webTareas Files

webTareas v3.0p5 release note

+ BUG FIXED: sql error: Unknown column 'cae.reminder_timer1' in 'WHERE'(1054)
+ BUG FIXED: stderr is missing in log files for all cronjobs
+ BUG FIXED: valid value for date format/time format 'system default' missing in add/edit user webpage
+ BUG FIXED: hour_code.min.js:2 Uncaught TypeError: Cannot read properties of undefined (reading 'action')
+ BUG FIXED: unable to delete equipment usage
+ BUG FIXED: Query failed: ERROR:  syntax error in processdocument.php
+ BUG FIXED: unable to use a `currency` field as condition in createreport.php
+ BUG FIXED: forms exporting incompletely if the form conatians `list` field with linked table
+ BUG FIXED: vulnerability scanner flagging a missing HttpOnly/Secure/SameSite cookie
+ BUG FIXED: SQL syntax error for the right syntax to use near 'UDPATE yT1ui_settings SET uisettings = ? WHERE member = ? AND uitype = ? AND ...' in /includes/upload.php
+ CHANGED: use <input type="number"> HTML element defines for entering numerical values
+ CHAGNED: use HTML required attribute to forces users to fill out an input field before submitting a form
+ CHAGNED: use a secure php stream script to play video/audio or display image/photo/logo
+ CHANGED: use autofocus attribute that completely replaces the need for JavaScript onLoad body commands
+ CHANGED: use hash_equals to prevent login from timing attack
+ CHANGED: use parameterized queries to prevent all public(without a login) pages from timing attack/sql injection
+ CHANGED: move `temporary files garbage collection` to cron job
+ CHANGED: email/export forms need `Edit` Permission of the form template and form status is `approved` or `no approvals needed`
+ CHANGED: upgrade jQuery to 3.7.1 from 1.11.1
+ CHANGED: wrap report description in a CDATA section when exporting report definitions
+ CHANGED: wrap section approval stage description and approval template description in a CDATA when exporting approval templates
+ CHANGED: wrap extension description in a CDATA section when exporting extensions
+ ADDED: Content-Security-Policy, Referrer-Policy, Strict-Transport-Security
+ ADDED: wipes the browser cache, cookies, and local storage immediately upon logging out
+ ADDED: script to reset admin password (run on console only)

For users who have installed webTareas v3.0, please apply the following steps:
1. download webTareas-v3.0p5-patch.zip
2. replace the files within webTareas-v3.0p5-patch.zip

For users who have installed webTareas v3.0 on Kubernetes, please apply the following steps:
1. make sure Kubernetes always pulls the latest image
   Specify imagePullPolicy: Always explicitly in your YAML manifest.
2. kubectl rollout restart deployment website-deployment -n webtareas

This version is for PHP8.x only. For PHP7.x, please use webTareas v2.8p6 instead.