1 Version 1.0.4 (07 Jun 2006)
2 - Security fix: do not allow setting of "includedir" via URL when
3 register_globals is enabled in php.ini
4 - Updated Portugues translation
5 Version 1.0.3 (11 Apr 2006)
6 - Patch 1456375: Day view - "Description" not translated, improper
7 handling of HTML in description
8 - Fixed bug 1444923: system settings error on save when ovrd=1 is used
9 - Fixed bug 1420859: Problems with overriding conflict
10 - Fixed bug 1445535: tables-db2.sql NULL usage was incorrect
11 - Patch 1279537: Don't display confidential events in upcoming.php
12 - Fixed bug 1406428: Bug in endhour
13 - Fixed bug 1438181: DBI Interbase-Firebird connection call has
15 - Fixed bug 1279804: send_reminders.php fails in v1.0.1
16 - Fixed bug 1417585: vCal export of forever repeating events fails for Palm
17 - Fixed bug 1417529: Can't change public access layers
18 - Fixed bug 1397766: Tomorrow Report fails to This Week
19 - Fixed bug 1374014: Prefs page displays option to modify
20 Public Access calendar..
21 - Fixed bug 1382217 Glitch in handling of public access prefs
22 - Added support for DB2
23 - The following translations were updated:
24 Greek (new), Hungarian
25 Version 1.0.2 (06 Dec 2005)
26 - Fixed vuln in layers: published vulnerability in layers_toggle.php
28 - Security fixes: fixes for activity_log.php, export_handler.php,
29 edit_template.php, pref_handler.php and admin_handler.php
30 that deal with SQL Injection
31 - Fixed bug 1349621: Information disclosure vulnerabililty on failed login
32 - Fixed bug 1353363: publish.php logic error for public user?
33 - Fixed bug 1328589: typo in del_entry for read-only calendars.
34 - Added new time range options for reports: next 14/30/60/90/180/365 days
35 This allows reports to show events starting with current date
36 - Fixed bug: undefined variable warning in export_handler.php
37 - Fixed the following bug reports on SourceForge:
38 1296294: Javascript error when saving with empty description on IE
39 1265575: Bug in get_all_dates()
41 + Added Romanian, Turkish, Welsh to config.php in places where they were
43 - New Features / Enhancements / Changes:
44 - The following translations were updated:
46 Version 1.0.1 (19 Aug 2005)
47 - Fixed the following bug reports on SourceForge:
48 1221434: Improved iCal import support for BYMONTHDAY in ics
49 1261571: Overriding a conflict when name has double quotes
50 1233798: Catagory settings for Boss/Assistant not working
51 1245755: Unbalanced span tags
52 1211309: Notification message language incorrect
53 1204229: "Untimed event" default broken since bug 1202127 fix
54 1205680: upcoming.php was including unapproved. will now use
55 user preferences for displaying unapproved.
56 1212667: Install script - Database Type Problem
57 1218113: iCal ATTENDEE error if event is deleted
59 - Fixed bug: use of & in report.php and view_entry.php
60 + Fixed bug: include path problems for opening settings.php file
61 + Fixed security: exploit allows execution of code downloaded from
63 + URLs in month.php did not include '?'
64 + Category was lost wan clicking on prev/next month in month.php
65 + Fixed login looping related to register_long_arrays
66 - New Features / Enhancements / Changes:
67 + Applied patch 1171807: reminder sent late if cron run at exact
68 second of reminder (was accidentally not included in 1.0.0)
69 - The following translations were updated:
70 + Danish, French, German, Norwegian, Polish, Portuguese_BR
72 Version 1.0.0 (17 May 2005) aka "Buster"
73 - Fixed the following bug reports on SourceForge:
74 1202127: [ 1187734 ] Timezone offset problems still exist
75 1201821: Bypass user_sees_only_his_groups
76 1193835: Creator cannot "edit" a nonuser-event after Admin changes it.
77 1193579: Untimed shows up wrong in edit page
78 1189515: Possible to create blank usernames
79 1190687: users.php called as public
80 1190699: export.php available to public
81 1190704: public can access assistant_edit.php
82 1103215: Invalid work hours
83 1187734: Timezone offset problem
84 1120897: Conflict with exceptions
85 1181682: Report with no name entered -> phantom report!
86 1179423: private events displayed on reports
87 1183714: Translation error
88 1154432: vCal import from Mozilla fails to translate quoted-printable
89 1176164: iCalendar import fatally corrupts database
90 1181682: Reports with just spaces for a name cannot be edited
91 1179403: Availability selection fails when Time Format =24
92 1065461: timezone offset & all-day events
93 1107253: time zone offset
94 1140453: Time zone offset in email notifications
95 1148602: External Recipients with same name fails
96 1160167: 12AM Events cause display problems in edit_entry.php
97 1158769: Category lost when modifing event by Admin
98 1168686: Month display collides with minicals on Safari
99 1168682: RC3 Language Detection Broken for Safari.
100 1169403: Public Access not default selected if Particiapants not shown.
101 1169078: Bad function call in import_handler.php
102 1168092: Overlapping events display problem
103 1167281: View_l loses colour for "today"
104 1167790: class="selectedday" assignments in other than day.php
105 1162486: Path exposure issue with view_entry.php
108 + Fixed problem with ical import weekly BYDAY parsing in import_ical.php
109 + Fixed problem with missing $cat_id in week and day URLs in month.php
110 + Fixed problem with second edit of a single event in a repeating series
111 losing linkage with the original event.
112 + Fixed problem with views_edit.php, select groups not returning menbers
113 + Fixed problem with 12AM event not adding hour=0 to URL in week.php
114 + Fixed day.php rendering problem in Safar
115 + Applied bug fix 1151442: Overlapping events display error in week.php
117 - New Features / Enhancements / Changes:
118 + Split import/export back to two separate links & pages
119 + Moved contents of scheduling tab to details tab
120 + Updated install/index.php to improve security and display advanced php info
121 + Added new default webcal_config values to all sql table definition files
122 + Removed most instances of htmlentities as unneeded
123 + Admin no longer needs to approve Public events that they create
124 + Added option to set LDAP_OPT_PROTOCOL_VERSION in user-ldap.php
125 + Updated install web page to work better on Windows systems.
126 Added display of current PHP settings.
127 + When viewing a report, if allow_html_description is enabled but no HTML
128 is found in an event description, use nl2br to preserve plain text
131 - The following translations were updated:
132 + Danish, Finnish, German, French, Japanese, Norwegian, Polish
134 ---------------------------------------------------------------------------
136 Version 1.0RC3 (11 Mar 2005)
137 - Fixed the following bug reports on SourceForge:
138 1156729: Global-view with no valid user creates a non-translatable message
139 1152863: Japanese strings munged by reports.php and upcoming.php
140 1124461: Apostrophe in Text Aborts Translation
141 1154854: Nonuser cals not showing up in views
142 1154007: Highlight today in Year view
143 1088772: Nonuser calendar w/ Public as default participant
144 1145390: Merge arrays with array_merge vs + in view_t.php
145 1151442: Overlapping events display error in day.php
146 1146037: Availibility legend size not dynamic and not centered in IE.
147 1148603: Assistants can't view Bosses Unapproved Events.
148 1145342: Category selection not tranferred to edit_entry page.
149 1118121: get_admins in user-ldap has bad search
150 1123508: RC3 browser language detection always returns none.
151 1112787: missing charset in upcoming.php
153 + Fixed problem with upcoming.php header. xml:lang and lang were set to full
154 LANGUAGE value, not abbreviation.
155 + Fixed problem with upcoming.php with "You are not Authorized" error message
156 being sent without a header.
157 + Fixed problem with popups.php with long text strings going off screen.
158 Maximum width is now configurable.
159 + Fixed issue with Application Name containing ? characters in logon.php.
160 If Application Name = "Title" then translate, else use Admin defined
161 name and run through htmlspecialchars
162 + Fixed issues with display_small_month URLs. Extra & if no $user specified.
163 - Add meta tag for charset since MSIE requires it.
164 + Fixed broken advanced search that would not allowing searching other
165 users' calendars. Also added searching non-user calendars.
166 + Added javascript that enables visibility of the start/end time or
167 duration on the edit_entry page from availability.php
168 + Fixed printer friendly view problem. With refresh on, the refresh URL
169 reverted to the regular page
170 + Fixed date_selection_html function to include values for day control
171 + Purge events was not deleting from webcal_entry_ext_user table
172 + Fixed issues with ODBC returning 'invalid db_type'
173 + Fixed issue where month.php and mini-calendar today highlight
175 - New Features / Enhancements / Changes:
176 + Added 'Public Access' to Manage Calendar of: list, if Admin.
177 + Allow user-created views to be the default view set in user preferences.
178 After saving or deleting an event, the user will return to this page.
179 + Replaced popups.php code with new knoppix based code. This should eliminate
180 the problems with popups going off screen. Popups also follow the cursor now,
181 but can be disabled in the file.
182 + Replaced all instances of forms[0] in javascript with the real form
183 names. This will allow WebCalendar to co-exist with other forms on
185 + Added patch to allow TLS with LDAP
186 + Added patch 900968: Add outlook-style availability popup
187 + Added global views (available to all users)
188 + Added option to select all users for a view (rather than having
189 to select all users in the list). If users are added later, they
190 will be automatically included in the view.
191 + Converted comments for use with phpDocumentor
192 - The following translations were updated:
193 + Dutch, Japanese (utf8, euc-jp, shift-jis), Spanish, German
195 ---------------------------------------------------------------------------
197 Version 1.0RC2 (09 Feb 2005)
198 - Fixed the following bugs reports on SourceForge:
199 1116008: Got "invalid user" error when clicking on '+' icon
202 + Fixed a problem with the Repeat Tab on edit_entry page, if disabled,
203 the SAVE button was hidden as well.
204 - New Features / Enhancements / Changes:
205 + Modified the way settings.php file is read to handle unix/dos/mac
206 format and also check main directory and include directory.
207 + In day and week view, time slots with events will now use a different
208 background color than time slots that are empty. (This restores
209 how this worked a couple of versions ago.)
210 + Many code changes were made to prevent the "undefined variable"
211 warning that users may get if they have the PHP error_reporting
213 + Documentation updated to System Administrator Guide including
214 new instructions for setting up reminders on Windows.
215 - The following translations were updated:
218 ---------------------------------------------------------------------------
220 Version 1.0RC1 (04 Feb 2005)
221 - Fixed the following bugs reports on SourceForge:
222 824268: Emails notifications used wront timezone
223 931096: Restrict views and view edits to owner of that view
224 986774: Editing category as assistant was not working
225 1061746: layout issues with views (daily)
226 1066440: End Time increased by timezone offset
227 1085337: Categories combo-box in month.php in assistant mode
228 1088857: SQL bug affecting ODBC users when viewing event
229 1101823: Problem importing palm desktop datebook.dat file
230 1102167: custom header when non-admin user
231 1109141: Email notifications where using sender language
232 rather than recipient language
233 1109323: Error in LDAP function for getting list of admins
234 1087604: Vanishing Layers / cookies
235 1086357: repeating details display
236 1085846: SQL error in when listing users on some databases
237 1085971: repeat tab does not display details
238 1074403: Day View is not accounting for server offset
240 + Security fix: Fixed protential problem if a user attempts to login
241 with a username that has charaters that will affect the database.
242 + When using web-based authentication, two database connections
243 were being opened and only one was being closed.
244 + vCal import was completely broken
245 + Fixed problem using htmlarea where event description would not be saved
246 + View Event page would not display links to edit/delete under
248 + Fixes for WN web server
249 + Removed duplicate trailer from edit user page (when using a custom
251 - New Features / Enhancements:
252 + MS SQL Server is now suppported
253 + If php.ini setting for "file_uploads" is not enabled, then indicate
254 this on the import page
255 + Streamlined layers.php & made layers only be displayed when layers
257 + Updated Admin docs for content & xhtml/css validity
258 + Added new documentation in docs directory:
259 WebCalendar-Functions.html
260 WebCalendar-DeveloperGuide.html
261 WebCalendar-Styling.html
262 + Fixed various xhtml/css issues
263 + Updated reading of settings file to better handle when file
264 is not in exact format we are expecting.
265 + Added database sanity check
266 + Updated default color scheme (Will only apply to new installs)
267 + When html is allowed in event description, still replace newline with
268 html break in view page and event popup if the user did not use any html.
269 + Fixing users.php so it only shows a single user's info when the user
271 + Added ability to authenticate users with postnuke user info.
272 + Added support for automatic gradient background images for table cells
273 - The following translations were updated:
274 + Japanese (with support for 3 character sets)