[ Avaa Bypassed ]




Upload:

Command:

hmhc3928@18.191.233.251: ~ $
=== Version 3.6.15.6 - build 18025 ===
- Added y.sulistya's fix in module_bbb about year options 
- Fixed path traveral and sql injection vulnerabilities reported by securenetwork
- Changed serialize object to json for security reasons
- Fixed issue about importing users_to_courses when many courses with same name exists
- Fixed assign course to branch does not propage to branch inactive users
- Fixed minor bug in apidemo2.php
- Fixed sending message to group does not include inactive users
- Fixed issue duplicate on event notifications when editing a notification
- Fixed issue common pool questions added to test, show properly when switch to lesson questions
- Fixed issue about removing job positions from branch (and user has no more supervised branches)
- Fixed issue about resetting user progress in course on reset course before expire option
- Fixed issue about session id in csrf check
- Saml updates
- Scorm fixes
- Fixed favicon

=== Version 3.6.15.5 - build 18024 ===
- Fixed translations for js warnings in user profile
- Fixed baned user reset failed login attempts 
- Fixed get_user_autologin_key api call requires user password
- Fixed issue get first visitable iterator when professor and units in content inactive
- Fixed module course reports extra user info in course report
- Fixed export users_to_lessons
- Fixed checkpassword api call
- Fixed issue complete lesson for professor assigned as student in course/lesson
- Fixed permissions when enterprise and organization hidden and users not hidden
- Fixed issue supervisor in branch url views only branch courses
- Fixed issue resend sent notification as html message
- Fixed api call create_course
- Fixed api calls archive/unarchive/delete lesson/course
- Fixed issue invalid id in lesson reports if test question deleted
- Fixed issue course_archive (date) option in import to unassign users from course
- Fixed api add_lesson_to_course/remove_lesson_from_course
- Fixed xml certificate <organization> to display branch name if not text is set
- Fixed java detection in optionchecker for IE11
- Remove commented out line in closing.tpl that caused issues
- Fixed issue about exporting to excel in course reports module (#6394)
- Fixed issue in ajax_sorted_table created in previous mini release
- Removed online users response from periodic updater for themes without left sidebar
- Fixed online users block appearance for sidebar themes
- Excluded ini files from default allowable file list for uploading
- Added objectives storing to scorm 
- Added check to folder that file manager tries to show (vulnerability issue noticed by Mohan Kallepalli)
- Increased possible number of days after event that a notification can defined
- Fixed issue in import users_to_courses with strict mode in mysql
- Fixed issue about exporting lesson to scorm when unit contains a question mark(?)
- Fixed vulnerability issue about uploading from url a local file of server noticed by Mohan Kallepalli
- Fixed vulnerability issue about uploading non allowable extensions noticed by Mohan Kallepalli
- Fixed issue about 'session expired' message (in Chrome) after resetting password

=== Version 3.6.15.4 - build 18023  ===

- Fixed SQL Injection and Remote File Inclusion Vulnerability issues noticed by rgod working with Beyond Security's SecuriTeam Secure Disclosure program <http://www.beyondsecurity.com/ssd.html>
- Added print all units in lesson
- Fixed issue about max_online_users_threshold
- Fixed issue about path of .htaccess file when creating branch urls because file was created into module that runs the script
- Fixed issue about expiring sessions in user_times (#6310)
- Performance fix in copy files function
- Fixed csrf check for student ajax calls
- Fixed issue about backup option on automatic upgrades
- Fixed issue about PHPSESSID used for csrf check
- Added a user friendly message when user does not exist while adding a mapped account
- Fixed issue about clean up functionality in maintenance page
- Fixed sorting by assigned lesson in Associated lessons in Job position data
- Fixed default job position when assigning user to branch is 'No specific job position'
- Fixed import users to jobs does not assign branch courses if system option does not allow 
- Fixed getEmployees(Jobs) and getJobDescriptions(branches) do not return non active or archived users
- VideoJS upgraded to latest version (4.12.0)
- Fixed issue when multiple tables in same page / module shared files minor changes
- Fixed nested quotes issue in forum
- Fixed completed user reassigned to course does not trigger not completed course event
- Fixed certification expiration not sent if course is inactive or archived
- Fixed garbage in recipient field when encrypt url enabled and send to all in find users
- Fixed delete notifications of inactive users
- Fixed Find users [Course criteria] does not include users that used to have a course but not now
- Fixed correct labels in participation reports 
- Fixed sending a message, when in branch, filter out unreleated lessons
- Fixed delete pending notifications for course when user(s) are removed from course

=== Version 3.6.15.3 - build 18022  ===
- Fixed issue updating user status
- Fixed issue updating user status and social modules activated
- Fixed issue special character in lesson material
- FIxed issue imageType when upper case file extension
- Fixed issue apply a function to all units to linked units does not replace data with efront#special#text
- Fixed issue group filter in lesson/course reports for professors/students
- Fixed issue first inactive/empty unit - creating empty units as professor
- Fixed issue user dashboard shows only not expired/not submitted projects
- Fixed issue professor get the first valid unit when accessing content
- Fixed issue user->getGroups returns groups in alphabetical order
- Fixed issue groups filter in test reports
- Fixed clear cache when activating/deactivating language
- Fixed api create/update user name and surname with spaces
- Fixed gradebook issue when count old users equals count new users in lesson
- Fixed test completion notification not sent when test fails
- Added missing header column in course excel reports
- Various fixes in social functionality and social options 
- Fixed issues in random tests reports
- Fixed pin_red icon in hotspot questions
- Fixed performace issue in (skill-gap) tests (#6108)
- Fixed issue about selecting questions when switching from random  to non-random tests
- Added remaining days information in course's lesson dashboard page visible to students (#6130)
- Fixed facebook login issue (facebook api changes)
- Fixed issue about time displayed in branch reports module
-  Added grid questions to feedback reports question analysis
- Fixed csrf issues sent by Steffen Rösemann
- Changed autologin to create a random string
- Fixed showing tooltip for lesson/course info in index page
- Fixed issue in mapped accounts about logging out current user in case the mapped account is an inactive user
- Added load custom class in tests (ancient greek keyboard)
- Prevent student to access another student certificate link manually
- Fixed deleted skills taken into account when completing course/lesson
- Fixed org chart not displaying for administrator

=== Version 3.6.15.2 - build 18021 ===
- Fixed issue about logging out user when professor resets his lesson progress into specific circumstances
- Fixed issue about users to files for files with no database entry
- Projects compress data does not include user files no longer in lesson
- Content type events are now shown in event reports when selecting a course
- Added Users status in options that can be disabled for lesson by professor (Administration page)
- Fixed not valid unit in skill gap tests
- Fixed search forum topics permissions
- Fixed projects block links in professor dashboard
- Clear languages cache when editing a language
- Performance update for question common pool
- Fixed issue about filter data (eF_filterData) in enterprise editions
- Added ability to upload custom language files from interface
- Content type events are now shown in event reports when selecting a course
- Added Users status in options that can be disabled for lesson by professor
- Added ability to upload certificate signature image
- Fixed issue about email block feature in user profile


=== Version 3.6.15.1 - build 18020 ===
- Added grip questions
- Added hotspot questions
- Added random test functionality
- Added option to clear exported lessons/courses files
- Added option to clear all tests executions of a lesson
- Added option to clear editor's cache
- Added option to delete temp backup folder
- Added option to add/remove from all groups in advance reports
- Added option to limit number of SCORM retries
- Added notification for course user approval/rejected by supervisor
- Added option for backup all data via system calls for better performance if available (linux installations) (#5760)
- Fixed performance issue in assigning lessons to existing group users
- Fixed issue about resetting lesson data when importing lesson from professor
- Fixed issue about units with parent_content_ID null (#5801)
- Fixed issue about changing user type in users_to_courses/users_to_lessons when a custom user type is deleted
- Fixed issue about unpublished tests and content completion rules
- Navigating away from a SCORM popup's parent window is no longer possible
- Fixed issue about changing specific options of linked units when source unit is edited
- Fixed issue about redo only wrong questions where pausing test did not work correctly
- Removed line about assignSourceBranchToInstance() when creating course instances
- Replaced basename with eFront_basename that does not depend on setlocale
- Extended fields returned for user_courses action in api2
- Fixed issue about deleting old tokens while creating a new one
- Show only professor's groups in selectbox for tests reports
- Completed tests are shown in new tab in tests page
- Fixed various issues in export/import lesson (Added also option for excluding search entries)
- Show group selection option in sending messages
- Fixed issue about wrong entries in search_keywords table for files metadata(same rows)
- Fixed issue in IE about eF_js_setCorrectIframeSize() in scorm content
- Changed compress() to include empty folders too
- Performance fix in page that displays course info (#5574)
- Fixed issue about not showing branches in People page for supervised users
- Fixed issue about trying to access a folder just after renaming it
- Added $overwrite_folder parameter in directory -> copy in case we want to overwrite folder but not its files.
- Fixed issue about Files link in header 
- Fixed issue about caching logo
- Added code to check course completion in case course must have been completed but it is not (remove lesson from course after all other lessons were completed)
- Fixed issue about showing best score in test in lesson reports
- Changed _EDIT to _RENAME in filemanager 
- Fixed issue about checking ldap option while creating a user
- Added courses associated with job positions in $supervisor -> supervisesCourses();
- Fixed next lesson panel not respecting lesson order
- Added option about showing inactive courses in user reports (#5097)
- Do not show linked_to questions in common pool mode (since they are already shown from origin lessons)
- Added course_start_date and course_end_date templates in notifications for all course types
- Fixed professors that login through the branch url to see only the users that belong to their branch in the lessons page
- Added float left in radio buttons for multiple one questions because of #5244
- Fixed issue about wrong session type when clicking home page from a lesson with different role (#5232)
- Fixed issue about branch filter in sortedTable(#5138)
- Changed outlook invitation in order not to send the invitation when start date of the course is in the past when assigning users to courses
- Added option for Archive field in advanced report conditions
- Fixed issue about inactive link for entering lesson in lessons list in case tooltip is globally disabled.
- Fixed issue about exporting xls reports with counting user types
- Fixed issue about upgrading questions with content_ID=0 when loading tests page
- Fixed performance issue in advlink plugin of editor about loading lesson files
- Improved complexity in toPathStrings()
- Fixed issue about displaying courses list where a course contains inactive instances
- Fixed module training reports not showing inactive courses
- Fixed issue about enabling cache
- Fixed lesson select box shown in payments notifiction creation
- Fixed issue about accepting 0 days after course enrollment in dynamic lesson scheduling
- Fixed an issue in editing polls about displaying options
- Added navigation links for folders inside file manager
- Fixed issue about allowing duplicate branch urls
- Fixed issue about visible option for messages according to user type
- Fixed issue about rawurlencode in popup scorm import with subfolders
- Added getOrganizationLinkInfo() for displaying an icon link on organization page
- Added ability for attachments in forum
- Added option in multipleMany questions about limiting user answers
- Added option about overwriting existing file on upload
- Added ability to edit last forum post
- Fixed inactive courses/lessons shown in add notifications selectboxes
- Replaced $workSheet -> write with $workSheet -> writeString for logins because of missing leading zero in case of numerical logins
- Fixed issue about external link urls being enctypted 
- Extended eF_checkParameter in order to allow 'surname,name' in sortedTable column
- Fixed issue about non valid lines in htaccess about branch urls
- Prevent exception when sending notification in case user has not email address defined
- Exclude images loaded as binary data from applyImageMap filter
- Fixed issue about certificate expiry notification
- Added createSubstitutionsArrayForDateNotifications function for date events with specific conditions
- Fixed issue about editing date type notifications and default values.
- Added option about backup in auto-upgrade
- Fixed issue about time in lesson that was not shown in user reports.
- Added infrastructure for users to files (increase counter when a user isviewing or downloading a file)
- Fixed about about displaying calendar in dashboard while it was globally disabled
- Fixed issue about lesson users in professor administration page
- Added PEAR error handling in notifications in case mail was not sent
- Added option to clear editor's cache
- Added option to clear exported lessons/courses files
- Fixed articulate tincan content not launching properly with HTML5
- Exclude additional_accounts field when filtering users
- Module course reports, course lessons reports, course instances issue fixed
- Fixed EfrontLesson::getUsers() to include all student/professor based user types
- Fixed issue about set course as completed only to shown users
- Fixed issue in tinyMCE editor about removing attributes from <p> tags
- New system events: user activated, user archived, user unarchived
- Fixed scorm tree error when clicking hide all when all shown
- Fixed scorm option Action on re-entry set for all lesson materials
- Fixed linked tests and questions can not be editted
- Import/Export courses to branches
- Fixed certificate reports do not include unactive users
- Fixed missing options of admin user type: find user, skill gap tests and connected users
- Module module_mycourses_sidebar added
- Fixed on branch focus in usersTable literal "Filter..." is removed
- Fixed permission for admin to always access organization chart
- Fixed priority for user's language when user logs in to branch
- Fixed setting version key for unlimited users
- Creating new job accepts 0 as value for Available placements
- In lessons, within lesson projects, inactive users removed from users' list
- Fixed issue exception when student prints test
- Fixed issue with user's name and surname in module_training_report
- Fixed issue visible option for messages according to user type permissions
- Fixed issue viewing lesson/course information for index
- Fixed issue price fixed in lessons list
- Fixed issue view cerfificates of users when supervisor and student
- Fixed issue correct number of question in feedback excel reports
- Fixed issue feedback reports and raw text questions/answers
- Fixed navigation path for add user
- Fixed event reports export for courses and excel filename
- Chat module version 1.3 (create log and various bug fixes)
- Fixed logo resized in pdf export when logo too big
- Fixed submiting test when maintain_history has empty value
- Fixed activating/deactivating/deleting a unit perfoms same operation to linked units
- Fixed formatLogin to add login to same formated names
- Fixed avoid duplicate notification when editting a project and changing its expiration date
- Fixed submit option for surveys when session lessons ID is not set
- Fixed issue professors/students permissionswhen when viewing lessons with custom user type and going back to home
- Fixed professors that login through the branch url to see only the users that belong to their branch in the lessons page
- Fixed bulk adding courses to groups
- Fixed added course column in participation reports
- Fixed trainer (user in branch) when adding new course can only see his own branch
- Fixed trainer can not see course instances if system configuration is disabled
- Fixed countCourseUsersIncludingUnassigned when branch in constrains
- Fixed issue, correct branch options when professor edits course in branch url
- Fixed issue sending messages to branch and subbranches
- Fixed issue course reports when course has no lessons
- Fixed error message when user tries to login to branch after his account has been deactivated
- Fixed issue in messages when moving messages from one folder to another  
- Fixed issue in signup with values of custon fields of type select
- Fixed eF_getRemoteAddress() to get the correct $_SERVER['REMOTE_ADDR']
- Fixed issue download attachments in messages
- Fixed issue professor in Tools > Courses can view courses that he has created ONLY
- Fixed issue timezone removed from filter
- Fixed skills and skill categories listed alphabetically.
- Fixed issue maintain user type in courses when adding/editing job placement 
- Fixed issue maintain user type in lessons when adding/editing job placement
- Fixed permissions for organization chart in sidebar.php
- Fixed user report generator course and lesson status to show completed courses and not remaining courses 
- Fixed skills sorting in skills offered tab in courses
- Fixed skills sorting in skills desired tab in job position data
- Fixed empty spaces question when option "Display alternatives in select box" is activated when "Show correct answer" function is used.
- Fixed correct count of users (students) in courses list 
- Fixed correct link to course lesson in Tools > Courses > Course Lessons tab as professor
- Fixed correct user progress in lesson when unactive units present
- Fixed export course when illigal filename
- Translated "Available instances" token
- Fixed issue if course completed correct completed status in user progress pop (course certificates page) 
- Fixed father branch automplete in add branch
- Fixed organization chart permissions
- Fixed importing users_to_skills imports also speficifations
- Version 2.0 of chat module
- Added specifications to desired skills in job positions
- Sending EfrontEvent::COURSE_PROGRAMMED_EXPIRY notification only to non completed course users
- Correct user type in group/lesson when user enrolls to group with group key
- Fixed results for project do not include deleted users
- Fixed results for project do not include deleted users getUsers()
- Fixed firstUnseenUnit when tests/dashboard disabled
- Fixed sql query in getCourseUsersAggregatingResults in course.class.php
- Fixed payments issue in community edition
- Fixed issue with branch filter in edit course/course users tab
- Fixed results for project do not include deleted users in control panel

Filemanager

Name Type Size Permission Actions
images Folder 0755
php53 Folder 0755
php56 Folder 0755
php71 Folder 0755
.htaccess File 137 B 0644
changelog.txt File 19.75 KB 0644
configuration.php File 822 B 0644
edit.php File 4.83 KB 0644
edit.xml File 433 B 0644
fileindex.php File 119 B 0644
import.php File 3.07 KB 0644
info.xml File 1.67 KB 0644
install.js File 924 B 0644
install.php File 6.88 KB 0644
install.xml File 2.14 KB 0644
md5 File 4.53 KB 0644
notes.txt File 544 B 0644
php.ini File 239 B 0644
phplivedocx_config.php File 179 B 0644
upgrade.php File 3.83 KB 0644
upgrade.xml File 291 B 0644