Releases: chamilo/chamilo-lms
1.9.10.4
Summary
Chamilo 1.9.10.4 is a patch (minor) version of the 1.9.x branch, with bugfixes and a few new minor features (as such, you can just overwrite previous files to upgrade from 1.9.8, 1.9.8.1, 1.9.8.2, 1.9.10.2 to 1.9.10.4).
Release name
Eten is a small city in the district of Chiclayo, north of Peru. Simple but resistant city (pre-hispanic origin), just as you would describe this version 1.9.10.4.
Security fixes
There were no specific security flaws detected during the development of 1.9.10.4 but standard development procedures and criterias were followed during the development to ensure a very high security level.
Changelog
See full changelog for this version in the documentation folder of your campus or online here: https://stable.chamilo.org/documentation/changelog.html
1.10.4
Summary
Chamilo 1.10.4 is a minor, bugfix release of the 1.10.x branch, with a few new features and bugfixes on top of 1.10.2.
Release name
Bath is a small city of the South of England that inspires peace and stability, with its roman-age public baths and buildings. We feel like 1.10.4 is a very comforting version, fixing little issues people have found on previous 1.10.x versions, and that the name suits it well.
Security fixes
- Add security::removeXSS() to assignments tool
- Fix issue allowing a user to delete a message from someone else on the social walls
- Fix missing escape_string in LP title update
Notable new features
- Add filters to messags inbox/outbox
- Add feature to customize the logo of a stylesheet
- Take into account all learnpaths IDs, not only learnpaths with result
- Add filters in announcements
- Add announcement option when editing an event
- Add pagination in course announcement + add multiple delete
- Show user classes on learner details page
- Add announcements tags list again
- Add modulo operation for calculated answers
- Updated Excel template to integrate no negative score management when importing questions. Fill blank or form type of question, matching type of question and category management
- Fix Nginx config example
- Boost agenda query efficiency
- Added Last 15 days recents login chart
- Added Chart to RecentLogin Statistics Page
- Add charts to global statistics users page
- Add deletion of related resources when deleting a user (issues were caused by the inclusion of new foreign keys)
- Fix default values in migration from previous versions
- Add option to force the download instead of the preview of a file through a URL parameter &dl=1 to download.php
- Remove use of undefined configuration param code_append in default configuration file
- Add setting show_hidden_exercise_added_to_lp
- Support HTTPS with Gravatar
Extended changelog
See full changelog for this version in the documentation folder of your campus or online here: https://10.chamilo.org/documentation/changelog.html#1.10.4
1.10.2
Summary
Chamilo 1.10.2 is a minor, bugfix version of the 1.10.x branch, with a few new features and bugfixes on top of 1.10.0. Notably, this version enables the migration from 1.9.x to 1.10.2 (many bugs were reported in the migration from 1.9.x to 1.10.0, which were fixed within the 2 months to this minor version).
Release name
Alsted (55.405964, 11.666896) is a small village in the extended vicinity of København (Copenhagen) in Denmark. It is a very quiet little place inspiring... stability with a little growth. It reflects a typical (short) period of calm before Christmas in the growth of our community, before everything start to grow out of control again :-)
Security fixes
There were no specific security flaws detected during the development of 1.10.2 but standard development procedures and criterias were followed during the development to ensure a very high security level.
Changelog
See full changelog for this version in the documentation folder of your campus or online here: https://10.chamilo.org/documentation/changelog.html
1.10, San Juan
Summary
Chamilo 1.10.0 is a major version of the 1.10.x branch, with new features and bugfixes on top of 1.9.10. As a major version, it requires the use of the upgrade script in order to upgrade an existing Chamilo portal. See install instructions.
Chamilo 1.10.0 integrates several new techniques of development that should improve is reliability, speed and flexibility.
Release name
San Juan (or the "Old San Juan") was the main (old) harbour of Puerto Rico island. A frequent stop-over harbour for Europe's immigrants to the "new world" (be it Latin America or North America). Chamilo 1.10.0 marks a very strong intermediate step between the "old" Chamilo, inheriting over 14 years of code and experiences, and the "new" Chamilo, still maintaining its history of user experiences, but reworking the building bricks in a way that will make new developments possible faster, so that Chamilo can spread to the rest of the world in a rapid but stable way.
Security fixes
There were no specific security flaws reported from external sources during the development of 1.10.0 but standard development procedures and criterias were followed during the development to ensure a very high security level.
- (1307b66 - BT#10295) Remove XSS when add/edit career
Changelog
See full changelog for this version in the documentation folder of your campus or online here: https://10.chamilo.org/documentation/changelog.html
1.9.10.2, Sipán
Chamilo 1.9.10.2 is a patch (minor) version of the 1.9.x branch, with bugfixes and a few new minor features, but more importantly fixes for vulnerabilities discovered in 1.9.10 and previous versions (as such, you can just overwrite previous files to upgrade from 1.9.8, 1.9.8.1 or 1.9.8.2 to 1.9.10.2).
Release name
Sipán is a small city on the Peruvian Coast where the remains of the Lord of Sipán (a ruler of the 3rd century AC) were discovered in 1987. It held many well-conserved offerings. We believe this version of Chamilo, containing additional fixes on top of an excellent 1.9.10 version, has its fair share of common points with Sipán.
Security
- (97fec37 - #7564) Fix multiple XSS & CSRF vulnerabilities
- (ba947ae - #7564) Use htmlspecialchars when parsing a URL
- (9da1112 - #7564) Fix partially #7564
- (0c65e9b) Format code + adding Security::remove_xss
Check our security page for more information
Improvements (minor features) and debug
- (96ab630 - BT#9494) Fix Exercise result if was added inside a LP
- (b6b54d5 - BT#9255) Fix bad condition that sets all documents to invisible
- (76c83f1 - BT#9255) Fix redirection after changing document visibility.
- (f58039e - BT#9571) Fix URL links
- (0fd3188 - BT#9559) Fix LP export to PDF
- (391fa4f) Fix reporting.
- (b540f82 - BT#9426) Add "allow_delete_attendance" option
- (c552d08 - BT#8986) Adding session support in forum copy from course to course
- (d0ed859 - BT#9436) Improve script to move users from course to session with all resources
- (c7b1706 - #7577) Fix query in buy_course plugin
- (b295372 - BT#9420) Blocking glossary in LP if not allowed
- (e75de5e - BT#9436) Script to move users from course to session with all resources
- (d74d700 - BT#9420) Fix setting show_glossary_in_extra_tools
- (11b0e96 - BT#9420) Adding glossary possible options
- (ba5b122 - BT#9494) Show exercises included in learning paths in the Gradebook
- (becb733) Fix queries in work tool.
- (0f4ac57 - BT#9324) Prevent session admins to see all users
- (709f388 - BT#9324) Add default setting for configuration.php for users list view filter for session admins
- (afbd8f3 - BT#8986) Fix session selection
- (6061f69 - BT#9324) Show only session admin created users in user list and in session creation- refs BT#9324
- (0c9ca6a - BT#9323) Add 'DISTINCT' to session list query to avoid returning repeated records
- (8cbb366 - #7540) Fix sub category creation
- (132919c - BT#9422) User in group can edit wiki page
- (fb445f8 - BT#9408) Fix queries in the report by question in exercises
- (1919394) Fixes certification validation. Takes the score not the percentage.
- (2812d60) Fixing header order in gradebook
- (d175690 - BT#9293) "*.phps" files are renamed to php when downloading a zip
- (ab6f1b2 - BT#9287) Fixes users order in gradebook
- (8da0d49 - BT#9380) Fixes fatal error in wiki in session
- (4704376) Adds nl.js file to fckeditor.
- (d1f552d) Fixes error when deleting a group tutors should be also removed.
- (cef6d39 - BT#9340) Adds students/tutors export/import
- (df11c14 - BT#9355) Fixes $groupId value was overwritten
- (50c9b18 - BT#9325) New feature: Edit extra content in admin panels
- (cebeba5 - BT#9340) Adds "users" field while exporting classes
- (762c4b3 - BT#8617) Fixes show_description when updating sessions
- (f14dfa4 - BT#8617) Adds show_description parameter in import csv files
- (e17cb4c - BT#9329) Checks only results with qualification
- (b82a265 - BT#9328) Adds importSubscribeStatic option
- (4eaeae3) When cleaning user LP results delete also the interactions and objs
- (3a7cf71 - BT#7802) Adding event comments
- (2fa3954 - #7370) Fix a few buy courses plugin issues
- (2fd2c2b - BT#9022) Add certificate path to the web service. Add 'add_gradebook_certificates_cron_task_enabled' configuration parameter
1.9.10, Huánuco
Chamilo 1.9.10 is a new minor version of the 1.9.x branch, with many bugfixes and a few interesting new features (as such, you can just overwrite previous files to upgrade from 1.9.8, 1.9.8.1 or 1.9.8.2 to 1.9.10).
Release name
Huánuco is a small city in the Peruvian Andes, Northeast of Lima. This is a special version in memory of our cherished development team member César Perales, who passed away on July 22nd, 2014, at age 27. César contributed mostly "in the shadow" to Chamilo LMS, allowing the rest of the team to contribute more actively. He was a vibrant young man. He will be missed. César lived in calle Huánuco, in La Molina, Lima, Peru, where other team members bid him their last farewell for his last, eternal trip.
To this image, this version marks a change of behaviour from the Chamilo team, maturing into another plane of existence. This year, Chamilo LMS got used in more contexts than ever before, with a growth that is superior to any other open source LMS out there. It has become a more reliable and versatile platform, that will serve its purpose, helping making education better and more widely available, better than ever before.
Security
All security issues are published and patches are attached on our security issues page. If you think you found an additional security issue you'd like to report, please check our procedure there.
- (8a75f65 - #7242) Fix SQL injection in mySpace/users.php
- (d64a02c - #7272) Fix SQL injection threats and replace SESSION variable with api_get_user_id
- (5879616 - #7275) Add security token to course copy tool
- (#7440) Fix a series of SQL injection vulnerabilities due to integer filtering
Possibly breaking changes
Two changes have been made to the forum tool code, which might make some of your forums disappear and require a direct database intervention.
First case: If you use forums with sessions and have placed a session forum inside a base-course forum category, the forum category will now no longer appear in any session, and as such, the session forums contained in that category will disappear. You can easily fix that by checking the c_forum_forum table for any record with session_id != 0 that points to a forum category that has session_id == 0. This is related to issue #7264.
Second case: In very rare occasions, if you use group forums and have had issues with posts appearing twice, then this release will fix this bug, but might also make some forum posts disappear. Although we could not reproduce the error, you should be able to fix it by changing the group_id column inside the c_forum_thread table. This is related to issue #7267
This is an exceptional event in the history of Chamilo, and we believe it should only affect very few portals, but we prefer to take precautionnary measures and warn you upfront.
New features
- (7e67dd2 - BT#9018) Add PDF export for student publications list
- (5e8ae68 - #7478) Add cookie warning message to comply with new European legislation
- (e637608 - BT#8814) Add "Auto attendance" based on course login
- (960899a) Add possibility to hide previous videoconferences even if recording is not enabled
- (3bc8fd6) Add $_configuration['document_if_file_exists_option']
- (73e3816 - BT#9247) Adding exercise_max_fckeditors_in_page setting
- (b14bcb3) Add option $_configuration['certificate_pdf_orientation']
- (7dbed80 - BT#8703) Add hosting total size checker
- (218dc6a - BT#9175) Add hosting_limit_active_courses setting
- (1d68db4 - #398) Support Opale/Scenarii by adding variable to better support SCORM 1.2 by watching over the definition, by the SCO, of the lesson_status and the call to LMSFinish() or the move to another element
- (57750c2 - BT#8900) Add progress in learning paths report
- (903436e - BT#8902) Add learning paths reduced report
- (1a6a4a9 - #7272) Add possibility for plugins to define main tabs
- (ef242ab - #7255) Add multiple file upload in forum, and show list of attachment files from view threads
- (c8f940b - #7338) Add REST web service to get personal messages (from inbox)
- (2db9057 - #7328) Add theme_backup and default_template settings
- (8d9a825) Add script to check users data in CSV file
- (f52df87 - BT#8845) Add script to move users from one course to another depending on them having passed an exam or not
- (27493b3 - #7324) Add possibility to hide recordings from students in conferences list in BBB plugin
- (c24c758 - BT#8840) Add $_configuration['auto_detect_language_custom_pages'] to detect the language in custom pages
- (a2ff44c - #7212) Add calculated answers feature (in beta test)
- (25cd7dd) Use .gitattributes file to enable special Github features for versions packaging
- (002a0ab - #7309) New icons for questions types
- (0d131f9 - BT#8746) Add option "include all users" to export
- (88126fe - BT#8796) Add option to prevent multiple simultaneous login option ($_configuration['multiple_connection_not_allowed'])
- (58334f8 - BT#8746) Add OnlyBestAttempts option to show only the best attempts in exercise results list
- (8ad728a - #7279) Add tour plugin
- (fc3508e) Add $_configuration['show_official_code_exercise_result_list'] to show the student's... official code in exercise results lists
- (6830ae3 - BT#8340) Add optional Memcache + DB persistence session storage mode (clusters context)
- (577c7e7 - BT#8703) Add $api_warn_hosting_contact() and $_configuration[1]['hosting_contact_mail'] to explain who to contact in case of reaching a hosting limit
- (5a5e6bc - BT#8736) Add $_configuration['email_alert_manager_on_new_quiz'] to send an e-mail to administrator for new quiz
- (ea16dbd - BT#8697) Add $_configuration['order_user_list_by_official_code'] to order users lists by official code
- (f286f35 - BT#7848) Add course legal agreement plugin
- (75045f7 - BT8730) Add pdf_logo_header setting
- (4601849, be487d6 - #7272) Add support for session in BuyCourse plugin
- (d06fd47 - #7275) Add support for sessions in course catalogue
- (eb45183 - BT#8662) Add $_configuration['hide_scorm_pdf_link'] to remove option to "download as PDF" in learning paths list
- (bea2ed0 - #7225) Add Clockworks SMS sending plugin
- (606c84b - #7236) Add $_configuration['course_catalog_hide_private'] option to hide private courses from courses catalogue
- (5720f35 - #7252) Add support for mobile phone numbers extra field type
- (7610baf - BT#8441) Add webservice mode to converter from ppt
- (2582408 - BT#8274) Add ViewerJS (view .pdf) in documents tool
- (3ef3032 - BT#8274) Add Wodo text editor (edit .odt and .odp) in documents
- (eadeaf8 - BT#8317) Add sessions duration feature
- (019987d - BT#8316) Allow courses to be sorted inside a session (requires manual database change)
- (bafcdef - BT#8611) Add option to make a copy of a surveys inside the same course
- (1ee0d78 - BT#8605) Add option to "add me as teacher in courses" during CSV import
- (9dbab31 - BT#8459) Add $_configuration['hide_scorm_copy_link'] to hide the icon in the learning paths list
- (d942e8e - BT#8457) Add $_configuration['allow_lp_return_link'] option to change the return link in LPs
Improvements (minor features) and debug
Please check the documentation/changelog.html for more details.
Stylesheets and theming
- No major style changes in this version, but a lot of visual improvements
- The possibility to select a template (from main/template/) through the configuration.php file has been added, although no new template is available yet (at least now you can create your own and use it)
- Old question types icons were replaced by new icons
- Old session "window" icon was replaced by a new icon
Web services
- (cce71ec - #7338) Add web services classes for autoload
- (595fafb - BT#8231) Add setting to decode UTF-8 in registration web services
Removals
- No removal worth mentioning in this version
1.9.8.2
Chamilo 1.9.8.2 is a very little patch version with one bugfix regarding the learning paths tool. Considering the fact that 1.9.8 is planned for the long term, we'd hate to have such a minor patch left on the side for a year or so. This will be packaged and promoted as 1.9.8, but the folder inside the 1.9.8 will be called 1.9.8.2, with a change to this changelog file and a one-line change to main/newscorm/learnpathItem.class.php (as such, you can update just this file to upgrade from 1.9.8.1 to 1.9.8.2. See the code change for detais.
1.9.8.1
1.9.8, "Thon"
Chamilo 1.9.8 is a minor stable version with a series of improvements on top of 1.9.6.
This version is the first Chamilo version to drop support for Internet Explorer 7. We insist that you recommend your users to use modern browsers that respect web standards. If they cannot avoid Internet Explorer, make sure they use at least version 10, which respects a little bit more than half of the W3C standards (but still much less than Firefox, Chrome, Opera or even Safari)
Release name
Thon is a small city in the Belgian region of Wallonia, several times classified as the most beautiful village of the South region of Belgium. It is a quite, beautiful place without anything out of the ordinary but made of beautiful, hundred years old homes built from famous Wallonia blue stone and crossed by the Samson river. Its stability and it's position just next to the large cliffs surrounding the Meuse are symbolically close to Chamilo 1.9.8, highly stable but a few steps away for the huge jump to the next major version.
Security
All security issues are published and patches are attached on our security issues page. If you think you found an additional security issue you'd like to report, please check our procedure there.
- Patches have been applied to one of the packages of FCKEditor used for image uploads in Chamilo 1.9.6.1. These patches are included in 1.9.8 (see issues 11 and 12)
- Some other possible XSS attack vectors through initially privileged access have been fixed (see issue #13)
New Features
- Plugins: added possibility to add menu tab entry for any plugin
- Added a way to hide course teacher, if there are too many
- Added OpenMeetings plugin for videoconference through Chamilo
- Allow student to check his/her test results if the date of the test is over
- Added option to prevent "login as" feature on enhanced-security portals
- Register "user disabling" action in important activities
- Make check_version() AJAX-based
- Added CAPTCHA on registration page (requires manual configuration edition)
- Added "Sessions subscribed to" icon in users list
- Exercises: Added auto-evaluation mode with feedback but without correct answer hint
- Course copy: Included work/assignments copy in course copy
- Tickets: new support tickets system integrated as a plugin (requires activation by admin)
- Groups: Added possibility to increase the number of users in a group above the category limit
- Added X-SendFile support to boost files download (requires manual configuration edition and web server modules)
- Added individual mode for users assignments to HR director
- Added list of students in course export
- Exercises: Added possibility to clear all results before a specific date
- Plugins: Added support for sessions in BigBlueButton plugin (requires re-installation or manual DB update)
- Exercises: Added auditing of "clean results" action by teachers
- Added support for "for" attributes in fields for WCAG/WAI AA compatibility
- Added user profile fields of type "File upload"
- Add Aiken (Word) import format in exercises
- Add browser language auto-detection at first connection
- Added BuyCourses plugin for PayPal payments
Improvements (minor features)
Please check the documentation/changelog.html for more details.
Debugging
Please check the documentation/changelog.html for more details on about 300 bugfixes
Stylesheets and theming
Stylesheets have been considerably changed in version 1.9.8, which might require a little update on your side if you have a custom stylesheet. We're sorry about it, but it was really necessary to improve the adaptability of the interface for mobile devices (which we are sure you will appreciate). If you only changed the logo, we recommend you make a copy of an existing Chamilo style (main/css/chamilo*) again, rename it and simply replace the logo then upload the new style. If you have more complex styles, you might want to ask for the assistance of your web designer at the moment you update Chamilo to this version.
- Updated logo to new Chamilo logo in config section
- Dropped support for IE7
- Improve styling for profile-attached files
- Great update to learning paths visualization
- Changed help image in learning paths
- Updated chat screen appearance
- (d64b865) Add "section-login" class in login pages
Web services
- Improved sessions list in sessions_list.soap.php and added GetLearnpathHighestLessonLocation() (also BT#6667)
- Updated WSCreateUser() to manage active status, added WSGetUser(), WSGetUserFromUsername() and WSSubscribeUserToSessionSimple() and fixed WSListSessions() to allow sessions sales from Ubercart Drupal module
- (43949c7) Add check on existence of extra fields (optional)
- Added WSUserSubscribedInCourse()
- (5ddc3c0) Assume student status in EditUser* services and prevent modifying an admin to student
Removals
- Custom tabs can no longer be defined directly in the settings_current table. If you have custom_tabs in this table (select * from settings_current where variable='show_tabs' AND subkey like 'custom_tab_%'), please add them through the homepage edition screen.
- Remove custom_tab_* feature
1.9.6.1
Security fixes were added see:
https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues