10 April 2012 v3.6.11 build 15059

For additional release info check the forum post here
- Updated SCORM debug mode to be set from the configuration and log to the console (instead of alert)
- Properly escaped LMS-to-SCORM communication
- A file not found (404) header is sent for missing files
- Members logged in through a specific branch url are only viewing their organization's Org chart part
- Excluded login block and installation form from CSRF filtering
- Fixed file requests overlapping with branch urls in certain cases
- Fixed user profile page showing an error when updating and there's a files white list set
- Fixed projects list not appearing in student's dashboard
- Fixed percentages in "Adjust questions" options to correctly calculate total questions

10 April 2012 v3.6.11 build 14714

For additional release info check the forum post here
- Added ability for professor to create courses/lessons
- Added RTL theme
- Added global CSRF protection
- Added functionallity of multiple comments in project page
- Added datepicker option in complete for all students in progress
- Added code to handle 'New comment' info to dashboard in projects
- Added test failure notification
- Added checkSpam functionality for denying access to IPs that use outside forms (contact,sign up, reset password) very often
- Added option to deactivate users after five contiguous unsuccessful login atempts
- Added option for professor to allow users to repeat test
- Added option about module_itself in custom user types, to disallow sub-type users from accessing modules
- Added option for changing completion date in courses
- Added check for mysql reserved words in custom user field creation
- Added a warning in case a file is uploaded with the same name as an existing one that has not write permissions
- Added more buttons in tinyMCE editor
- Added lesson percentage column in course stats
- Added ability to change lesson status from table in progress page
- Added group filter in test reports
- Added ability to send more than one attachment in eF_mail()
- Added ability to change completed status for students by clicking on the icon in progress page
- Added smart content in lesson options (Enterprise/Educational edition)
- Added reset certificate before expire option (Enterprise/Educational edition)
- Added ims option for toggling in control panel page (like scorm) (Enterprise/Educational edition)
- Added option in course settings for revoke all expired certificates (Enterprise/Educational edition)
- Added CEUs in custom reports results (Enterprise/Educational edition)
- Added ability for custom fields in certificate templates (Enterprise/Educational edition)
- Added course expiry notification (Enterprise/Educational edition)
- Added before course expiry notification (Enterprise/Educational edition)
- Added edit certificate key (Enterprise/Educational edition)
- Added user role selection field when assigning lessons/courses in reports generator (Enterprise/Educational edition)
- Added Branch URLs (Enterprise edition)
- Added "all supervisors" as option for recipients in notifications (Enterprise edition)
- Added multiple Job select in stats_filter (Enterprise edition)
- Added onAddUserPlacement() module function (Enterprise edition)
- Added time option in skill gap tests (Enterprise edition)
- Updated user profile to include skill categories, along with skill names (Enterprise edition)
- Updated paypal sandbox address to use ssl (Enterprise/Educational edition)
- Updated notifications process to lock while it's executing
- Upgrade videojs to last version (#2107)
- Extended characters converting to space when adding in EfrontSearch :: insertText
- Extended smart content functionality to create units with other file types (Enterprise/Educational edition)
- Extended XML API with "show users who completed lesson" and "show users that submitted a test" functions
- Changed 'start unit' added to scorm units to a template in order to be replaced according to user language
- Changed scheme for encoding mail headers from 'Q' to 'B'
- Changed link for doing the survey to be active in notifications
- Removed share files column from filemanager when adding unit if digital library option for lesson is inactive
- Removed submit button in course rules if course has only one lesson
- Converted org chart to perform ajax-based loading (Enterprise edition)
- Allow user to change his own profile when "Users" option in user types is set to "View"
- Prevented accessing a lesson when in a course that depends on another course, which is not part of the student's curriculum
- Module installation fail now calls module's uninstall() method
- Session expiration page now includes a login box
- Display invisible custom profile fields when creating user from admin page
- Updating from_timestamp value when re-assigning user to course if course is not completed (#1908)
- Implementing a common question pool (between lessons) (Enterprise/Educational edition)
- Exclude google view pdf links from being transformed to view_file.php?file format
- Display lessons/courses sorted in reports generator when assigning to users
- Default sorting by last post in forum page
- Filter php_self for xss attacks
- Fixed issue about folders with quote in name (') when navigating into folder from file manager
- Fixed issue about insert to editor flv files
- Fixed importing more than one jobs on the same user and csv, having "replace" mode to "on"
- Fixed showing a success message in "contact us", even if the email was not sent
- Fixed "more info" link not displaying as link
- Fixed scorm export for packets with non-english files
- Fixed issue about downloading language files
- Fixed issue about access forum page in lesson with instance_source
- Fixed issue about uploading avatar with same name more than one times
- Fixed issues about logo loading
- Fixed issues in getting possible recipients for messages
- Fixed errors displayed in time constraint reports when page submitted without selecting a course/lesson/project/test value
- Fixes for test analysis page
- Fixed issue about not allowing file name to contain quotes when renaming file from interface
- Fixed issue with counting questions in feedback page
- Fixed changing of registration date when editing user
- Fixed issue about shared files with share folder lessons
- Fixed issue about complete lesson and decimal point db error
- Fixed issue about displaying inactive users in recipients list
- Fixed issue about editing account as sub-admin where user was sub-admin too (#1952)
- Fixed language issues about first login change password
- Fixed issue about course not completed notification
- Fixed issue about assigning proper user type when assigning users to group via reports generator
- Fixed issue about course completing by admin for a professor with student role to the course
- Fixed issue about students showing skill gap tests after entering a lesson
- Fixed issue about last projects block in control panel of professor
- Fixed issue about title path (Breadcrumb) with / and () characters and → in title of anchors (#2042)
- Fixed issue about sub-subforums and last post
- Fixed visual issue in Chrome about lesson initialization and import page(id conflict with chat) (#2060)
- Fixed issue about custom user type and view value in progress
- Fixed chat issues about word wrap and chatbox titles with @
- Fixed js issues in file manager and IE about files with '
- Fixed add to cart issue with hash in url (#2075)
- Fixed issue about trying to directly access topics from forums that did not be enrolled to users
- Fixed paypal not accepting comma in prices
- Fixed lesson statistics not displaying test score when "active score" is not set
- Fixed redirection when resuming test for certain IE clients
- Fixed users losing their ldap status when updating their profile
- Fixed cart contents not being retained when server time is unsynchronized with client time
- Fixed drag and drop question results displaying out of order for wrong answers
- Fixed importing users to courses from csv with an empty type not working
- Fixed possible XSS attack while sending personal messages
- Fixed possible XSS attack while posting lesson comment
- Fixed possible XSS attack while sending content error report
- Fixed users bypassing lesson rules using a direct url
- Fixed possible XSS on table grid filter
- Fixed issue about more than one spaces between words in empty space questions
- Fixed issue about shared files with share folder lessons
- Fixed issue about assigning selected courses or lessons to group users or users already belong to this job position where existing roles were changed (#2141)
- Fixed issue about scorm export in case of a space in path (#2143)
- Fixed e-mail issue about HELO message and security filters (#2098)
- Fixed issue about assigning selected courses or lessons to group users or users already belong to this job position where existing roles were changed (#2141)
- Fixed issue about scoring in complete lesson when professor scores last remaining test
- Fixed issue about displaying archived users in organization chart
- Fixed issue about unit 'Accessible with a direct URL' (#2180)
- Fixed issue about location column in some tabs in course reports
- Fixed issue about coreAccess in tests
- Fixed issue about copying tests from another lesson where questions contained a file in subfolder that was already copied (from another question copy) in target lesson
- Fixed issue about active field in users to course imports
- Fixed issue about progressBar and decimal point
- Fixed issue about check icon in lesson progress (#2270)
- Fixed issue about links to send private messages when they are disabled
- Fixed issue in module quick mails about sending mails to archived administrators
- Fixed icon issue about 'Assign selected courses to group users'

2011/10/26 v3.6.10 build 12151

For additional release info check the forum post here
- Added visible option functionality in custom user profile fields
- Added ability to import users with subtypes via csv imports.
- Added "security module"
- Replaced decimal point and thousand separator with locale equivalents
- Security update: Fixed editor's "save template" not checking validity of inputted parameter (Reported by EgiX)
- Security update: Fixed unsafe file upload using capitalized extensions (Reported by EgiX)
- Security update: Fixed potential XSS attacks using unsafe GET parameters (Reported by Canberk Bolat of Mavituna Security and High-Tech Bridge SA Security Research Lab)
- Security update: Fixed possible sql injection attacks in multiple files (Reported by EgiX, Vulnerability Research Laboratory and High-Tech Bridge SA Security Research Lab)
- Security update: Fixed potential privilege escalation using cookies (Reported by EgiX)
- Security update: Fixed cookie information leaking using XSS (Reported by Semyon Perepelitsa)
- Security update: Fixed arbitrary file download issue (Reported by EgiX)
- Fixed "branchinfo" and "groupinfo" fields not appearing in user profile fields (Enterprise/Educational editions)
- Fixed issue about content tree management order
- Fixed issue about assigning users to branches page when filter was used (#1819)
- Fixed clearDuplicates for questions when copying questions from another lesson (#1812)
- Fixed drag and drop questions about background color issue with Chrome (#1831)
- Fixed improper handling of file black list during file upload
- Fixed tracking initialization about feedbacks
- Fixed feedback preview
- Fixed lesson timelines not listing events
- Fixed issue in forum page about pagination and subforums
- Fixed getSystemLogo function and an issue with site logo loading
- Fixed issue in reports generator about enrolling to lesson/course/group
- Fixed rounding error when submitting paypal price and using coupon

2011/10/10 v3.6.10 build 11944

For additional release info check the forum post here
-Added a "remember me" checkbox in login form (toggled from admin settings)
-Added a page that allows for applying the same settings across all lesson units
-Added an option to send notifications as personal messages
-Added forums and topics pagination
-Added limits for space usage in messages
-Added sorting terms in each tab in glossary page
-Added help links to modules towards the wiki page
-Added option to constrain XML API usage to a specific IP
-Added a minimal_view parameter for displaying less columns for messages in dashboard
-Added a trim in exploded fields from csv file
-Added urlencode when loading avatar
-Added index page parameter to filter courses/lessons (index.php?filter=maya)
-Added header for date in Mail::factory because of http://pear.php.net/manual/en/package.m ... l.send.php
-Added encodeURIComponent in filters http://www.sencha.com/forum/archive/ind ... 96295.html
-Added option to deactivate block moving in control panel for specific user types (#809)
-Added ability to import list of users to be archived
-Added "my courses" tools icon to user dashboard
-Added optional active time tracking (Educational/Enterprise editions)
-Added toggle checkbox for LDAP users in user's profile page (Educational/Enterprise editions)
-Added CEUs parameter in courses (Enterprise/Educational edition)
-Added time-based lesson completion rules (Enterprise/Educational edition)
-Added time-based unit completion option (Enterprise/Educational edition)
-Added html_entity_decode when url is encrypted because of #1429 [amp;view_unit]... (Enterprise/Educational edition)
-Added supervisor balance transferring to employees (Enterprise edition)
-Added self-enrollment option to groups (Enterprise edition)
-Added skill-gap test results page to students as well (Enterprise edition)
-Added ability for branch calendar events to appear to members of the branch's children as well (Enterprise edition)
-Added option for displaying sub-branch information in branch statistics (Enterprise edition)
-Added balance payments through paypal (Community++ and above)
-Added a "payments" tab on users' profile page (Community++ and above editions)
-Added ability to create mandatory fields without a default value in extended user profile (Community++ and above editions)
-Updated SCORM import to handle backslashes in imsmanifest hrefs
-Updated file access security
-Updated random generator for password reminders
-Updated top level units to be marked as complete if all sub units are marked as complete
-Updated uploaded projects from students so that they are placed to an internal folder named inside projects folder and do not rename them
-Updated organization chart to be cached when large (Enterprise edition)
-Updated import/export so that job assignments can optionally be replaced (Enterprise edition)
-Removed old chat functionality
-Removed the option to "deactivate online users on lessons" from the lesson administration page
-Removed icon links for reports for community version
-Fixed SQL injection security vulnerability reported by IHTeam, http://www.ihteam.net/
-Fixed SQL injection security vulnerability reported by Vulnerability Research Laboratory, http://www.vulnerability-lab.com
-Fixed security issue: student/professor accounts won't use the default insecure credentials anymore, but rather the administrator's ones. Reported by IHTeam, http://www.ihteam.net/
-Fixed "date" custom fields so that are converted to human-readable format while exporting/importing from csv
-Fixed loading prototype in external survey to avoid js error
-Fixed inproper handling of imported users without a user_type defined
-Fixed setting file encodings to UTF-IMAP even when UTF-8 is selected
-Fixed issue about inserting & in question feedback
-Fixed issue about loading default lesson layout when moving blocks is disabled
-Fixed issue about importing lesson by admin uncompressing files in temp folder (#1492)
-Fixed preserving lesson properties when importing directly
-Fixed issue about upload more than one files in tests that contain more than one raw text questions
-Fixed issue about taking feedbacks into account in lesson completion rules
-Fixed issue about 'select type' custom user field in notifications (#1553)
-Fixed "content report" reloading page
-Fixed issue in administrator tools about changing user's login
-Fixed issue in participation reports in course type
-Fixed recursion of "course not completed" and "lesson not completed" events
-Fixed editing a placement from the user's page not displaying the job's branch as pre-selected (Enterprise edition)
-Fixed branch filter error when a branch includes quotes in its name (Enterprise edition)
-Fixed issue with single quotes in glossary (#1661)
-Fixed issue in Question::clearDuplicates about primary key constraint
-Fixed drag'n'drop questions not working in IE9
-Fixed training record not showing course/lesson progress for custom user roles based on student
-Fixed issue in course settings and custom user types about applyRoleOptions
-Fixed issue about displaying announcements block icon in layout even when it was inactive
-Fixed issue in notifications language part
-Fixed Bcc issue in sending mail because of http://rawphp.com/php_generator/page.ph ... actory.php
-Fixed rtf certificate exporting for IE8
-Fixed issue about scheduled lessons in courses and go to Next lesson button
-Fixed content traversing rules not working for individual users
-Fixed "not seen" rule not working when source unit is a test
-Fixed issue about date type custom user field in notifications
-Fixed issue about displaying custom profile fields in user reports generator
-Fixed imported lessons not displaying skill names correctly (Educational edition)
-Fixed error in calculation for total_time in SCORM content when revisiting SCO

2011/06/01 v3.6.9 build 11018

This release fixes an important issue that has been discovered, and affects the 2 previous builds: When deleting a glossary entry, a file may be deleted instead. A number of additional minor fixes included:
-Added course lessons schedule display in course info page
-Added copy blocks order from lesson X in module administrator_tools
-Added categories path for lessons in users reports in lesson tab
-Added custom user profile fields for user triggering the event notifications
-Removed unit options that where meaningless for SCORM, when editing such content
-Fixed deleting glossary entries deletes files instead
-Fixed username format in course/lesson info pages
-Fixed issue EF-567 about logging out using facebook connect
-Fixed EF-617 where glossary added an extra space in unit data

2011/4/27 v3.6.9 build 10697

This release is to address a potential security issue, but it addresses several issues that have come up since the last update. Complete changelog follows:
-Fixed potential security issue while including javascript files
-Added comments field to user's profile page
-Added option for not allowing students to send messages
-Added "AND" mode for "multiple/many" questions
-Added check in landing page in case of inactive module
-Added code for sorting files in editor popup windows
-Added a check for possible existing token in api2
-Added option for deleting old api tokens (over one month) in maintenance
-Changed "name/surname" constants to "first name/last name"
-Changed lesson selectbox to autocomplete field in copy from another lesson
-Tests info in excel export of lesson reports no longer truncates questions
-You can no longer create subforums in locked forums
-A user who is reassigned to a course/lesson, now retains the completion date, if there is one
-Recurring payments option in courses/lessons no longer shows up when payments are disabled
-Courses in user reports now sort by course order by default
-Course/lesson completion status in pdf reports displays even if a completion date does not exist
-Extended api to consider custom user profile fields for creating user
-Removed scheduling icon in control panel for course lessons
-Course lessons in unique mode can now be edited even if inactive
-Fixed module chat for different user timezones
-Fixed lesson timeline requesting all events instead of the ones to show
-Fixed group assignment in user's page
-Fixed setDefaults about popup parameters in editing scorm content
-Fixed setting "organization" to "hide" actually hiding links from users
-Fixed basic info in course reports for excel exporting
-Fixed issue in getForumTree()(#1354)
-Fixed issue in external survey about background color
-Fixed issue when exporting reports not taking into account the sub-branches checkbox
-Fixed issue about expanding a category after collapsing all in catalog (#1332)
-Fixed issue about not taking into account course lessons scheduling in catalog
-Fixed publish page of surveys not taking into account archived users
-Fixed email account activation not working
-Fixed issue about toggling blocks twice (#1382)
-Fixed profile page not keeping custom avatar
-Fixed issue about copying from another lesson (#1383)
-Fixed administrator not being able to activate self-registered users set to "pending"
-Fixed organization options not taking into account user type set to "view"
-Fixed professor losing access in forums when courses are set to depend on other courses
-Fixed issues with lesson layout setting and custom professor types (#1397)
-Fixed issue about "Show only a message after submitting test" and failed test (viewtopic.php?f=12&t=3122)
-Fixed pdf export of user reports not including completion information when the completion date is not set
-Fixed access to files when "restricted access" is on and lessons share folders
-Fixed "OR" mode to fail when the user has given a false answer