Patch #3 Released for V2.3.0

Monday, June 16, 2014 Tags: patch, release, bugs

The third patch to address issues in v2.3.0 (stable, patch#1 and patch#2) has been released.  This patch can be applied to any site already running v2.3.0, v2.3.0patch1, or v2.3.0patch2.  The code is already fixed in the 'master' git repo and the patch file can be downloaded from sourceforge.net here.  This patch updates a few 3rd party libraries and fixes these issues:

In addition to the fixes found in 230patch1 and 230patch2, 230patch3 provides the following:

  • !!! Fixes loss of admin/super-admin status when password is changed
  • !!! Closes some holes in the install/upgrade logic for greater security
    • An 'upgrade' now requires a logged in super-admin to work, and completes upgrade with that user still logged on
    • An 'install' requires the '/install/not_configured' file exist
    • ...otherwise the system loads the home page making it impossible to inadvertently change settings
    • Admin user created during install now has same password strength requirements as other password changes
  • Standardizes module view configuration wording
  • Fixes warning on rich meta data call if image is missing
  • Fixes language of newui slingbar toggle button
  • Adds a delete all records for site forms; fixes csv export to use machine readable time; fixes several datetime formats missing year
  • Updates forms module show & showall views to display button/link to manage forms if no form assigned
  • Adds invalid highlight on form input controls as needed (bootstrap)
  • Updates eCommerce/addressbook to better handle non-us customers
    • Adds add/edit/delete countries & regions from Address/Geo Settings view
    • Updates paypalExpress billing calculator to not assume country is US
    • Changes is_valid_state validation to only check for state when country is US or non_us_state field is filled
    • Updates {control} plugin and country & region controls to mimic each other; updates countryregion control
    • Updates expGeo subsystem to better abide by 'active' property

NOTE: You MUST be logged in as a Super-Admin user in order to perform the upgrade!