[ZendTo] ANNOUNCE: New production release 6.05-1

[Jules]

Hi folks!

I have just released a new production release, version 6.05-1.

The main improvement this time is an overhaul of the "request a 
drop-off" page, and now you can set the starting and ending times+dates 
limiting when someone can upload files.

So if, for example, you are using it to accept bids for a contract from 
potential suppliers, you can set a firm closing time+date, after which 
they will not be able to submit their bid.
It is also handy if you are using ZendTo to accept coursework or exam 
answers from students, by giving them a defined window during which they 
must submit their answers.

There are various other fixes and more minor improvements as well, 
including improved logging of successful and failed creation of new 
drop-offs.

The new version is in the repositories, so hopefully "yum update zendto" 
or "sudo apt update && sudo apt upgrade zendto" will upgrade you. 
Remember to run "/opt/zendto/bin/upgrade" after upgrading, so your 
preferences.php and zendto.conf files are kept up to date.

Otherwise you can get it from https://zend.to/downloads.

Any problems, questions or suggestions, please let me know straightaway!

Here is the full Change Log since the last production release (6.03):

Version 6.05-1 Production
- Improve attempt to stop browsers auto-filling encryption passphrase 
when creating a new encrypted drop-off, and when creating a request for 
an encrypted drop-off.
- Fixed bug in makelanguages (and the Installer) on Debian 10.

Version 6.04-2 Beta
- Fixed bug in LDAP authenticator where setting a value to '' gave a 
different result from leaving it unset.
- Log web browser info when creating a drop-off. To get an additional 
summary, you will need to set your php.ini 'browscap' setting to 
'/opt/zendto/lib/browscap.ini'.
- Added more logging of authentication failures to help logwatch users.
- Fixed string formatting bugs in AD authentication logging.

Version 6.04-1 Beta
- Overhauled the "request a drop-off" page.
- Added new feature to requests: you can now set a start and end 
date+time. Outside those times, the request won't work.
- Fixed bug where admins logging in via SAML would not see statistics 
button in main menu. Alternative workaround is to list 'authAdmins' 
users in 'authStats' as well.
- Changed 'Content-Security-Policy' header definition in Apache config. 
Exact change is to replace "img-src *" with "img-src data: *", then 
restart Apache. Otherwise the date/time picker in the "Request a 
Drop-off" form will not display correctly.
- Subject in new drop-off form can now only be edited if you are logged in.
- Fixed bug in unlock-user to get all the reporting correct, and fix and 
improve logging. Thanks Marlon!
- Improved "upgrade" command so it warns you if you have *.rpmnew or 
*.dpkg-dist files in your templates dir that you need to move into place 
by hand, as you had modified the previous versions.
- Improved "upgrade" command so it checks you have a 'Content-Security- 
Policy' header definition in your Apache config for the https ZendTo 
site. And if so, adds "data:" to the list of valid sources of images. 
Otherwise the date+time pickers in the "request a drop-off" page will 
look messed up. If it doesn't find the header definition at all, it 
suggests the change you need to make.

Jules

-- 
Julian Field MEng CEng CITP MBCS MIEEE MACM

'NOTE FOR YOUNG PEOPLE AND AMERICANS: One shilling = Five Pee. It
  helps to understand the antique finances of the Witchfinder Army
  if you know the original British monetary system:

  Two farthings = One Ha'penny. Two ha'pennies = One Penny. Three
  pennies = A Thrupenny Bit. Two Thrupences = A Sixpence. Two Sixpences
  = One Shilling, or Bob. Two Bob = A Florin. One Florin and one
  Sixpence = Half a Crown. Four Half Crowns = Ten Bob Note. Two Ten
  Bob Notes = One Pound (or 240 pennies). One Pound and One Shilling
  = One Guinea.

  The British resisted decimalized currency for a long time because
  they thought it was too complicated.' - Terry Pratchett

www.Zend.To
Twitter: @JulesFM

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://jul.es/pipermail/zendto/attachments/20200829/f850984d/attachment.html>