2011/10/26 v3.6.10 build 12151

For additional release info check the forum post here
- Added visible option functionality in custom user profile fields
- Added ability to import users with subtypes via csv imports.
- Added "security module"
- Replaced decimal point and thousand separator with locale equivalents
- Security update: Fixed editor's "save template" not checking validity of inputted parameter (Reported by EgiX)
- Security update: Fixed unsafe file upload using capitalized extensions (Reported by EgiX)
- Security update: Fixed potential XSS attacks using unsafe GET parameters (Reported by Canberk Bolat of Mavituna Security and High-Tech Bridge SA Security Research Lab)
- Security update: Fixed possible sql injection attacks in multiple files (Reported by EgiX, Vulnerability Research Laboratory and High-Tech Bridge SA Security Research Lab)
- Security update: Fixed potential privilege escalation using cookies (Reported by EgiX)
- Security update: Fixed cookie information leaking using XSS (Reported by Semyon Perepelitsa)
- Security update: Fixed arbitrary file download issue (Reported by EgiX)
- Fixed "branchinfo" and "groupinfo" fields not appearing in user profile fields (Enterprise/Educational editions)
- Fixed issue about content tree management order
- Fixed issue about assigning users to branches page when filter was used (#1819)
- Fixed clearDuplicates for questions when copying questions from another lesson (#1812)
- Fixed drag and drop questions about background color issue with Chrome (#1831)
- Fixed improper handling of file black list during file upload
- Fixed tracking initialization about feedbacks
- Fixed feedback preview
- Fixed lesson timelines not listing events
- Fixed issue in forum page about pagination and subforums
- Fixed getSystemLogo function and an issue with site logo loading
- Fixed issue in reports generator about enrolling to lesson/course/group
- Fixed rounding error when submitting paypal price and using coupon

2011/10/10 v3.6.10 build 11944

For additional release info check the forum post here
-Added a "remember me" checkbox in login form (toggled from admin settings)
-Added a page that allows for applying the same settings across all lesson units
-Added an option to send notifications as personal messages
-Added forums and topics pagination
-Added limits for space usage in messages
-Added sorting terms in each tab in glossary page
-Added help links to modules towards the wiki page
-Added option to constrain XML API usage to a specific IP
-Added a minimal_view parameter for displaying less columns for messages in dashboard
-Added a trim in exploded fields from csv file
-Added urlencode when loading avatar
-Added index page parameter to filter courses/lessons (index.php?filter=maya)
-Added header for date in Mail::factory because of http://pear.php.net/manual/en/package.m ... l.send.php
-Added encodeURIComponent in filters http://www.sencha.com/forum/archive/ind ... 96295.html
-Added option to deactivate block moving in control panel for specific user types (#809)
-Added ability to import list of users to be archived
-Added "my courses" tools icon to user dashboard
-Added optional active time tracking (Educational/Enterprise editions)
-Added toggle checkbox for LDAP users in user's profile page (Educational/Enterprise editions)
-Added CEUs parameter in courses (Enterprise/Educational edition)
-Added time-based lesson completion rules (Enterprise/Educational edition)
-Added time-based unit completion option (Enterprise/Educational edition)
-Added html_entity_decode when url is encrypted because of #1429 [amp;view_unit]... (Enterprise/Educational edition)
-Added supervisor balance transferring to employees (Enterprise edition)
-Added self-enrollment option to groups (Enterprise edition)
-Added skill-gap test results page to students as well (Enterprise edition)
-Added ability for branch calendar events to appear to members of the branch's children as well (Enterprise edition)
-Added option for displaying sub-branch information in branch statistics (Enterprise edition)
-Added balance payments through paypal (Community++ and above)
-Added a "payments" tab on users' profile page (Community++ and above editions)
-Added ability to create mandatory fields without a default value in extended user profile (Community++ and above editions)
-Updated SCORM import to handle backslashes in imsmanifest hrefs
-Updated file access security
-Updated random generator for password reminders
-Updated top level units to be marked as complete if all sub units are marked as complete
-Updated uploaded projects from students so that they are placed to an internal folder named inside projects folder and do not rename them
-Updated organization chart to be cached when large (Enterprise edition)
-Updated import/export so that job assignments can optionally be replaced (Enterprise edition)
-Removed old chat functionality
-Removed the option to "deactivate online users on lessons" from the lesson administration page
-Removed icon links for reports for community version
-Fixed SQL injection security vulnerability reported by IHTeam, http://www.ihteam.net/
-Fixed SQL injection security vulnerability reported by Vulnerability Research Laboratory, http://www.vulnerability-lab.com
-Fixed security issue: student/professor accounts won't use the default insecure credentials anymore, but rather the administrator's ones. Reported by IHTeam, http://www.ihteam.net/
-Fixed "date" custom fields so that are converted to human-readable format while exporting/importing from csv
-Fixed loading prototype in external survey to avoid js error
-Fixed inproper handling of imported users without a user_type defined
-Fixed setting file encodings to UTF-IMAP even when UTF-8 is selected
-Fixed issue about inserting & in question feedback
-Fixed issue about loading default lesson layout when moving blocks is disabled
-Fixed issue about importing lesson by admin uncompressing files in temp folder (#1492)
-Fixed preserving lesson properties when importing directly
-Fixed issue about upload more than one files in tests that contain more than one raw text questions
-Fixed issue about taking feedbacks into account in lesson completion rules
-Fixed issue about 'select type' custom user field in notifications (#1553)
-Fixed "content report" reloading page
-Fixed issue in administrator tools about changing user's login
-Fixed issue in participation reports in course type
-Fixed recursion of "course not completed" and "lesson not completed" events
-Fixed editing a placement from the user's page not displaying the job's branch as pre-selected (Enterprise edition)
-Fixed branch filter error when a branch includes quotes in its name (Enterprise edition)
-Fixed issue with single quotes in glossary (#1661)
-Fixed issue in Question::clearDuplicates about primary key constraint
-Fixed drag'n'drop questions not working in IE9
-Fixed training record not showing course/lesson progress for custom user roles based on student
-Fixed issue in course settings and custom user types about applyRoleOptions
-Fixed issue about displaying announcements block icon in layout even when it was inactive
-Fixed issue in notifications language part
-Fixed Bcc issue in sending mail because of http://rawphp.com/php_generator/page.ph ... actory.php
-Fixed rtf certificate exporting for IE8
-Fixed issue about scheduled lessons in courses and go to Next lesson button
-Fixed content traversing rules not working for individual users
-Fixed "not seen" rule not working when source unit is a test
-Fixed issue about date type custom user field in notifications
-Fixed issue about displaying custom profile fields in user reports generator
-Fixed imported lessons not displaying skill names correctly (Educational edition)
-Fixed error in calculation for total_time in SCORM content when revisiting SCO

2011/06/01 v3.6.9 build 11018

This release fixes an important issue that has been discovered, and affects the 2 previous builds: When deleting a glossary entry, a file may be deleted instead. A number of additional minor fixes included:
-Added course lessons schedule display in course info page
-Added copy blocks order from lesson X in module administrator_tools
-Added categories path for lessons in users reports in lesson tab
-Added custom user profile fields for user triggering the event notifications
-Removed unit options that where meaningless for SCORM, when editing such content
-Fixed deleting glossary entries deletes files instead
-Fixed username format in course/lesson info pages
-Fixed issue EF-567 about logging out using facebook connect
-Fixed EF-617 where glossary added an extra space in unit data

2011/4/27 v3.6.9 build 10697

This release is to address a potential security issue, but it addresses several issues that have come up since the last update. Complete changelog follows:
-Fixed potential security issue while including javascript files
-Added comments field to user's profile page
-Added option for not allowing students to send messages
-Added "AND" mode for "multiple/many" questions
-Added check in landing page in case of inactive module
-Added code for sorting files in editor popup windows
-Added a check for possible existing token in api2
-Added option for deleting old api tokens (over one month) in maintenance
-Changed "name/surname" constants to "first name/last name"
-Changed lesson selectbox to autocomplete field in copy from another lesson
-Tests info in excel export of lesson reports no longer truncates questions
-You can no longer create subforums in locked forums
-A user who is reassigned to a course/lesson, now retains the completion date, if there is one
-Recurring payments option in courses/lessons no longer shows up when payments are disabled
-Courses in user reports now sort by course order by default
-Course/lesson completion status in pdf reports displays even if a completion date does not exist
-Extended api to consider custom user profile fields for creating user
-Removed scheduling icon in control panel for course lessons
-Course lessons in unique mode can now be edited even if inactive
-Fixed module chat for different user timezones
-Fixed lesson timeline requesting all events instead of the ones to show
-Fixed group assignment in user's page
-Fixed setDefaults about popup parameters in editing scorm content
-Fixed setting "organization" to "hide" actually hiding links from users
-Fixed basic info in course reports for excel exporting
-Fixed issue in getForumTree()(#1354)
-Fixed issue in external survey about background color
-Fixed issue when exporting reports not taking into account the sub-branches checkbox
-Fixed issue about expanding a category after collapsing all in catalog (#1332)
-Fixed issue about not taking into account course lessons scheduling in catalog
-Fixed publish page of surveys not taking into account archived users
-Fixed email account activation not working
-Fixed issue about toggling blocks twice (#1382)
-Fixed profile page not keeping custom avatar
-Fixed issue about copying from another lesson (#1383)
-Fixed administrator not being able to activate self-registered users set to "pending"
-Fixed organization options not taking into account user type set to "view"
-Fixed professor losing access in forums when courses are set to depend on other courses
-Fixed issues with lesson layout setting and custom professor types (#1397)
-Fixed issue about "Show only a message after submitting test" and failed test (viewtopic.php?f=12&t=3122)
-Fixed pdf export of user reports not including completion information when the completion date is not set
-Fixed access to files when "restricted access" is on and lessons share folders
-Fixed "OR" mode to fail when the user has given a false answer