forked from labb/Ushahidi_Web
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG.txt
executable file
·244 lines (220 loc) · 11.8 KB
/
CHANGELOG.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
Ushahidi 2.6.1 - Security Fix Release, 20-11-2012
-------------------------------------
* Vulnerability: Forgotten password challenge guessable.
Ushahidi 2.6 (Tripoli), 23-10-2012
-------------------------------------
* Improved way of handling translations
- Ushahidi translations are now managed through Transifex - Ushahidi
translations are now managed through Transifex
- The Ushahidi-Localizations repo is now included in core through a
submodule. Rungit submodule update --init when you next pull from git or
git clone --recursive git://github.com/ushahidi/Ushahidi_Web.git to
clone and include submodules
- All localizations will be shipped with core releases
- In addition , support for category translations have been added to the
categories API
- For more on Localization, check out the wiki
-> https://wiki.ushahidi.com/display/WIKI/Localization
* Support for JSONP
- We have added JSONP(http://en.wikipedia.org/wiki/JSONP) support to the API to allow cross-domain interaction.
* Zooming Controls - With an upgrade to openlayers 2.12 , several cool things have been added
- kinetic dragging: http://openlayers.org/dev/examples/kinetic.html
- animated panning:http://openlayers.org/dev/examples/animated_panning.html
- zoom transitions: http://openlayers.org/dev/examples/transition.html / http://openlayers.org/dev/examples/google-v3.html
* Better handling of reports layer
- Better handling of reports layer
- Old layer not removed until new one loaded.
- Fade between old/new zoom layer
- No reload on zoom unless clustering
* Actions: The actions feature has had some more work done i.e
- Added UI for editing and action
- Added UI for deleting an action
- Added actions trigger for geotagged feed items
* Refactor JSON controller for easier extension: Increases code reuse and add the following events
- ushahidi_filter.json_replace_markers
- ushahidi_filter.json_replace_markers
- ushahidi_filter.json_features
* More events in main view
- ushahidi_action.main_sidebar_pre_filters
- ushahidi_action.main_sidebar_post_filters
* Add events to tweak get_incident / get_neighbouring_incidents SQL
- ushahidi_filter.get_neighbouring_incidents_sql
- ushahidi_filter.get_incidents_sql
* Rework Upload and Download Feature
- Upload of custom form fields
- Case insensitivity issues fixed - Previously, csv content in lower case
would not be recognised and would cause upload failure, forcing users to
adhere to uppercase content for particular fields. Users can now upload
content regardless of what case the csv content is in.
- Added support for upload/download of Incident reporters
- Compatibility issues with CSV files generated by non UNIX systems
Ushahidi 2.5 (Cairo), 01-08-2012
-------------------------------------
* Mapping:
- The mapping code has been refactored and decoupled from the timeline.
- There are now events triggered for actions such as zoom changes, changine layer, etc. , which can be used to extend mapping function
- The timeline can now be turned on or off.
* Themes:
- The views have been namespaced on a per-controller basis.
- Views for the front-end (including JS) have all been moved to the themes folder
* Settings table:
- The structure for the settings table has been modified so that data are stored as key/value pairs.
* Installer:
- The installer has been reworked in order to work with the new settings table structure
- Additionally, we now perform the installation check in index.php
* Configuration files:
- The following files are no longer in the repository: config.php, auth.php and encryption.php.
In their place are templates (.template.php files) which are used by the installer to generate the respective config files.
* Roles and Permission:
- User permissions have been refactored into a separate table form roles. This now allows plugins to add their own permissions.
* Alerts
- Allow admin to view, search and delete user alerts in the system
* Security fixes thanks to OWASP Portland
- Multiple SQL injections (Thanks: Timothy D. Morgan, Kees Cook, postmodern)
- Missing authentication on comments, reports and email API calls (Thanks: Kees Cook, Dennison Williams)
- Admin user hijacking through the installer (Thanks: Wil Clouser)
- Stored XSS on member profile pages (Thanks: Amy K. Farrell)
- User data exposed in comment API
* Further details on migrating to 2.5 are available on the wiki
-> https://wiki.ushahidi.com/display/WIKI/Migrating+to+Ushahidi+2.5
Ushahidi 2.4.1 - Upgrader fix release, 01-08-2012
-------------------------------------
* Add support for removing old files during upgrade (#716)
* Clear cache after new files copied over
* Fix for DB upgrades
Ushahidi 2.4 - Bug fix release, 30-05-2012
-------------------------------------
* Fix A 500 error that was being thrown by the Scheduler (#387)
* Category icons now showing up on the map (#390)
* Fix map styling on the Actions/Triggers module (#435)
* Security fixes
- Cross Site Scripting (XSS)
* More on the bugs fixed can be found here:
-> https://docs.google.com/a/ushahidi.com/spreadsheet/ccc?key=0AizezfooB3k9dC1GX3RsNl9ocnQ3U1lmTUtSbFAwMlE#gid=7
Ushahidi 2.3.2 - Bug fix release, 08-05-2012
-------------------------------------
* Security fix for Admin API - prevent member role from accessing the admin API. (SA-WEB-2012-005)
* Fix Google maps base layers - base layer type were being incorrectly escaped
* Fix session driver change from 2.3.1 - Set session driver back to cookie as other drivers are buggy
Ushahidi 2.3.1 - Security fix release, 30-04-2012
-------------------------------------
* Security fix for session storage - sessions from any deployment were valid on any other deployment (SA-WEB-2012-004)
Ushahidi 2.3 - (Juba) Bug fix release, 24-04-2012
--------------------------
* Cleaned up database Schema
* Few improvements on the installer
– This includes the introduction of an admin login email configuration.
- Hiding of admin password once installation is complete.
* Added HTML editing and more attributes to the page editor.
* Security fixes
- Cross Site Request Forgery (CSRF)
- Cross Site Scripting (XSS)
Ushahidi 2.2.1 - bug fix release, 04-04-2012
--------------------------
* Map JS unification (#278)
* Make Scheduler JS options (#331)
* Update child categories of parent category that was reassigned to id 999 updated to match the correct parent_id 999 and not 5 (#322)
* Zoom level is never set on Get Alerts map (#358)
* Security fixes
- JSON controller returned non-approved reports
- JSON controller exposed on private deployment
- Markers controller exposed on private deployment
- json/single/ID SQL injection vulnerability
- Download reports (admin) could inadvertently return non-approved reports
Ushahidi 2.2 (Juba), 13-03-2012
---------------------------------
* Riverid Integration
- RiverID is an authentication and identity management system that provides users with a secure central sign-on facility.
- With RiverID, your are able to access all the Ushahidi products using just one username and password. This includes all the Crowdmaps you've set up and, when launched, your SwiftRiver streams.
- This eliminates the need for multiple passwords per person per Crowdmap deployment. Though, you are free to use as many different passwords as you choose.
* Base Map defaulted to OSM
- The default map version has been set to OpenStreetMap (OSM). There is a drop-down to select your map. You can select to use a variety of maps including Google.
* Badges
- Badges are a great way for Ushahidi deployers to award their users.
- Developers can also find badge image resources to include in their projects.
- These are badge images in a variety of categories which can be used in Ushahidi or Crowdmap deployments or other services.
* Automated Actions
- The admin panel now allows you to set up automated actions on your deployment.
- You are now able to set a chain of events into motion when certain conditions that you specify are hit.
* Alerts
- Subscription of Alerts via SMS.
- Unsubscribing from mobile alerts.
* Security
- Plugged SQL and HTML injection vulnerabilites
* Plugins
- Sharing feature moved into a plugin
- New plugins, adsense and Viddler
* Public Listing
- Plublic listing of deployment which increases your deployment's discoverability.
* Features changed on core
- Changed the Pages editor from Tinymce to JWYSIWYG
* Themes
- More themes to choose from.
Ushahidi 2.1 (Tunis), 09-08-2011
---------------------------------
* Usability
- A new multi-faceted reports listing page that provides the user with the ability
to filter reports using a variety of options such as categories, verification status, report submission channel
- Centralized the validation and saving of reports. This is now handled by the reports helper
- Streamlined the list of parameters for filtering reports on the frontend
- Implemented category sorting in a drag and drop fashion
- A new blocks feature to allow the user to toggle the display of certain sections on the front-end
- Enhanced the custom forms feature (courtesy of the Konpa Group) to better augment data collection via the reports submission page
- Ability to add geometries (polygons) to a report
- Option to get a taller/wider map in the report viewing page
* Checkins (Experimental)
- Checkins system
* Facebook Module
* Member Module
- New member module that allows people to log in to a deployment via OpenID or a username/password
pair specific to the deployment
* Performance
- Refactored the json controller to fetch all the reports via a single query instead of using multiple
queries
- Switched to straight SQL instead of ORM for fetching the reports
* Security
- Plugged SQL injection vulnerabilites
* Testing
- Added test framework (PHPUnit for unit tests and Selenium for functional tests) and tests
* JavaScript
- Switched from GML to Vector layers in timline.js for both the reports and KML layers on the main map
* Features removed from the core
- Removed Laconica from the list of message services. No longer supported
Ushahidi 2.0 (Luanda), 22-11-2010
---------------------------------
* Usability
- Improved reports listing to convey different sets of information quickly and in a practical way
* Themes
- Themes can now be created without having to tamper with the code.
* API
- Refactored the API controller and implemented the API system in a modular fashion.
API tasks/features are now availed by way of libraries
* Plugins
- New plugin architecture based on Kohana Events
- Implemented FrontlineSMS and Clickatell SMS services as plugins and added them to the list of stock plugins
- SMSSync plugin for the SMSSync Android application
* Scheduler
- Ability to schedule tasks in cron like fashion
* Upgrader
- An upgrader to automatically update the platform the latest release
Ushahidi 1.2 (After Haiti in Jan 2010)
--------------------------------------
*Usability
- A collapsible category tree on the submit report page
* Clustering
- Clustering of reports is now on the server side. It was previously being done on the client side via JavaScript
* Custom Forms
- A custom forms feature to collect additional information in addition to that in the "Submit Report" page
* Report Edit Logs
- Edit logs for a report are now available so a user of the admin console can see the series of changes/revisions/edits
that have been made to a report
Ushahidi 1.0 (Mogadishu) 10-12-2009
-----------------------------------
* A web installer is now bundled with the platform to ease the process of deploying/installing the platform
* New CSS based design that is easier to skin
* Admin email notifications on emails and comments
* Site statistics and analytics
* Feature to add custom pages and tabs
* Auto-geotagging of news feeds
* Ability to create reports from news feeds
* Feature to add KML/KMZ overlays on the map