This file shows the changes in recent releases of MODx. The most current release is usually the development release, and is only shown to give an idea of what's currently in the pipeline. MODx Evolution 1.0.3 ($Rev: 6653 $ - $Date: 2010-04-01 20:07:12 -0500 (Thu, 01 Apr 2010) $) =================================== -------------------------------------------- Security: -------------------------------------------- * [#MODX-1758] Fix issue described in JVN#46669729, XSS possibility with searchHighlight plugin * [#MODX-1793] TinyMCE link lists are not secured if manager session does not exist * [#ADDON-136] Prevent SQL injection on Weblogin -------------------------------------------- Bugfixes: -------------------------------------------- * [#MODX-1472] Bad path to MODxCarbon transparent GIF * [#MODX-1396] Add language string on module configuration screen * [#MODX-1424] Fix SQL errors when adding user/resource groups with apostrophes in them * [#MODX-1589] Remove duplicated pagetitle sort option for tree * [#MODX-1608] Fix background image on TV sort list for templates * [#MODX-1298] Links exchanged in demo site for Developers and Administration guides * [#MODX-1079] "Edit resource" title changes on changing the template * [#MODX-1630] Correct modx version reference in System Information screen * [#MODX-1537] Weblink internal doc ID selection icon doesn't change * [#MODX-1408] getVersionData out of sync with version.inc.php * [#MODX-1431] Correct typo in install footer * [#MODX-1449] Typo in demo site text * [#MODX-1580] PHP typo in mutate_content.dynamic.php * [#MODX-1506] QuickManager+ javascript errors when editing a resource * [#MODX-1106] Change help icons on TV create/edit screen * [#MODX-1103] Element Selector, part of the letters hides in search box * [#MODX-1566] Fix problem with Forgot Password confirmation link in WebLogin * [#MODX-1659] Stay option for adding another manager/web user not working correctly * [#MODX-1164] Unable to set cssStyle when using getHTMLGrid * [#MODX-1176] Correct the permissions check when duplicating chunks and plugins * [#MODX-1753] Fix help page layout in manager * [#MODX-1279] OnUserFormPrerender & OnUserFormRender events weren't receiving the ID of the user * [#MODX-1492] Default .htaccess file will prevent some pages being found when using friendly alias * [#MODX-1587] For Web or Manager Users, date of birth cannot be set before year 2000 on dropdown list * [#MODX-1747] Date TV input: Date Picker Container gets hidden behind other input fields * [#MODX-1110] After deleting a template, the assignments "template to tmplvar" are still existing * [#MODX-1314] Spanish utf-8 translation problem - install language file had been put in place of manager language file * [#MODX-1505] Get 'Missing image' boxes in manager tree * [#MODX-1694] Extra backslashes in ForgotManagerPassword.tpl::sendEmail * [#MODX-1096] Additional fix, only show MODx tables on backup screen * [#MODX-1271] Remove unused chunk from sample site * [#MODX-1410] Update MooTools to 1.1.2 * [#MODX-1429] sysAlert js function not working * [#MODX-1168] Double tooltips in IE7 * [#MODX-1175] User with no create new permissions can duplicate a document * [#MODX-1206] Identifying the site root in the manager control panel * [#MODX-1141] Mootools Error if logged in with SSL encryption (https) * [#MODX-1114] Duplicate name on update template * [#MODX-1225] PHP error after install * [#MODX-1609] User upload file types unable to be unticked * [#MODX-1427] Unexpected character in input error after upgrading * [#MODX-863] Throws an error while running under PHP 5.3.0 * [#MODX-1775] Remove blank line stripping from cache processor, can cause unwanted changes to chunks * [#MODX-1460] ManagerManager mm_renameSection for 'tvs' renames the 'content' section instead * [#MODX-1462] Date Picker is not displaying the current date 'green box' or correct month when re-editing a date * [#MODX-1799] $modx->addEventListener() doesn't operate because of the syntax error -------------------------------------------- Additional Improvements & Updates: -------------------------------------------- * [#MODX-1107] Make font-size bigger on tree sort option dropdowns * [#MODX-1432] Updated Danish language file * [#MODX-1102] Minor layout fixes to import site, export site, and settings screen * [#MODX-1078] Stop scrollbar showing on welcome screen * [#MODX-1101] Minor styling fix for access permissions screens * [#MODX-1333] Add missing credit images to MODxCarbon theme * [#MODX-1159] Updated Norsk language file * [#MODX-1629] DataGrid control does not have a THEAD * [#MODX-1366] Hide "Manage META tags and Keywords" button if show_meta system setting is set to No * [#MODX-1464] Make welcome.static.php use style.php for large icons * [#MODX-1610] Installer doesn't install templates * [#MODX-1098] Add interim solution to the IE8 compatibility issues * [#MODX-1365] Non-admin managers to edit contentType and content_dispo for resources they create * [#MODX-1622] Remove support.inc.php as same can be achieved by customizing the manager HTML templates provided * [#MODX-1452] Show File path defaults in Site Config * [#MODX-1127] When creating roles, "View help pages" cannot be deselected * [#MODX-1757] File browser CSS tuning * [#MODX-1100] Delete unused template files * [#MODX-1320] Clean up baseline style.php file * [#MODX-1407] Prevent MODx 404-handling for missing images * [#MODX-1600] Add unique CSS ids to ease DOM manipulation of content editing Manager pages * [#MODX-1105] Minor Manager cleanups to remove deprecated elements * [#MODX-1761] Remove Templates from SQL install files * [#MODX-1767] Improve Evo installer to remove leading/trailing elements surrounding opening docblock * [#MODX-1760] ManagerManager updated to version 0.3.8 * Allow TV definitions to be installed via the MODx installer * [#MODX-1756] mcpuk internal file browser hard coding strings pattern * [#MODX-1795] Tuning context menu order * [#MODX-1800] Finnish language file for Evolution 1.0.3 * [#MODX-1803] Swedish language files * [#MODX-1808] Spanish language files * [#MODX-1804] and [#MODX-1805] Danish language file * [#MODX-1760] TinyMCE updated to version 3.3.2 * [#MODX-1760] QM+ updated to version 1.3.4.1 * [#MODX-1816] Russian language files * [#MODX-1817] German language files * [#MODX-1820] Japanese language files * [#MODX-1195] Paths reset button for filemanager and assets * [#MODX-1821] Use manager language for default language setting in Ditto MODx Evolution 1.0.2 (Nov 4, 2009) =================================== -------------------------------------------- Security: -------------------------------------------- * [#MODX-1391] Fix possible security exploits in WebChangePwd snippet -------------------------------------------- Bugfixes: -------------------------------------------- * [#MODX-1406] Error: Cannot redeclare getsvnrev() * [#MODX-991] Admin password form not appearing during install * [#ADDON-61] Doc Manager, Template Variables not updated * [#MODX-1157] Updating TV order on templates creates error * [#MODX-1039] "No active users found" in Welcome and System Info screens hardcoded * [#MODX-1321] [#MODX-1329] and [#MODX-1343] When non-admin users modify resource it loses 'type' and 'doc type' * [#MODX-1339] Wrong date format for datepicker inserted into DB as part of new install * [#MODX-994] Setting time in datepicker to a single digit gives incorrect formatted date * from-forums Fix problem where resources couldn't be deleted from the Resource Edit screen * [#ADDON-49] Forgot Manager Login bug in sql query which prevents user from completing the password reset * [#ADDON-52] Hardcoded charset in ForgotManagerPassword plugin * [#MODX-1092] DocManager - Adding Document Permissions does not properly set privateweb flag in modx_site_content * [#MODX-1386] After install, MODx didn't show configuration page * [#MODX-1338] Alias field accepts percent character * [#MODX-1215] Unixtime widget uses wrong pattern for MySQL date string * [#MODX-1364] Add check for tokenizer extension in cache_sync processor -------------------------------------------- Additional Improvements & Updates: -------------------------------------------- * [#MODX-1322] New french language file for eForm * [#MODX-1071] Auto select manager language during install * [#MODX-1097] Tweak htaccess rule template and improve wiki documentation of such * [#MODX-1104] Remove width and height attributes on weblink icon on Edit Resource screen * [#MODX-1152] Portuguese-br language file update * [#MODX-1323] French language file update * [#MODX-1336] Italian language file updates * [#MODX-1277] Move jquery.colorbox.min.js to QM plugin directory as it's solely intended for use with QM * [#MODX-948] Parser: Snippet calls no longer break with blank characters or when broken across multiple lines MODx Evolution 1.0.1 (rev 5946 - October 22, 2009) =================================== -------------------------------------------- Security: -------------------------------------------- * [#MODX-206] Reduce vulnerability to CSRF via referrer check update. Additional protections coming in the future via tokenizing requests in the Manager. * [#MODX-1216] Remove "execute snippet" from mutate_snippets and mutate_modules * [#MODX-1227] Add referrer check configuration warning to Manager * [#MODX-1218] Enable CSRF check by default for sites that set headers properly * [#MODX-1262] Security enhancement to ForgotManagerPassword plugin * [#AJAXSEARCH-46] Prevent content injection with JS disabled (AjaxSearch 1.8.4) -------------------------------------------- Bugfixes: -------------------------------------------- * [#MODX-353] Duplicate container cause problems * [#MODX-586] Cancel button on the move document page does not redirect you to the selected page * [#MODX-842] Missing Template Variable title in language files * [#MODX-1000] On editing a template variable the right "Cancel" button is positioned weird * [#MODX-1001] Navigation issues when pressing the cancel button * [#MODX-1017] Removed unused code in welcome.static.php * [#MODX-1024] Additional check for language files in Manager with graceful fallback to English * [#MODX-1025] No alerts on deleting the keywords * [#MODX-1065] Quoted_printable function in save_user.processor.php not available in some server configurations * [#MODX-1075] String not properly translated in French installer translation * [#MODX-1077] Login panel updates * [#MODX-1084] Download path issue in File Manager * [#MODX-1087] JS error when manager don't have rights for trashcan * [#MODX-1096] System info page shows all tables in DB * [#MODX-1099] Typo in the name of language variables in File manager * [#MODX-1129] Editing form layout broken in IE6 * [#MODX-1131] Remove "Show Preview Window" from Site Configuration page * [#MODX-1145] Begin deprecation of META Tags management in the Manager * [#MODX-1160] Missing label on search form for manager logs (Dupes: [#MODX-1041] [#MODX-1083]) * [#MODX-1184] After creating a manager user the head title show wrong text * [#MODX-1188] fix TransAlias installer template, plus other improvements to TransAlias by rfoster * [#MODX-1190] Installer fixes and enhancements * [#MODX-1095] Fixed Spanish Translation typos and missing labels and convert it to UTF-8 * [#MODX-1286] Ensure version is saved to DB when saving configuration settings * [#MODX-1289] Add 'Remove Periods' config param to TransAlias plugin and remove period substitution from the trans tables (and default MODx stripAlias() function) * [#MODX-1301] Ensure correct Resource Type option is selected when adding Resources and Weblinks * [#MODX-1309] Stop upgrades overwriting the element category -------------------------------------------- Additional Improvements & Updates: -------------------------------------------- * [#MODX-180] Convert weblink to document (and vice versa) (merge from 1.0 dev branch) * [#MODX-828] Need to be able to tell user access permissions by the Site Tree icon/text * [#MODX-929] Swap default click behavior for the Tree menu (edit vs view data) * [#MODX-988] Automate storage of version number in settings table during install/upgrade * [#MODX-1011] Make config language string punctuation consistent for field labels * [#MODX-1034] Missed update to version number * [#MODX-1038] Remove space after closing ?> tags * [#MODX-1069] Improve layout/simplify Module Manager page * [#MODX-1137] Change Manager term "alias" to "URL alias" * [#MODX-1138] New more flexible and manageable Installer that enables making custom installer packages for Evo much simpler * [#MODX-1149] Update language string Resource_X and Document_X keys to match actual changes * [#MODX-1211] Add configuration option to QM+ - allows user to choose top or bottom placement of toolbar overlay in browser window * [#MODX-1244] Add ManagerManager 0.3.5 * [#MODX-1245] Update QM+ to version 1.3.3 * [#MODX-1246] Update AjaxSearch to 1.8.4 * [#MODX-1276] Reduce site cache size by removing PHP comments * [#MODX-1282] Swedish language files for Evolution 1.0.1 * [#MODX-1284] Czech language file for Evo 1.0.1 * [#MODX-1287] New Danish language file for Evo 1.01 * [#MODX-1288] New Danish language file for Evo 1.01 install * [#MODX-1295] Demo Content categories need to be set * [#MDOX-1302] Create demo content defaults for ManagerManager * [#MDOX-1306] Clean up styling on Manager login page * [#MDOX-1307] Update styling on QM+ to improve usability MODx Evolution 1.0.0 (rev 5601 - July 30, 2009) =================================== -------------------------------------------- Bugfixes & Feature Requests: -------------------------------------------- * [#MODX-583] Alter email-related Manager settings by reloading from specific translations * [#MODX-1061] Link list fixed in TinyMCE * [#MODX-1060] Escape language string for the recycle bin to fix a problem with disappearing trees * [#MODX-1027] Fix broken images with Image TV Preview plugin when no image selected * [#MODX-1033] Implement consistent dates throughout the Manager and add a date format setting * [#MODX-1045] Replace JS Alert tooltips with Mootools hover tooltips * [#MODX-1049] Cancel action when editing a module goes to wrong location * [#MODX-1026] Canceling a template change in Manager lost the original template setting * [#MODX-1028] Manager did not properly handle failed login attempt counts or block users * [#MODX-999] Fixed width buttons break with some languages (setting pages) * [#MODX-1023] Date and Image TV changing doesn't work correctly in DocManager. * [#MODX-1013] Make DocManager use the new DatePicker * [MODX-1009] Fix grammar/spelling error in english language file. * [MODX-1008] Fix broken icons in Resource Overview->View Children * [#MODX-989] Fix issue with DatePicker time field styling * [#MODX-993] Fix broken URL rewriting when friendly alias paths are enabled * [#MODX-981] Replaced missing event icons. * [#MODX-968] Replaced folder icon in tree. (nodes.php) * [#MODX-974] Fixed missing save icon in files.dynamic.php * [#MODX-898] Allow passing script names and versions to regClient*, setting stage for more intelligent handling of script inclusion * [#MODX-863] Isolate deprecated magic_quotes-related code inside PHP version checks for less than 5.3 to avoid deprecated warnings in 5.3/errors in 6.0 * [#MODX-941] Add % character to transliteration plugin tables * [#MODX-971] Fix to TransAlias plugin to allow it to work with the Import HTML action. * [#MODX-591] Escape the database user and password in config.inc.php during install * [#MODX-952] Modified the warning message with MySQL 4.x * [#MODX-944] Installer with IE8 does not show final 'Install' button on last page * [#MODX-904] Add better email format checking when adding/updating users. * [#MODX-950] Scroll the File Manager to the editing textarea when clicking the edit button. * [#MODX-905] Fix SQL error in cache_sync processor * [#MODX-866] Allow manual editing of the datepicker fields * [#MODX-720] The website name on the Manager login page links back to the front end site * [#MODX-916] Better handling of text direction and encoding for Manager languages * [#MODx-882] Specify the default Manager language during installation * [#MODx-815] Users without edit or create module permissions can get to Modules editing screen * [#MODX-390] Infinite loop possible during install * [#MODX-909] Roles menu item showed even if Manager User did not have Roles permissions * [#MODX-851] Manager User and Webuser email messages were always in English despite the language setting * [#MODX-830] Friendly URLs can now contain UTF8 characters * [#MODX-897] Dynamic title for create/edit Resource action page depending on state * [#MODX-891] Manager language files contains hard-coded CSS spans * [#MODX-867] Add system events to Manager log Welcome page to make custom dashboard plugins possible * [#MODX-602] Remove the calltime-pass-by-ref errors on the Export Site HTML screen. * [#MODX-725] Retain checkbox TV values when changing template, also fix postback rendering of TV values (broken in a recent commit) * [#MODX-810] Ensure that the web user ID is passed correctly to the OnWUsrFormPrerender and OnWUsrFormRender events. * [#MODX-733] Apply fix for multi-byte characters being garbled in 'Site' > 'Search'. * [#MODX-719] Small fix to DocManager to prevent parse error when no doc groups are present and an update to doc groups is attempted. * [#MODX-741] Fix MCPUK browser navigation to work with folders that have spaces in them. * [#MODX-813] Fix the image editor's src link for the image tag. * [#MODX-822], [#MODX-465] Add basic file encoding for the file manager, not a complete solution but consensus that it's better than previous. * [#MODX-847] Replace QuickEdit with QuickManager+ (includes /assets/js/jQuery 1.3.2.min.js) * [#MODX-838] Ensure Datepicker correctly closes when select and textboxes lose focus without being changed. * [#MODX-806] fix duplicated option groups in template picker * [#MODX-581] Installer doesn't check /assets/media, /assets/flash and /assets/files directories * [#MODX-687], [#MODX-589] Fix the TV name fields so that new DatePicker works correctly * [#MODX-832] Implement new DatePicker in the MODx Manager. * [#MODX-655] Correct a sanity check that was preventing the allow_manager_access setting being saved. * [#MODX-806] Add option groups to template chooser in Manager * [#MODX-571] Fix TV date picker when special characters in TV name * [#MODX-588] Missing else in document parser that orphaned a small piece of code * [#MODX-608] Missing "$this->" in SystemEvent::stopPropagation() * [#MODX-592] Site Cache improvement for only storing doctypes that are different from text/html in cache files * [#MODX-681] Manager include path fix for occasional errors and working better with third-party libraries * [#MODX-449] Incorrect language setting for RTE used in front end instances at install * [#MODX-812] Added Hebrew Manager translation * [#MODX-209] Amended original patch: remove urlencode() call for viewable files (i.e. images) when generating the preview buttons in the file manager. * [#MODX-85] Removed transliteration code from core and turn into a plugin - Supports multiple languages - Template Variable can override transliteration table (file) per-document/section (supports @INHERIT) - Move stripAlias function into parser - Add OnStripAlias parser/system event * [#MODX-445] Fix case where deleted docs with the same alias as another document caused a 404 response. Remove deleted docs from site cache. * [#MODX-593] Add missing summary/introtext to Weblink manager page * [#MODX-220] Manager language updates for sorting and formatting consistency across languages * [#MODX-393] Show Protected Pages issue solved by Thomas Leiritz * [#MODX-516] and [#MODX-397] - fix to display of Access Permissions depending on Role permissions - fix to preserve parent after new document save permissions error * [#MODX-397] Fix logic: creating documents inside restricted containers - disallow users from creating restricted docs they can't access - disallow "Create Document Here" and "Create Weblink Here" under restricted parents * [#MODX-572] new Elements must be given unique names - applies only to elements created with "New..." buttons - templates, tvs, plugins, snippets, chunks, modules - Removed isNumber function, not needed since PHP < 4 * [#MODX-620] Add boolean support to Datagrid class * [#MODX-446] Committing Soushi's cache sync patch (re: optimizations to cache syncing when the site has a large number of documents) * [#MODX-686] Major updates to Dutch language file * [#MODX-582] Update and alphabetize default upload-able file types for new installs. (Also removes php files from list) * [#MODX-457] Updates to Swedish language file * [#MODX-363] Missing URL types for cleaning in save content processor * [#MODX-701] Polish updates * [#MODX-713] Brazillian Portuguese updates * [#MODX-580] Update Italian language files * [#MODX-515] Fix non-clickable view unpublished role label * [#MODX-724] Reference wiki page for fix for multi-server/cloud deployments and unexpected logoffs * [#MODX-734] Typo in language file it's->its * [#MODX-410] access permissions will be inherited from parent when user creates new child but and does not have role permission for access permissions * [#MODX-724] Create .htaccess template to set the session paths out of shared /tmp/ directories which can lead to loosing sessions from aggressive garbage collection. * [#MODx-394] Update Russian installation file per http://modxcms.com/forums/index.php/topic,34998.msg212346/topicseen.html#msg212346 * [#MODX-715] Fix .jp lang file for incorrect hard-coded link * [#MODX-541] Fix the include statement in getUserData() method * [#MODX-650] bad reference to csshover.htc (now csshover2.htc) -------------------------------------------- Additional Improvements & Updates: -------------------------------------------- * Fix get_func_args() error (evident on PHP 5.3) in Ditto/Reflect * Many updates to Manager and Installer language translations - Updating language to be in line with Revo. (Resources -> Elements, resource browser -> File Browser, Documents -> Resources) - Simplify language and remove overly-wordy phrases - New language strings where appropriate and needed - Replaced hard coded language strings in Import and Export action pages with new language strings - Better handling of Manager language encoding and text direction - Now handles RSS, Word, Excel, XML, HTML, CSS, JS, PDF and plain documents with custom icons in the Site Tree - Able to reload and choose language for key site settings like Signup emails, password reset emails, etc. * Remove legacy code no longer needed - Removed QuickEdit module (instructions only) - Removed News Publisher snippet (did not support TVs) - Prototype and Scriptaculous JS and SLLists.class.php from core distribution, no longer used - Update demo content to remove Prototype/Scriptaculous dependencies * Convert manager to use Mootools exclusively - Manager Login page - Convert the 'Sort TV by template' and 'Plugin Execution Ordering', also fix the button CSS styling on those pages - DocManager module (also to assist with future updates) - MODULE MUST BE UPDATED when upgrading from previous MODx versions * Upgrade Add-on: eForm 1.4.4.6 * Upgrade Add-on: AjaxSearch 1.8.3 * Updated Add-on: TinyMCE 3.2.4.1 * Fix the Template Variable "Lock variable for editing" checkbox * Removed erroneous parameter in isFrontend() method call * Exclude /assets and /manager by default from MODx rewrite and to comment out example.com -> www.example.com rule by default * Fix bug when login page language file was missing translation strings. Now falls back to main English file. * Added additional database diagnostic info to system info page (auto-generated paths) * Updated the MODx installer - New skin - Streamline process by removing two steps - Make Connection/Collation/Default Admin User only show when prior steps are completed first - Now set the default Manager language during new installs instead of relying on installation language * New MODx Carbon default theme for MODx Evolution 1.0 release - Removed deprecated themes for Evo 1.0 release - Added a CSS class (setting of $modx->config['manager_direction']) to Manager pages to automatically address RTL Manager language users - Remove Bottom Button Bar plugin due to new static button bar similar to Revo * Make upgrades between versions simpler - Moving Manager login/welcome/blocked templates into /assets/templates/manager - Moving Manager Help pages into /assets/templates/help * Manager RSS feed improvements - Updated RSS feeds to more manageable number of entries for welcome page. - Updated snoopy class to latest version 1.2.4 (used by magpierss). For earlier changelog entries, please see the /install/changelog.txt file included with the MODx 0.9.6.3 distribution: http://modxcms.com/download/#legacy