« Changelog History


Chamilo LMS v1.11.8 Release Notes

Release Date: 2018-08-15 // over 5 years ago

  • Summary

    🚀 Chamilo 1.11.8 is a minor, bug fix and security fix release on top of 1.11.6 that contains a series of small new features, including first support for European RGPD. Given the security fixes it contains, we highly recommend you to update from previous versions as soon as possible.

    🚀 Release name

    Sayaxché is a small municipality in the Guatemalan jungle of El Petén. It is a notable point that requires taking a small ferry to cross the La Pasión river and get from the ancient ruins of Tikal to the modern capital city of Guatemala. This represents the jump we are hoping to make after 1.11.8 to get out of the 1.11 versions and into our restructured version 2.0.

    🔒 Security fixes

    • 🔒 [2018-07-24] (385a84e) Security: Add app/Resources/public/css to the list of directories where execution of PHP is forbidden
    • 📚 [2018-07-24] (b0041b6) Security: Add documentation about X-Frame-Options in configuration.dist.php
    • [2018-07-23] (4ffe5ed - #2532) Security: Add Security::remove_XSS to clean variables from $_REQUEST
    • 📚 [2018-07-23] (d5129ad) Security: Update PHP files extension matching pattern in .htaccess and documentation to match all possible forms supported by PHP 5 and PHP 7.
    • ⚡️ [2018-07-23] (1c27a8b) Security: add rules to .htaccess to prevent direct PHP execution from the corresponding directories and updates security.html with a missing change in the previous commit. Using security.html is still the recommended way to go for security, but in the absence of that, we want to make sure Chamilo is always more secure.
    • 📚 [2018-07-23] (6ff87c3) Security: Add Nginx rules to security documentation, in order to prevent execution of PHP files from the uploadable-files directories
    • [2018-05-31] (d400657) Security: Fix who is online access: now it will check chamilo settings api_get_setting('showonline', 'world') api_get_setting('showonline', 'users') api_get_setting('showonline', 'course')
    • [2018-05-29] (0de8470 - GH#2532) Security: Use json_decode/json_encode instead base64 - Add Security::remove_XSSS
    • 🔒 [2018-05-09] (d697192) Security: Check access to "who is online in session"
    • 🔒 [2018-04-09] (00f3e4a) Security: Fix work access for teachers and students

    Possibly breaking changes

    • [2018-07-27] (6750c5f - BT#14687) Gradebook: Rename disable_gradebook_stats to gradebook_enable_best_score and fix behaviour: now the setting will be required to enable the 3 last columns of the gradebook results table (avg, best score and ranking)
    • [2018-07-27] (4d67dfb - BT#14687) Gradebook: Avoid conflict between gradebook_detailed_admin_view and disable_gradebook_stats

    Notable new Features

    For end-users, teachers and Chamilo admins

    • 0️⃣ [2018-07-05] (33dc232 - BT#14609) Learnpath: SCORM change: Default value of olms.lesson_status is "not attempted"
    • [2018-06-27] (43bf486 - BT#14435) Quiz: Change color from blue to black in ASCIIMathML scripts to highlight formulas (now will appear in a normal black)
    • [2018-06-13] (dd3390a) Global: Adding page about the course
    • [2018-06-11] (0a345a9 - BT#14453) Message: Add voice recorder button when sending a msg in the chamilo inbox
    • [2018-05-18] (c91f572 - BT#14350) Session: Session coach can now edit documents
    • [2018-05-18] (187acee - BT#14338) Quiz: Droppable questions: Add counter in boxes
    • [2018-05-16] (87c4804 - BT#14111) Course homepage: if LP links are added, use the LP order
    • [2018-04-10] (43d53a7 - BT#5776) Learnpath: Add more prerequisite information if available when loading an item
    • [2018-04-09] (98efe2a) Quiz: Add "certainty level" question type
    • [2018-04-03] (57b88a5) Template: Use SYS_TEMPLATE_PATH to find template file
    • [2018-04-03] (da56954) Template: Add twig function to get template file inside template. This changes the way how template files are included or extended. Add twig filter to get template file inside template This changes the way how template files are included or extended
    • [2018-04-02] (b99aaa3) Template: Add hot sessions block - sessions_current.tpl
    • [2018-03-28] (d76db9c) Template: Add dashboard TPL
    • [2018-03-23] (e13bb51) Template: Add tpl index.tpl for myspace
    • [2018-03-21] (4b5f86c - BT#11913) Survey: Add pending surveys page
    • [2018-03-20] (d04996a - BT#14141) Work: Add teacher comment to the notification
    • [2018-03-16] (b256c09 - BT#14056) Portfolio: Add Portfolio Tool. Requires DB changes

    For developers and sysadmins

    • ⚡️ [2018-08-01] (9472341 - GH#2606) GDPR (#2606/#2503) Admin: Add configuration setting 'enable_gdpr' to enable special privacy options to ease implementation of European GDPR. Add personal data info page, LegalRepository, personal data treatment types display and update getLastLogin() results including track_e_login for legacy users
    • [2018-07-25] (c025963 - BT#14687) Gradebook: Delete gradebook categories when deleting course
    • [2018-07-25] (5acc3b2 - BT#14687) Admin: Allow search course by ajax to platform admin
    • 🔌 [2018-07-25] (85ef745 - BT#14664) Plugin: BBB: Add bbb interface option (flash or html5)
    • ✅ [2018-07-23] (bd7d1ad - GH#2601) Installation: replace check of app/course/X/test.php with an html file
    • [2018-07-05] (4d65d4e) Admin: Add multiple-selection enabling/disabling of users
    • 🌲 [2018-06-22] (3107f0f - BT#14512) Tracking: Add audit logging for removal/addition of users into a session
    • [2018-06-14] (c2efa24 - BT#14468) Survey: Add configuration setting allow_survey_availability_datetime
    • [2018-06-01] (44833e2 - BT#14371) Admin: Add configuration show_conditions_to_user setting to show conditions during sign up
    • [2018-05-30] (4473bd1 - BT#14395) Admin: Add configuration setting show_pending_survey_in_menu to show pending survey link in user menu
    • [2018-05-30] (73ae4cf - BT#14385) Admin: Add configuration setting gradebook_hide_graph
    • [2018-05-30] (73ae4cf - BT#14385) Admin: Add configuration setting gradebook_hide_pdf_report_button
    • 🚧 [2018-05-21] (662e922 - BT#14324) Maintenance: Add support for learnpath category in course backup
    • 🔌 [2018-05-21] (69545e0) Plugin: Custom certificate: Add customcertificate plugin
    • [2018-05-15] (1326c86 - BT#14324) Admin: Add configuration setting 'allow_import_scorm_package_in_course_builder': When we export a course backup file the course/ABC/scorm/ folder is added in the zip packages. This setting imports that folder, e.g. course/ABC/scorm/my_scorm is saved in the new location course/DESTINATION/scorm/my_scorm/
    • [2018-05-09] (247e1a0 - BT#14252) Admin: Add configuration setting 'my_courses_session_order'. Userportal session list - Show end date null values at the end. If setting "my_courses_session_order" is set to: $_configuration['my_courses_session_order'] = ['field' => 'end_date', 'order' => 'asc']; Null values will be shown at the end.
    • [2018-05-08] (409ca7a - BT#14196) Admin: Add configuration setting session_courses_read_only_mode (was lock_course_in_session)
    • [2018-05-08] (caad4bb - BT#14113) Admin: Security: Add configuration setting 'disable_token_in_new_message' to avoid issues when sending messages for very active users with several open tabs. This introduces a security vulnerability as it can allow some third party to send DOS attacks through the PHP sending script, but might be necessary to reduce user anxiety
    • [2018-04-25] (ac7665e - BT#14254) Admin: Add "Hide from catalog" (hide_from_catalog) course extra field in order to hide courses from the course catalog. Refactor course/session/course category code. Change function name and move functions to CourseAndSessionsCatalog
    • [2018-04-25] (90ea493 - BT#14251) Admin: Add configuration setting "allow_exercise_auto_launch" to allow auto launch for documents and exercises - requires DB change
    • [2018-04-23] (4cecc04 - BT#14192) Admin: Tracking: Add url(portal)/session/user stats
    • [2018-04-23] (53adbbc - BT#14262) Global: Show users only from current portal in who is online
    • [2018-04-20] (fe0aaeb - BT#10885) Admin: Add configuration setting "allow_lp_chamilo_export" to export learning paths with the course builder system (from course maintenance)
    • [2018-04-18] (c056499 - BT#10769) Admin: Add configuration setting "group_document_access" to allow sharing options for the documents inside a group. Requires DB changes.
    • [2018-03-20] (1b75983 - BT#13964) Admin: Add configuration setting "send_notification_when_document_added"
    • [2018-02-22] (604950f - BT#14026) Document: Don't clear class for audio/video when removing xss
    • 👉 [2018-02-22] (50cb6f0 - BT#13924) Admin: Add configuration setting "allow_user_message_tracking"
    • [2018-02-19] (6e619d2 - BT#14034) Admin: Add configuration setting "send_inscription_msg_to_inbox"
    • [2018-02-16] (fe04224 - BT#13950) Admin: Add configuration setting "exercise_hide_label" to hide exercise question label (ribbon)
    • [2018-02-16] (531f5aa - BT#13950) Admin: Add configuration setting "show_exercise_expected_choice" to show more information when resolving an exercise
    • [2018-02-14] (01c864b - BT#13794) Admin: Add configuration setting "lp_view_settings" to hide reporting icon in lp view
    • [2018-02-12] (93a64d5 - BT#13334) Admin: Add configuration setting "allow_skill_rel_items" to link skills to things. Requires DB changes
    • [2018-02-06] (155235e - BT#13943) Admin: Add configuration setting "send_two_inscription_confirmation_mail"- This will send 2 emails to the user, one with the username, the other with the password.
    • [2018-02-06] (597a745 - BT#13829) Admin: Add configuration setting "allow_base_course_category"
    • 👉 [2018-02-06] (28daf39 - BT#13924) Admin: Add configuration setting "allow_user_message_tracking"
    • ✂ [2018-02-02] (bae37ae - BT#10895) Admin: Add configuration setting "allow_remove_tags_in_glossary_export"
    • [2018-02-01] (110f7fc - BT#13944) Admin: Add configuration setting "generate_random_login" when importing users by CSV
    • [2018-01-26] (423e9b6 - BT#13923) Admin: Add configuration setting allow_teachers_to_access_blocked_lp_by_prerequisite to allow teachers, drhs and admins to access blocked LP's because a prerequisite.

    💅 Stylesheets and theming

    • [2018-08-10] (38e649a) Template: Fix footer
    • [2018-08-10] (c267e71) Template: Update fix show_footer and show_header tpl
    • [2018-08-10] (248d9d9) Template: Improvement of template layout and css structure
    • [2018-04-10] (a12959e) Template: Added the variable home_include in the tpl layout_2_col.tpl
    • [2018-04-10] (d6c5d52 - CT#11338) Template: Add template variable home_include when including static HTML page through main menu. Add parameter to return_home_page(). Add SECTION_INCLUDE constant
    • [2018-04-10] (4507d6b) Template: Fix duplicate plugin_main_top condition in layout_2_col.tpl
    • [2018-04-10] (55969b0 - BT#11338) Template: Add macros for twig in tpl
    • [2018-04-09] (1c1e68b - BT#11338) Template: Add notice_block and help_block
    • [2017-12-15] (3550662 - BT#12835) Template: Add template for document/webcam

    Removals

    • [2018-04-17] (bc808c8 - BT#14242) Gradebook: Remove unused code get_not_created_links, try find exercise with iid.
    • 🚚 [2018-04-17] (6094513) Course info: Remove unused variables
    • [2018-03-28] (82f724d - GH#2469) Internal: Remove call of setting "user_name_sort_by" not used anymore
    • [2018-03-23] (6465b5c) Internal: Remove unused php_session_id
    • 🚚 [2018-03-16] (7a8d695) Internal: Remove unused file
    • 🚚 [2018-03-16] (3820130) Internal: Remove repository chamilo/pclzip. Library is added to packagist.
    • ⚡️ [2018-03-16] (35ead26) Internal: Remove custom repo PHPWord, PHPWord updated zend lib dependencies
    • 🚚 [2018-03-14] (285442e) Internal: Remove use of create_function, replaced with anon function.
    • 🚚 [2018-03-02] (f38583c) Internal: Remove deprecated use "create_function" in compare rule - FormValidator Shows error in php 7.2

    🌐 Web services

    • [2018-08-02] (9ab965d - BT#14613) Webservice: Webservice can register user to a course no matter the course config Webservice is kind of "admin" $checkTeacherPermission parameter added
    • [2018-08-01] (7b1bf11 - BT#14613) Webservice: Add "webservice_validation" conf to validate login against a webservice
    • [2018-08-01] (df10c53 - BT#14613) Webservice: WSGetUserFromUsername now returns extra fields
    • [2018-07-30] (e861636 - BT#14613) Webservice: Get extra fields from user in webservice
    • [2018-07-30] (6cc1a3f - BT#14613) Webservice: Fix WSGetUserFromUsername webservice
    • [2018-03-28] (3f48002 - GH#2471) Webservice: Fix add course by using REST API #2471
      Parameters encode change from base64 to json in file main/webservices/api/v2.php 4ffe5ed