forked from meeting-room-booking-system/mrbs-code
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathNEWS
3201 lines (2700 loc) · 145 KB
/
NEWS
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
[============================]
[ Mrbs NEWS Legend: ]
[ ]
[ + Added feature ]
[ * Improved/changed feature ]
[ - Bug fixed (we hope) ]
[============================]
-------------------------------------------------------------------------------
Version 1.10.0 (Mon 29th November 2021):
[*] Updated minimum PHP version to 7.2.
[*] Fixed deprecated notices when running under PHP 8.1. Note that the return types for gc() and
read() cannot be specified because union types are not available until PHP 8.
[*] Fixed various PHP 8.x deprecation/compatibility issues.
[*] Updated german translation (Stachelritter).
[*] Avoided using strftime() if IntlDateFormatter is available as strftime() is deprecated in PHP 8.1.
[+] Added configuration variable $auth['saml']['disable_mrbs_session_init'] to allow MRBS session
initialisation to be disabled when using SAML. See SF Support Requests #2390.
[-] Fixed occasional problem with CSRF tokens.
[+] Added Docker container build configuration. (Tobias Polzin)
[+] New option $min_booking_admin_level, e.g. to allow all users to edit all bookings for some settings
(Tobias Polzin).
[*] edit_entry shows repetition and skipping only if necessary (Tobias Polzin).
[*] Improved clarity of German translation around use of periods/series.
[-] Fixed problem with display of type when the field is private. See SF Support Requests #2394.
[-] Fixed problem allowing a booking for multiple rooms to be made when it shouldn't be. See SF
Support Requests #2396.
[-] Better fix for preventing selection of multiple rooms. This fix does not destroy the Ajax policy
feedback. See SF Support Requests #2396.
[*] Added support from going back from the edit entry submission page.
[-] Fixed bug when no $booking_types is unset. See
https://github.com/meeting-room-booking-system/mrbs-code/issues/11.
[*] crypt_passwd.pl - Replaced an errant TAB with spaces.
[*] Removed all mentions of badpw.pl - it's too bad even for explanation purposes.
[*] Added configuration variables for setting hostname and HELO strings when sending email. See
SF Bugs #508.
[*] Updated Swedish translation. Thanks to Niclas Nilsson.
[-] Fixed bug causing English days of the week to be shown. See SF Support Requests #2374.
[*] Improved print layout.
[*] Improved fix if no booking types are set.
See https://github.com/meeting-room-booking-system/mrbs-code/issues/11#issuecomment-90
[*] Improved documentation on auth/session classes.
[-] Fixed bug saving an entry with custom fields when using PostgreSQL and an explicit $db_schema.
See SF Support Requests #2408.
[-] Fixed undefined index notice problem. See SF Support Requests #2406
[-] Fixed problem with LDAP admin groups being case sensitive when they shouldn't be. See SF
Support Requests #2406.
[-] Fixed bug causing an incompatibility with LDAP config settings from earlier versions of MRBS.
See SF Support Requests #2419.
[-] Fixed bug causing the reset link URL to contain the scheme twice when $url_base is set. See
SF Support Requests #2421.
[*] Added display on the calendar view of how many people have registered for an event.
[-] Fixed problem with misleading "Are you sure you want to delete this entry?" message being shown
when deleting a series.
[-] Fixed uncaught exception error if someone tries to login under the 'db' scheme by email address
when their password hash is null.
[*] Expanded message on password reset to remind users to check their spam/junk folder for a
password reset email.
[*] Added support for date custom fields in the user table.
[-] Fixed occasional problem with "Session object destruction failed" warning when the session has
already been destroyed.
[*] Added server side checking of date field values.
[*] Added registrants' names to report output.
[+] Added option of showing registrants on the calendar page.
[-] Fixed bug causing the "Back to Rooms" button on the edit_room page to go to the wrong area.
[*] Made display names sort order consistent everywhere with $sort_users_by_last_name.
[+] Added new config setting $auth['show_registrant_names_in_public_calendar'] allowing the choice
of whether or not to show registrants' names if the calendar is open to the public.
[+] Added the ability to add custom JavaScript.
[-] Fixed problem when a conflict is reported with a booking that was made when there were more
periods defined.
[*] Improved consistency of button labelling.
[*] Updated update instructions to remove references to old upgrade files.
[*] Updated FAQ links to MRBS project, PHP, MySQL and PostgreSQL.
[+] Added the ability to import an iCalendar from a URL.
[+] Added option not to import past bookings.
[*] db_ext auth: Added caching of results in getUser() to improve performance as the query will
normally be of a remote database.
[*] Added sorting of users for the db_ext authentication type.
[*] Added sorting of users for the WordPress authentication type.
[+] Added an ignore_location option for importing events.
[+] Added an option for adding the location to the description when importing iCalendar files.
[*] Only retrieved those columns that we need in AuthDbExt->getUser() to avoid sending
unencrypted data over the internet unnecessarily.
[-] Fixed bug affecting import when using PostgreSQL.
[*] Made the default SUMMARY configurable when importing events.
[*] Upgraded to PHPMailer Version 6.5.3.
-------------------------------------------------------------------------------
Version 1.9.4 (Tue 20th July 2021):
[-] Fixed problem when incorrect credentials are supplied on database
upgrade.
[+] Added new config setting, $auth['users_can_register_others'],
allowing ordinary users to register others for events.
[+] Added the ability for users to cancel registrations made on their
behalf by someone else.
[*] Added a pointer cursor to password show/hide icons.
[*] MRBS now retries opening a MySQL connection if the attempt failed
because there were already too many connections.
[*] Upgraded to jQuery Release 3.6.0.
[*] Updated timezone definitions.
[-] Added HTML escaping. See SF Bugs #505.
[*] (DB schemas) Removed deprecated integer display width.
[-] Fixed bug when working in multisite mode.
[*] Upgraded to latest release of DataTables.
[-] Fixed bug causing the user's display name not to be exported when
the user is editable.
[*] Introduced a higher level of LDAP debugging that will additionally
output an entry's attribute names and values. See SF Support
Requests #2363.
[*] Improved handling of locales and locale setting. See SF Support
Requests #2372.
[*] Added language debugging capability controlled by a new config
variable $language_debug.
[-] (ical) Fixed bug. See SF Support Requests #2375.
[-] Fixed problem with $datalist_options not being recognised when the
column is an integer. See SF Support Requests #2379.
[*] Removed convert_db_to_utf8.php as it is (a) rarely necessary now and
(b) would need work to get it to work with the latest code. Updated
UPGRADE to include advice to run the script _BEFORE_ upgrading to
the latest version of MRBS.
[*] Added additional information about the change in config file
structure from MRBS 1.4.7 and earlier. See SF Support Requests
#2380.
-------------------------------------------------------------------------------
Version 1.9.3 (Sat 22nd May 2021):
[-] Fixed problem when an LDAP search returns an entry with a null
username. See SF Support Requests #2200.
[-] Fixed incorrect links in search results when using multisite.
[*] Improved resilience of code to Ajax results from usernames.php. See
SF Bugs #491.
[-] Fixed bug in getting column labels when using PostreSQL with a
schema.
[*] For reminder and more_info emails, put the user's address on the cc
line if it can't be put on the from line, in order that the
recipient can use it in replies.
[*] Changed email notifications so that if the email is a reminder or a
request for more information, an iCalendar attachment is not
included. Otherwise the recipient may not be able to reply to it.
[-] Fixed a bug preventing email being sent in some circumstances on
Apache servers when an open_basedir restriction is in effect. See SF
Bugs #489.
[*] Updated German translations. See SF Support Requests #2205.
[-] Fixed bug causing the version parameter not to be added to a
filename if there's already another parameter in the query string.
[*] Upgraded to latest version of DataTables
[-] Fixed "DevTools failed to load SourceMap" 404 error. See SF Bugs
#493.
[-] Fixed bug causing error when editing an entry immediately after
registering for an event. See SF Bugs #490.
[*] Fixed note about backwards compatibility. See SF Support Requests
#2219.
[*] Added "[DEBUG] " prefix to LDAP debug messages for consistency with
mail debug.
[*] Updated zh-cn translations. See SF Patches #106.
[-] Fixed bug preventing admins from making public bookings when
bookings are forced to be private.
[+] Added new config variable $auth['force_private_for_guests'] which
will display all bookings as private to unlogged in users. See SF
Support Requests #2213.
[+] Introduced a new config setting $auth['only_admin_can_book_before']
allowing site admins to set a 'go live' date for bookings.
[*] Made logging in by email address under the 'db' auth scheme accept
equivalent Gmail addresses, ie ignoring dots in the local part of
the address and accepting either 'gmail.com' or 'googlemail.com' for
the domain.
[*] Made the "Lost your password" feature in the 'db' auth scheme accept
equivalent Gmail addresses.
[-] Fixed invalid HTML
[-] Fixed bug when editing a room and $booking_types is not set. See SF
Support Requests #2264.
[*] Improved performance when making a booking and using LDAP
authentication
[*] Eliminated use of deprecated parameter signature for ldap_connect().
[-] Fixed bug when an LDAP entry doesn't have a name attribute
[-] [auth_ldap] Suppressed legitimate "no such object" LDAP errors
[-] [auth_ldap] Fixed bug occurring when $ldap_unbind_between_attempts is set
[-] Fixed bug causing admins not to be recognised in some circumstances
when using an array of LDAP hosts. At the same time improved
performance.
[-] Fixed potential bug when working with an array of LDAP hosts
[-] [auth_ldap] Fixed bug when using an LDAP library that doesn't suport
LDAP_OPT_DIAGNOSTIC_MESSAGE
[*] Improved usability by returning to admin.php with the correct area
set when trying to delete an area that still contains rooms.
[-] [German translation] Fixed spelling mistake. See SF Bugs #499.
[-] Fixed bug causing the $force_resolution config setting to be ignored
[*] Updated minimum PHP version. See SF Bugs #500.
[-] Fixed bug when importing bookings that are not private or
confidential
[-] Fixed bug preventing the default_type being set correctly when the
area is changed
[-] Fixed bug when trying to rename an area to a name that has already
been used
[-] Fixed bug causing times not to be converted to an integral number of
units
[-] Fixed misleading error message and changed name of config variable
to $periods_booking_opens
[+] Added a new config variable $periods_booking_day_starts to set the
time of day when bookings open when using periods
[-] Fixed bug when $force_resolution is set stopping periods working
properly (bug introduced in the recent commit to fix
$force_resolution)
[-] Fixed SF Bugs #502 (day number obscured by week number in month
view)
[-] Fixed bug when usernames are all numeric
[*] Provided a more helpful error message than a fatal error if somebody
accesses edit_entry.php with an invalid room id (usually because
they've been using a bookmark that is no longer valid).
[+] Added a new config variable, $default_name_display_name, to allow
the brief description to default to the user's display name.
[-] Fixed bug when advance booking policies cross a DST boundary. The
assumed correct behaviour is that a policy of, for example, "2 weeks
ahead" means 2 nominal weeks rather than 2*7*24*60*60 seconds.
[+] Added a new config setting, $measure_max_to_start_time, to allow max
book ahead times to be measured to the start rather than end time.
[The time interval is normally measured to the end time of the
booking. This is to prevent users cheating the system by booking a
very long slot with the start time just inside the limit and then
either not using the early part of the booking, or else editing it
down to what they actually need later. However this is not very
intuitive for users who might expect the measurement to be relative
to the start time.]
[-] Fixed bug resulting in email not being delivered: "550 Maximum line
length exceeded (see RFC 5322 2.1.1)".
[-] Replaced \n with \r\n for EOL in mail messages. See RFC 5322 2.1.
[*] Temporary fix for SQL errors of the type "Syntax error or access
violation: 1055 'mrbs.E.start_time' isn't in GROUP BY". See SF
Support Requests #2333.
[*] Added support for more data types for custom fields - see SF Support
Requests #2333
[*] Allowed $mrbs_company_more_info to contain HTML. See SF Support
Requests #2067.
[*] Fixed problem when users try to go directly to edit_users.php when
the authentication scheme is other than 'db'.
[*] Added the display name, if there is one, to the To address for a
password reset email
[*] Used the user's display name in the body of the password reset
email.
[-] Fixed broken links when in multisite mode
[*] Renamed room_admin_email and area_admin_email fields to make it less
confusing, as they don't have any admin powers
[*] Added a confirmation step for deleting a user. See SF Support
Requests #2341.
[-] Fixed bug preventing booking admins from getting a list of users in
the Created By drop-down on the edit_entry form.
[*] Prevented the database credentials being given away when there's an
error
[*] Prevented multiple uncaught exceptions when there's a database
connection error
[*] Added a check that the repeat end date has been set.
[+] Added a configuration option to limit the appearance of the Copy
button to bookings for which you have write permission.
[*] Added password visibility toggling
[*] Upgraded to PHPMailer Release 6.4.1
-------------------------------------------------------------------------------
Version 1.9.2 (Wed 14th October 2020):
[-] Fixed bug when upgrading to or installing MRBS 1.9.1 and using MySQL
5.6 or below. See SF Bugs #486.
[*] Prevented ordinary users from cancelling a registration for an event
after it has started.
[*] Added a new config variable, $enable_registration, to allow sites to
remove the ability to create events for which other people can
register. See SF Support Requests #2199.
-------------------------------------------------------------------------------
Version 1.9.1 (Sat 10th October 2020):
[+] Added the ability to request a password reset, as long as MRBS can determine the user's
email address.
[+] Added ability to configure a meeting to allow for a set number of users to "sign up"
for the meeting.
[-] Fixed bug recently introduced in LDAP authentication scheme, see SF Bugs #475.
[-] Fixed bug with error logging, see SF Support Requests #2312.
[*] Now respects the sort key when getting the default area.
[*] Updated German translation with thanks to Tobias Zeumer.
[*] Improvements to utility page checklang.php.
[*] Added version parameters to query strings for Javascript and CSS files to
avoid problems with over-eager caching.
[-] Fixed bug causing no entries to be found in a report when there's a
custom field which is an integer and it is left blank in the report
form. See SF Support Requests #2142.
[*] Upgraded to latest version of DataTables.
[-] Fixed SF Bugs #477 - CAS setup error.
[*] Added checks where necessary that the authentication type is the
same as the session scheme.
[-] Fixed SF Bugs #479 (cannot edit a booking when
$prevent_simultaneous_bookings = true;)
[-] Fixed bug when a limit is set on both the maximum number and also
the total length of bookings per day. See SF Bugs #480.
[+] Added a configuration option to display the mini-calendars above the
main calendar when the window narrrows. See SF Support Requests
#2156.
[+] Allowed admins to override the private_mandatory setting. See SF
Patches #102.
[-] Fixed bug causing the location not to be shown in print view. See SF
Feature Requests #426.
[-] Fixed SF Bugs #482 (hidden days not disabled in datepickers).
[-] Advanced the date to the first non-hidden day. See SF Bugs #482.
[*] Changed "Possible CSRF attack" message from E_USER_WARNING to
E_USER_NOTICE. See SF Support Requests #2174.
[+] Added the 'idcheck' authentication type. See SF Support Requests
#2173.
[+] Added Windows support for Cuban (es-CU) and Latin American (es-419)
Spanish.
[*] Updated French translations. Thanks to Philippe. See SF Patches
#105.
[*] Added support in Windows for more languages.
[-] Fixed bug causing problems if the old auth files are still present.
[-] Fixed problem with MRBS not accepting 'zh-TW' as a locale when using
the intl extension. See SF Support Requests #2178.
[+] Added the ability to configure a room to disallow certain booking types.
[-] Fixed a few issues with PostgreSQL upgrades/schema.
-------------------------------------------------------------------------------
Version 1.9.0 (Tue 16th August 2020):
[*] Authentication and session schemes refactored into classes.
[*] Updated Norwegian translation from Pål Viland Monstad.
[+] Added multi-site ability, to allow more than one sites to be run from the same
installation, just with different configuration files.
[-] Fixed bug causing problems in resizing booking.
[-] Fixed bug when resizing bookings after the table container has been
scrolled.
[*] Upgraded to Select2 version 4.0.13.
[+] Added a display name to the users table.
[-] Added Ajax loading of usernames. See SF Support Requests #2031
[-] Fixed problem with escaping of HTML. See SF Support Requests #2045.
[-] Fixed bug when the booking day goes past midnight. See SF Support
Requests #2045.
[-] Fixed CSS problem. See SF Bugs #460.
[-] Fixed bug causing the create_by value to be changed in some
circumstances. See Support Requests #2052.
[-] Fixed bug when editing an entry without being logged in first. See
SF Bugs #464.
[*] Moved mail sending into a MailQueue class. Normally the queue is
flushed on shutdown using a register_shutdown_function() callback.
However the class could easily be extended so that the mail queue is
held in the database and emptied by a cron job. This would enable
rate limits to be adhered to more accurately, as there would be just
one queue.
[+] Added a config option for types that can only be used by admins.
[*] Removed inclusion of language preferences in the datepicker
JavaScript code in order to avoid caching problems. The language
preferences are now obtained dynamically from a data atrtribute in
the body tag. See SF Support Requests #2073.
[*] Various improvements for display on mobile devices.
[*] Updated Spanish translation. Thanks to Jose Luis Martin Jimenez. See
SF Feature Requests #355.
[*] Upgraded to jQuery 3.5.1.
[+] Added per-area configuration for "times along top" and "default type".
[-] Implemented global limits on the total *length" of bookings per
day/week/month/year
[*] PHP 8 compatibility fixes.
[-] Fixed SF Bugs #463.
[-] Fixed problem with booking admins not being able to resize rooms.
See also SF Bugs #463.
[-] per-area settings for total length of bookings.
[-] Fixed SF Bugs #466 (it's possible to create a series which has
overlapping entries)
[-] Fixed problem with the brief description field not receiving focus.
See SF Bugs #468.
[-] Fixed bug causing high client CPU load in some circumstances when
$show_timeline is true. See SF Support Requests #2107.
[+] Added a config option $prevent_simultaneous_bookings to stop users
booking two different rooms at the same time. See SF Bugs #472.
[-] Fixed problem with an unnecessary CSRF error message being generated
if the user logs off after the session has expired due to
inactivity.
[-] Fixed problem caused by trailing spaces in the username in the
'http' session scheme.
[-] Fixed bug causing datepickers not to be shown in Safari and Firefox
on iPhone. See SF Bugs #473.
[*] Updates to authentication schemes to allow a user's real name to be
used instead of their username, if that information is available. includes
addition of this field in MRBS's buit-in DB authentication scheme.
-------------------------------------------------------------------------------
Version 1.8.0 (Tue 31st March 2020):
[*] Navigation in/layout of the calendar views has been improved.
[-] Fix for problem editing long custom fields described in [support-
requests:#1658]
[*] Changed so that error messages relating to DB sessions are only
output if the current DB schema version as recorded in the database
is >= 56, ie the upgrade when the sessions table was created. See SF
Support Requests #1658.
[*] Added a maxlength attribute to custom textareas.
[-] Updated to latest phpCAS client to fix problem with '"continue"
targeting switch is equivalent to "break". Did you mean to use
"continue 2"?' warning messages in PHP 7.3.0.
[*] Turned the create_by select into a Select2 control. See SF Support
Requests #1659.
[*] Removed some old unsafe/fragile authentication methods.
[*] Made the upgrade message look less like an error message. See SF
Support Requests #1661.
[*] Fixed bug when a field is disabled in the edit_entry form. See SF
Support Requests #1664.
[-] LDAP authentication: Added missing global declaration. Removed error control
operators. See SG Bugs #425. Fixed undefined index notice when $ldap_filter is not set
[-] Fixed bug causing checkbox custom fields not to be saved. See SF
Bugs #429.
[-] Fixed bug preventing resizing of bookings.
[-] Fixed bug preventing ordinary users from editing their own details.
[*] Fixed minimum version requirements. See SF Support Requests #1671.
[-] Reduced the VARCHAR size to avoid running into the limit on the size
of the index now that we have switched to utf8mb4. VARCHAR(127)
should be more than enough for this field. (Strictly speaking we
don't need really need utf8mb4, but it keeps tings simpler using it
throughout).
[-] Fixed problem with $skip_default config setting not being
recognised. See SF Bugs #434.
[-] Fixed bug in bulk deletion of entries from the report page.
[-] Fixed problem with $min_user_viewing_level. See SF Support Requests
#1690.
[*] Made the PHP session name a config setting. See SF Feature Requests
#379.
[+] Added the configuration option
$mail_settings['use_from_for_all_mail'] to allow the standard From
address to be used for all emails. See SF Support Requests #1714.
[+] Added a new config option $auth['wordpress']['blacklisted_roles'].
See SF Support Requests #1719.
[*] Added details of person booking/approving/rejecting etc to email
notifications. See SF Support Requests #1714.
[-] Fixed a problem with links in email notifications not being
calculated automatically when $url_base is empty.
[-] Fixed a problem with links in email notifications not being
calculated automatically when $url_base is empty.
[-] Fixed poroblem when $_SERVER['PHP_SELF'] is empty. See SF Bugs #437.
[-] Fixed problem with the create_by field being turned into a fancy
select box when it shouldn't be. See SF Support Requests #1732.
[-] Fixed bug preventing compressed files from being imported.
[-] Fixed possible undefined index error when exporting bookings as an
iCalendar
[-] Fixed a bug that occasionally (especially on slow connections)
caused the wrong data to be displayed in the calendar view after
switching days. The problem would arise if the user switched days in
between an Ajax refresh request being made and the response being
returned.
[*] Added DB schema version to Help information.
[*] Moved %mrbs_company out of lang files
[-] Fixed HTML5 validation errors in email notifications
[-] Prevented rooms being booked for which the user doesn't have write
access. See SF Support Requests #1744.
[*] Only displayed rooms that the user has write access for. See SF
Support Requests #1744.
[*] Aded 'autocomplete="new-password"' attribute to password fields on
the Add/Edit User form to stop browsers trying to autocomplete those
fields.
[-] Fixed some HTML5 validation errors.
[-] Fixed problem with the areamatch and roommatch fields not being
passed through with the form variables in the Edge browser. See SF
Support Requests #1763.
[+] Added capability of defining repeats every n months. See SF Feature
Requests #398
[*] Changed so that thge Edit and Delete buttons are only shown if the
user is allowed to use them. See SF Support Requests #1776.
[*] Added autocomplete attributes to the login form
[+] Added an option to show the slot end times in the day and week
views. It is controlled by the new config variable
$show_slot_endtime, which is set to false by default. See SF Support
Requests 1796.
[+] Added support for decimal/numeric custom fields in the entry table.
See SF Support Requests #1797.
[+] Added the capability of making rooms invisible to certain users.
[*] auth_crypt: Updated the 'crypt' auth method to use the safer 'password_verify()'
instead of 'crypt()'
[+] Added support for supplying a TLS cert/key pair for LDAP client
authentication - requires PHP 7.1.0 or later.
[-] Make SAML authentication redirects use an absolute URL to the MRBS page.
[-] LDAP auth: Fixed a problem that caused users not being able to login when an
$ldap_filter is specified and the user does not have read access to
the directory, even for their own entry.
[-] Fixed problem with MRBS not recognising numerals in the
HTTP_ACCEPT_LANGUAGE header, eg 'es-419'. See SF Support Requests
#1828.
[*] Corrected some Italian translations. See SF Support Requests #1824
[+] Added new policy allowing the prevention of changing approved
bookings. See SF Support Requests #1824.
[-] Fixed bug causing STATUS not to be exported properly when exporting
entries as iCalendar files. See SF Bugs #441.
[*] Disabled the edit and delete buttons if an entry can't be deleted,
showing the reason in a tootip. See SF Support Requests #1824.
[-] LDAP auth: Fixed bug when the attribute name isn't all lower case
[*] Made email CSS use the same styling as the rest of the site.
[-] Fixed bug resulting in undefined index errors when
$mail_settings['details'] is false and $mail_settings['icalendar']
is true. See SF Support Requests #1835.
[*] Suppressed by default the dumping of $_POST['username'] and
$_POST['password'] in the error log. If desired, they can be logged
by setting in the config file $auth['log_credentials'] = true;
[-] LDAP auth: Fixed problem with presenting all users in the created by field if
the LDAP server can't be contacted. Fixed bug when searching for multiple
entries and an LDAP server is not available.
[*] Added maxlength attributes to entry creation/modification forms.
[*] Added server side truncation of form variables on the room and area
forms to ensure they fit the database columns
[-] Fixed problem of multiple bookings in the same slot not being
displayed correctly. See SF Bugs #442. Thanks to dwpoon.
[-] DB auth: Fixed a bug causing the last_login field not to be updated when an
email address rather than username is used to login. See SF Support
Requests #1863.
[-] Fixed problem with $theme being overwritten by WordPress. See SF
Bugs #444. Thanks to Johan Hattne.
[-] Fixed a number of bugs in the export of entries as iCalendars. See
SF Support Requests #1865.
[*] Removed indexed cursors in DB abtraction, as they are not reliable
in the supported databases. See SF Bugs #445.
[-] Joomla auth: Fixed bug preventing logged in Joomla user being recognised. See SF
Support Requests #1870.
[+] Added a timeline view to the calendar.
[*] Added a logged_in class to aid styling. See SF Support Requests
#1884.
[*] Improved accessibility. See SF Support Requests #1884.
[*] Upgraded to jQuery 3.4.1
[*] Updated to flatpickr 4.6.3
[*] Upgraded to Select2 version 4.0.11
[*] Fixed potential notice error in PHP 7.4: "Trying to access array
offset on value of type bool". Fixed warning given by PHP 7.4: "Trying to
access array offset on value of type null".
[-] Fixed a number of edge cases in internationalisation code.
[*] Upgraded to the latest release of PHPMailer (6.1.3) and as a
consequence increased the minimum PHP version required for MRBS from
5.4.0 to 5.5.0.
[*] Upgraded to latest release of pear/Mail_Mime.
[*] Fixed problem with exception handling in PHP7.
[-] Added new views which allows the user to look at all rooms for a week
or month time span.
[*] Made the code more resilient by not requiring getimagesize() on the
company logo to be successful. See SF Support Requests #1932
[*] Made the code resilient to $default_language_tokens being set to ''.
See SF Support Requests #1932.
[+] Added Malay translaton. Thanks to aizuddin hadi. See SF Support
Requests 1940.
[+] Added a new config setting $default_view_all. See SF Support
Requests #1948
[-] Fixed bug preventing the db_ext auth scheme working when the
external usernames contain uppercase characters. See SF Support
Requests 1949.
[-] Fixed problem with users not being to login when the auth type is
'db_ext' and the collation of the external database is not utf8 and
the username contains non-ASCII characters, eg "Müller". See SF
Support Requests #1949.
[-] Fixed bug when $booking_types is not set. See SF Support Requests
#1962.
[*] Added an database index for greatly improved performance
[*] Clarified wording of upgrade procedure. See SF Support Requests
#1978.
[*] Upgraded to latest version of DataTables
[+] Added Copy, CSV, etc. buttons to the data table views.
[*] Added missing Italian translation. See SF Bugs #456.
[-] Fixed bug preventing the Type field being made into a mandatory
field. See SF Support Requests #1985.
[*] Updated the AUTHENTICATION document. See SF Support Requests #1995.
[-] Fixed bug in vocab for custom field names in email notifications.
See SF Patches #95.
-------------------------------------------------------------------------------
Version 1.7.2 (Wed Dec 19th 2018):
[*] Updated included time zone files.
[*] Fixed some Javascript warnings/deprecations. Updated jQuery UI.
[*] Improved session/auth selection.
[-] Fixed problem with text inputs and textarea widths not being the
same in some browsers, eg Firefox.
[*] Added trimming of input fields on the Edit User form to remove
accidental whitespace.
[-] Fixed bug with Prev and Next links in Search results, resulting in a
session expiry because no CSRF token was being passed. Only happens
when JavaScript is disabled.
[-] Fixed problem with Search ignoring Search From date.
[*] Added a date to the search results so that it's clear when the
search started.
[-] Fixed bug in finding best language file.
[-] Fixed bug when resizing a booking on a day that's not today.
[*] Relaxed CSRF token checking, so that the token isn't checked for GET
requests to read-only pages such as Search and Report.
[*] Changed MySQL schema/connection to use "utf8mb4" character set, in
order to support full Unicode. This adds a requirement on MySQL
5.3.3 or later.
[-] Fixed bug causing edit_entry_handler to go to today when finished
rather than the day of the start of the booking.
[+] Added CAS session/authentication scheme.
[+] Maded 'php' session scheme store sessions in the MRBS database,
rather than relying on the system having a working session storage
configuration.
[*] Moved config.inc.php to config.inc.php-sample. This means that new
releases of MRBS won't conflict with/overwrite users' own config.inc.php
files.
[-] Fixed a bug when using Joomla authentication.
[-] Made settings for $edit_entry_field_order consistent.
This fixes a bug (see SF Support Requests #1562).
[-] Fixed bug with confirmation status, introduced during recent
changes. See SF Support Requests #1562.
[*] Updated Mail_Mime package to version 1.10.2 to avoid the use of the
deprecated each() function.
[*] Updated PEAR to 1.10.5.
[*] Updated Net_SMTP to 1.8.0.
[*] Updated Net_Socket to 1.2.2.
[-] Fixed bug causing language file not to be used when in CLI mode. See
SF Support Requests 1583.
[*] Increased the length of the id column in the sessions table from 32
to 255. See SF Feature Requests #158.
[*] Updated stated minimum PHP version number to 5.4.0.
[-] Fixed bug when multiday bookings are not allowed. See SF Bugs #416.
[-] Fixed problems to do with caching of the user level in JavaScript
code. See SF Bugs #415.
[-] Fixed bug when db_ext password_format is not defined.
[-] Fixed bug when using db_ext and
$auth['db_ext']['column_name_level']. See SF Bugs #417
[-] Fixed problems with (a) the URL growing longer and longer when
logging in and logging out and logging in again etc. and (b) the
Back button on the edit_entry page not working after a login.
[-] Fixed problem with checkboxes on forms not being filled properly.
See SF Bugs #418.
[-] Fixed problem with disabled required fields on the edit_users form.
See SF Bugs #419.
[-] Fixed a bug (SF Bugs #420) causing an "invalid id" message if you
try an edit an entry without first having logged in.
[-] Fixed a bug that was causing the username_suffix to be stripped out
of a username wherever it occurred, rather than just at the end.
[-] Fixed bug causing series not to be approved. Might be related to SF
Support Requests #1623
[*] Disabled the default duration field on the area form if "All day" is
checked.
[*] Clarified upgrade instructions. See SF Support Requests #1622.
[-] Fixed bug causing "Empty or invalid search string". See SF Bugs
#421.
[-] Fixed bug in date_default_timezone_set() that was causing it to set
the current area timnezone rather than the config timezone if no
timezone was specified.
[-] Fixed bug that allowed areas with no enabled rooms to appear in the
area select.
[*] Switched to using the REQUEST_URI instead of PHP_SELF in order to
get the cookie path. See SF Support Requests #1634.
[-] Fixed bug that prevented users with emojis in their usernames from
logging in when using MySQL.
[+] Added 'last login' functionality to 'db' auth scheme.
[*] Added a note about how to include files from the config file. See SF
Support Requests #1649.
[*] Set the session.gc_maxlifetime to the same time as
$auth['session_php']['session_expire_time'] so that users aren't
logged out by the garbage collector before the session cookie is due
to expire.
[*] Upgraded PHPMailer to Version 5.2.27.
-------------------------------------------------------------------------------
Version 1.7.1 (Sun Feb 11th 2018):
[*] Updated PHPMailer to use latest code (5.2.5+) from the 5.2-stable
branch. Note that MRBS cannot yet use PHPMailer Version 6.0+ because