Version 3.1.5, released January 31st, 2023 ========================================== - Display different password recovery message - Added "white-space:pre-wrap" to plain text display - Added length check for new user names - Implemented "Hard wrap" option - Added optional address sanitizer flags - Switched to c++ - Check for empty password in LDAP authentication - Fixed missing attribute in xhr request for dnd - Changed midas.psi.ch to elog.psi.ch - Don't show full path if file not found for security reasons - Disabled TLSv1 and TLSv1_1 - won't compile if USE_LDAP = 1 unless -llber is included - Fixed buildrpm to contain packager - Fixed USEXXX vs. USE_XXX - Removed version info on 404 error - Increased max attachment size to 1 GByte - Overwrite PID file if it exists - Do not exit if problem with PID file - Fixed bug in return buffer memory allocation which caused crash for large message (>200000 chars) - Use different TLS methods for OpenSSL 1.0 and 1.1 - Replaced deprecated TLSv1_2_method() by TLS_method() - Prevent attachment files from being overwritten - Fixed memory leak with ssl_con - Serve SVG files as attachments only to avoid XSS vulnerabilities - Check access to logbook before executing retrieve_url() - Removed keepalive from retrieve_url, added password check for uploading attachments - Implemented "Allow clone" configuration setting - Replaced non-portable strcasestr by stristr - Check for "Admin restrict edit time" also for multiple entries delete operation (via select) - Obey "Admin restrict edit time" also in delete operation - Apply "restrict edit time" also to multi-edits - Implemented "Admin restrict edit time" - Use ltime for XML export/import of date and datetime attributes - Added "Path" to list of forbidden attributes - Added options for KRB5, LDAP and PAM in CMake system - Fixed overlapping strlcpy(), seems to segfault under some MacOSX - Obey "Restrict edit time" also for submissions via elog tool - Re-arranged layout of subscribed logbooks to better fit the screen - Disable new user registration in case of PAM authentication. - Disable submit button after first click to avoid double submits - Toggle all logbook subscriptions does not touch "Active" checkbox. Thanks to SL. - Embed CSS in email - Replaced /tmp/elog-shell by unique temporary file to avoid problems if several elogd servers run on the same computer Version 3.1.4, released September 26th, 2018 ============================================ - Replaced sprintf by snprintf - Changed midas.psi.ch to elog.psi.ch - Fixed bug for redirect under two daisy-chained proxies - Removed while(in_asend) which caused some browsers to block - Implemented elogd.service for systemd daemon - Implemented "max email attachment size" - Limit max request size to 100 MB - Allow ampersand in user names - Added code to detect Unicode characters as HTML - add "Email CSS URL" : use public copy of CSS for emails - bugfix: replace hard-coded reference of "New" to loc("New") - add "Subscription columns" : format list of logbooks for subscriptions in columns - Added "interface" option - Fixed crash on negative Content-Length in header - Fixed "?npp=0" crash - Added confirmation dialog before deleting an attachment - Implemented "last default" to restrict quick filter display by default on the last n days - Made header parsing case insensitive - Switched to TLSv1_2 Version 3.1.3, released April 21st, 2017 ======================================== - Implemented rudimentary certificate check - Fixed crash with certain set of parameters and no password file is present - Added German UTF-8 file - Fixed missing CKEditor bug with "language = english" - Fixed crash when no username and email are supplied in the login page - Implemented “Restore” button - Implemented “List drafts” flag Version 3.1.2, released September 5th, 2016 =========================================== - Fixed two vulnerabilities - Added "sort by email" to config page - Updates some translations Version 3.1.1, released August 4th, 2015 ======================================== - Updated CKEditor to version 4.5.1 - Implemented "Date/Time format = ..." - Implemented "Use Email Subject Edit = ..." - Replaced "Back" by "Delete" button - Fixed many issues with Draft Messages - CSS file is now in *addition* to the default file elog.css - Added LDAP documentation - Added "Logout to URL = ..." option - Added description of Apacher server authentication Version 3.1.0, released April 1st, 2015 ======================================= - No fools' day joke! - Added Indonesian help files - Implemented "Show last default" option - Allow subsitutions like $short_name in "Title image" option - Implemented draft messages and auto save feature - Reworked Drag & Drop to work also for ELCode and plain encoding - Resize editor window with browser window Version 3.0.0, released December 23th, 2014 =========================================== - Replaced insecure SSLv23 with TLSv1 method - Switched from SVN to GIT versioning - Implemented service under Mac OSC via launchd - Added LDAP support for authentication - Don’t overwrite certificated, themes and init scrip during ‘make install’ - Create one logbook subdirectory pear year - Switched to CKEditor with Drag & Drop Upload (courtesy of Dario Milicic) Version 2.9.2, released April 27th 2012 ======================================= - Implemented "Preset on edit" - Increased stack size under Windows - Increased MAX_PARAM - Added escape char possibility to "\#" for substitutions - Abort program start if password file is write protected - Show error "File not found" on "Preset text" only if text is a file - Fixed problem with CSV import and first two lines disappearing - Added RSS description - Remove cookies when user is logged out - Delete always messages together with their replies - Strip html only for html encoded entries - Added nowrap to all date/time attributes - Apply reverse sorting to all attribute types - Added "login user" check (needed for global password files) Version 2.9.1, released February 20th 2012 ========================================== - Improved broken link handling - Fixed problem with record splitting introduced in FF 10 - Added Xcode project file - Added extra parameter to mxml_parse_buffer - Do a "rsort" on date attributes if "Reverse sort = 1" - Fixed date substitution - Check for locked attributes on chkform() - Fixed missing user login time - Removed old -a -r -w password options from documentation - Set 'ufnm' cookie with full name, needed for shift check list - Fixed crash reported in elog forum entry #67084 - Changed printchar() to putchar(), since the first is not available under native OSX - Check for inactive account during login - Added check for content-length to be non-negative - Print warning if "preset text" file cannot be found - Implemented SVG previews through ImageMagick - Show Kerberos error number - added rmoval of pid file - Switched off Kerberos support by default - Use logged in user's email address for From: in email notifications - Fixed bug with "." replacements in emails - Fixed mangeling of <> in email notification - Fixed missing error if user name exists already Version 2.9.0, released March 9th 2011 ====================================== - Fixed corrupted config file under Ubuntu - Automatically log in after self registration - Fixed XSS issue with mail0 - Fixed problem if an attribute contains "?" - Fixed bug with SSL connection shutdown - Added 'Toggle all' for MOptions - Moved 'Search text also in attributes' to the right - Added find by time from Andreas Luedeke - Implemented Kerberos authentication - Implemented "Propagate attributes = ..." - fixed bug with importing CSV containing a text body - fixed preview of import data - added confirmation for "Back" button - Added vcxproj files - Fixed bug with "B" attribute and quick filter - Made two logoobks with same subdir work (again) - Implemented mirroring through SSL - Fixed bug with moving attachments with thumbnails Version 2.8.1, released December 23th 2010 ========================================== - Fixed bug with regexec, thanks to Christian Richter - Fixed bug with $attachments in shell command - Fixed problem with hitting "submit" twice - Fixed submission_locked in