! -> Note
$ -> Affected files
+
+20-Oct-2009 Janusz Dobrowolski
+! Conditional config files generation - prevents overwrite during upgrade.
+$ /config.php (removed)
+ /installed_extensions.php (removed)
+ /company/0/installed_extensions.php (removed)
+ /config.default.php (new initial default)
+ /config_db.php (removed initial version)
+ /admin/inst_lang.php (removed initial version)
+ /admin/db/maintenance_db.inc
+ /includes/session.inc
+ /install/index.php
+ /install/save.php
+ /lang/installed_languages.inc (removed initial version)
+! Moving control to install wizard when config file does not exists.
+$ /index.php
+# Fixed db error message
+$ /dimesion/includes/db/dimension_db.inc
+
+18-Oct-2009 Janusz Dobrowolski (merged changes for 2.1.7 from main branch)
+! Added html_entity_decode() in db_escape() for correct INSERT>SELECT>INSERT sequences.
+$ /includes/db/connect_db.inc
+# Fixed warnings on first page display
+$ /admin/company_preferences.php
+# Fixed erroneous message
+$ /gl/manage/gl_account_types.php
+# Security sql statements update against sql injection attacks.
+$ /admin/attachments.php
+ /admin/payment_terms.php
+ /admin/print_profiles.php
+ /admin/printers.php
+ /admin/shipping_companies.php
+ /admin/view_print_transaction.php
+ /admin/db/company_db.inc
+ /admin/db/printers_db.inc
+ /admin/db/voiding_db.inc
+ /admin/db/users_db.inc
+ /dimensions/includes/dimensions_db.inc
+ /dimensions/inquiry/search_dimensions.php
+ /gl/bank_account_reconcile.php
+ /gl/gl_budget.php
+ /gl/includes/db/gl_db_account_types.inc
+ /gl/includes/db/gl_db_accounts.inc
+ /gl/includes/db/gl_db_bank_accounts.inc
+ /gl/includes/db/gl_db_bank_trans.inc
+ /gl/includes/db/gl_db_banking.inc
+ /gl/includes/db/gl_db_currencies.inc
+ /gl/includes/db/gl_db_rates.inc
+ /gl/includes/db/gl_db_trans.inc
+ /gl/inquiry/bank_inquiry.php
+ /gl/view/bank_transfer_view.php
+ /gl/view/gl_trans_view.php
+ /inventory/cost_update.php
+ /inventory/purchasing_data.php
+ /inventory/includes/db/items_category_db.inc
+ /inventory/includes/db/items_codes_db.inc
+ /inventory/includes/db/items_db.inc
+ /inventory/includes/db/items_locations_db.inc
+ /inventory/includes/db/items_prices_db.inc
+ /inventory/includes/db/items_trans_db.inc
+ /inventory/includes/db/items_units_db.inc
+ /inventory/includes/db/movement_types_db.inc
+ /inventory/inquiry/stock_movements.php
+ /inventory/manage/item_categories.php
+ /inventory/manage/item_units.php
+ /inventory/manage/items.php
+ /inventory/manage/locations.php
+ /inventory/manage/movement_types.php
+ /manufacturing/search_work_orders.php
+ /manufacturing/includes/db/work_centres_db.inc
+ /manufacturing/includes/db/work_order_issues_db.inc
+ /manufacturing/includes/db/work_order_produce_items_db.inc
+ /manufacturing/includes/db/work_order_requirements_db.inc
+ /manufacturing/includes/db/work_orders_db.inc
+ /manufacturing/includes/db/work_orders_quick_db.inc
+ /manufacturing/inquiry/where_used_inquiry.php
+ /manufacturing/manage/bom_edit.php
+ /manufacturing/manage/work_centres.php
+ /purchasing/po_entry_items.php
+ /purchasing/po_receive_items.php
+ /purchasing/supplier_credit.php
+ /purchasing/supplier_invoice.php
+ /purchasing/includes/purchasing_db.inc
+ /purchasing/includes/db/grn_db.inc
+ /purchasing/includes/db/invoice_db.inc
+ /purchasing/includes/db/invoice_items_db.inc
+ /purchasing/includes/db/po_db.inc
+ /purchasing/includes/db/supp_trans_db.inc
+ /purchasing/includes/db/suppalloc_db.inc
+ /purchasing/includes/db/suppliers_db.inc
+ /purchasing/inquiry/po_search.php
+ /purchasing/inquiry/po_search_completed.php
+ /purchasing/inquiry/supplier_allocation_inquiry.php
+ /purchasing/inquiry/supplier_inquiry.php
+ /purchasing/manage/suppliers.php
+
+12-Oct-2009 Janusz Dobrowolski (merged)
+# Fixed sql injection vulnerability on some php/mysql configurations
+$ /admin/db/users_db.inc
+! Single quotes also encoded before database data insert
+$ /admin/db/maintenance_db.inc
+ /includes/db/connect_db.inc
+ /reporting/includes/tcpdf.php
+ /sales/includes/cart_class.inc
+
+16-Oct-2009 Janusz Dobrowolski
++ Access control system description.
+$ /doc/access_levels.txt (new)
+
+14-Oct-2009 Janusz Dobrowolski
+# [0000173] Missing global systypes_array declaration.
+$ /purchasing/allocations/supplier_allocate.php
+
+14-Oct-2009 Joe Hunt
+# [0000172] Difference between Customer Balances and Print Statements
+$ /reporting/rep108.pp
+
+13-Oct-2009 Janusz Dobrowolski
+# Fixed default page access.
+$ /sales/inquiry/sales_orders_view.php
+
+13-Oct-2009 Joe Hunt
++ Added discrete users online in footer (from Wish List Forum) (New rerun)
+$ /admin/db/users_db.inc
+ /sql/alter2.2.sql
+ /sql/en_US-new.sql
+ /sql/en_US-demo.sql
+ /themes/aqua/renderer.php
+ /themes/cool/renderer.php
+ /themes/default/renderer.php
+! Changed Tag types in reports_classes to be the same as defined in types.inc. Suitable height=5
+$ /reporting/includes/reports_classes.inc
+! Code cleanup (old code removed)
+$ /includes/ui_view.inc
+
+12-Oct-2009 Janusz Dobrowolski
+# Fixed sql injection vulnerability on some php/mysql configurations
+$ /admin/db/users_db.inc
+# Fixed broken table editor page layout on duplicate record.
+$ /gl/includes/db/gl_db_account_types.inc
+ /gl/includes/db/gl_db_accounts.inc
+ /gl/manage/gl_account_classes.php
+ /gl/manage/gl_account_types.php
+ /gl/manage/gl_accounts.php
+# [0000169],[0000174] Removed sparse session var unset firing error.
+ /sales/allocations/customer_allocation_main.php
+ /purchasing/allocations/supplier_allocation_main.php
+
+11-Oct-2000 Joe Hunt
+# [0000168] Undefined variable: paylink in file rep110.php
+$ /reporting/rep110.php
+ /reporting/includes/pdf_report.inc
+
+11-Oct-2009 Janusz Dobrowolski
++ Added security area for sales quotes entry
+$ /applications/customers.php
+ /includes/access_levels.inc
+ /sql/alter2.2.php
+ /sql/en_US-demo.sql
+ /sql/en_US-new.sql
++ Standard SA_DENIED access level added.
+$ /includes/current_user.inc
++ Added helper function for setting page_security level depending on GET content and/or expression value
+$ /includes/session.inc
+# Fixed security areas sort order
+$ /admin/security_roles.php
+# Fixed page_security for various usage types.
+$ /sales/sales_order_entry.php
+ /sales/inquiry/sales_orders_view.php
+
+10-Oct-2009 Janusz Dobrowolski
+! Changed access control extensions support for modules/plugins to use unique extension ids
+$ /admin/inst_module.php
+ /admin/security_roles.php
+ /admin/db/maintenance_db.inc
+ /includes/access_levels.inc
+ /includes/current_user.inc
+ /installed_extensions.php
+ /index.php
+# Enabled error handling for extensions
+$ /frontaccounting.php
+# Page code rewrite
+$ /admin/inst_module.php
+# Fixed missing parameters in update_user_display_prefs call
+$ /admin/users.php
+! Non-accesable menu options displayed as text instead of link
+$ /applications/customers.php
+ /applications/dimensions.php
+ /applications/generalledger.php
+ /applications/inventory.php
+ /applications/manufacturing.php
+ /applications/setup.php
+ /applications/suppliers.php
+# Fixed error handling for duplicate table records
+$ /includes/errors.inc
+# Fixed php 5.3 function name conflict
+$ /includes/main.inc
+ /sales/inquiry/sales_orders_view.php
+# Fixed delivery note edition bug (introduced during systypes rewrite)
+$ /sales/includes/cart_class.inc
+! Changed page_security to SASALESINVOICE
+$ /sales/inquiry/sales_deliveries_view.php
+
+09-Oct-2009 Joe Hunt
++ Added option to print delivery notes as packing slip in reports and links.
+$ /includes/ui/ui_controls.inc
+ /reporting/rep110.php
+ /reporting/reports_main.php
+ /reporting/includes/doctext.inc
+ /reporting/includes/doctext2.inc
+ /reporting/includes/header2.inc
+ /reporting/includes/pdf_report.inc
+ /reporting/includes/reporting.inc
+ /sales/customer_delivery.php
+ /sales/sales_order_entry.php
+
+08-Oct-2009 Joe Hunt
++ Prepared the Report Engine for Tags handling.
+! Changed report::getDisplay() to use combo_input from ui_lists.inc insted of local function
+ dup_simple_codeandname_list().
+$ /reporting/includes/reports_classes.inc
+! Changed a parameter in report 301.php to be Summary Only instead of Detailed report.
+$ /reporting/reports_main.php
+ /reporting/rep301.php
+
+06-Oct-2009 Tom Hallman
+# moved commit_transaction and added a default use_transaction param in write_journal_entries
+$ /gl/includes/db/gl_db_trans.inc
+# Show Journal Entries from 2.1 as closed in Journal Inquiries.
+$ /gl/inquiry/journal_inquiry.php
+
+03-Oct-2009 Janusz Dobrowolski
+# Fixed false upgrade related error displayed in some situations on logout.
+$ /access/logout.php
+# Missing old_db declaration fixed.
+$ /includes/current_user.inc
+# Fixed combo_input and array_selector to accept array of selected items from POST.
+$ /includes/ui/ui_lists.inc
+! Changed structure of tag_associations table.
+$ /sql/alter2.sql
+ /sql/en_US-new.sql
+ /sql/en_US-demo.sql
+
+03-Oct-2009 Joe Hunt
+# Bad conversion of timestamp value in report audit trail.
+$ /reporting/rep710.php
+
+01-Oct-2009 Janusz Dobrowolski
+! Added comment on add_access_extensions usage.
+$ /includes/access_levels.inc
+# Removed sparse add_access_extensions() call.
+$ /includes/session.inc
++ Added support for multiply select options in combo_input.
+$ /includes/ui/ui_lists.inc
+! Unaccesable menu options are now displayed as grey text.
+$ /themes/aqua/default.css
+ /themes/aqua/renderer.php
+ /themes/cool/default.css
+ /themes/cool/renderer.php
+ /themes/default/default.css
+ /themes/default/renderer.php
+
------------------------------- Release 2.2 Beta ----------------------------------
30-Sep-2009 Joe Hunt
! Release 2.2 Beta
projects / fa-stable.git / blobdiff