Chamilo 1.11.10

Chamilo 1.11.10 is a minor bugfix release on top of 1.11.8. Contrary to previous releases, this one has a large number of security fixes. We strongly recommend you update to this version as soon as you can. We thank all who participated in this thorough security review over the last few months (these can be found on our security page).

We have made 4 different package versions available to benefit from slight optimizations in the PHP versions. Our website will only show the lowest denominator for each though (to simplify).

• Packages with "-php5" are compiled for PHP 5.6. They will not work in PHP 5.5 or inferior, because these versions are not supported anymore. PHP 5.6 is not supported anymore by the PHP community (not even for security patches), so please do not use in production.
• Packages with "-php7" are optimized for PHP 7.1 (and should work with 7.2 and 7.3, which is why we called it just "7"). They might give issues if used with PHP 7.0. PHP 7.0 is not supported anymore by the PHP community (not even for security patches), so please do not use in production.
• Packages with "-php7.2" are optimized for PHP 7.2 and will only work with (you guessed it) PHP 7.2 or 7.3.
• Packages with "-php7.3" are optimized for PHP 7.3 and will only work with PHP 7.3.

Note: there is a slight mistake in the changelog.html file: the release tag is from May 9th instead of May 8th, but that has no relevant impact on anything.

Security fixes

[2019-02-26] (c245b03) Security: Use "clean_up_files_in_zip" function before extracting content Blocks php/htaccess files
[2019-02-26] (53c0dc4) Security: Remove folder main/inc/lib/nanogong after composer update
[2019-02-26] (2164d36) Security: Remove nanogong files (deprecated).
[2019-02-22] (1c82459) Security: Protect lp_upload.php to avoid malicious uploads by unauthenticated users #security
[2019-02-22] (e463775) Security: Avoid showing user popup to non authenticated users if user is not a course teacher #security
[2019-01-25] (4812672) Security: Block anon users
[2019-01-18] (662dbd6) Security fixes, add int casting
[2019-01-18] (297f780) Security fixes, add int casting
[2019-01-18] (6968fb5) Security fixes, add int casting
[2019-01-16] (33e2692) Security: Fix XSS in social network and one extended access to tickets
[2018-12-21] (5700b37) Security: Remove double-escaping of SQL in previous paranoid commit
[2018-12-21] (bec1fd1) Security: Fix suspected XSS vulnerability in tickets
[2018-12-20] (54d05c1) Security: Fix suspected XSS/SQL injections vulnerabilities in tickets
[2018-12-17] (ae7f2d5 - GH#2757) Remove XSS
[2018-12-17] (bfa1ecc) Security: Fix SQL injection and likely future similar issues
[2018-12-03] (814049e - GH#2746) Escape gradebook name in gradebook_list.php to avoid XSS
[2018-12-03] (15e49c1 - GH#2746) Add default value for search_users (path disclosure)
[2018-12-03] (da8a93e - GH#2746) Remove warning + notice messages in agenda (path disclosure)
[2018-12-03] (5e61c2b - GH#2746) Remove XSS from social groups page
[2018-11-20] (d9c37bf) Security: Remove "Security::remove_XSS", fix htmleditor get value Related: 099ec41
[2018-11-19] (d13365c) Security - Add Database:escape_string and remove_XSS
[2018-11-15] (099ec41) Security: Fix XSS vulnerability in agenda - see security report 28 - additions
[2018-10-09] (a248539) Remove XSS when registering user See https://packetstormsecurity.com/files/149711/chamilolms1118fn-xss.txt
[2018-10-08] (39b3162) Security: Protect agenda events using Security::remove_XSS

Possibly breaking changes

[2018-12-12] (a681bf5) GH#2708 Remove duplicate from limit_session_admin_role configuration setting

Notable new Features

For end-users, teachers and Chamilo admins

[2019-05-07] (94b7ca5 - BT#15579) Quiz: Add "Unanswered" status for unique questions, showing on the quiz results page
[2019-04-30] The IMS/LTI plugin now fully supports LTI 1, 1.1, 1.1.1, Outcomes and Deep Linking
[2019-04-16] (f8d91f9 - BT#15534) Quiz: Allow editing questions that are not inside an exercise
[2019-04-11] (c68ccd9 - CT#7683) Display: Improvement in user summary (tracking)
[2019-04-11] (f2b8f73 - BT#15535) Quiz: If random show also the total number of questions
[2019-04-05] (6153de7 - BT#15389) Quiz: Show icon to indicate when exercises is embeddable in videos
[2019-03-29] (a3d00fd) Documentation: Indicate support reduced to IE11+
[2019-03-21] (ed0cba3 - BT#15234) Quiz: Add course setting "quiz_question_limit_per_day"
[2019-03-20] (f25743c - BT#15394) Calendar: Add calendar for training sessions planning
[2019-03-20] (7c93e97 - BT#15233) Quiz: Add new "result disable" option in exercises "Show only correct answer" BT#15233
[2019-02-13] (bde49a2 - BT#15281) Plugin: Add ExportSurvey CSV plugin
[2019-02-07] (8cbcfe9 - GH#2788) Quiz: Add new Ranking mode to show a ranking table on the results page
[2019-01-23] (63fde0c - BT#15232) Quiz: Add "SCORE" support in aiken
[2018-11-13] (373427b - BT#15033) Add questions multiplication in surveys, based on classes (allows for teachers deliberations)
[2018-11-08] (ad1ecb2) PDF view with viewerjs in LP
[2018-11-08] (4733577 - BT#14957) Add survey type to agree on a schedule (doodle-type)
[2018-11-08] (f50ecb7 - BT#15017) Add certificate link + download certificate in a zip
[2018-10-31] (0d0d48f - GH#2717) Add statistical charts in course reports
[2018-10-03] (f9eda9b) Plugin: Add Card game plugin
[2018-09-28] (bfd4137 - BT#14880) Admin and teacher can see a blocked exercise
[2018-09-28] (ac72f87 - BT#14882) Change behaviour when adding a user to a session BT#14882 There's only one action that will be done, only add new users. The old behaviour that implied add and remove users still exists in the unused file "add_edit_users_to_session.php" It requires some tests and validations.
[2018-09-28] (03aeb0b - BT#14882) Add new page to subscribe new users to a session-course directly page: add_users_to_session_course.php
[2018-09-26] (8397a1d - BT#14750) Allow upload xlsx files to import exercise
[2018-09-26] (7b95d60 - BT#14824) Add "preview" button before sending an announcement To see the list of users and groups that will be sent BT#14824
[2018-09-13] (260549e - BT#14824) Add option "SendAnnouncementCopyToMyself" in announcement

For developers and sysadmins

[2019-04-11] (82697e6 - BT#15533) Learnpath: Optimize query to get media player
[2019-04-03] (1411274 - BT#15327) Language: Include extra language file main/lang/xxx/custom.php if exists
[2019-03-28] (09b447d - BT#15362) Session: Allow session admin to upload files to BasicCourseDocuments folder
[2019-03-28] (efcd6d1 - BT#14357) Admin: Add configuration setting "allow_gradebook_stats" to improve gradebook speed
[2019-03-28] (4cb8f2e - BT#15437) Admin: Add configuration setting "block_editor_file_manager_for_students" to block student's access to the course documents when using the ckeditor "Browse server" button
[2019-03-15] (9af667f - BT#15393) Admin: Add configuration setting "social_enable_likes_messages" (requires high level of customization to enable)
[2019-03-12] (89cbc14 - BT#15280) Admin: Add configuration setting "survey_anonymous_show_answered" to enable showing who answered or not an anonymous survey (requires a minimum of 2 submissions to show)
[2019-03-11] (399d7ce - BT#15265) Plugin: QuestionOptionsEvaluation: Add questionoptionsevaluation plugin
[2019-03-11] (0de2668 - BT#15265) Admin: Add configuraiton setting "exercise_additional_teacher_modify_actions" to enable more actions for teachers
[2019-03-07] (6a758d8 - GH#2699) Admin: Add configuration setting "mail_no_reply_avoid_reply_to" - Avoid add a reply-to header when a no-reply address is set.
[2019-03-06] (73d802a - BT#15176) Social: Add social map, requires to add geolocation extra fields and configuration setting $_configuration['allow_social_map_fields'] = ['fields' => ['terms_villedustage', 'terms_ville']];
[2019-03-06] (a31c5df - BT#15173 - BT#15309) Admin: Add new configuration settings "allow_forum_post_revisions", "community_managers_user_list" and "global_forums_course_id"
[2019-02-27] (c2f9db3 - BT#15326) Registration: Add configuration setting "required_extra_fields_in_inscription" - Set extra fields as required in the inscription.php page + Add forum_post, forum_category extra fields
[2019-02-22] (2865726 - BT#15317) Forum: Add configuration setting "forum_fold_categories" to fold forum categories by default
[2019-02-20] (3548395 - BT#15318) Admin: Hide course graph reports with configuration setting $_configuration['hide_course_report_graph'] = false;
[2019-02-13] (ebe2eb1 - BT#15281) Admin: Add configuration setting survey_additional_teacher_modify_actions
[2019-02-06] (8a21d41 - GH#2796) Admin: Add configuration setting "admin_chamilo_announcements_disable". Disable Chamilo.org announcements at the top of the admin page
[2019-02-06] (e226292 - BT#15252) LP: Add setting lp_minimum_item, depends in the course and session extra field "new_tracking_system". It should be turned on in order to process the new stats, otherwise it will load the legacy stats
[2019-02-05] (eca05ce - BT#15270) Admin: Add configuration setting "jq_grid_default_row" for default row values for jQGrid
[2019-02-05] (7024207 - BT#15270) Admin: Add configuration setting "jq_grid_row_list" to change the jqgrid row list //$_configuration['jq_grid_row_list'] = ['options' => [50, 100, 200, 500]];
[2019-01-30] (dc21353 - BT#15230) Admin: Add configuration setting "show_question_id" config to show question ID in the exercises + Add DESCRIPTION option when importing exercises with AIKEN
[2019-01-29] (a1e9e3f - BT#15235) Admin: Add configuration setting that limits teachers rights in exercise $_configuration['limit_exercise_teacher_access']
[2019-01-26] (a7fbce4 - BT#117...

1.11.10 Beta 1

This is a test release compiled for PHP 7.2. Please DO NOT USE IN PRODUCTION environment.

Please help us test this version to ensure the stable version is rock-solid stable.

We expect to release a stable version in a few days.

Chamilo 1.11.8

Summary

Chamilo 1.11.8 is a minor, bug fix and security fix release on top of 1.11.6 that contains a series of small new features, including first support for European RGPD. Given the security fixes it contains, we highly recommend you to update from previous versions as soon as possible.

Release name

Sayaxché is a small municipality in the Guatemalan jungle of El Petén. It is a notable point that requires taking a small ferry to cross the La Pasión river and get from the ancient ruins of Tikal to the modern capital city of Guatemala. This represents the jump we are hoping to make after 1.11.8 to get out of the 1.11 versions and into our restructured version 2.0.

Security fixes

• [2018-07-24] (385a84e) Security: Add app/Resources/public/css to the list of directories where execution of PHP is forbidden
• [2018-07-24] (b0041b6) Security: Add documentation about X-Frame-Options in configuration.dist.php
• [2018-07-23] (4ffe5ed - #2532) Security: Add Security::remove_XSS to clean variables from $_REQUEST
• [2018-07-23] (d5129ad) Security: Update PHP files extension matching pattern in .htaccess and documentation to match all possible forms supported by PHP 5 and PHP 7.
• [2018-07-23] (1c27a8b) Security: add rules to .htaccess to prevent direct PHP execution from the corresponding directories and updates security.html with a missing change in the previous commit. Using security.html is still the recommended way to go for security, but in the absence of that, we want to make sure Chamilo is always more secure.
• [2018-07-23] (6ff87c3) Security: Add Nginx rules to security documentation, in order to prevent execution of PHP files from the uploadable-files directories
• [2018-05-31] (d400657) Security: Fix who is online access: now it will check chamilo settings api_get_setting('showonline', 'world') api_get_setting('showonline', 'users') api_get_setting('showonline', 'course')
• [2018-05-29] (0de8470 - GH#2532) Security: Use json_decode/json_encode instead base64 - Add Security::remove_XSSS
• [2018-05-09] (d697192) Security: Check access to "who is online in session"
• [2018-04-09] (00f3e4a) Security: Fix work access for teachers and students

Possibly breaking changes

• [2018-07-27] (6750c5f - BT#14687) Gradebook: Rename disable_gradebook_stats to gradebook_enable_best_score and fix behaviour: now the setting will be required to enable the 3 last columns of the gradebook results table (avg, best score and ranking)
• [2018-07-27] (4d67dfb - BT#14687) Gradebook: Avoid conflict between gradebook_detailed_admin_view and disable_gradebook_stats

Notable new Features

For end-users, teachers and Chamilo admins

• [2018-07-05] (33dc232 - BT#14609) Learnpath: SCORM change: Default value of olms.lesson_status is "not attempted"
• [2018-06-27] (43bf486 - BT#14435) Quiz: Change color from blue to black in ASCIIMathML scripts to highlight formulas (now will appear in a normal black)
• [2018-06-13] (dd3390a) Global: Adding page about the course
• [2018-06-11] (0a345a9 - BT#14453) Message: Add voice recorder button when sending a msg in the chamilo inbox
• [2018-05-18] (c91f572 - BT#14350) Session: Session coach can now edit documents
• [2018-05-18] (187acee - BT#14338) Quiz: Droppable questions: Add counter in boxes
• [2018-05-16] (87c4804 - BT#14111) Course homepage: if LP links are added, use the LP order
• [2018-04-10] (43d53a7 - BT#5776) Learnpath: Add more prerequisite information if available when loading an item
• [2018-04-09] (98efe2a) Quiz: Add "certainty level" question type
• [2018-04-03] (57b88a5) Template: Use SYS_TEMPLATE_PATH to find template file
• [2018-04-03] (da56954) Template: Add twig function to get template file inside template. This changes the way how template files are included or extended. Add twig filter to get template file inside template This changes the way how template files are included or extended
• [2018-04-02] (b99aaa3) Template: Add hot sessions block - sessions_current.tpl
• [2018-03-28] (d76db9c) Template: Add dashboard TPL
• [2018-03-23] (e13bb51) Template: Add tpl index.tpl for myspace
• [2018-03-21] (4b5f86c - BT#11913) Survey: Add pending surveys page
• [2018-03-20] (d04996a - BT#14141) Work: Add teacher comment to the notification
• [2018-03-16] (b256c09 - BT#14056) Portfolio: Add Portfolio Tool. Requires DB changes

For developers and sysadmins

• [2018-08-01] (9472341 - GH#2606) GDPR (#2606/#2503) Admin: Add configuration setting 'enable_gdpr' to enable special privacy options to ease implementation of European GDPR. Add personal data info page, LegalRepository, personal data treatment types display and update getLastLogin() results including track_e_login for legacy users
• [2018-07-25] (c025963 - BT#14687) Gradebook: Delete gradebook categories when deleting course
• [2018-07-25] (5acc3b2 - BT#14687) Admin: Allow search course by ajax to platform admin
• [2018-07-25] (85ef745 - BT#14664) Plugin: BBB: Add bbb interface option (flash or html5)
• [2018-07-23] (bd7d1ad - GH#2601) Installation: replace check of app/course/X/test.php with an html file
• [2018-07-05] (4d65d4e) Admin: Add multiple-selection enabling/disabling of users
• [2018-06-22] (3107f0f - BT#14512) Tracking: Add audit logging for removal/addition of users into a session
• [2018-06-14] (c2efa24 - BT#14468) Survey: Add configuration setting allow_survey_availability_datetime
• [2018-06-01] (44833e2 - BT#14371) Admin: Add configuration show_conditions_to_user setting to show conditions during sign up
• [2018-05-30] (4473bd1 - BT#14395) Admin: Add configuration setting show_pending_survey_in_menu to show pending survey link in user menu
• [2018-05-30] (73ae4cf - BT#14385) Admin: Add configuration setting gradebook_hide_graph
• [2018-05-30] (73ae4cf - BT#14385) Admin: Add configuration setting gradebook_hide_pdf_report_button
• [2018-05-21] (662e922 - BT#14324) Maintenance: Add support for learnpath category in course backup
• [2018-05-21] (69545e0) Plugin: Custom certificate: Add customcertificate plugin
• [2018-05-15] (1326c86 - BT#14324) Admin: Add configuration setting 'allow_import_scorm_package_in_course_builder': When we export a course backup file the course/ABC/scorm/ folder is added in the zip packages. This setting imports that folder, e.g. course/ABC/scorm/my_scorm is saved in the new location course/DESTINATION/scorm/my_scorm/
• [2018-05-09] (247e1a0 - BT#14252) Admin: Add configuration setting 'my_courses_session_order'. Userportal session list - Show end date null values at the end. If setting "my_courses_session_order" is set to: $_configuration['my_courses_session_order'] = ['field' => 'end_date', 'order' => 'asc']; Null values will be shown at the end.
• [2018-05-08] (409ca7a - BT#14196) Admin: Add configuration setting session_courses_read_only_mode (was lock_course_in_session)
• [2018-05-08] (caad4bb - BT#14113) Admin: Security: Add configuration setting 'disable_token_in_new_message' to avoid issues when sending messages for very active users with several open tabs. This introduces a security vulnerability as it can allow some third party to send DOS attacks through the PHP sending script, but might be necessary to reduce user anxiety
• [2018-04-25] (ac7665e - BT#14254) Admin: Add "Hide from catalog" (hide_from_catalog) course extra field in order to hide courses from the course catalog. Refactor course/session/course category code. Change function name and move functions to CourseAndSessionsCatalog
• [2018-04-25] (90ea493 - BT#14251) Admin: Add configuration setting "allow_exercise_auto_launch" to allow auto launch for documents and exercises - requires DB change
• [2018-04-23] (4cecc04 - BT#14192) Admin: Tracking: Add url(portal)/session/user stats
• [2018-04-23] (53adbbc - BT#14262) Global: Show users only from current portal in who is online
• [2018-04-20] (fe0aaeb - BT#10885) Admin: Add configuration setting "allow_lp_chamilo_export" to export learning paths with the course builder system (from course maintenance)
• [2018-04-18] (c056499 - BT#10769) Admin: Add configuration setting "group_document_access" to allow sharing options for the documents inside a group. Requires DB changes.
• [2018-03-20] (1b75983 - BT#13964) Admin: Add configuration setting "send_notification_when_document_added"
• [2018-02-22] (604950f - BT#14026) Document: Don't clear class for audio/video when removing xss
• [2018-02-22] (50cb6f0 - BT#13924) Admin: Add configuration setting "allow_user_message_tracking"
• [2018-02-19] (6e619d2 - BT#14034) Admin: Add configuration setting "send_inscription_msg_to_inbox"
• [2018-02-16] (fe04224 - BT#13950) Admin: Add configuration setting "exercise_hide_label" to hide exercise question label (ribbon)
• [2018-02-16] (531f5aa - BT#13950) Admin: Add configuration setting "show_exercise_expected_choice" to show more information when resolving an exercise
• [2018-02-14] (01c864b - BT#13794) Admin: Add configuration setting "lp_view_settings" to hide reporting icon in lp view
• [2018-02-12] (93a64d5 - BT#13334) Admin: Add configuration setting "allow_skill_rel_items" to link skills to things. Requires DB changes
• [2018-02-06] (155235e - BT#13943) Admin: Add configuration setting "send_two_inscription_confirmation_mail"- This will send 2 emails to the user, one with the username, the other with the password.
• [2018-02-06] (597a745 - BT#13829) Admin: Add configuration setting "allow_base_course_category"
• [2018-02-06] (28daf39 - BT#13924) Admin: Add configuration setting "allow_user_message_tracking"
• [2018-02-02] (bae37ae - BT#10895) Admin: Add configuration setting "allow_remove_tags_in_glossary_export"
• [2018-02-01] (110f7fc - BT#13944) Admin: Add configuration setting "generate_random_login" when importing users by CSV
• [2018-01-26] (423e9b6 - BT#13923) Admin: Add configuration setting allow_teachers_to_a...

Chamilo 1.11.6

Summary

Chamilo 1.11.6 is a minor, bugfix release on top of 1.11.4.

Release name

Poznán is a city on the Warta river in west-central Poland. It is best known for its renaissance Old Town and Ostrów Tumski Cathedral. Poznań is among the oldest and largest cities in Poland. It has often topped rankings as a city with very high quality of education and a very high standard of living. Giving the stability this 8th anniversary version 1.11.6 has achieved and its high benefits to education, we believe Poznán is a fitting name for us.

Security fixes

• [2017-09-27] (4ffe5ed) Security: Remove excessive SQL quotes filtering adding risk to queries

Notable new Features

For end-users, teachers and Chamilo admins

• [2018-01-17] (49ba4f6) Plugin: Test2PDF: Add test2pdf plugin to convert exercises to PDF. This plugin can be further cleaned up but works as is.
• [2017-12-28] (958f1f5) Document: Add Cloud Files links (and fixes)
• [2017-10-16] (8700571) Document: Add webm support in showinframes.php (using jplayer)
• [2017-10-10] (5039c7b) Learnpath: Add pdf export button in LP result page
• [2017-10-10] (cf2bd42) Work: Add new course setting 'email_to_teachers_on_new_work_feedback'
• [2017-09-05] (0de217e) Announcement: Add tags expansion button to avoid showing all tag options upfront
• [2017-07-19] (f44456a) Learnpath: Remove SCORM 2004 (1.3) object declaration to avoid Rustici library detecting SCORM 2004 support where there is none
• [2017-07-14] (eea9ca4) Gradebook: Add score model in student publication

For developers and sysadmins

• [2017-12-28] (b00352a) Webservices: Add REST services to create user, create course and subscribe to course. Remove SQL injection. Improve code style
• [2017-12-28] (39bbae3) Admin: Add configuration setting "session_list_order" to enable sessions ordering in courses list (requires DB changes)
• [2017-12-21] (a8974e8) Admin: Add configuration setting "exercise_category_report_user_extra_fields" to add extra fields to the exercise_category_report.php page
• [2017-12-21] (1e4f1c5) Admin: Add configuration setting 'block_my_progress_page' to block access to any user to "my progress" page
• [2017-12-12] (484ea7a) Admin: Add configuration setting "hide_skill_levels"
• [2017-12-06] (6bfbff7) Admin: Add configuration setting "send_notification_score_in_percentage" to send score in percentage in the exam result notification
• [2017-11-24] (cc02afc) Admin: Add configuration setting "allow_session_admin_read_careers"
• [2017-11-23] (f7b49d7) Admin: Add configuration setting "hide_reporting_session_list" to hide the session list in Reporting tool
• [2017-11-21] (932208a) Admin: Add upload_tmp_dir in settings diagnostic
• [2017-11-17] (766f184) Skill: Allow translation of skills names and short codes
• [2017-11-15] (df875dc) Admin: Add configuration setting: show sender's email when receiving email notifications. Setting: $_configuration['show_user_email_in_notification'] = false;
• [2017-10-31] (f172fe7) Admin: Add configuration setting "disabled_edit_session_coaches_course_editing_course" to reduce load
• [2017-10-27] (0a6e471) Admin: Add configuration setting "not_empty_session_student_list_for_multiple_subscription" to avoid empty sessions when subscribing multiple users
• [2017-10-27] (91c0f15) Admin: Add configuration setting "allow_redirect_to_main_page_after_work_upload" + Redirect to work tool after uploading a student publication or adding a comment
• [2017-10-25] (755aa93) Admin: Add configuration setting "show_all_sessions_on_my_course_page"
• [2017-10-24] (32ed97a) Admin: Add configuration setting "disable_js_in_lp_view"
• [2017-10-09] (acb1614) Plugin: Add redirection plugin to redirect users arbitrarily once logged in
• [2017-10-09] (8a889c9) Admin: Add configuration setting 'hide_email_content' to force users to click a link in their e-mail to get the full message
• [2017-10-06] (8acc91a) Session: Add session template feature to pre-fill some sessions when doing repetitive session creation processes
• [2017-10-02] (9136d61) Admin: Add configuration setting options for setting "my_progress_courses" to select columns to be shown in reports
• [2017-10-02] (9af6dd0) Admin: Add User activation confirmation email
• [2017-09-27] (41b1c16) Admin: Add configuration setting "send_notification_when_user_added" to alert given admin users of the creation of new users (#legal-compliance)
• [2017-09-23] (9af0934) Template: Add check on overrides/ folder in templates processing
• [2017-09-21] (7dce46d) Admin: Add configuration setting 'max_anonymous_users' to allow multiple anonymous users to be auto-created on demand up to the given number limit
• [2017-09-21] (5c8e19b) Admin: Add configuration setting 'allow_double_validation_in_registration' to enable a validation message to be confirmed by the user after submitting account details
• [2017-09-18] (5c57c02) Admin: Add configuration setting 'default_glossary_view' setting to change default presentation mode for the glossary (can still be changed by the viewer personally)
• [2017-09-18] (f5a06b9) Admin: Add configuration setting 'disable_delete_all_announcements' to hide the option to delete all assignments (#fresh-users)
• [2017-09-05] (0beecb1) Admin: Add configuration setting 'allow_public_course_with_no_terms_conditions' to skip terms in very specific contexts
• [2017-09-06] (0d172d0) Learnpath: Improve pdf download speed in learnpath
• [2017-08-29] (b2d96d9) Admin: Add configuration setting 'lp_subscription_settings' to set default settings for the 'allow_add_users_to_lp' and 'allow_add_users_to_lp_category settings'
• [2017-08-21] (971c73c) Admin: Add configuration setting 'hide_survey_edition' to hide edition options for a given list of survey codes
• [2017-08-17] (37f7235) Admin: Add configuration setting 'gradebook_badge_sidebar' to show a menu sidebar with OpenBadges obtained (probably requires code customizations)
• [2017-08-16] (26e5343) Survey: Show previous answered question in survey (do not ask again)
• [2017-08-15] (69d16ad) Admin: Add configuration setting 'hide_survey_reporting_button' to hide the Survey Reporting button from teachers (if survey is about teachers)
• [2017-08-15] (333a822) Admin: Add configuration setting 'allow_required_survey_questions' to enable required survey questions (requires a DB change)
• [2017-08-10] (862cf0e) Admin: Add configuration setting 'my_courses_show_courses_in_user_language_only' to only show to the user the courses that are in his/her language
• [2017-08-09] (992b401) Global: Add optional language quick-switcher in main menu
• [2017-08-09] (ca8186b) Admin: Add configuration setting 'hide_user_info_in_quiz_result' to hide the user name/login in the test result page
• [2017-08-08] (4c08b6b) Admin: Add configuration setting 'gradebook_dependency_mandatory_courses' to be used in combination with the 'gradebook_badge_sidebar' to show only badges about specific courses in the menu badges
• [2017-08-01] (940cfc5) Admin: Add configuration setting 'allow_private_skills' to hide generic skills viewing pages from students (only visible to admins and teachers)
• [2017-07-31] (1292099) Session: Allow session admins to create scheduled announcements
• [2017-07-26] (216734f) Admin: Add configuration setting 'my_courses_list_as_category' to show a different presentation of the user's "My courses" page, with an intermediary category page (with category images) (requires a DB change)
• [2017-07-19] (bb4c138) Admin: Add configuration setting 'ckeditor_startup_outline_blocks' to add blocks outlining option to CKeditor
• [2017-07-10] (74775f8) Admin: Add configuration setting 'hide_free_question_score' to hide score/annotation/comments for all "open text" questions
• [2017-07-10] (6d347e7) Admin: Add configuration setting 'allow_notification_setting_per_exercise' to enable notifications to be sent on a per-exercise basis (as opposed to per-course basis). Not setting it will fallback on course settings (requires a DB change)
• [2017-07-07] (4e84b9e) Work: Add course setting 'email_alert_students_on_new_homework' option to send alert to HRM when a work is added
• [2017-07-06] (33debc5) Admin: Add configuration setting 'score_grade_model' to enable the conversion of scores to text/color labels using a model if the score is inside those values
• [2017-07-04] (36b43d3) Admin: Add configuration setting 'private_messages_about_user' to enable exchanging messages between student bosses and teachers about students on main/mySpace/myStudents.php?student=x
• [2017-07-03] (3327cd4) Admin: Add configuration setting 'allow_teacher_comment_audio' to allow teachers to leave audio notes on open answers
• [2017-07-03] (34f1447) Admin: Add configuration setting 'hide_search_form_in_session_list' to... hide the search form in the sessions list
• [2017-06-30] (0e9b9d4) Admin: Add configuration setting 'ticket_project_user_roles' to give specific roles access to the tickets tool
• [2017-06-29] (a55b7b9) Admin: Add configuration setting 'allow_quiz_show_previous_button_setting' to show/hide the "previous question" button in exercises (requires DB changes)
• [2017-06-27] (b9a44e7) Admin: Add configuration setting 'allow_mandatory_survey' to enable mandatory surveys
• [2017-06-26] (829a93c) Survey: Add mandatory surveys to course (see commit above)
• [2017-06-22] (9ce4ca8) Admin: Add configuration setting 'send_all_email_to' that sends a copy of all e-mails sent from the plaform to the given list of e-mail addresses (#legal-compliance)
• [2017-06-21] (7cd3981) Gradebook: Add "user_certificate" extra field + add "downloaded_at" field to keep track of when a use certificate was downloaded
• [2017-06-19] (f72bdf3) Admin: Add configuration settings 'agenda_platform_color', 'agenda_course_color', 'agenda_grou...

v1.11.6-alpha.1

This is an unstable version meant for testing purposes only. Please DO NOT USE IN PRODUCTION ENVIRONMENT. Report issues in the Issues tab. Thank you for contributing to Chamilo.

See changelog for this version here: https://11.chamilo.org/documentation/changelog.html

Esta es una versión inestable con el objetivo de permitirle hacer pruebas. Por favor, NO LA USE EN UN AMBIENTE DE PRODUCCIÓN. Puede reportar errores en la pestaña "Issues", si encuentra alguno. Gracias por ayudarnos a mejorar Chamilo.

Ceci est une version instable dont l'objectif est de permettre de réaliser des tests. Merci de NE PAS L'UTILISER EN ENVIRONNEMENT DE PRODUCTION. Vous pouvez rapporter les erreurs rencontrées dans l'onglet "Issues". Merci de votre aide pour améliorer Chamilo.

Dit is een onstabiele versie die alleen bedoeld is voor testdoeleinden. GEBRUIK NIET IN PRODUCTIEOMGEVING. Meld problemen op het tabblad Issues. Bedankt voor uw bijdrage aan Chamilo.

Dies ist eine instabile Version, die nur zu Testzwecken gedacht ist. Bitte verwenden Sie NICHT IN DER PRODUKTIONSUMGEBUNG. Probleme auf der Registerkarte "Issues" melden. Danke, dass du zu Chamilo beigetragen hast.

Esta é uma versão instável, apenas para fins de teste. NÃO USE NO AMBIENTE DE PRODUÇÃO. Relate problemas na guia Issues. Obrigado por contribuir com Chamilo.

Chamilo 1.11.4

Summary

Chamilo 1.11.4 is a minor, bugfix release of the 1.11.x branch, with a large number of bugfixes on top of 1.11.2.

Chamilo 1.11 integrates several new development technologies that should improve is reliability and flexibility, but also require more processor and memory. As such, we strongly recommend installing and enabling the Zend OpCache extension, ACPu and PHP 5.6 or superior, although 1.11.4 supports PHP starting from version 5.5 and up to PHP 7.

Release name

Uyuni is a small city that serves as a tourist gateway to the bare Uyuni salt flat. We wanted to use the name to transmit the idea that we are cleaning up (or laying down) the plans to move from all-timer version 1 of Chamilo to version 2. As such, this version eliminates as many issues as we can possibly eliminate and contains as much clean-up as we can do before jumping to version 2.0. Maybe this will not be the last of the 1.* releases, but it is certainly one of the latest steps before we eventually get there.

Security fixes

There are 2 security fixes in this version, so we urge you to upgrade to this version as soon as possible

• One fix for unsanitized user input, present in Chamilo through the inclusion of an older version of the PHPMailer library
• One more important fix for a PHP file upload flaw that happens in the social network, for registered users only

Changelog

New features for teachers and portal administrators

• Tracking: Add new social report to user information page
• Exercises: Add button to pause recording in oral expression question
• Exercises: Add custom message notification for exercise review by teacher
• Sessions: Add feature to redirect to session after registration (previously only available for courses)
• Plugins: Add Google Maps Plugin with a map to show extra field coordinates markers
• Exercises: Add support for random questions in QTI import
• Plugin: BBB: Allow hiding BBB meetings without recording when using sessions
• Exercises: Add support for unclosed attempts in exercises reports
• Sessions: Add sessions dates in sessions catalogue
• Sessions: Show session duration in sessions catalogue
• Plugins: Add MaintenanceMode Plugin
• Collapse CKEditor when full_ckeditor_toolbar_set is enabled
• Exercises: Add reading speed/comprehension question type
• Improve learnpath tracking details
• Exercises: Add option to display draggable question like with vertical orientation
• Add SEPE plugin for Spanish Employment and Social Security Ministry compliance / Añadido plugin SEPE para cumplimiento con normas del Ministerio de Empleo y Seguridad Social de España
• Plugins: BBB: Add global limit to number of users per room, including extra fields for course and session to define contextual limits
• Learnpaths: Allow publishing learning paths categories as course tool
• Allow hiding/showing learning path categories
• Add option to export a thematic plan's PDF to documents tool
• Add option to export a single thematic section's PDF to documents tool

New features for sysadmins and developers

• Multi-URL: Add support for configuration settings per multi-url (portal)
• Templates: Add Twig filter local_format_date
• Migration: add main/admin/sync_db_with_schema.php UI file (to sync current db with schema) and sync_db_with_schema configuration setting to allow it
• System: Use app/cache/course_backups instead of main app/cache folder for course backups
• Templates: Replace Twig_Filter_Function with Twig_SimpleFilter
• Mailing: Add configuration setting mail_content_style for api_mail_html()
• Assignments: Add configuration setting assignment_prevent_duplicate_upload to prevent duplicate upload
• Assignments: Add configuration setting considered_working_time work extra field variable show in MyStudents page works report
• Certificates: Add configuration setting 'hide_header_footer_in_certificate'
• Templates: Add configuration setting hide_main_navigation_menu.
• Certificates: Add configuration setting "certificate_pdf_orientation"
• Emails: Add configuration setting "update_users_email_to_dummy_except_admins"
• Courses introduction: Add configuration setting "course_introduction_html_strict_filtering" to allow course introduction html in low security for removeXSS
• Agenda: Add configuration setting "personal_agenda_show_all_session_events"
• Sessions: Add configuration setting limit_session_admin_role - Add differentiation of sessions options based on limit_session_admin_role setting in admin homepage
• Learnpaths: Add configuration setting show_prerequisite_as_blocked to show all learning paths prerequisites in gray
• Mailing: Add configuration setting parameter "send_score_in_exam_notification_mail_to_manager"
• Learnpaths: Add configuration setting add_all_files_in_lp_export
• Home: Add configuration setting user_portal_load_notification_by_ajax to improve page load
• Thematic advance: Add configuration setting thematic_pdf_orientation to allow set the orientation when exporting thematic to pdf
• Home: Add configuration setting hide_course_notification - Courses list: Add option to hide the course changes notifications
• Home: Add configuration setting view_grid_courses_grouped_categories_in_sessions - Courses list: Allow showing courses grouped by category in session list. Only works in grid mode.
• Home: Add configuration setting show_simple_session_info
• Courses introduction: Rename configuration setting allow_course_introduction_low_security to course_introduction_html_strict_filtering
• Learnpaths: Add configuration setting 'hide_lp_time'
• Tracking: Add configuration setting tracking_columns to change the columns shown on tracking page
• Home: Add configuration setting "remove_session_url" to show/hide session link in "My courses" page
• Agenda: Add configuration setting 'agenda_legend'
• Tracking: Add configuration sub-settings for my_students_lp/my_progress_lp tracking column display
• Sessions: Add configuration setting 'session_list_show_count_users'
• Home: Add configuration setting hide_course_rating support in course catalog
• Sessions: Add configuration setting "session_admins_access_all_content"
• System announcements: Add configuration setting 'system_announce_extra_roles'
• Export: Add configuration setting "pdf_img_dpi" option
• Mailing: Add configuration setting SMTP_UNIQUE_REPLY_TO setting + support in api_mail_html()
• Sessions: Add configuration setting 'allow_edit_tool_visibility_in_session'
• System: Add script to generate a table of missing terms in a language. Edit to set $language, then run in a browser and copy-paste in a spreadsheet soft to hand out to professional translators
• System: Improve Apache and Nginx rules in installation guide in English based on the .htaccess file
• System announcements: rework to use an array of visibilities (requires database changes)
• Mailing: New options added to setting 'email_alert_manager_on_new_quiz'
• Documents: Add configuration enabled_support_odf to allow edit ODF files
• Learnpaths: Add configuration setting 'save_titles_as_html' to use HTML in learning paths category titles
• Documents: Add configuration setting 'document_pdf_orientation' to allow setting PDF orientation when exporting documents
• Tracking: Add configuration setting 'tracking_skip_generic_data' to skip stats BT#12824
• Exercises: Add configuration setting "allow_quiz_question_feedback" (requires DB change)

Possibly breaking changes

• Dropped support for PHP 5.4 and inferior (now REQUIRES PHP 5.5 or more)
• As Chamilo becomes more popular, we are facing new security-based challenges that come as consequences of the simplicity that we offer our users. As such, in this version of Chamilo, the administrator must enable a configuration setting as follows in order to authorize teachers and students to use iframes (embedding things from outside) inside the online text areas in their courses and personal spaces. To enable those, edit the app/config/configuration.php file and paste the following just after the last setting:
  $_configuration['course_introduction_html_strict_filtering'] = false;

Other

See full changelog for this version in the documentation folder of your campus or online here: https://11.chamilo.org/documentation/changelog.html#1.11.4

Special thanks

Chamilo is developed voluntarily by developers all around the world.
We have many people to thank, but we'd like to extend a special thank you to our technological partners: https://chamilo.org/technology-partners/

Chamilo 1.11.2

Summary

Chamilo 1.11.2 is a minor, bugfix release of the 1.11.x branch, with a few bugfixes on top of 1.11.0.

Chamilo 1.11 integrates several new techniques of development that should improve is reliability and flexibility, but also require more processor and memory. As such, we strongly recommend installing and enabling the Zend OpCache extension, ACPu and PHP 5.6 or superior, although 1.11 supports PHP starting from version 5.4 and up to PHP 7.

Release name

Bari is the capital city of the Metropolitan City of Bari and of the Apulia region, on the Adriatic Sea, in Italy. It is just a few hundred kilometers North of Lecce, the city which gave the name to our previous version. A bit more modern and a bit larger, it also hosts the infamous Basilica of Saint Nicholas, known as the "Wonderworker" for its miracles. Given 1.11.2 is just a perfecting release on top of 1.11.0, we felt the name of Bari was well suited for this version.

Security fixes

None in this version

Changelog

New features for teachers

• New option to show images in responsive mode in CKeditor

New features for admins

• New configuration setting to decide whether registered users should have access to resources inside open (not public) courses
• New geolocalization extra field based on coordinates (the previous one, still available, was based on an address string)
• New configuration setting to avoid sending mails about events in session courses to general coaches
• New learnpath_item_view_id parameter in URL to enable new workflows
• New configuration setting hide_my_certificate_link

Other

See full changelog for this version in the documentation folder of your campus or online here: https://11.chamilo.org/documentation/changelog.html#1.11.2

Special thanks

Chamilo is developed voluntarily by developers all around the world.
We have many people to thank, but we'd like to extend a special thank you to JetBrains for providing us with a great IDE for quality PHP development!

Chamilo 1.11.0

Summary

Chamilo 1.11.0 is a major version of the 1.11.x branch, with new features and bugfixes on top of 1.10.8. As a major version, it requires the use of the upgrade script in order to upgrade an existing Chamilo portal. See install instructions.

Chamilo 1.11.0 integrates several new techniques of development that should improve is reliability and flexibility, but also require more processor and memory. As such, we strongly recommend installing and enabling the Zend OpCache extension, and PHP 5.6. Chamilo 1.11.0 also supports PHP 7.0.

Release name

Lecce, Italy, is a charming little city with strong remains of the Roman Empire. By its geographical location, it is at the "edge" of Italy and Western Europe as if, getting to Lecce from there, you were preparing to "jump" to Africa or Greece. We feel like 1.11.0 is the last big step before Chamilo 2.0, and as such we thought that Lecce was a good name to match this situation.

Security fixes

There were no specific security flaws reported from external sources that affect 1.11.0 on its own. However, several issues were reported and fixed in 1.10.8, so if you have a previous version of Chamilo, we recommend upgrading to 1.11.0 anyway to benefit from these changes.

Changelog

New features for teachers

• Basic Moodle courses import feature
• Re-calculate students score feature in exercises
• Start/End date and validation in forum
• New exercise option allowin to show the correct answers only on the last attempt
• Support for IMS/QTIv1.2 import
• Fixed support for IMS/QTIv2.0 import
• Prevent double ajax drag and drop upload in assignments
• Display Achieved Skills on Learner Details In Course page
• Show achieved badges by course in my_progress page
• Group Tutor can moderate forum groups
• Teacher time report by session
• Work/Assignment Report
• Students are allowed to edit the wiki page
• "All Issued" page for same skills badges obtained several times by a user
• Exact question type export to SCORM format
• Free question type export to SCORM format
• Document size selector for teachers in Rapid PPT conversion
• Oral question type export to SCORM format
• Links ordering
• Custom logo inserted in PDFs

New features for admins

• Skills level management
• User tag filter to subscribe users to sessions
• Support for skills tags
• Badge studio embedded editor
• Option to send email to all admins that a new user is registered (option turned off by default)
• Skype and LinkedIn extra fields added by default
• New plugin region in the administration screen
• Refactoring: moved main/newscorm/ to main/lp/ and related folders (except code for migration from 1.9 and 1.10)
• Refactoring: moved main/exercice/ to main/exercise/ and related folders (except code for migration from 1.9 and 1.10)
• Geolocalization extra field type for users
• Global video conference link in menu with BBB plugin
• BuyCourse plugin integration to the new sessions "grid" catalogue (prices and purchase buttons appear in the normal sessions catalogue)
• Translations support for extra fields
• Azure Active Directory integration plugin
• Ticket moved from plugin to Chamilo core tool
• Course category name added to export/import list courses by CSV
• Course plugins can now show information in regions
• Manual assignment of badges to users (by admin user)
• Student boss role is allowed to assign badges to users
• vchamilo virtualization plugin (Chamilo instances management)
• Backend feature to let choose which users can see which courses in the courses catalogue (requires Web Services)
• Mail tester interface on admin panel
• Move_uploaded_file validations added when you uploading a work or correction for better work submission audit
• sso_authentication_subclass setting added to complete the SSO integration facilitating mechanism
• By default, drh_can_access_all_session_content set to false
• Hide "software_name" in footer if empty
• Beta IMS/LTI plugin
• Add check for old crs* tables in upgrade process
• Register audit logs when deleting assignment folders and files
• Add indexes to speed up searches in c_tool tables
• Set cache folder to support multiple access URLs
• Change Errors-To and Envelope-From headers in e-mails to reduce spam qualification
• Add new methods to add forum threads and reply through REST API
• Add notebook saving through REST API
• Improve UserManager::getUsersFollowedByUser() query speed
• Add application/x-javascript header to JS files
• Support conditions in SQL query debug
• Add support for course learning paths listing through REST API
• BigBlueButton: Add public URL to share conference room
• Add config $_configuration['editor_driver_list'] to block course documents in ckeditor (definition of CKeditor plugins list to load)
• Add recommendation for OPcache and APCu in Chamilo installer and system status page
• Set doctype to HTML5 for system templates
• Swap Skill Wheel colors
• Add README to the webservices folder
• Allow X-Frame-Options: SAMEORIGIN
• Add Tag filter to skill management
• Add backend feature to let choose which users can see or do not see which courses in the courses catalogue
• Add webservices to add or remove visibility rules between users and courses in the courses catalogue
• Add option to hide the course creation splash screen
• Add additional checks in installer for HTTPS context
• Add support for ACPu in users online count
• Add new settings to handle user address and geolocalization
• Add md support for plugins. The readme file must be README.md in order to load the markdown conversion.
• Add student boss in user_edit.php and user_information
• Add feature to create a course category if the category doesn't exist when importing courses
• Add function to check if the current lp item is first, both, last or none from lp list
• Add function api_get_css_asset() to get css files from web/assets
• Improve exercise list performance

Other

See full changelog for this version in the documentation folder of your campus or online here: https://11.chamilo.org/documentation/changelog.html

1.10.8

Summary

Chamilo 1.10.8 is a minor, bugfix release of the 1.10.x branch, with a few new features and bugfixes on top of 1.10.6.

Release name

Vilcashuamán is the capital of Vilcas Huamán Province, Peru. It is located at an altitude of 3,490 m on the eastern slopes of the Andes. It is located on an ancient archaeological site.is the capital of Vilcas Huamán Province, Peru. It is located at an altitude of 3,490 m on the eastern slopes of the Andes. Vilcashuamán was an Inca administrative center, established after the Incas conquered the Chancas and the Pocras. As such, it represents the symbolic end of an era, which we believe is close to the case of Chamilo 1.10.8, closing the 1.10.x branch.

Security fixes

Several security fixes were applied to this version. Please update as soon as possible. You can find details of the vulnerability on Chamilo's security page: https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues

Notable new features

• Add teacher time report by session
• Add Work Report
• Add official code in "who is online" page
• Completely rewritten course chat
• Fix extra field filter
• Integrate Skype plugin into core (instead of plugin)
• Send mail when a new user is registered through LDAP
• Add administration screen plugin region
• Add Azure Active Directory B2C plugin

Extended changelog

See full changelog for this version in the documentation folder of your campus or online here: https://10.chamilo.org/documentation/changelog.html#1.10.8

1.10.6

Summary

Chamilo 1.10.6 is a minor, bugfix release of the 1.10.x branch, with a few new features and bugfixes on top of 1.10.4.

Release name

Zacatecas is a small city North of Mexico City, in the region of Zacatecas, that harbours Spanish colonial style constructions in the historical center, and is an active mining area. It is also the home of the Laboratorio de Software Libre (Free Software lab) in the Consejo Zacatecano de Ciencia, Tecnología e Innovación (Science, Technology and Innovation Council of Zacatecas), possibly the first such initiative in Latin America, and a good development bed for software like Chamilo.

Security fixes

None

Notable new features

• Added option to show right answers only during the last exercise attempt (RESULT_DISABLE_SHOW_SCORE_ATTEMPT_SHOW_ANSWERS_LAST_ATTEMPT)
• Added course setting "bbb_enable_conference_in_groups" to allow for conferences through course groups (requires the BigBlueButton plugin)
• Allowed platform admins to manage all sessions
• Added Classes column to users reporting
• Added new option to $_configuration['courses_list_session_title_link'] to make sessions foldable or unclickable
• Added multiple attachments in agenda
• Added setting "exercise_enable_category_order" to enable exercises categories
• Added social share buttons to issued badge page
• Added learning path finalization page
• Added SMTP debug information

Extended changelog

See full changelog for this version in the documentation folder of your campus or online here: https://10.chamilo.org/documentation/changelog.html#1.10.6