A better open-source LMS

Download eFront open-source edition

Download eFront v3.6.13

Open Source Edition / build 18000 / Size ~25,6 MB

Modules | Languages

History

8 April 2013 v3.6.13 build 18000

For additional release info check the forum post here
- Added Tincan (XAPI) support (Commercial editions)
- Added the Simple/complete mode that allows for hiding unnecessary functionality
- Redesigned system header
- Redesigned system popups
- Re-introducing "login with facebook" option (Commercial editions)
- Added new options for course/lessons scheduling
- Added immediate supervisor option as recipient in notifications (Commercial editions)
- Added manual payments notification (Commercial editions)
- Added option to send an email when a user submits a content report
- Added option about forcing accepting license at every login
- Added "transaction id" field in manual payments (Commercial editions)
- Added "rule" check in custom profile fields (Commercial editions)
- Added ability for professor to download all projects of a specific user
- Added button in Lock down page only for saving message and not lock down platform
- Added "delete editor templates" functionallity in save template editor plugin
- Professor can now create courses that are attached to the current branch url (Commercial editions)
- Introducing a new, faster installation and upgrade procedure
- All database tables are now explicitly set to innodb
- When a user revisits a unit completed with a question, the question now shows up
- SCORM: extended CMIFeedback type to support Lectora's incompatible data values
- System now sends the "no-transform" header to prevent proxies from changing content
- When creating notifications to send, the branch url instead of the root url is included (Commercial editions)
- Changed "answers explanation" to be shown only for given answers (and correct matches in Match/DragDrop)
Modules:
- Module templates can now be included in the index page.
- Modules can now include system template files
- Fixed module call onCompleteCourse() not working
- Updated Gradebook module: "to" and "from" can now be equal
- Fixed issue about updating score to module gradebook with comma as decimal point
- Training period reports module are now available to professors only and various updates
- Updated content reports module to include total times per unit
- Redesigned "Security module" to detect several types of compromises
XML API:
- New action: "languages"
- New action: "categories"
- New action: "category"
- New action: "buy_lesson"
- New action: "buy_course"
- New action: "user_autologin_key"
- The "update_user" action does now requires the following fields: password, first name, last name, email, language
- The "user_info" action now also returns the surname
- Updated apidemo2.php to include new features
Various updates:
- Fixed performance issue in payments page
- Fixed issue about deleting first execution of test when clicking on "Redo" test option
- Fixed issue about viewing certificates in personal page
- Fixed error when admin tries to edit job position
- Fixed error resulting when creating polls from branch url
- Fixed issue about not copying survey questions when cloning lesson
- Fixed incompatiblity issue with Internet Explorer 10 and themes with sidebar
- Fixed error appearing when navigating to course lessons from search results
- Fixed importing users conflicting with version limit (Commercial editions)
- Fixed supervisor being able to see/assign courses outside the current branch to users (Commercial editions)
- Fixed issue about renaming folder that contains subfolders (old folder was not deleted)
- Fixed issue about course catalog in index page after logout from a branch url
- Fixed performance issue in group users tab
- Fixed course scheduling not working immediately after change
- Fixed branch url catalog not showing subbranch courses
- Fixed grid incompatibilty issue with older versions of IE
- Fixed diplaying only connected users from the same branch if branch is set
- Fixed directory traversal vulnerability, for php files residing inside the www/ folder
- Fixed group stats filter selection in community edition
- Fixed importing users conflicting with version limit

22 January 2013 v3.6.12 build 17736

For additional release info check the forum post here
- fixed "last_login" issue

24 December 2012 v3.6.12 build 17712

For additional release info check the forum post here
Performance:
- Replaced branches lists with autocompleters
- Speeded up last login calculations
- Splitted completed tests table to speed up queries
- Maintenance page now loads considerably faster

Custom user profile:
- Custom user profile fields can now be ordered
- Added custom user profile into custom certificate fields
- Date fields can now optionally include time
- Fixed issue about not displaying Learning Tab when there was missing fields in admin

Modules:
- New module: Extended branch reports (Commercial editions)
- New module: Course reports
- New module: Outlook Invitations
- New module: Bootstrap
- New module: Leaflet
- New module: Content reports
- New module: Export unit
- New module: Idle users
- Removed deprecated "branch themes" module
- Gradebook module updates
- Added onBeforeShowCoursesTree() module function
- Added onXMLExportCourseCertificate module function
- Added getSideCatalogModule() to module class and module_demo
- Fixed issue in administrator tools module about changing user types
- Fixed "training reports" module not working for course completions that do not include a date

Users:
- Set default timezone when creating user if not defined
- Uer times entries while reseting user progress are now deleted as well
- "maximum users" restrictions handling is now more user-friendly
- Fixed importing users where password was set to header but was empty in data rows
- Fixed issue about importing new users/ updating users via import when login are numeric values
- Fixed issue about non editable first name in profile
- Fixed issue about skills custom user types permissions
- Fixed issue about creating new user with same login (case insensitive)
- Fixed issue about mapped accounts and ldap accounts. Switching was not working for ldap accounts.
- Fixed retrieving timestamp value from db while filtering users

Tests:
- Added code in random pool tests for selecting questions (about selecting on each execution) depending on lessons_ID frequency in the pool
- Added option to toggle raw text questions to display only textarea/file upload
- Added numeric evaluation of "empty spaces" answers
- Added numeric ranges in "empty spaces" answers
- Changed the way a test unit can be printed
- Fixed issue about displaying tests in content tree when tests are disabled for lesson
- Fixed issue about copying feedback/test unit and questions order (#2962) where order was not preserved if source unit was reordered
- Fixed issue about copying from another lesson a feedback unit
- Fixed issue about displaying inactive tests in User status page
- Fixed issue about redo only wrong answered questions and show only thank you message

Courses:
- Added "reset course progress for all users" option
- Added tooltip for displaying all branches in course location column in courses list (Enterprise edition)
- Added course instances to professor courses
- Fixed issue about white listed files checking in course export
- Fixed issue about course instances displayed to catalog even if show catalog is not set

Search:
- Full-text search to all files is now available through the XAPIAN integration (Commercial editions)
- Do not show forum results in search when forum is disabled
- Fixed issue about adding search tables entries

Branches: (Enterprise edition)
- Branch URL restrictions now prevent any non-related information to be displayed to students, professors and supervisors
- Exclude inactive users from displaying in organization chart
- Fixed issue about unassigning inactive course from a branch
- Fixed issue about allowing users from subbranches to login to father branch url
- Fixed issue with branch urls and session (#2544)

Editor:
- Added new tinymce class for messages (about absolute paths in e-mails)
- Fixed issue with folders contained single quotes in editor
- Fixed advlink plugin of editor to show also empty units
- Fixed issue about editor and branch url

Groups:
- Added custom user option for insert group key
- Fixed groups list not showing entries with the same name
- Fixed issue with counting users in groups
- Fixed issue about assigning users to courses from groups (already assigned users) (#2808)
- Fixed issue about assigned lessons/courses of group to group users when they were archived there

Content:
- Added ##USER_NAME## and ##USER_SURNAME## variables to content, that are substitued in real time
- Added ability to go to a unit with a simple link index.php?autologin=<autologin>&view_unit=<view_unit>
- Allow only one depth recursive uncompress when smart content import contains zip files
- Fixed issue about collapsing content tree when deleted a test in some cases
- Fixed changing question paths when copying questions (associated with units) to another lesson
- Fixed issue about displaying inactive units for students
- Fixed properly stripping <script> tags when in multiline or encoded content
- Fixed issue about copying from another lesson that shares folder with the source lesson
- Fixed issue about showing a unit that contains a file with direct link
- Fixed issue about cutting unit title when editing unit
- Fixed issue with print content and tr tag
- Fixed uploading from a url containing query string
- Fixed smart content importing units with the same name

Lessons:
- Added new limit based on total accesses, so that a student can only access a lesson a specific number of times
- Added import from url option in import lesson page
- Fixed issue about wrongly removed access to professors in lessons because of available after xxx days

Announcements:
- Added time fields in creating announcements

Forum:
- Added ability to access a forum post with url like ?ctg=forum&post_id=###forum_id###
- Deleting the last message of a forum topic now deletes the topic itself as well
- Fixed issue allowing professors to delete students posts in forum
- Fixed issue about going into forum message from forum list inside a lesson

SCORM:
- Added ability to edit SCORM code and change iframe parameters upon import
- Added handling for invalid "browse" mode for SCORM content
- SCORM API update for escaping new lines
- SCORM API update to properly format student name
- Fixed SCORM times not being taken correctly into account when calculating active lesson times
- Fixed scorm prerequisites not being imported correctly
- Fixed issue with latest firefox not always showing scorm content when under a branch url

UI:
- Added new theme, efront2013
- Added upper limits (100) on inactive user/course registrations
- Added classes to progress bars for completed and uncompleted lessons
- Display full category path to groups lesson
- Updated message displayed to users trying to self-register, when the maximum allowed users number is reached
- Switched ajax request to POST for lesson info, course info and files metadata to allow for unlimited request size
- Lessons/courses tooltip now mentions maximum/available seats
- Branch themes always use branch theme logo, if existing (Enterprise edition)
- Changed "Please login to access this resource" message to something more user friendly
- Changed "My courses" links to "Home" and enforced respecting of landing page setting
- Changed "organization" tab label to "my role"
- Fixed displaying formatted usernames in projects block of control panel
- Fixed issue about reloading files table after deleting an internal folder
- Fixed link in projects block leading to project results
- Fixed some links that did not work properly when encrypt url was enabled (#3048)
- Fixed grid filtering regression introduced in 3.6.11 for international characters
- Fixed issue about profile page and custom user type
- Fixed course displaying sorted by name in user reports page and user to course page
- Fixed order of courses being displayed alphabetically inside categories
- Fixed course price being displayed in scientific format when editing course
- Fixed issues about sorting lessons in traffic tab of users reports(alphabetically) and course lessons (order in course)
- Fixed issue about displaying also time in calendar
- Fixed issue about displaying user status when it was disabled as option.
- Fixed issue about Learning Tab not appearing for new users (#2776)
- Fixed progress bar glitch in chrome
- Fixed redirection problem when using "Keep me logged in" alongside "license note"
- Fixed textareas in tests not working for ipads

Surveys:
- Added survey reminders

Payments:
- Added csv export for payments (Commercial editions)
- Updated paypal's ipn to conform with the http 1.1 protocol
- Fixed when paying through paypal and using discount coupons, a small balance being credited
- Fixed showing "balance" link even when balance is deactivated
- Fixed new line character parsing in paypal response, causing sandbox not working
- Fixed issue about adding 100% discount coupon
- Fixed showing button to buy balance using balance

Notifications/emails:
- Added ###forum_id### for forum id, topic id or message id in notifications
- Added project assignment notification and project name and id in substitution array
- Added ###course_start_date### and ###course_end_date### in notifications for course scheduling event
- Added new_password template for SYSTEM_REGISTER notification
- A user now receives a copy of his/her own email when using the "contact us" form
- The administrator will be notified with an email when the system is approaching its license limit (commercial editions)
- Fixed issue about content completion triggerEvent
- Fixed issue about not triggering the SYSTEM_VISITED event in force password change case
- Fixed issue with forum title in notifications
- Fixed issue about course completion notification
- Fixed issue about sending notifications for survey multiple times
- Fixed notifications directed to supervisors not working

Certificates:
- Added ability to center align the label tags in xml certificates
- Added option for setting certificate issue date as completion date
- Added option for downloading certificate inside course for students
- Extend range for certificate expire in 120 months
- Fixed issue about downloading certificates for course with names containing slashes
- Fixed broken link about viewing certificate from user page as supervisor
- Fixed issue about displaying certificate for view permissions in course options for custom user type
- Fixed replacing date-type custom user profile value in certificates

IE9-related fixes:
- Fixed issue in Find Users about sending job description in the request that cause issues occasionally (german IE9 for description with Umlaut) #3112
- Fixed an issue about proto chart and IE9

Reports:
- Added export button for participation stats
- Added certificate reports to supervisor
- Added course/lesson average completion times statistics
- Branch reports extensions
- Fixed sorting results by dates in certificate reports
- Fixed js issue about filter stats in non-Enterprise editions
- Fixed issue about ceus in custom reports
- Fixed issue in user reports about admin and time reports
- Fixed issue about deleting/archiving user from branch reports page
- Fixed issue in excel export of tests reports about marking the correct answer in some cases
- Fixed issue about displaying archived users in professor Users reports

Glossary:
- Fixed issue about not showing correctly words that are a substring of another word both defined in glossary

Filesystem:
- Paths can now include the dollar sign
- Fixed issue about deleting folders containing slash
- Fixed issue about not allowing files without users_LOGIN to be deleted
- Fixed downloading own project/test files

Personal messages:
- Fixed handling upload error when sending pm as email

System:
- Added caching for restricted files
- IIS compatibility fix
- Upgraded smarty to version 2.6.27
- Upgrade procedure totally revamped
- Fixed HTTPS automatic handling
- Fixed PHP 5.4 compatibility issues

24 April 2012 v3.6.11 build 15059

For additional release info check the forum post here
- Updated SCORM debug mode to be set from the configuration and log to the console (instead of alert)
- Properly escaped LMS-to-SCORM communication
- A file not found (404) header is sent for missing files
- Members logged in through a specific branch url are only viewing their organization's Org chart part
- Excluded login block and installation form from CSRF filtering
- Fixed file requests overlapping with branch urls in certain cases
- Fixed user profile page showing an error when updating and there's a files white list set
- Fixed projects list not appearing in student's dashboard
- Fixed percentages in "Adjust questions" options to correctly calculate total questions

10 April 2012 v3.6.11 build 14714

For additional release info check the forum post here
- Added ability for professor to create courses/lessons
- Added RTL theme
- Added global CSRF protection
- Added functionallity of multiple comments in project page
- Added datepicker option in complete for all students in progress
- Added code to handle 'New comment' info to dashboard in projects
- Added test failure notification
- Added checkSpam functionality for denying access to IPs that use outside forms (contact,sign up, reset password) very often
- Added option to deactivate users after five contiguous unsuccessful login atempts
- Added option for professor to allow users to repeat test
- Added option about module_itself in custom user types, to disallow sub-type users from accessing modules
- Added option for changing completion date in courses
- Added check for mysql reserved words in custom user field creation
- Added a warning in case a file is uploaded with the same name as an existing one that has not write permissions
- Added more buttons in tinyMCE editor
- Added lesson percentage column in course stats
- Added ability to change lesson status from table in progress page
- Added group filter in test reports
- Added ability to send more than one attachment in eF_mail()
- Added ability to change completed status for students by clicking on the icon in progress page
- Added smart content in lesson options (Enterprise/Educational edition)
- Added reset certificate before expire option (Enterprise/Educational edition)
- Added ims option for toggling in control panel page (like scorm) (Enterprise/Educational edition)
- Added option in course settings for revoke all expired certificates (Enterprise/Educational edition)
- Added CEUs in custom reports results (Enterprise/Educational edition)
- Added ability for custom fields in certificate templates (Enterprise/Educational edition)
- Added course expiry notification (Enterprise/Educational edition)
- Added before course expiry notification (Enterprise/Educational edition)
- Added edit certificate key (Enterprise/Educational edition)
- Added user role selection field when assigning lessons/courses in reports generator (Enterprise/Educational edition)
- Added Branch URLs (Enterprise edition)
- Added "all supervisors" as option for recipients in notifications (Enterprise edition)
- Added multiple Job select in stats_filter (Enterprise edition)
- Added onAddUserPlacement() module function (Enterprise edition)
- Added time option in skill gap tests (Enterprise edition)
- Updated user profile to include skill categories, along with skill names (Enterprise edition)
- Updated paypal sandbox address to use ssl (Enterprise/Educational edition)
- Updated notifications process to lock while it's executing
- Upgrade videojs to last version (#2107)
- Extended characters converting to space when adding in EfrontSearch :: insertText
- Extended smart content functionality to create units with other file types (Enterprise/Educational edition)
- Extended XML API with "show users who completed lesson" and "show users that submitted a test" functions
- Changed 'start unit' added to scorm units to a template in order to be replaced according to user language
- Changed scheme for encoding mail headers from 'Q' to 'B'
- Changed link for doing the survey to be active in notifications
- Removed share files column from filemanager when adding unit if digital library option for lesson is inactive
- Removed submit button in course rules if course has only one lesson
- Converted org chart to perform ajax-based loading (Enterprise edition)
- Allow user to change his own profile when "Users" option in user types is set to "View"
- Prevented accessing a lesson when in a course that depends on another course, which is not part of the student's curriculum
- Module installation fail now calls module's uninstall() method
- Session expiration page now includes a login box
- Display invisible custom profile fields when creating user from admin page
- Updating from_timestamp value when re-assigning user to course if course is not completed (#1908)
- Implementing a common question pool (between lessons) (Enterprise/Educational edition)
- Exclude google view pdf links from being transformed to view_file.php?file format
- Display lessons/courses sorted in reports generator when assigning to users
- Default sorting by last post in forum page
- Filter php_self for xss attacks
- Fixed issue about folders with quote in name (') when navigating into folder from file manager
- Fixed issue about insert to editor flv files
- Fixed importing more than one jobs on the same user and csv, having "replace" mode to "on"
- Fixed showing a success message in "contact us", even if the email was not sent
- Fixed "more info" link not displaying as link
- Fixed scorm export for packets with non-english files
- Fixed issue about downloading language files
- Fixed issue about access forum page in lesson with instance_source
- Fixed issue about uploading avatar with same name more than one times
- Fixed issues about logo loading
- Fixed issues in getting possible recipients for messages
- Fixed errors displayed in time constraint reports when page submitted without selecting a course/lesson/project/test value
- Fixes for test analysis page
- Fixed issue about not allowing file name to contain quotes when renaming file from interface
- Fixed issue with counting questions in feedback page
- Fixed changing of registration date when editing user
- Fixed issue about shared files with share folder lessons
- Fixed issue about complete lesson and decimal point db error
- Fixed issue about displaying inactive users in recipients list
- Fixed issue about editing account as sub-admin where user was sub-admin too (#1952)
- Fixed language issues about first login change password
- Fixed issue about course not completed notification
- Fixed issue about assigning proper user type when assigning users to group via reports generator
- Fixed issue about course completing by admin for a professor with student role to the course
- Fixed issue about students showing skill gap tests after entering a lesson
- Fixed issue about last projects block in control panel of professor
- Fixed issue about title path (Breadcrumb) with / and () characters and → in title of anchors (#2042)
- Fixed issue about sub-subforums and last post
- Fixed visual issue in Chrome about lesson initialization and import page(id conflict with chat) (#2060)
- Fixed issue about custom user type and view value in progress
- Fixed chat issues about word wrap and chatbox titles with @
- Fixed js issues in file manager and IE about files with '
- Fixed add to cart issue with hash in url (#2075)
- Fixed issue about trying to directly access topics from forums that did not be enrolled to users
- Fixed paypal not accepting comma in prices
- Fixed lesson statistics not displaying test score when "active score" is not set
- Fixed redirection when resuming test for certain IE clients
- Fixed users losing their ldap status when updating their profile
- Fixed cart contents not being retained when server time is unsynchronized with client time
- Fixed drag and drop question results displaying out of order for wrong answers
- Fixed importing users to courses from csv with an empty type not working
- Fixed possible XSS attack while sending personal messages
- Fixed possible XSS attack while posting lesson comment
- Fixed possible XSS attack while sending content error report
- Fixed users bypassing lesson rules using a direct url
- Fixed possible XSS on table grid filter
- Fixed issue about more than one spaces between words in empty space questions
- Fixed issue about shared files with share folder lessons
- Fixed issue about assigning selected courses or lessons to group users or users already belong to this job position where existing roles were changed (#2141)
- Fixed issue about scorm export in case of a space in path (#2143)
- Fixed e-mail issue about HELO message and security filters (#2098)
- Fixed issue about assigning selected courses or lessons to group users or users already belong to this job position where existing roles were changed (#2141)
- Fixed issue about scoring in complete lesson when professor scores last remaining test
- Fixed issue about displaying archived users in organization chart
- Fixed issue about unit 'Accessible with a direct URL' (#2180)
- Fixed issue about location column in some tabs in course reports
- Fixed issue about coreAccess in tests
- Fixed issue about copying tests from another lesson where questions contained a file in subfolder that was already copied (from another question copy) in target lesson
- Fixed issue about active field in users to course imports
- Fixed issue about progressBar and decimal point
- Fixed issue about check icon in lesson progress (#2270)
- Fixed issue about links to send private messages when they are disabled
- Fixed issue in module quick mails about sending mails to archived administrators
- Fixed icon issue about 'Assign selected courses to group users'

2011/10/26 v3.6.10 build 12151

For additional release info check the forum post here
- Added visible option functionality in custom user profile fields
- Added ability to import users with subtypes via csv imports.
- Added "security module"
- Replaced decimal point and thousand separator with locale equivalents
- Security update: Fixed editor's "save template" not checking validity of inputted parameter (Reported by EgiX)
- Security update: Fixed unsafe file upload using capitalized extensions (Reported by EgiX)
- Security update: Fixed potential XSS attacks using unsafe GET parameters (Reported by Canberk Bolat of Mavituna Security and High-Tech Bridge SA Security Research Lab)
- Security update: Fixed possible sql injection attacks in multiple files (Reported by EgiX, Vulnerability Research Laboratory and High-Tech Bridge SA Security Research Lab)
- Security update: Fixed potential privilege escalation using cookies (Reported by EgiX)
- Security update: Fixed cookie information leaking using XSS (Reported by Semyon Perepelitsa)
- Security update: Fixed arbitrary file download issue (Reported by EgiX)
- Fixed "branchinfo" and "groupinfo" fields not appearing in user profile fields (Enterprise/Educational editions)
- Fixed issue about content tree management order
- Fixed issue about assigning users to branches page when filter was used (#1819)
- Fixed clearDuplicates for questions when copying questions from another lesson (#1812)
- Fixed drag and drop questions about background color issue with Chrome (#1831)
- Fixed improper handling of file black list during file upload
- Fixed tracking initialization about feedbacks
- Fixed feedback preview
- Fixed lesson timelines not listing events
- Fixed issue in forum page about pagination and subforums
- Fixed getSystemLogo function and an issue with site logo loading
- Fixed issue in reports generator about enrolling to lesson/course/group
- Fixed rounding error when submitting paypal price and using coupon

2011/10/10 v3.6.10 build 11944

For additional release info check the forum post here
-Added a "remember me" checkbox in login form (toggled from admin settings)
-Added a page that allows for applying the same settings across all lesson units
-Added an option to send notifications as personal messages
-Added forums and topics pagination
-Added limits for space usage in messages
-Added sorting terms in each tab in glossary page
-Added help links to modules towards the wiki page
-Added option to constrain XML API usage to a specific IP
-Added a minimal_view parameter for displaying less columns for messages in dashboard
-Added a trim in exploded fields from csv file
-Added urlencode when loading avatar
-Added index page parameter to filter courses/lessons (index.php?filter=maya)
-Added header for date in Mail::factory because of http://pear.php.net/manual/en/package.m ... l.send.php
-Added encodeURIComponent in filters http://www.sencha.com/forum/archive/ind ... 96295.html
-Added option to deactivate block moving in control panel for specific user types (#809)
-Added ability to import list of users to be archived
-Added "my courses" tools icon to user dashboard
-Added optional active time tracking (Educational/Enterprise editions)
-Added toggle checkbox for LDAP users in user's profile page (Educational/Enterprise editions)
-Added CEUs parameter in courses (Enterprise/Educational edition)
-Added time-based lesson completion rules (Enterprise/Educational edition)
-Added time-based unit completion option (Enterprise/Educational edition)
-Added html_entity_decode when url is encrypted because of #1429 [amp;view_unit]... (Enterprise/Educational edition)
-Added supervisor balance transferring to employees (Enterprise edition)
-Added self-enrollment option to groups (Enterprise edition)
-Added skill-gap test results page to students as well (Enterprise edition)
-Added ability for branch calendar events to appear to members of the branch's children as well (Enterprise edition)
-Added option for displaying sub-branch information in branch statistics (Enterprise edition)
-Added balance payments through paypal (Community++ and above)
-Added a "payments" tab on users' profile page (Community++ and above editions)
-Added ability to create mandatory fields without a default value in extended user profile (Community++ and above editions)
-Updated SCORM import to handle backslashes in imsmanifest hrefs
-Updated file access security
-Updated random generator for password reminders
-Updated top level units to be marked as complete if all sub units are marked as complete
-Updated uploaded projects from students so that they are placed to an internal folder named inside projects folder and do not rename them
-Updated organization chart to be cached when large (Enterprise edition)
-Updated import/export so that job assignments can optionally be replaced (Enterprise edition)
-Removed old chat functionality
-Removed the option to "deactivate online users on lessons" from the lesson administration page
-Removed icon links for reports for community version
-Fixed SQL injection security vulnerability reported by IHTeam, http://www.ihteam.net/
-Fixed SQL injection security vulnerability reported by Vulnerability Research Laboratory, http://www.vulnerability-lab.com
-Fixed security issue: student/professor accounts won't use the default insecure credentials anymore, but rather the administrator's ones. Reported by IHTeam, http://www.ihteam.net/
-Fixed "date" custom fields so that are converted to human-readable format while exporting/importing from csv
-Fixed loading prototype in external survey to avoid js error
-Fixed inproper handling of imported users without a user_type defined
-Fixed setting file encodings to UTF-IMAP even when UTF-8 is selected
-Fixed issue about inserting & in question feedback
-Fixed issue about loading default lesson layout when moving blocks is disabled
-Fixed issue about importing lesson by admin uncompressing files in temp folder (#1492)
-Fixed preserving lesson properties when importing directly
-Fixed issue about upload more than one files in tests that contain more than one raw text questions
-Fixed issue about taking feedbacks into account in lesson completion rules
-Fixed issue about 'select type' custom user field in notifications (#1553)
-Fixed "content report" reloading page
-Fixed issue in administrator tools about changing user's login
-Fixed issue in participation reports in course type
-Fixed recursion of "course not completed" and "lesson not completed" events
-Fixed editing a placement from the user's page not displaying the job's branch as pre-selected (Enterprise edition)
-Fixed branch filter error when a branch includes quotes in its name (Enterprise edition)
-Fixed issue with single quotes in glossary (#1661)
-Fixed issue in Question::clearDuplicates about primary key constraint
-Fixed drag'n'drop questions not working in IE9
-Fixed training record not showing course/lesson progress for custom user roles based on student
-Fixed issue in course settings and custom user types about applyRoleOptions
-Fixed issue about displaying announcements block icon in layout even when it was inactive
-Fixed issue in notifications language part
-Fixed Bcc issue in sending mail because of http://rawphp.com/php_generator/page.ph ... actory.php
-Fixed rtf certificate exporting for IE8
-Fixed issue about scheduled lessons in courses and go to Next lesson button
-Fixed content traversing rules not working for individual users
-Fixed "not seen" rule not working when source unit is a test
-Fixed issue about date type custom user field in notifications
-Fixed issue about displaying custom profile fields in user reports generator
-Fixed imported lessons not displaying skill names correctly (Educational edition)
-Fixed error in calculation for total_time in SCORM content when revisiting SCO

2011/06/01 v3.6.9 build 11018

This release fixes an important issue that has been discovered, and affects the 2 previous builds: When deleting a glossary entry, a file may be deleted instead. A number of additional minor fixes included:
-Added course lessons schedule display in course info page
-Added copy blocks order from lesson X in module administrator_tools
-Added categories path for lessons in users reports in lesson tab
-Added custom user profile fields for user triggering the event notifications
-Removed unit options that where meaningless for SCORM, when editing such content
-Fixed deleting glossary entries deletes files instead
-Fixed username format in course/lesson info pages
-Fixed issue EF-567 about logging out using facebook connect
-Fixed EF-617 where glossary added an extra space in unit data

2011/4/27 v3.6.9 build 10697

This release is to address a potential security issue, but it addresses several issues that have come up since the last update. Complete changelog follows:
-Fixed potential security issue while including javascript files
-Added comments field to user's profile page
-Added option for not allowing students to send messages
-Added "AND" mode for "multiple/many" questions
-Added check in landing page in case of inactive module
-Added code for sorting files in editor popup windows
-Added a check for possible existing token in api2
-Added option for deleting old api tokens (over one month) in maintenance
-Changed "name/surname" constants to "first name/last name"
-Changed lesson selectbox to autocomplete field in copy from another lesson
-Tests info in excel export of lesson reports no longer truncates questions
-You can no longer create subforums in locked forums
-A user who is reassigned to a course/lesson, now retains the completion date, if there is one
-Recurring payments option in courses/lessons no longer shows up when payments are disabled
-Courses in user reports now sort by course order by default
-Course/lesson completion status in pdf reports displays even if a completion date does not exist
-Extended api to consider custom user profile fields for creating user
-Removed scheduling icon in control panel for course lessons
-Course lessons in unique mode can now be edited even if inactive
-Fixed module chat for different user timezones
-Fixed lesson timeline requesting all events instead of the ones to show
-Fixed group assignment in user's page
-Fixed setDefaults about popup parameters in editing scorm content
-Fixed setting "organization" to "hide" actually hiding links from users
-Fixed basic info in course reports for excel exporting
-Fixed issue in getForumTree()(#1354)
-Fixed issue in external survey about background color
-Fixed issue when exporting reports not taking into account the sub-branches checkbox
-Fixed issue about expanding a category after collapsing all in catalog (#1332)
-Fixed issue about not taking into account course lessons scheduling in catalog
-Fixed publish page of surveys not taking into account archived users
-Fixed email account activation not working
-Fixed issue about toggling blocks twice (#1382)
-Fixed profile page not keeping custom avatar
-Fixed issue about copying from another lesson (#1383)
-Fixed administrator not being able to activate self-registered users set to "pending"
-Fixed organization options not taking into account user type set to "view"
-Fixed professor losing access in forums when courses are set to depend on other courses
-Fixed issues with lesson layout setting and custom professor types (#1397)
-Fixed issue about "Show only a message after submitting test" and failed test (viewtopic.php?f=12&t=3122)
-Fixed pdf export of user reports not including completion information when the completion date is not set
-Fixed access to files when "restricted access" is on and lessons share folders
-Fixed "OR" mode to fail when the user has given a false answer

More to explore