Releases: justingit/dada-mail
v11.22.0 stable 2023-09-18
Dada Mail is a contemporary, mature and intuitive web-based email list management system.
11.22.0
Focus
This version of Dada Mail includes experimental support for the Mailgun API, along with a few bug fixes.
Features
Mailgun API Support (Experimental)
Mailgun is a third party email sending service, like Amazon SES. For an overview of third party email sending services, see:
https://dadamailproject.com/d/third_party_email_services.pod.html
Additional information on Mailgun support:
https://dadamailproject.com/d/features-mailgun_support.pod.html
Bugfixes
Searching members is broken in v11.21.0 #1171
Plugin: Change List Shortname outdated - does not update many tables #1168
v11.21.0 stable 2023-08-07
Dada Mail is a contemporary, mature and intuitive web-based email list management system.
11.21.0
This version of Dada Mail is a feature release, with a few bug fixes.
Features
Message Archive Search
Search for message archives has been added to the admin view of the archives in the list control panel.
Message Archive Pagination
Pagination has been added to the user view of messages archives, including search. Along with pagination being a nice-to-have feature, since search results were not pagination in past versions, queries could have been returned with an incredible amount of search results to be shown on the single screen. This realistically could have been a detriment to server performance if too many search queries were returned in a small amount of time.
Pagination has also been added to the admin view of the messag archives in the list control panel, including search.
reCAPTCHA protection on the Global Configuration plugin #1155
It seemed a good idea to protect the use of reconfiguring the entire app through this plugin by further protecting the form that allows you to do so with a CAPTCHA. This is now the case.
Change DADA::Security::SimpleAuthStringState to use an SQL table/database
The login forms are protected by a simple CSRF-like scheme. The backend using a DB File, rather than having the information needed for the protection saved in the SQL backend. In rare circumstances, the prerequisits to use these DB Files can be unavailable on the account.
This version changes this to have that info saved in a SQL table, and removes the need to use the DB Files.
Using the new backend should be transparent to the user - nothing extra is required. There will be a new table in the database named, dada_simple_auth_str.
Bugfixes
Scheduled Jobs (cronjobs) don't list all the individual jobs that can be run #1161
List Control Panel Archive Index Screen shows empty interface if no archived messages are available #1162
Screen Cache is cleaned out every time scheduled jobs (cronjob) is ran #1163
Individual archive message screens (public view) aren't always cached #1164
"Forward to a Friend" form doesn't have any required fields #1165
Screen, Data Cache is not flushed when installer is run #1166
v11.20.2 stable 2023-07-06
Dada Mail is a contemporary, mature and intuitive web-based email list management system.
11.20.2
This version of Dada Mail is a minor bug release.
Bugfixes
Drag and Drop Image Upload does not support upper case filenames #1147
CSRF is set to "disable" in the "configure security options" section of the installer when installer is revisted
Mailing List:Options speling mistake, "nitch" should be, "niche" #1153
Consider an OPTIMIZE after removing old Tracker analytics #1149
Mention IMAP support in Bounce Handler docs #1151
Perl CPAN Module DateTime.pm unable to located in schedule report
Add option to hide reCAPTCHA v3 badge #1138
Doc Update: "Advanced Template Syntax" isn't a thing #1154
Check that custom template used in, Appearance Your Mailing List Template has all required tags #831
v11.20.1 stable 2022-01-18
Dada Mail is a contemporary, mature and intuitive web-based email list management system.
11.20.1
This version of Dada Mail is a minor bug release.
Of note is a nasty bug in the Bridge plugin that affected some messages that are sent to it. These messages would fail to be sent, and a line in your error log may be found,
parse_data: unable to open in-memory file handle at...
See the following issue:
Bugfixes
One-click unsubscription can't be enabled #1139
Mis-speling in, "Subscribed" Message #1140
bridge - irrecoverable error processing message #1135
Rate Limits should be ignored for logged in administrators when handling unsubscribe requests #1130
Searching a list's message archive in the public view may return 500 error #1141
v11.20.0 stable 2022-10-03
Dada Mail is a contemporary, mature and intuitive web-based email list management system.
11.20.0
Focus
This version of Dada Mail is a major feature release.
Features
Dada Mail Build Script
In past versions, the only person who could build a working copy of Dada Mail that can be distributed was the main developer (me!), as many different parts of the app lived only on my own Macbook, which are added using a local build script. As development continued, more additional parts were needed to make a working package/distribution of Dada Mail, making this problem worse over time.
This hampers development of others, as no one else can check out Dada Mail and start developing. It has been my goal to remediate this problem. v11.19.0 solved a very large blocker on this, by decoupling the Perl Library bundled with Dada Mail from the main dada-mail distribution.
Starting with Dada Mail v11.20.0, all the needed parts to build Dada Mail are now available on Github, along with the build script. This allows you to build a fully working version of Dada Mail and thus allow you to fork the main Dada Mail repo, as well as any of these other parts to do whatever you'd like. Happy hacking!
See the README on the Dada Mail github for information on how to build Dada Mail:
https://github.com/justingit/dada-mail
as well as the source of the build script,
https://github.com/justingit/dada-mail/blob/main/make_distro.pl
as well as the new doc on how to build Dada Mail from source,
https://dadamailproject.com/d/building_dada_mail_from_source.pod.html
“Bounces” tab in the membership screen
You can now see any bounced message reports have been created for a member, on their own screen, rather than having to search for them on the Bounce Scorecord, or via the Log Viewer.
Better Link Pre-fetching Protection
Screens accessed by unsubscription links in mailing list messages that are followed ("clicked") less than 5 minutes after the message are sent will have their JavaScript disabled. The short time between message sent to unsubsription link clicked is usually a sign that a human is not doing the clicking, and such behavior causes false unsubscribes, which makes list owners pretty sad. The software that is following the link seems to also understand JavaScript, which is why we're disabling it. From my research, this is mostly those who use Outlook 365 with Advanced Threat Protection seems to be the biggest culprit.
This blog post does a good job explaining the problem, and offering a solution, which I've essentially adopted,
https://blog.healthchecks.io/2019/12/preventing-office-365-atp-from-clicking-unsubscribe-links/
The arms race to stop link pre-fetching continues.
Rich Filemanager upgraded to v2.7.6
DADA::App::HTMLtoMIMEMessage added to Debug Trace Options
This is what Debug Trace Options are:
https://dadamailproject.com/d/install_dada_mail-advanced_configuration.pod.html#Configure-Debugging
Better error reporting for problems with database connections
A small change/bugfix, but this may help those trying to figure out strange database connection problems, so it's a win.
Breaking Changes!
KCFinder Dropped
I've decided to stop shipping with KCFinder. There are some open XSS security vulnerabilkities in the app and Rich Filemanager which is also shipped seems to have more features/is more secure.
If you were using KCFinder, Rich Filemanager will be selected for you by default.
Core 5 Filemanager is still bundled with Dada Mail, and the backend has been updated (by me).
Bugfixes
Data::Google::Visualization::DataTable defaults to using JSON::XS which may not be available
v11.20.0 beta 2022-09-27
Focus
This version of Dada Mail is a major feature release.
Features
Dada Mail Build Script
In past versions, the only person who could build a working copy of Dada Mail that can be distributed was the main developer (me!), as many different parts of the app lived only on my own Macbook, which are added using a local build script. As development continued, more additional parts were needed to make a working package/distribution of Dada Mail, making this problem worse over time.
This hampers development of others, as no one else can check out Dada Mail and start developing. It has been my goal to remediate this problem. v11.19.0 solved a very large blocker on this, by decoupling the Perl Library bundled with Dada Mail from the main dada-mail distribution.
Starting with Dada Mail v11.20.0, all the needed parts to build Dada Mail are now available on Github, along with the build script. This allows you to build a fully working version of Dada Mail and thus allow you to fork the main Dada Mail repo, as well as any of these other parts to do whatever you'd like. Happy hacking!
See the README on the Dada Mail github for information on how to build Dada Mail:
https://github.com/justingit/dada-mail/tree/features-build_script#readme
as well as the source of the build script,
https://github.com/justingit/dada-mail/blob/features-build_script/make_distro.pl
“Bounces” tab in the membership screen
You can now see any bounced message reports have been created for a member, on their own screen, rather than having to search for them on the Bounce Scorecord, or via the Log Viewer.
Better Link Pre-fetching Protection
Screens accessed by unsubscription links in mailing list messages that are followed ("clicked") less than 5 minutes after the message are sent will have their JavaScript disabled. The short time between message sent to unsubsription link clicked is usually a sign that a human is not doing the clicking, and such behavior causes false unsubscribes, which makes list owners pretty sad. The software that is following the link seems to also understand JavaScript, which is why we're disabling it. From my research, this is mostly those who use Outlook 365 with Advanced Threat Protection seems to be the biggest culprit.
This blog post does a good job explaining the problem, and offering a solution, which I've essentially adopted,
https://blog.healthchecks.io/2019/12/preventing-office-365-atp-from-clicking-unsubscribe-links/
The arms race to stop link pre-fetching continues.
Rich Filemanager upgraded to v2.7.6
DADA::App::HTMLtoMIMEMessage added to Debug Trace Options
This is what Debug Trace Options are:
https://dadamailproject.com/d/install_dada_mail-advanced_configuration.pod.html#Configure-Debugging
Better error reporting for problems with database connections
A small change/bugfix, but this may help those trying to figure out strange database connection problems, so it's a win.
Breaking Changes!
KCFinder Dropped
I've decided to stop shipping with KCFinder. There are some open XSS security vulnerabilkities in the app and Rich Filemanager which is also shipped seems to have more features/is more secure.
If you were using KCFinder, Rich Filemanager will be selected for you by default.
Core 5 Filemanager is still bundled with Dada Mail, and the backend has been updated (by me).
Bugfixes
Data::Google::Visualization::DataTable defaults to using JSON::XS which may not be available
Dada Mail, v11.19.0
This is the v11.19.0 release of Dada Mail! Download the binary.
Install instructions:
https://dadamailproject.com/d/install_dada_mail.pod.html
Mirror:
https://sourceforge.net/projects/dadamail/files/dada-11_19_0.tar.gz/download