8.5.2 Release Notes

Improvements?

Let us know by posting here.

New Features

  • You can now control the number of results in the file manager from the file manager directly without loading the advanced search dialog (thanks marvinde)
  • You can now delete all entries from an existing Express object without deleting the object.
  • Update CKEditor from 4.11.1 to 4.12, add Placeholder plugin (thanks mlocati)
  • Add the ability for each Express Form block to have its own from address (thanks dimger)
  • Added the ability to set a background color for thumbnails and for use with the image editor (thanks marvinde)
  • Added the ability to search attributes when adding attributes to the page composer form (thanks iampedropiedade)
  • The Page Attribute block can now use custom templates (thanks danklassen)
  • Add GUI to configure trusted headers received by a proxy (thanks mlocati)
  • Add dashboard page to change database character set / collation (thanks mlocati)
  • ReCaptcha is now included as a captcha option in the core (thanks edbeeny and mlocati)
  • You can now include page aliases in searches in the Dashboard advanced page search (thanks HamedDarragi)
  • Allow email sending enable/disable from the dashboard (thanks biplobice)
  • Make it configurable whether or not to ignore page permissions for RSS feeds (thanks hissy)
  • Added the ability to show captions by default for the YouTube block (thanks ahukkanen)
  • Added a new install theme console command (thanks AdamBassett)

Behavioral Improvements

  • Add MySQL version and SQL_MODE to environment information (thanks mlocati)
  • Removed the extraneous exception stack trace when the MySQL connection fails during installation (thanks mlocati)
  • Added support for right-to-left languages in the concrete5 translate UI (thanks mlocati)
  • Fix error where sitemap panel would show up even if the user has no access to add pages or to the sitemap.
  • Improved uniformity between search interfaces in the Dashboard and dialogs for things like files, pages. Miscellaneous display bug fixes for search interfaces.
  • Add the author column on express entries CSV export (thanks biplobice)
  • Added file read route to the rest api (thanks deek87)
  • Use the HTTP 303 code for downloading files instead of HTTP 302 (thanks dimger)
  • Simplify the error message when copying a file to folder (thanks mlocati)
  • Added Choose New File to the top of the file selector menu to help users confused by the “Replace” option further below (thanks mlocati)
  • If the form redirects to a thank you page, pass the entry id so that the page can interact with the entry if desired. (thanks JeffPaetkau)
  • We now separate titles and content of installation errors if you encounter them (thanks mlocati).
  • In the desktop draft block, deleting a draft now no longer redirects you to the home page (thanks hamzaouibacha)
  • Improved reliability when uploading large files into the file manager (thanks mlocati)
  • RSS feed URL slugs can now have hyphens in them (to match the behavior of other concrete5 URL slugs) (thanks bikerdave)
  • Added rel=noopener noreferer to different places in the core where we link to external pages, enabling better process management (thanks dimger)
  • Added Twitch Social Link (thanks core77)
  • Composer and block editing will no longer log you out while you are editing for a long period of time (thanks mlocati)
  • Remember me 2 weeks value is now configurable (thanks iampedropiedade)
  • Routing system now handles response objects returned by any controller on_start() methods (thanks mlocati)
  • Add a config key to support script-specific locales (thanks hissy)
  • Added the ability to disable checking for core and package updates when using concrete5 via composer (thanks mlocati)
  • Improvements to the display of the feature block icon selector (thanks shahroq)
  • PageTypeDefaults::SetupOnChildPages: Make Update forked blocks optional (thanks HamedDarragi)
  • Reduced the number of errors Doctrine complains about when inspecting the mapipng information for the core entity classes (thanks macserv)
  • Spelling errors fixed in certain error messages (thanks edbeeny)
  • Set quoted-printable encoding for outgoing emails for better compatibility (thanks mlocati)
  • Improvements to how the My Account menu was displayed in certain themes (thanks mlocati)
  • Don't ask to preserve old page path of external URLs (thanks mlocati)
  • When creating external links, the URL slug we generate is now based off the name of the link instead of the link (thanks dimger)
  • Better localization in edit mode of calendar, by including localized version of moment.js (thanks mlocati)
  • Brought back the ability to drag a file immediately into the file manager and have it begin uploading (Thanks mlocati)
  • Add asset version number to cache bursting query string (thanks mnakalay)
  • Show only the message when we have in case of UserMessageException (thanks mlocati)
  • Fixed - SEO issue: tag ignores any actions of page/block controller (thanks hissy)
  • Attribute controllers can now define the “No Value” text (thanks mlocati)
  • Reduced size of bundled bootstrap libraries; removed missing references to glyphicon font file

Bug Fixes

  • Fixed bug where XSS could be passed through to the select form helper under certain conditions.
  • Fixed bug when using the document library when MySQL has ONLY_FULL_GROUP_BY enabled (thanks dimger)
  • Fixed bug where additional cancel and submit search buttons were showing up in advanced search dialogs.
  • "Order Entries" page is not installed on upgrading from version 7 (thanks hissy)
  • Fixed buggy behavior when searching by associations in Express.
  • Fixed: Search Presets in dialog not actually submitting (thanks deek87)
  • Fixed: Bugs with search presets not being deletable, searching JS errors when working with search presets (thanks deek87)
  • Fixed bug with autoplay not starting in YouTube block due to https://developers.google.com/web/updates/2017/09/autoplay-policy-changes (thanks edbeeny)
  • Fixed bug when Express form sends notification with an image/file attribute and it’s not filled out (thanks a3020)
  • Add new Italian Province: South Sardinia (thanks mlocati)
  • Fix error where adding an image or a file to composer would complain about it not being present, even if it was.
  • Fixed error where file usage dialog did not work with files linked in the content block (thanks jeverd01)
  • Fixed bug where navigating directly to dispatcher.php would throw PHP errors.
  • Fixed error where global password reset didn’t require typing the confirm code.
  • FIxed inability to unapprove a page version in the versions menu (thanks kzn-a)
  • Fixed: Password Requirements dashboard page was not installed via 8.5.0 & 8.5.1 fresh install (thanks katzueno and hissy)
  • Fixed bug where clicking publish on a composer page draft could still create an extra version in some cases (thanks ahukkanen)
  • Fixed: ccmAuthUserHash cookie and "Stay signed in" functionality allows user impersonation if hash table is leaked (thanks mlocati)
  • Remove Guest from "Group to enter on registration" options (thanks hissy)
  • Fixed: Copy page does not change the mpRelationID of the new page (thanks 1stthomas)
  • Fixed error with user attribute not calling its method on the correct user object, leading to strange results (thanks deek87)
  • Fixed: If you dropped an image into the rich text description of an FAQ entry, when you went back to edit the entry, the image didn't show up (thanks JeRoNZ)
  • Fixes error where Download file does not show up for files that aren’t images (thanks MrKarlDilkington.)
  • Fixed: $c->getPageWrapperClass() removes all other specified classes (thanks HamedDarragi)
  • Fixed: UI: Can not select topic in large tree on Page Search (thanks hissy)
  • Fixed error in Redis cache backend: Password set in config is not sent Redis connection process (thanks HamedDarragi)
  • Fixed untranslated text in the Event List block (thanks iampedropiedade)
  • Fix showing empty error message when a problem occurred using Setup on Child Pages (thanks HamedDarragi)
  • Fixed error where bumping the concrete5 version number without changing a version_db number wouldn’t re-trigger an upgrade.
  • Fixes issue with broken links to files in textarea(richtext) attribute (thanks dimger)
  • Check $search_path is set and string in search block view (thanks r-kumazaki)
  • Fixed errors in full page caching under multisite setups. (thanks ahukkanen)
  • Fixed errors in full page caching with blocks that used special parameters – the page was saved properly but it would replace the contents of the pages without parameters (thanks ahukkanen)
  • Fixed: 8.5.2RC1 - Adding external link with URL "/" breakes the whole site (thanks mlocati)
  • Fix error on delete user who has express enties (thanks hissy)
  • Fix: calendar feed parameter and validation (thanks myq)
  • Fixed: Calendar events displayed only on starting month when they span multiple months (thanks cirdan)
  • Fixed bug with rich text editor not exporting content properly (thanks ahukkanen)
  • Fixed bug where we displayed an error when browsing directly to /dashboard/system/environment/entities/update_entity_settings (thanks mlocati)
  • Fixed bug where users who first created would be deactivated if automatic deactivation based on last login were turned on and they hadn’t yet logged in yet.
  • Fixed: blocks added to stacks that use JavaScript or CSS assets in their view templates were not working when the block was cached.
  • Fixed errors in localization class not including the Config class (thanks haeflimi)
  • Fixed login error complaining about Groups being a reserved word under Percona MySQL 8.0 (thanks macserv)
  • Fixed issue where in page list block, missing input validation results in mysql-error (thanks krebbi)
  • Fixed: Default Express Entry List search functionality does not allow for searching for multiple fields simultaneously (thanks suuuth)
  • Fixes bug where Express form answers were emailed in a random order, rather than in the order they displayed in the form (thanks joe-meyer)
  • Login page will now no longer let you render parts of authentication type forms if those types are not enabled.
  • Fixed bug where images or files added to front-end forms wouldn’t be included in the email notification about those forms.
  • Fixed bugs and cleaned up code in the Workflow classes (thanks mlocati)
  • Prevent leading/trailing commas from triggering errors in Legacy Form block (thanks MrKarlDilkington)
  • Fixed bugs when arranging stack proxy blocks in pages as a non-super user with advanced permissions enabled (thanks mlocati)
  • Blocks no longer remain in their target area if there was something about the move operation that failed (thanks mlocati)
  • Fixed multiple bugs when working with the HTML Upload interaction type in the image/file attribute (thanks mlocati)
  • Fix the layout of the search fields in "Page Report" page (thanks shahroq)
  • Fixed: Migration to ut8mb4 incomplete due to problems with schema (thanks mlocati)
  • Fixed bug where the hovering image in a file manager window didn’t disappear when clicking on the image record (thanks mlocati)
  • Fix inability to connect to marketplace on sites behind SSL when that site is also behing a proxy like Cloudflare (thanks mlocati)
  • Fixed: All Day Events are not determined correctly (thanks haeflimi)
  • Fix calendar block issues with all-day events (thanks biplobice)
  • Fixed inconsistencies when using Ctrl key to deselect images in the file manager (thanks mlocati)
  • Fix some issues installing content with the content XML format by disabling request cache during XML installation (thanks mlocati)
  • Fixed Issues when removing Custom Workflow Types (thanks deek87)
  • Fixed Issues when adding Workflows that have custom workflow types. (thanks deek87)
  • Refactored Workflow Types Class to use newer code. (thanks deek87)
  • Upgrading jQuery UI to 1.12.1 and downgrading jQuery to 1.12.2 to fix security issue (
  • Fixed bug when clicking on folders in Document Library (thanks dimger)
  • Fixed: When you add a datetime attribute into the search form, you'll get a JavaScript error.
  • Fixed: When paging through versions in stacks or on a page, clicking version doesn't show menu
  • Fixed errors when sorting attributes, inability to sort attribute sets as a regular administrator and not the super user (thanks mlocati)
  • Fixed: When opening existing repeated events, selected days were not selected.
  • Fixed: Unpublished repeated events get published after deleting part of events.
  • Bug fixes when updating a site from 5.7 (thanks deek87, mlocati)
  • Fixed warnings when sending mail with the intl extension enabled (thanks mlocati)
  • Fixed entity not found exception when retrieving author of a file when the author had been deleted (thanks mlocati)
  • Fixed StorageLocationFactory::fetchByName should return an instance (thanks hissy)
  • Miscellaneous cleanup in URL Resolver classes (thanks mlocati)
  • Fixed null pointer exception when user attempted to view calendars in the Dashboard but didn’t have permission access to the first calendar retrieved (thanks kaktuspalme)
  • Bug fixes when upgrading from previous versions of concrete5 (https://github.com/concrete5/concrete5/pull/7837) (thanks mlocati)
  • Fixed bug where account menu was floating underneath the concrete5 toolbar (thanks mlocati).
  • Fixed problems overriding the Express form context registry (thanks ahukkanen)
  • Fix block templates that edit the scope variables within the block view (thanks ahukkanen)
  • Fixed bug where default contact form in Elemental wasn’t set to store its form data in the backend, only to email it.
  • Fix H1 Report 643442 (thanks hissy)

Developer Improvements

  • Add 'noCountryText' option to Form::selectCountry() (thanks mlocati)
  • Check that LIBXML constants are defined (thanks mlocati)
  • Render jQueryUI dialog buttons in concrete5 style (see https://github.com/concrete5/concrete5/pull/7588 for example) (thanks mlocati)
  • Add CkeditorEditor::outputEditorWithOptions (thanks mlocati)
  • Updated Punic library to 3.4 (thanks mlocati)
  • Added app() global helper method to return an instance of the Application object (thanks rikzuiderlicht)
  • Update phpseclib from 2.0.13 to 2.0.21 (thanks mlocati)
  • Updated Bootstrap to 3.4.1 to fix XSS issue.
  • Added two new events: on_page_alias_add and on_page_alias_delete (thanks faker-ben-ali)
  • changing instructions order to send collection version with updated data when triggering approve page version event (thanks faker-ben-ali)
  • Add new DestinationPicker form widget to enable users to specify an object to link to, and get a nice widget instead of having to paste a URL (Thanks mlocati)
  • Update composer.json to add PDO ext as dependency for project (thanks gavinkalinka)
  • Upgrading Spectrum color picker color palette library to 1.8.0 (thanks mlocati)
  • Miscellaneous code cleanup and php documentation (thanks mlocati, biplobice, deek87, concrete5russia)
  • Update IPLib from version 1.6.0 to version 1.9.0 (thanks mlocati)
  • Add native lazy loading and JavaScript lazy loading support to the "html/image" service (thanks MrKarlDilkington)
  • Added optgroup functionality to the selectMultiple form helper method (thanks mlocati)
  • Force attribute keys to be in one set only during import (thanks mlocati)