fixed a bug (#17231) where Moscow Time was still represented as UTC+03:00 instead of UTC+04:00.
  • Fixed a bug (#17142) by improving the grammar of messages in some areas.
  • Fixed a bug (#17157) where a member could not delete their own account.
  • Removed a stray Thumbs.db file from the download (#16748).
  • Fixed an issue with thumbnail creation where the image was not resized if one of the sides was smaller than the thumbnail size.
  • Fixed a bug (#16747) where the Translation Utility showed a PHP error.
  • Fixed a bug (#16644) where the blacklist module returned errors as language keys.
  • Fixed a bug (#16752) where [email= tag output resulted in a javascript error.
  • Fixed a bug (#16356) where http authentication did not always work on IIS servers.
  • Fixed a bug (#16562) where “view all posts by this member” link resulted in a permission error when using Secure Mode.
  • Fixed a bug (#16504) where multiple versions of the same email on a page were not decoded correctly.
  • Fixed a bug (#16759) where categories with lots of channel fields were difficult to edit from the publish page.
  • Fixed a bug (#16801) where members were always logged in as anonymous.
  • Fixed a bug (#16865) where upper case BBCode was not being parsed.
  • Fixed a bug (#16738) in the File Module where a PHP error could occur when there were no results.
  • Fixed a bug (#16754) in the SafeCracker Module where relationship data was not maintained on edit if the field was not included in the forum.
  • Fixed a PHP error in the ud_009 update file.
  • Fixed a PHP error in the ud_100 update file.
  • Fixed a bug (#17134) where the file upload could report that a file already exists when it did not.
  • Fixed a bug where the Moblog Module check reported rejected entries as successful and failed to count saved entries.
  • Fixed a bug (#17141) where a MySQL error could occur due to SafeCracker adding a stray where clause to random queries.
  • Fixed a bug (#17156) where using loading entry version and then saving the entry could result in a duplicate entry being created.
  • Fixed a bug (#17160) where uploaded files and generated thumbnails had the wrong permissions applied.
  • Fixed a bug (#17006) where performing a search, then going back in your browser and searching again would cause an invalid action error.
  • Fixed a bug (#16034) where SafeCracker would insert an empty option into dropdown menus when using the {options} tag pair.
  • Fixed a bug (#17213) where the automatically generated field short name could contain periods
  • Fixed a bug (#16333) where synchronized files in file manager would show date synchronized instead of date created.
  • Fixed a bug (#16549) where uploading a file over the maximum upload size would clear out all POST headers and show an incorrect error message.
  • Fixed a bug (#16415) where long filenames in file manager would expand table cells and move all other cells and controls off screen.
  • Fixed a bug (#15771) where editing a transparent PNG in the file manager wouldn’t process the transparency properly.
  • Fixed a bug (#16596) where existing image thumbnails weren’t updated to reflect external modifications after upload folder synchronization.
  • Fixed a bug (#16429) where publish layouts would not save if the tabs contained certain special characters, as is the case in some languages.
  • Fixed a bug (#16348, #16347) where query that builds author list could be simplified.
  • Fixed a bug (#16479) where members with no access to member groups weren’t notified they couldn’t add members without correct permissions.
  • Fixed a bug (#16823) where some image names in the theme CSS weren’t in the same case as the file name.
  • Fixed a bug (#16781) where some forms in My Account would not give confirmation of update after submission.
  • Fixed a bug (#16707) where uninstalling a fieldtype would not delete all its fields from publish layouts if the layout had more than one of it.
  • Fixed a bug (#16674) where using Recount Statistics would provide incorrect numbers for private messages and total forum posts.
  • Fixed a bug (#16841) where editing the Super Admin group would unlock it.
  • Fixed a bug (#16594) where the incorrect label was being shown under “Template Editing Privileges” for editable template groups.
  • Fixed a bug (#16669) where template group name form validation would return contradictory rules for naming template groups.
  • Fixed a bug (#16386) where sorting by channel or screen name on edit listing would not work.
  • Fixed a bug (#16385) where selected entry categories would be unselected if they were edited from the publish screen.
  • Fixed a bug (#16936) where SQL Manager would return inconsistent results when using “SELECT” vs. “select”.
  • Fixed a bug (#16960) where Member module’s ignore_list would output an SQL error.
  • Fixed a bug (#16947) where contact form with user_recipients set to “yes” and nothing specified in recipients would return an error.
  • Fixed a bug (#16919) where image manipulation names could be named “thumbs” or contain forward slashes.
  • Fixed a bug (#16971) where a SafeCracker File field would show a PHP error if it was set to show existing files and there were none.
  • Fixed a bug (#16976) where file upload success window wasn’t using language keys for labels.
  • Fixed a bug (#16260) where tag pairs inside of related_entries would throw a PHP warning.
  • Fixed a bug (#15533) where Tell-A-Friend form wouldn’t work on pages accessed through Pages module.
  • Fixed a bug (#16201) where the default highlight color for new statuses was white, making it difficult to see.
  • Fixed a bug (#17040) where IP to Nation module would throw PHP errors if an invalid file path was provided on import form.
  • Fixed a bug (#17020) where padding and offset settings for watermarks were not respected.
  • Fixed a bug (#16984) where cp_themes directory did not contain index.html files to block directory access.
  • Fixed a bug (#17047) where error message fonts may look inconsistent in different scenarios.
  • Fixed a bug (#17128) where sorting by certain fields in reverse_related_entries may produce incorrect results.
  • Fixed a bug (#17226) where error about a module not being installed did not include module name.
  • Fixed a bug (#17205) where “Most Recent Entry” link in control panel did not respect member groups’ assigned channels.
  • Fixed a bug (#17127) where a member group with no assigned channels may experience PHP errors in the control panel.
  • Fixed a bug (#17007) where template groups created by non-Super Admin member groups could not be accessed by its creator.
  • Fixed a bug (#16983) where uncategorized_entries parameter in Channel Entries tag had no effect.
  • Reactor: Fixed a bug with autosave where the save() method would be called for third party add-ons on autosave.
  • Fixed a bug (#16973) where the “Show Existing Files” link on a SafeCracker file field would claim the upload directory didn’t exist.
  • Fixed a bug (#16237) where File module pagination was not working correctly.
  • Fixed a documentation error (#16932) where a Plugin code sample was incorrect.
  • Fixed a documentation error (#16335) where an API usage example was incorrect.
  • Fixed a documentation error (#16965) where the old Batch Upload Location preference was still referenced.
  • Fixed a documentation error (#17151) where several items in General Configuration were not documented.
  • Fixed a documentation error (#17153) where a preference was incorrectly named in Output and Debugging Preferences.
  • Fixed a documentation error (#17180) where there was some outdated information for the Publish page.
  • Fixed a documentation error (#16547) where there was some outdated information for the Comment Module page.
  • Fixed a documentation error (#16547) where there was some outdated information for the File Manager page.
• Developers:
  • Added URL_THIRD_THEMES and PATH_THIRD_THEMES constants for add-on developers.
  • Added Developer Log to log notices that need Super Admin attention.
  • Deprecated Member_model::get_authors_simple(), use Member_model::get_authors() instead.
  • Deprecated File_upload_preferences_model::get_upload_preferences(), use File_upload_preferences_model::get_file_upload_preferences() instead.
  • Deprecated Tools_model::get_upload_preferences(), use File_upload_preferences_model::get_file_upload_preferences() instead.
  • Added template_types Extension Hook to add custom template types.
  • Added member_delete Extension Hook to execute code before member deletion and to modify member IDs to delete.
  • Reactor: Added core_template_hook that lets you change the template to be loaded based on the uri_string.
  • Reactor: Added template_post_parse hook that lets you modify templates after parsing.
  • Reactor: Added template_fetch_template hook that lets you see what template is being loaded.
  • Reactor: Added option to suppress errors thrown by loading language files.
  • Reactor: Added all plugins to default text formatting list when creating a new field.
  • Reactor: Abstracted field edit/create logic to the Channel Fields API.

Version 2.3.1¶

Release Date: October 17, 2011

• Important:
  • Fixed a potential cross site scripting vulnerability.
  • Modified a URL character check that was affecting third party add- ons to be less strict.
• Bug Fixes:
  • Fixed several minor documentation errors including #16770, #16772, #16783, #16771, #16761 and #16318.

Version 2.3.0¶

Release Date: October 11, 2011

• Important:
  • Fixed a potential cross site scripting vulnerability.
  • Fixed a potential cross site request forgery vulnerability.
  • Fixed a bug where using the MSM multi-site login feature would sometimes latch onto the wrong session.
• General Changes:
  • Removed accordions from Member Groups, Member Preferences and Channel Preferences.
  • Forum search now uses board default pagination per page settings instead of using a hardcoded 20 items per page.
  • Updated pagination variable pair that allows much more control over pagination within channel entries and comments.
  • Member search tokens that allow you to specify different information to search for (e.g. email:ellislab.com username:test screen_name:’John Doe’)
  • Added quick way to copy and paste custom field tags from the Custom Field Group’s page
  • Added a hidden config variable remove_unparsed_vars which, when set to ‘n’ in conjunction with debug = 0, will not remove unparsed ExpressionEngine Variables.
  • Modified legacy debug 0 setting to only remove unparsed template variables when the ‘remove_unparsed_vars’ hidden config is set to ‘y’, fixing some common issues with JavaScript and JSON getting “eaten” on sites using that legacy debug setting.
  • Fixed a bug in the Metaweblog API module that was causing authentication errors.
  • Fixed a bug in parsing image tag attributes that could lead to a PHP notice error when only “Safe HTML” is allowed.
  • Fixed a bug in the template parser that was preventing the minified jQuery from being used in an ExpressionEngine template
  • Fixed a bug where a PHP notice error would occur when debug is enabled and an invalid ExpressionEngine tag occurs on the page that only has one tag segment.
  • Fixed a cosmetic IE JavaScript error (#15196) on the publish page.
  • Fixed a display error in the file upload modal of the Corporate theme.
  • Fixed a bug where reassignment of entries when deleting a member was limited to superadmins.
  • Fixed a bug (#16083) where editing or adding categories from the Publish page did not work properly in IE7.
  • Fixed a bug (#15530) where a registering member could supply a value that was not an option in a Select List member field.
  • Fixed a bug (#16214) where new categories would be sorted alphabetically when the group was using a custom sort order instead.
  • Fixed a bug (#16232) where the multi-entry editor did not update entry edit dates.
  • Fixed a bug (#16246) where the Date fieldtype could not show an error if an invalid date was entered.
  • Fixed a bug (#16239) where some buttons in the Control Panel had minor display issues.
  • Fixed a bug (#16038) where the File Manager had display issues when the Corporate theme was used.
  • Fixed a bug (#16265) where the Email Contact Form could fail to send in some cases if the user_recipients parameter was not specified.
  • Fixed a bug (#16422) where some colors appeared incorrectly in the Datepicker.
  • Fixed a bug (#16288) where http:// could be undesirably prepended to some General Configuration URLs.
  • Fixed a bug (#16397) where the Add Category dialog could appear incorrectly in some cases.
  • Fixed a bug (#16639) where non-Super Admins with group administration privileges could change a Super Admin’s member group.
  • Fixed a bug (#16626) where non-Super Admins with profile editing privileges could edit a Super Admin’s profile.
  • Fixed a documentation error (#16213) where some parameters available to exp:member:login_form were not listed.
  • Fixed a documentation error (#16564) where the tag for generating comment editing Javascript was incorrectly listed.
  • Fixed a typo in the Control Panel (#16403)
  • Fixed a breadcrumb language key issue in the Control Panel (#16229)
  • Fixed a bug where the private message inbox only displayed 5 messages per page.
  • Fixed various jQuery UI display issues in the corporate theme.
  • Fixed a bug where Datepicker hours before 10 were not consistently prefixed with a zero.
  • Fixed a bug where sorting channel entries on entry_date instead of date ignored additional sort fields.
  • Fixed a bug (#16149) where File Manager permissions would prevent someone from uploading files on the Publish page.
  • Fixed a bug (#16157) where Template Access preferences would show up as being unaccessible in the File manager.
  • Fixed a bug (#16183) where Wikis would show an error if all tracking was disabled. Thanks to Erik Reagan for the fix.
  • Fixed a bug (#16193) where uninstalling the Moblog would cause an error due to a misnamed variable.
  • Fixed a bug (#16202) where the backspace parameter in the category_archive tag was removing characters from the whole loop, not each iteration.
  • Fixed a bug (#16204) where setting permissions on the closed status would not be obeyed.
  • Fixed a bug (#16211) where file size was not being updated after any image manipulation.
  • Fixed a bug (#16179) where images were being upsized instead of restricting the width.
  • Fixed a bug (#16114) where if $config[‘debug’] was set to 0, it would not show up as an option in Output and Debugging Preferences.
  • Fixed a bug (#15158) where the search excerpt field could only be selected from searchable fields.
  • Fixed a bug (#15510) where creating a channel via the API could cause an error if there were no existing channels.
  • Fixed a bug where syncing a directory with files that have spaces in their names would break links to existing File fields and textarea fields.
  • Fixed a bug (#16264) where pending members were allowed to log in.
  • Fixed a bug where groups in an MSM site that didn’t have CP access to the main site couldn’t login to the CP of any other sites.
  • Fixed a bug (#16200) where forum search was returning inconsistent and incorrect results.
  • Fixed a bug (#16322) where the Upload File button wasn’t working in the File Manager.
  • Fixed a bug (#16380) where the arrow from an accordion was overlapping the text in the accordion header.
  • Fixed a bug (#15525) where the date picker on a SafeCracker date field would always use US date formatting even when European date formatting was chosen.
  • Fixed a bug where the channel names in the Agile Records themes were incorrect for both the comments and comment_preview templates within the news template group.
  • Fixed a bug (#16414) where the RSS feed for a forum would only output the first forum’s posts.
  • Fixed a bug (#16406) where publish layouts were breaking if you disabled comments after creating a layout. Thanks to John D. Wells for supplying the fix.
  • Fixed a bug (#16363) where items on the calendar were being placed on the wrong day.
  • Fixed a bug (#16388) where the file manager modal required scrolling up to view in IE7 (updated the jQuery UI theme).
  • Fixed a bug (#16525) where password reset did not honor the password length requirements.
  • Fixed a bug (#16539) where auto generated passwords did not honor the secure password configuration setting.
  • Fixed a bug (#16116) where image files could be upsized if either, but not both, max height or max width was specified for the directory.
  • Fixed a bug (#16159) where you could not edit channel entries when the forum tab’s forum topic id had been specified a 0.
  • Fixed a bug (#16389) where a MySQL error occurred when displaying comments with dynamic set to off and pagination on.
  • Fixed a bug (#16349) where a PHP error could occur when changing comment status and the update_comment_additional hook was being used.
  • Fixed a bug (#16620) where multi-site login did not respect the return parameter.
  • Fixed a bug (#16611) where a PHP error could occur when recounting member statistics if private messages existed.
  • Fixed a bug where a PHP error could occur when sending private messages with attachments.
  • Fixed a bug (#16515) in the comments control panel where the second page of comments for a single entry was not limited to that entry.
  • Fixed a bug (#16420) where the reset_password was not properly cleared from the database once successfully changed in the forgotten password routine.
  • Fixed a bug (#16592) where the file selector button on the publish page did not work when no image button was defined in the users’ html buttons.
  • Fixed a bug (#16267) where the publish page spellcheck iframe did not display properly due to the failure to load a stylesheet.
  • Fixed a bug (#16650) where the Moblog did not include files with upper case extensions.
  • Fixed a bug (#16107) where user notepad content did not properly display.
  • Fixed a bug (#16115) where the “Upload File” button on the File Manager home page was unable to be translated.
  • Fixed a bug (#16144) where an incorrect error message appeared on unsuccessful authentication on the front end.
  • Fixed a bug (#16102) where the file manager category filtering did not function properly.
  • Fixed a bug (#16163) where the Comment Module Control Panel page was unable to limit to specific entry ids.
  • Fixed a bug (#16143) where a PHP error occurred on the Edit Member Group page when MSM was active.
  • Fixed a bug (#16180) where the CP Menu Help Links in the File Manager pointed to incorrect URLs.
  • Fixed a bug (#15909) where usernames did not have leading or trailing whitespace trimmed.
  • Fixed a bug (#16112) where a MySQL error could occur when creating a channel field and not including the ordering field.
  • Fixed a bug (#16228) where a PHP error occurred in the member importer.
• Developers:
  • Deprecated Channel_model::get_channel_categories().
  • Deprecated Localize::set_gmt().
  • Modified routing behavior to no longer require query strings to be enabled on the frontend. Please make sure you do not use $_GET variables on the frontend (exceptions: ACT, URL, css).
  • Fixed a bug (#16350) where the update_comment_additional hook in change_comment_status() was being passed an object instead of the documented array.
  • Fixed a bug (#16366) where the can_access_module() method in the member model did not automatically return TRUE for superadmins.
  • Fixed a bug (#16383) where the get_channel_categories method in the channel_model was not working properly due to an invalid where clause.
  • Fixed a bug in Auth::verify() where it was checking for CP access permissions on front end requests.

Version 2.2.2¶

Release Date: August 1, 2011

ExpressionEngine version 2.2.2 is a maintenance update recommended only for membership based sites who require administrator approval for new member accounts. Version 2.2.2 fixes a critical bug on these sites where Pending members could log in and have similar permissions to members in the default Member group.

• Removed accordions from Member Groups, Member Preferences and Channel Preferences.
• Temporarily disabled the Profiler in the installer / updater while investigating an issue in certain environments where the Profiler may throw an exception and halt the installer.
• Fixed a bug (#16143) where a PHP error occurred on the Edit Member Group page when MSM was active.
• Fixed a bug (#16144) where an incorrect error message appeared on unsuccessful authentication on the front end.
• Fixed a bug (#16264) where Pending members were allowed to log in.
• Fixed a bug where groups in an MSM site that didn’t have CP access to the main site couldn’t login to the CP of any other sites.
• Fixed a bug where syncing a directory with files that have spaces in their names would break links to existing File fields and textarea fields.

Version 2.2.1¶

Release Date: June 30, 2011

• Turned off Template Debugging by default in new installations.
• Added short name auto creation behavior to channel and custom field pages.
• Moved the build date next to version number in the footer.
• Fixed a bug where new members were not logged in automatically if confirmation was disabled.
• Removed Survey from the updater, fixing a PHP bug (#15770).
• Fixed a bug (#16062) where frontend member registrations did not assign a group id to the new member.
• Fixed a bug (#16068) where the channel dropdown was truncated if it did not fit the viewport.
• Fixed a bug (#16095) where trying to change your email settings resulted in an invalid password error.
• Fixed a bug (#16066) where super admins could not be demoted by another super admin.
• Fixed a bug (#15534) where navigating the template manager with ctrl + arrow keys resulted in javascript errors.
• Fixed a bug (#16047) where {elapsed_time} and {memory_usage} were being removed with debug set to 0.
• Fixed a bug (#16094) where the query result table did not scroll horizontally.
• Fixed an incomplete bug (#15369) where the autosave interval config was not cast to an integer when set to 0.
• Fixed a bug (#15986) where watermarks still had a dropshadow with ‘Enable Dropshadow’ set to ‘no’.
• Fixed a bug where the ‘Dropshadow Distance’ setting in Watermark Preferences didn’t stick.
• Fixed a bug (#16086) where the password lockout persisted past the specified lockout time.
• Fixed a bug (#16076) where the file uploader did not properly resize when the max height or width was exceeded.
• Fixed a bug (#16043) where a database error would occur in the lost password form.
• Fixed a bug (#15991) where a PHP error would occur when deleting a file watermark preference.
• Fixed a bug where a PHP error would occur in the email module.
• Fixed a bug (#16044) where a MySQL error would occur when creating an Integer Field when MySQL is running in Strict Mode.
• Fixed a bug (#16057) where changing passwords in the member profile themes would fail for non-superadmin users.
• Fixed a bug (#16040) where the file manager modal was limited to the first 100 files in a directory.
• Fixed a bug (#16056) where lang keys were not being used for the file browser.
• Fixed a bug (#16074) where global variables would be parsed in an order that you couldn’t use them inside path variables.
• Fixed a bug (#16046) where new upload directories would not have their path and URL pre-populated.
• Fixed a bug (#16098) where field shortnames could be duplicated within the same field group when editing.

Version 2.2.0¶

Release Date: June 22, 2011

• General Changes:
  • Added a File Module to display file information on the frontend.
  • Added ability to edit file metadata from the File Manager.
  • Added several file types to the mimetype listing. Please update system/expressionengine/config/mimes.php.
  • Altered Sessions handling and removed the uniqueid and userhash cookies.
  • Removed the Debug: 0 option from Output and Debugging Preferences.
  • Turned on Show SQL Queries and Template Debugging by default in a new installation.
  • Altered Control Panel sidebar to be hidden on new installations by default.
  • Added memory usage to each template log item so cumulative effect of memory used can be seen.
  • Numerous optimizations in control panel and front-end queries.
  • Altered CSS templates to send one week expires headers when the “Send HTTP Headers” option is set to yes.
  • Added additional checking to help prevent a fatal error in the event a third_party plugin is placed in the wrong directory.
  • Added configuration overrides (user_session_ttl and cp_session_ttl) to allow site developers the ability to change the default user and control panel session TTL.
  • File synchronization now ensures all added files conform to our filename standards (spaces replaced by underscores, disallowed characters removed).
  • Added the ability to limit a file field to a single directory.
  • Altered Design permissions so that members with permission to edit templates in a given template group may also add templates to that group without needing administrative privileges.
  • Updated the publish page fullscreen editor to remember cursor locations.
  • Updated the login routine to salt and rehash all passwords with a SHA-2 hash function if available.
  • Removed automatic pmachine.com to expressionengine.com ping url rewriting. Please make sure your ping servers do not include pmachine.com.
  • Added Config Overrides (user_session_ttl and cp_session_ttl) to allow site developers the ability to change the default user and control panel session TTL.
  • Changed CSS rendering for form fields to give more contrast, larger font size and an obvious focus style
  • Changed “View Rendered Template” to open in a new window
  • Removed corners.js from the CP header
• Developers:
  • Developers: Added getter and setter method for accessing the Sessions Class $cache property. Accessing the class property directly is deprecated and developers are encouraged to update as soon as possible.
  • Developers: Removed the explicit instantiation of the jQuery Table Sorter plugin on admin_content::field_edit(), as it could interfere with Fieldtype View files using tables.
  • Altered the saved entry revision data to store custom field data after custom field ‘save’ processing.
  • Added an auth library to simplify user authentication.
  • Modifying _ci_view_path has been worked around following developer concerns about upgrades. However, it is deprecated and quickly nearing end of support. Use set_package_path, please.
  • Deprecated functions::create_directory_map(), please use the CodeIgniter directory helper.
  • Removed previously deprecated member_model::update_layouts()
  • Removed previously deprecated layout::remove_module_layout()
  • Removed previously deprecated content_edit methods: change_comment_status, delete_comment_confirm, view_comments, view_comment.
  • Removed usage of the EXT constant in EE, as it has been deprecated in CodeIgniter.
  • Added ability to send a settings object to $.ee_filebrowser.add_trigger to restrict files based on file type and directory.
  • Increased PHP memory requirement to 32M from 16M.
• Bug fixes
  • Fixed a bug (#15841) where a PHP error would occur when attempting to create a Custom Member Field.
  • Fixed a bug (#15825) where documentation references to index.php were too ambiguous. ExpressionEngine now ships with an admin.php (masked access) file by default, and all documentation references that.
  • Fixed a bug (#15401) where some settings (such as the webmaster email) could be set to blank, impacting functionality. ExpressionEngine now performs form validation on several settings.
  • Fixed a bug (#15478) where the entry_id in the autosave JSON response could be incomplete or incorrect.
  • Fixed a bug #(15866) where the Channel API could not accept an integer value of 0.
  • Fixed a bug (#15557) where upgrading could fail if a custom active group was specified in database.php.
  • Fixed a bug (#15077) where a PHP error could occur when deleting the only Channel Field group.
  • Fixed a bug (#15896) where a PHP error could occur when deleting a Channel Field group containing certain Fieldtypes.
  • Fixed a bug where dragging fields could produce highlighting on the Publish page in WebKit-based browsers.
  • Fixed a documentation error (#15149) where options for creating extension setting fields were not well documented.
  • Fixed a bug where the control panel search behaved unpredictably with secure forms enabled.
  • Fixed a bug where using only session ids on the frontend could result in 404s in some environments.
  • Fixed a bug (#15718) where the close button had no effect on the publish page fullscreen editor.
  • Fixed a bug (#15256) where large numbers were displayed in scientific notation.
  • Fixed a bug (#15369) where setting the autosave interval to 0 caused it to continually fire instead of disabling it.
  • Fixed a bug (#15164) where errors on the publish page category editor were not displayed.
  • Fixed a bug (#15103) where some modules did not respect the IP and User Agent security setting.
  • Fixed a bug (#15756) where the Communicate re-send did not restore the sender correctly.
  • Fixed a bug (#15809) where the MSM menu did not display correctly.
  • Fixed a bug (#15810) where exported template group folders did not include the .group suffix.
  • Fixed a bug (#15212) where the login success notification did not hide automatically.
  • Fixed a bug (#15744) where editing categories on the publish page deselected all of them.
  • Fixed a bug (#15246) where certain characters would cause the control panel search to bail out.
  • Fixed a bug (#15696) where the category loop was always empty inside relationship tags.
  • Fixed a bug where saving banned members could overwrite MSM configuration settings.
  • Fixed a bug (#15304) where Admin -> Channel Administration settings showed for members without Channel Administration privileges.
  • Fixed a bug (#15347) where file fields did not display saved data when viewing a revision.
  • Fixed a bug (#15465) where the Simple Commerce module did not properly end subscriptions.
  • Fixed a bug (#15863) where entry dates did not display correctly when using a saved revision.
  • Fixed a bug (#15851) where submitting the ‘Convert delimited text to XML’ page in the member import generated a 404.
  • Fixed a bug (#15629) where members with permission to change the group that a member is assigned to were unable to activate members unless they also had permission to delete members.
  • Fixed a bug (#15563) where the advanced search form did not honor the ‘Search in’ field selection.
  • Fixed a bug (#15232) on the publish page where the default day shown in the date picker calendar was improperly localized.
  • Fixed a bug (#15790) where the Filemanager library could incorrectly calculate available memory.
  • Fixed a bug (#15455) in the Wiki module where categories with the same name but in different branches could be created with an incorrect parent.
  • Fixed a bug (#15549) where the Search module was not searching in comments.
  • Fixed a bug (#15674, #15782) where package paths could be incorrectly set for Extensions.
  • Fixed a bug (#15318) where the autolinker may attempt to create a URL into a link when inside an html anchor tag.
  • Fixed a bug (#15840) where the get_plugins() method in the addons_model could throw an error under some circumstances.
  • Fixed bugs (#15773, #15832) where a Fatal PHP Error would occur in the SafeCracker File Addon.
  • Fixed a display bug on the Custom Field Groups page when no field groups exist.
  • Fixed a bug (#15562) where when entries are deleted, corresponding entries in the autosave and versioning tables are not removed.
  • Fixed a bug (#15871) where the view files in the SafeCracker File Extension did not load properly.
  • Fixed a bug (#15836) where the email contact form would not properly return to SSL encrypted urls.
  • Fixed a bug (#15337) where the corporate theme publish fields could not be resized.
  • Fixed a bug (#15574) where the next/prev month button were missing from the Safecracker Calendar.
  • Fixed a bug (#15811) where the comments control panel would fail to load due with large datasets.
  • Fixed a bug where custom themes would not properly load under certain circumstances.
  • Fixed a bug (#15924) where the “Can view comments in channel entries authored by others” member group option was ignored in the comments control panel.
  • Fixed a bug (#15009) where the SAEF CSS contained relative links
  • Fixed a bug where total channel entries reported in My Account were not accurate on a new install.
  • Fixed a bug (#15117) where the Save Revisions button was not showing up on the Publish page.
  • Fixed a bug (#15752) where the IS_EMPTY value would not work on newly added custom fields.
  • Fixed a bug (#15500) where database configuration values were not being escaped on install.
  • Fixed a bug (#15577) where SafeCracker wasn’t respecting status group assignments for member groups.
  • Fixed a bug where uploading a file to a textarea and then to a file field would result in a bad link in the file field pointing to the same file from the textrea.
  • Fixed a bug (#15529) where autosaved entries couldn’t be edited.
  • Fixed a bug (#15745) where images would be incorrectly outputted when the channel’s HTML formatting was set to ‘Allow only safe HTML’.
  • Fixed a bug (#15778) where SafeCracker forms would cause a Javascript error by attempting to load a view for the file chooser.
  • Fixed a bug (#15737) where SafeCracker forms would cause a Javascript error when there was no logged in user and no logged in user ID supplied.
  • Fixed a bug where user errors would not be sent using the selected charset.
  • Fixed a bug (#15758) where the Advanced Search form wouldn’t obey ‘search_in’ or ‘where’ values if they were in standard inputs.
  • Fixed a bug where the Advanced Search form wouldn’t obey the ‘category’ parameter.
  • Added error conditionals to SafeCracker’s form when using error_handling=”inline”.
  • Fixed a bug (#15764, #15507) where SafeCracker would not respect the channel parameter.
  • Fixed a bug where MSM sites with a domain in the form of .. (e.g. .us.com) couldn’t set cookies.
  • Fixed a bug (#15206) where the upload location dropdowns were inconsistent between the modal on the Publish page and the File Manager.
  • Fixed a bug (#15656) where SafeCracker file fields would output a period if they were empty.
  • Fixed a bug (#15936) where SafeCracker wouldn’t display captchas if the form submitted didn’t validated and error_handling was set to inline.
  • Fixed a bug (#15496) where during the install of the Agile theme, the path to the /images/uploads strips out slashes altogether.
  • Updated styles on comment edit page.
• Developers
  • Added ability to send a settings object to $.ee_filebrowser.add_trigger to restrict files based on file type and directory.
  • Removed usage of the EXT constant in EE, as it has been deprecated in CodeIgniter.
  • Altered the saved entry revision data to store custom field data after custom field ‘save’ processing.
  • Added getter and setter method for accessing the Sessions Class $cache property. Accessing the class property directly is deprecated and developers are encouraged to update as soon as possible.
  • Removed the explicit instantiation of the jQuery Table Sorter plugin on admin_content::field_edit(), as it could interfere with Fieldtype View files using tables.
  • Added an auth library to simplify user authentication.
  • Added path variable handling to the Template Library’s parse_variables() method.
  • Modifying _ci_view_path has been worked around following developer concerns about upgrades. However, it is deprecated and quickly nearing end of support. Use set_package_path, please.
  • Deprecated functions::create_directory_map(), please use the CodeIgniter directory helper.
  • Removed previously deprecated member_model::update_layouts()
  • Removed previously deprecated layout::remove_module_layout()
  • Removed previously deprecated content_edit methods: change_comment_status, delete_comment_confirm, view_comments, view_comment.

Version 2.1.5¶

Release Date: May 12, 2011

Version 2.1.4¶

Release Date: February 1, 2011

Version 2.1.3¶

Release Date: December 20, 2010

Version 2.1.2¶

Release Date: December 15, 2010

Version 2.1.1¶

Release Date: October 18, 2010

Version 2.1.0¶

Release Date: July 12, 2010

Version 2.0.2 Public Beta¶

Release Date: April 15, 2010

Version 2.0.1 Public Beta¶

Release Date: January 21, 2010

Version 2.0.0 Public Beta¶

Release Date: December 2, 2009