Hosting Xoops

2.5.9
 (security release)
18 October 2017 - 38MBHighlights

Important security updates

PHP 7.1 compatibility

Updated Themes

Modernized Install and Update

Multi-File Uploads for Imagemanager and Avatars

Bootstrap support in Forms

many more fixes and updates

Read more: https://xoops.org/modules/publisher/item.php?itemid=5949






2.5.8

30 May 2016 - 38MB
replaced "dirname(__FILE__)" with "__DIR__" since the min. PHP is now 5.3.7, and __DIR__ is faster  (mamba)
updating some copyright notices (mamba)
fix issues when protector 'id_forceintval' preference is enabled, that manifests as an error when deleting private messages.  (rgriffith)
fix for Update setting Template import date to 0 (timgno/mamba)
Adding language constants for Protector's Prefix Manager (slider84/mamba)
allowing for "https" URL in YouTube links in Textsanitizer (mamba)
converting $i++ to ++$i for improved performance (mamba)
reverting couple of $i++ conversions (zyspec/mamba)
updated xBootstrap to Bootstrap 3.3.1 (Angelo Rocha)
Some code cleanup for private messages (Dingjie （Daniel） Yang/rgriffith)
Adding Footer blocks (timgno/mamba)
fixing a bug in xmlrpc.php (wppd/rgriffith)
remove addrFormat override in XoopsMultiMailer (rgriffith)
patch from Xoops 2.5.6 XoopsFormSelectUser is not compatible with some old modules like xNews (luciorota)
fix "setExtra" in moduleadmin.php, Admin buttons can now use "onClick" assignments (mamba)
updated XOOPS copyright to 2016, changed links to http://xoops.org (mamba)
replaced intval() with (int) (mamba)
added possibility to include full icon URL in module's menu.php (mamba)
added strong { font-weight: bold; } to reset.css (mamba)
added .tpl option for module Help files (mamba)
fix moved "count($tagsArray)" and "count($attrArray)" outside of FOR loop in xoopsfilterinput.php (mamba)
add option to set height of Themes block (mamba)
fix: Invalid argument supplied for foreach() (cesagonchu/mamba)
removed -khtml CSS properties (mamba)
fix profile/search (cesagonchu/slider84)
changed minimum image sizes in Image Manager to: 800x600, 1MB (mamba)
added image sort order in TinyMCE image-manager plugin (elpaksu/Peekay)
added Youtube handling enhancements (xd9527/geekwright)
fix system module update issue (zyspec)
fixed multiple issues (CSRF, weak password hash, and directory traversal) reported by hyp3rlinx (geekwright)
fix privileged information disclosure issue reported by Cédric MONTUY (geekwright)
Move to supported PHP mysqli extension for database access (redheadedrod/geekwright)
IPv6 safe in comments, protector, sessions and online
Include XMF library (geekwright)
Updated TinyMCE to 3.5.11 (mamba)
Updated PHPMailer to 5.2.14 (mamba)
Updated jQuery to 1.12.4 (mamba)
Updated jQuery UI 1.11.4 (mamba)
Updated jGrowl to 1.4.4 (mamba)
Updated phpThumb to 1.7.14-201603240806  (mamba)
Updated HTML Purifier to 4.7.0 (mamba)
Updated Bootstrap to 3.3.6 (mamba)
Updated Snoopy to 1.2.5 (zyspec)
Updated SWF banners to HTML5 (mamba)
Updated extra banners (mamba)

Read more: http://xoops.org/modules/news/article.php?storyid=6762






2.5.7.2
 (security release)
3 January 2016 - 38MBRead more: http://xoops.org/modules/news/article.php?storyid=6747






2.5.7.1

25 November 2014 - 38MBSecurity fixes:

CSRF and XSS issues reported by Dingjie 'Daniel' Yang of Qualsys
XSS and best practice issues reported by Narendra Bhati

Read more: http://xoops.org/modules/news/article.php?storyid=6683






2.5.7
 (security release)
17 June 2014 - 38MBSecurity fixes:

XSS issues reported by Mehdi Dadkhah (rgriffith)
Fix security issues reported by Pedro Ribeiro of Agile Information Security (rgriffith)
Fix XSS issue reported by Manuel Garcia Cardenas (rgriffith)


Bugfixes:

ID: 1143 (old ID 430840) class/module.errorhandler.php (uberrookie/zyspec)
ID: 1225 Restore user theme choice during "Remember me" processing. (rgriffith)
ID: 1226 Change value of clickable due to issues centering on CaricaFoto script (rgriffith)
ID: 1227 Sorting bug in Profile module search (Zyspec)
ID: 1246 Fallback to english for admin theme language files if no language specific file exists (rgriffith)
ID: 1261 Fix as proposed by Irmtfan (irmtfan/rgriffith)
ID: 1268 reduce db load if XoopsFormSelectUser is called multiple times in a page load (rgriffith)
ID: 1269 Block template file will not updated after update the module (irmtfan)
ID: 1270 template issue in email notifications (changed X_ITEM_TILE to X_ITEM_NAME) (alain01/slider84/mamba)
ID: 1271 install last page no css/js (tarik/rgriffith))
ID: 1272 delete functions always return true (rgriffith)
ID: 1273 template duplicate issue (irmtfan)
ID: 1274 prevent multiple inclusions of a module's xoops_version.php (irmtfan/rgriffith)
ID: 1278 _AM_SENDMTOUSERS missed (Mowaffaq/mamba)
ID: 1281 initialize arrays as empty arrays rather than null (rgriffith)
ID: 1285 check if session exists before attempting to start a new one (wishcraft)
ID: 1287 assigning "static" to various class methods (wishcraft/mamba)
ID: 1291 xoops_getModuleOption() did not respect $dirname (rgriffith)
ID: 1382 add cleanup of unused avatar resources to admin maintenance page (rgriffith)
reversing fix for potential lack of rendering css and javascript in Installer on the last screen by culex
removing @ in link[@rel*=style][title] in styleswitch.js (not needed in jQuery 1.83) (SMEDrieben/Mamba)
added missing "`" in upgrade from 2.0.18 to 2.3.0 (mamba)
fixing errors in upgrade from 2.4.0 to 2.4.1 (mamba,voltan)
added check for menu link description in ModuleAdmin
fixed wrong return icon in Smarty xoModuleIcons32
fixed issue with jGrows in xoops.css (xoobaru/tarik)
fix for deprecated "preg_replace/e" function in PHP 5.5 (mamba)
added: check if 'date.timezone' is set in php.ini, if not, set it to UTC (cesag/mamba)
assigned _SHORTDATESTRING to _CAL_FORMAT to have consistency in local languages (jcweb/guspel)
fixed bug in calendar.js (mamba)
added link to Module's Admin after "Update" (currently only to XOOPS Modules section) (mamba)
added placeholder for a link to upload test data, if available after installation (mamba)
solved bug into PM module readpmsg.php (escrime-info/slider84)
fixed missing check on variable in userinfo.php (cesag/mamba)
replaced extract($_POST) in /include/comment_delete.php with filters (mamba)
adding some missing generic default fonts (mamba)
removing some unreachable statements (mamba)
replacing deprecated HTML tags (mamba)
bug in commentrenderer.php (Roby73/irmtfan)
added missing info about new language constants in Fast Comments (irmtfan/mamba)
fixed Undefined index: uid in file /modules/profile/userinfo.php line 24 (cesag/mamba)
set minimum PHP version to 5.3.7 (mamba)
added missing apostrophe corrections for Date types in CleanVars in /class/model/write.php
added function escape to XoopsMySQLDatabase, needed for Formulize (jegelstaff)
added blank.gif images to ModuleAdmin icons (timgno)
addedd [soundcloud] BB code as supplied by (iHackCode/rgriffith)
fix for cancel button in javascript (currently it still entered the text, even if canceled) (mamba)
added "module_status" to show with module Version (mamba)
patch for input validation bypass issue reported by Tatane (tatane/rgriffith)
change default value for usercookie config to match change in 2.6.0. (rgriffith)
correct method used to determine the current effective language.(rgriffith)
fix errors "PHP Strict standards: Redefining already defined constructor" under PHP 5.5 (rgriffith)
fix to correctly load the CSS file into the header in ModuleAdmin (Bleekk, Alfred)
added "title" to buttons in DHTML Editor (mamba)
updated required PHP and XOOPS versions, module versions in modules (cesag/mamba)
added xBootstrap theme (UI/UX Team: Angelo Rocha, Bleekk, Heyula)
added extra escape for "e" in YESTERDAY definition in locale.php, which was added in PHP 5.4 (madDan)
fixed PHP minimum version comparison in ModuleAdmin (mamba)
fixed System Module image manager and popup image manager save images in different directories(luciorota)
added PHPDoc comments for classes and functions (mamba)
fixed System Module image manager html/js bugs (luciorota)
replaced "array_diff_assoc" with "array_diff_key" in /class/theme_blocks.php (masel/mamba)
icons for active module sections in System module not shown correctly (Slider84/mamba) 
added two new language definitions (see lang_diff.txt)
added Office 2007 MIME types (Voltan)
added xml MIME type (Goffy)
added new icons (mamba)
updated XoopsMediaUploader to use system memory values from php.ini, and to offer random file names (mamba/luciorota/zyspec)
added .tpl to XoopsList's getHtmlListAsArray (wizanda)
updating xBootstrap (voltan, Angelo Rocha)
moved all images, CSS, and JS files to /assets in modules Profile and PM (mamba)
renamed .html Smarty templates to .tpl in modules Profile and PM (mamba)
corrected English typos (cesag)
added missing .php file extension (AngeloRocha/Zyspec/rgriffith)
deprecated destoryVars($var) in object.php (cesag/rgriffith)
update phpmailer translation array to include all keys, and remove reassignment of $PHPMAILER_LANG as array() (cesag/rgriffith)
added XoopsRequest class (rgriffith)
removed hard-coded text from installation (mamba)


Updated:

jQuery to 1.11.0 (mamba)
jQuery UI 1.10.4 (mamba)
jQuery Lightbox to 1.2.3 (mamba)
jQuery Form to 3.50.0 (mamba)
jQuery Tablesorter to 2.5.11 (mamba)
jGrowl to 1.2.14 (mamba)
prototype.js to 1.7.1, Aug 2012 (rgriffith)
HTML Purifier to 4.6.0 (mamba)
TinyMCE to 3.5.11 (mamba)

Read more: http://xoops.org/modules/news/article.php?storyid=6658



display more versions




2.5.6
 (security release)
29 April 2013 - 38MBSecurity fixes:

XSS/CSRF vulnerability in system/admin/groupperm.php (Dingjie Yang,Qualys/trabis)
XSS/CSRF vulnerability in system/modulesadmin/main.php (Dingjie Yang,Qualys/trabis)
XSS/CSRF vulnerability in system/admin/blocksadmin/main.php (Marcin,Ariko-Security Team/trabis)
LFI vulnerability in system/admin/tplsets/jquery.php (Marcin,Ariko-Security Team/trabis)


Bugfixes:

updated English translations (Cesag,Mamba)
extra check for $noHtml in XoopsEditorHandler->get (luciorota)
fixing $GLOBAL typo in jquery.php (Zyspec)
Array to string conversion (geekwright/mamba)
issues with missing xoopscomments table (geekwright/sabahan/Mamba)
bug with using reference for non-variables (geekwright/mamba)
number of users when "all groups" selected was wrong (tatane/mamba)
fix for potential lack of rendering css and javascript in Installer on the last screen (culex)
fix for missing Protector logo under PHP 5.4 (mamba) 
replacing ereg with preg_match in userutility.php (pmartina/paul)
#1219 dhtmltextarea editor accent not displayed (cesag/alain091)
added missing call for user language in /profile/index.php (xoobaru/zyspec)
errors related to static functions, so it works on PHP 5.4 (Mamba)
bug #1245 in class XoopsLoad.php (Alain91)


Updated:

TinyMCE to 3.5.8 (mamba)
Smarty to 2.6.27 (mamba)
jQuery to 1.8.3 (mamba)
jQueryUI to version 1.10 (mamba)


Added:

Fast Comment Hack (Voltan)

Read more: http://xoops.org/modules/news/article.php?storyid=6476






2.5.5

16 April 2012 - 38MB





2.5.4

21 November 2011 - 38MB





2.5.3

4 October 2011 - 36MB





2.5.2

3 October 2011 - 36MB





2.5.1a

2 May 2011 - 34MB





2.5.1

9 April 2011 - 34MB





2.5.0

10 November 2010 - 34MB





2.4.5

12 July 2010 - 48MB





2.4.4

5 April 2010 - 48MB





2.3.3

16 March 2009 - 39MB





2.2.3a

27 November 2005 - 8MB





2.0.13.1

20 August 2005 - 8MB





2.0.13

5 July 2005 - 8MB





2.0.10

10 May 2005 - 2MB





2.0.9.2

18 January 2005 - 2MB





2.0.7.3

27 September 2004 - 2MB





2.0.7

8 April 2004 - 2MB





2.0.6

8 April 2004 - 2MB