Release 2.1.27.5

Refer to changelog file to know main changes in Release 2.1.27.

New during upgrade

When upgrading, you need to indicate a valid administrator name/password, and you will also need to copy the saltkey into a password filed. It will be saved inside your database.
No database data are shown anymore. If the database information are changing, you need to update the file /includes/config/settings.php before starting upgrade.
IMPORTANT NOTE for users that have migrated to 2.1.27.0 and that have file encryption option enabled

Files encryption process have completely being reworked. Before upgrading, please do the next:

open upload folder
copy existing files in a temporary folder
restore the files from a backup of a previous version (for example 2.1.26)
start upgrade
Newly introduced since 2.1.27.5

New: Custom Fields are only visible if defined
Fix issue in tree if subfolder is visible while parent is not
Fix issues regarding DUOSecurity
Fix upgrade doesn't start in case that sk.php file has moved
Fix for Custom Fields not displayed as defined by order field
#1796 Can't add folder from API
#1787 email notifications are not sent if there are any admins with empty email address
#1776 Allow restricting items to users and roles - Wrong Item Owner
#1775 Can not decrypt a created crypted Backup - Improved encryption with Defuse
#1774 Announce this Item by email
#1769 Installation issue - no admin account is created
#1762 Share user rights works backwards
#1761 Reset of my Personal Saltkey
#1743 Enable anonymous LDAP queries
#1690 Unable to set/save personal salt key with LDAP user

Main changes in 2.1.27

Secure fixes
Session increase time feature is now increasing with the expected user session duration
Default language cannot be changed fix
Fix for "hide not accessible folders" option
New Defuse Encryption implemented in place of phpCrypt
NEW AGSES authentication implemented
NEW Custom Fields data can be encrytped or not in database
NEW Folder copy feature
NEW Mass move or delete operation on Items
NEW Item change proposal
IMP Implemented new session encryption library SecureHandler (getting rid of mcrypt extension)
IMP Language selection is now in User Profile (Default language is used on authentication page)
IMP User creation dialogbox improved with all user properties
IMP New user login availability is checked "live"
IMP Filtering counters in datatables
IMP Users Management dialogbox improved
IMP 2FA authentication change to improve security (no call to external QR generator)
UPD AES library updated
FIX "Find" feature: copy from public to personal folder, and list of folders is refreshed when copying an Item
Fix: Prevent moving a folder to one of its child folder
New: Multiselection in Roles vs Folders matrix
New: LDAP configuration test mode (in progress)
Fix: Global saltkey change
Fix: Copy folder does'nt copy included items
Fix: Encrypt/Decrypt attachments feature from admin page
#1742 Fix for issue #1539 verifying LDAP groups properly

#1740 Missing buttons on Users page
#1737 Cannot import files
#1735 Dockerfile - PHP extension "curl" is loaded Extension curl is not loaded
#1733 Copy Item doesn't work if copy from public to public folders
#1731 Cannot login in after fresh install
#1729 Protection against bigger data than database field size
#1727 Cannot edit or delete entry in the Personal folder
#1725 Some fixes
#1723 Fix spin not removed while reseting user saltkey
#1722 SELinux issue leads to upload impossible
#1718 Moving a folder to itself
#1717 After deleting a folder, items are still visible in search page
#1713 Doubleclick on directory shows items twice
#1710 Error on psk change
#1709 Missing field in table on fresh install
#1707 "Restricted To" not working correctly when creating new items
#1706 User can edit & delete items without rights
#1696 Fix for no log for OTV
#1695 Manager can create folder at root from Items pas
#1686 Fix for item History dialogbox
#1685 Fix in Portuguese file
#1684 Estonian language still missing
#1679 Sort by don't work in Utilities/logs
#1676 Pre-auth XSS in index.php
#1674 name and lastname are changed on other user edit
#1672 Anonymous settings not stored
#1670 Incremental upgrade not active
#1669 Logout - Errors
#1668 File encryption is not correct in case of upgrade
#1666 Can`t set avatar
#1662 Can not delete folders
#1659 Third level of sub folders in the Personal folder are not seen
#1654 User management page - no "next" button
#1635 New folder inheritance of parent specific settings
#1631 Error could be appear on upgrade when checking folders and files
#1628 URL link to specific item does not work
#1627 Improved label preview length
#1625 Request to add/change password
#1624 Error 500 while importing item with API (with PHP < 7)
#1621 New option: OTV can be disabled
#1620 Direct copy password from seach results and large folders
#1616 Cannot show password with IE11
#1614 Generate personal folders sets regular root folders also as personal
#1608 All folders are deleted
#1603 Attached files disappears
#1601 Time zone can't be saved in My Profile
#1593 Insert duplicate label with API
#1592 Show Client IP in mail to admin about logged on users
#1588 Fix for OTV links
#1587 fix for e-mail to administrator on logon does not work
#1581 Fix for new folder Custom Fields inheritance
#1579 Fix for preventing a php fatal error
#1575 Fix for tree not loaded when user has no access to a folder with children
#1571 Drag and drop from PF to public folder makes item password corrupted
#1571 Create an item inside another folder than the one selected
#1561 Personal folder deletion deletes all
#1559 API IP Whitelist check does not consider XFF
#1556 Fix bug for upgrading old passwords
#1553 LDAP support - Add LDAP port - Add support multi LDAP server
#1551 Authentication through LDAP posix-search
#1550 2 Factor enabled but can still log in without code
#1549 Read Only users can use Personal Folders
#1543 Wrong Saltkey message after setting
#1533 The change of the main SALT Key doesn't work
#1532 Added error message in install.js if db-pw contains double quotes
#1531 Database otv table originator field should be int instead of tinyint
#1514 User language selection is done in Profile dialogbox
#1474 New option: create an item without password
#1472 "folder access" and "role" settings when adding new user + propage rights from one user
#1464 CSV files broken, html entities not decoded, newlines not stripped
#1422 Folders deletion protocol has been securized to prevent unconsistencies in folders tree
#1412 New option: Manager can move items they can view
#1408 Display folders visible by a user
#1299 Export to pdf or csv shows htmlencoded

Release 2.1.27.4

Refer to changelog file to know main changes in Release 2.1.27.

New during upgrade

When upgrading, you need to indicate a valid administrator name/password, and you will also need to copy the saltkey into a password filed. It will be saved inside your database.
No database data are shown anymore. If the database information are changing, you need to update the file /includes/config/settings.php before starting upgrade.

IMPORTANT NOTE for users that have migrated to 2.1.27.0 and that have file encryption option enabled

Files encryption process have completely being reworked. Before upgrading, please do the next:

• open upload folder
• copy existing files in a temporary folder
• restore the files from a backup of a previous version (for example 2.1.26)
• start upgrade

Newly introduced since 2.1.27.4

New: Multiselection in Roles vs Folders matrix
New: LDAP configuration test mode (in progress)
Fix: Global saltkey change
Fix: Copy folder does'nt copy included items
Fix: Encrypt/Decrypt attachments feature from admin page
#1742 Fix for issue #1539 verifying LDAP groups properly
#1740 Missing buttons on Users page
#1737 Cannot import files

Main changes in 2.1.27

Secure fixes
Session increase time feature is now increasing with the expected user session duration
Default language cannot be changed fix
Fix for "hide not accessible folders" option
New Defuse Encryption implemented in place of phpCrypt
NEW AGSES authentication implemented
NEW Custom Fields data can be encrytped or not in database
NEW Folder copy feature
NEW Mass move or delete operation on Items
NEW Item change proposal
IMP Implemented new session encryption library SecureHandler (getting rid of mcrypt extension)
IMP Language selection is now in User Profile (Default language is used on authentication page)
IMP User creation dialogbox improved with all user properties
IMP New user login availability is checked "live"
IMP Filtering counters in datatables
IMP Users Management dialogbox improved
IMP 2FA authentication change to improve security (no call to external QR generator)
UPD AES library updated
FIX "Find" feature: copy from public to personal folder, and list of folders is refreshed when copying an Item
Fix: Prevent moving a folder to one of its child folder

#1735 Dockerfile - PHP extension "curl" is loaded Extension curl is not loaded
#1733 Copy Item doesn't work if copy from public to public folders
#1731 Cannot login in after fresh install
#1729 Protection against bigger data than database field size
#1727 Cannot edit or delete entry in the Personal folder
#1725 Some fixes
#1723 Fix spin not removed while reseting user saltkey
#1722 SELinux issue leads to upload impossible
#1718 Moving a folder to itself
#1717 After deleting a folder, items are still visible in search page
#1713 Doubleclick on directory shows items twice
#1710 Error on psk change
#1709 Missing field in table on fresh install
#1707 "Restricted To" not working correctly when creating new items
#1706 User can edit & delete items without rights
#1696 Fix for no log for OTV
#1695 Manager can create folder at root from Items pas
#1686 Fix for item History dialogbox
#1685 Fix in Portuguese file
#1684 Estonian language still missing
#1679 Sort by don't work in Utilities/logs
#1676 Pre-auth XSS in index.php
#1674 name and lastname are changed on other user edit
#1672 Anonymous settings not stored
#1670 Incremental upgrade not active
#1669 Logout - Errors
#1668 File encryption is not correct in case of upgrade
#1666 Can`t set avatar
#1662 Can not delete folders
#1659 Third level of sub folders in the Personal folder are not seen
#1654 User management page - no "next" button
#1635 New folder inheritance of parent specific settings
#1631 Error could be appear on upgrade when checking folders and files
#1628 URL link to specific item does not work
#1627 Improved label preview length
#1625 Request to add/change password
#1624 Error 500 while importing item with API (with PHP < 7)
#1621 New option: OTV can be disabled
#1620 Direct copy password from seach results and large folders
#1616 Cannot show password with IE11
#1614 Generate personal folders sets regular root folders also as personal
#1608 All folders are deleted
#1603 Attached files disappears
#1601 Time zone can't be saved in My Profile
#1593 Insert duplicate label with API
#1592 Show Client IP in mail to admin about logged on users
#1588 Fix for OTV links
#1587 fix for e-mail to administrator on logon does not work
#1581 Fix for new folder Custom Fields inheritance
#1579 Fix for preventing a php fatal error
#1575 Fix for tree not loaded when user has no access to a folder with children
#1571 Drag and drop from PF to public folder makes item password corrupted
#1571 Create an item inside another folder than the one selected
#1561 Personal folder deletion deletes all
#1559 API IP Whitelist check does not consider XFF
#1556 Fix bug for upgrading old passwords
#1553 LDAP support - Add LDAP port - Add support multi LDAP server
#1551 Authentication through LDAP posix-search
#1550 2 Factor enabled but can still log in without code
#1549 Read Only users can use Personal Folders
#1543 Wrong Saltkey message after setting
#1533 The change of the main SALT Key doesn't work
#1532 Added error message in install.js if db-pw contains double quotes
#1531 Database otv table originator field should be int instead of tinyint
#1514 User language selection is done in Profile dialogbox
#1474 New option: create an item without password
#1472 "folder access" and "role" settings when adding new user + propage rights from one user
#1464 CSV files broken, html entities not decoded, newlines not stripped
#1422 Folders deletion protocol has been securized to prevent unconsistencies in folders tree
#1412 New option: Manager can move items they can view
#1408 Display folders visible by a user
#1299 Export to pdf or csv shows htmlencoded

Release 2.1.27.3

Refer to changelog file to know main changes in Release 2.1.27.

New during upgrade

When upgrading, you need to indicate a valid administrator name/password, and you will also need to copy the saltkey into a password filed. It will be saved inside your database.
No database data are shown anymore. If the database information are changing, you need to update the file /includes/config/settings.php before starting upgrade.

IMPORTANT NOTE for users that have migrated to 2.1.27.0 and that have file encryption option enabled

Files encryption process have completely being reworked. Before upgrading, please do the next:

• open upload folder
• copy existing files in a temporary folder
• restore the files from a backup of a previous version (for example 2.1.26)
• start upgrade

Newly introduced since 2.1.27.3

Fix: Prevent moving a folder to one of its child folder
#1735 Dockerfile - PHP extension "curl" is loaded Extension curl is not loaded
#1733 Copy Item doesn't work if copy from public to public folders
#1731 Cannot login in after fresh install
#1729 Protection against bigger data than database field size
#1727 Cannot edit or delete entry in the Personal folder

Main changes in 2.1.27

Secure fixes
Session increase time feature is now increasing with the expected user session duration
Default language cannot be changed fix
Fix for "hide not accessible folders" option
New Defuse Encryption implemented in place of phpCrypt
NEW AGSES authentication implemented
NEW Custom Fields data can be encrytped or not in database
NEW Folder copy feature
NEW Mass move or delete operation on Items
NEW Item change proposal
IMP Implemented new session encryption library SecureHandler (getting rid of mcrypt extension)
IMP Language selection is now in User Profile (Default language is used on authentication page)
IMP User creation dialogbox improved with all user properties
IMP New user login availability is checked "live"
IMP Filtering counters in datatables
IMP Users Management dialogbox improved
IMP 2FA authentication change to improve security (no call to external QR generator)
UPD AES library updated
FIX "Find" feature: copy from public to personal folder, and list of folders is refreshed when copying an Item

#1725 Some fixes
#1723 Fix spin not removed while reseting user saltkey
#1722 SELinux issue leads to upload impossible
#1718 Moving a folder to itself
#1717 After deleting a folder, items are still visible in search page
#1713 Doubleclick on directory shows items twice
#1710 Error on psk change
#1709 Missing field in table on fresh install
#1707 "Restricted To" not working correctly when creating new items
#1706 User can edit & delete items without rights
#1696 Fix for no log for OTV
#1695 Manager can create folder at root from Items pas
#1686 Fix for item History dialogbox
#1685 Fix in Portuguese file
#1684 Estonian language still missing
#1679 Sort by don't work in Utilities/logs
#1676 Pre-auth XSS in index.php
#1674 name and lastname are changed on other user edit
#1672 Anonymous settings not stored
#1670 Incremental upgrade not active
#1669 Logout - Errors
#1668 File encryption is not correct in case of upgrade
#1666 Can`t set avatar
#1662 Can not delete folders
#1659 Third level of sub folders in the Personal folder are not seen
#1654 User management page - no "next" button
#1635 New folder inheritance of parent specific settings
#1631 Error could be appear on upgrade when checking folders and files
#1628 URL link to specific item does not work
#1627 Improved label preview length
#1625 Request to add/change password
#1624 Error 500 while importing item with API (with PHP < 7)
#1621 New option: OTV can be disabled
#1620 Direct copy password from seach results and large folders
#1616 Cannot show password with IE11
#1614 Generate personal folders sets regular root folders also as personal
#1608 All folders are deleted
#1603 Attached files disappears
#1601 Time zone can't be saved in My Profile
#1593 Insert duplicate label with API
#1592 Show Client IP in mail to admin about logged on users
#1588 Fix for OTV links
#1587 fix for e-mail to administrator on logon does not work
#1581 Fix for new folder Custom Fields inheritance
#1579 Fix for preventing a php fatal error
#1575 Fix for tree not loaded when user has no access to a folder with children
#1571 Drag and drop from PF to public folder makes item password corrupted
#1571 Create an item inside another folder than the one selected
#1561 Personal folder deletion deletes all
#1559 API IP Whitelist check does not consider XFF
#1556 Fix bug for upgrading old passwords
#1553 LDAP support - Add LDAP port - Add support multi LDAP server
#1551 Authentication through LDAP posix-search
#1550 2 Factor enabled but can still log in without code
#1549 Read Only users can use Personal Folders
#1543 Wrong Saltkey message after setting
#1533 The change of the main SALT Key doesn't work
#1532 Added error message in install.js if db-pw contains double quotes
#1531 Database otv table originator field should be int instead of tinyint
#1514 User language selection is done in Profile dialogbox
#1474 New option: create an item without password
#1472 "folder access" and "role" settings when adding new user + propage rights from one user
#1464 CSV files broken, html entities not decoded, newlines not stripped
#1422 Folders deletion protocol has been securized to prevent unconsistencies in folders tree
#1412 New option: Manager can move items they can view
#1408 Display folders visible by a user
#1299 Export to pdf or csv shows htmlencoded

Release 2.1.27.2

Refer to changelog file to know main changes in Release 2.1.27.

New during upgrade

When upgrading, you need to indicate a valid administrator name/password, and you will also need to copy the saltkey into a password filed. It will be saved inside your database.
No database data are shown anymore. If the database information are changing, you need to update the file /includes/config/settings.php before starting upgrade.

IMPORTANT NOTE for users that have migrated to 2.1.27.0 and that have file encryption option enabled

Files encryption process have completely being reworked. Before upgrading, please do the next:

• open upload folder
• copy existing files in a temporary folder
• restore the files from a backup of a previous version (for example 2.1.26)
• start upgrade

Newly introduced since 2.1.27.1

Secure fixes
Session increase time feature is now increasing with the expected user session duration
Default language cannot be changed fix
Fix for "hide not accessible folders" option
#1725 Some fixes
#1723 Fix spin not removed while reseting user saltkey
#1722 SELinux issue leads to upload impossible
#1718 Moving a folder to itself
#1717 After deleting a folder, items are still visible in search page
#1713 Doubleclick on directory shows items twice
#1710 Error on psk change
#1709 Missing field in table on fresh install
#1707 "Restricted To" not working correctly when creating new items
#1706 User can edit & delete items without rights
#1696 Fix for no log for OTV
#1695 Manager can create folder at root from Items pas
#1686 Fix for item History dialogbox
#1685 Fix in Portuguese file
#1684 Estonian language still missing

Main changes in 2.1.27

New Defuse Encryption implemented in place of phpCrypt
NEW AGSES authentication implemented
NEW Custom Fields data can be encrytped or not in database
NEW Folder copy feature
NEW Mass move or delete operation on Items
NEW Item change proposal
IMP Implemented new session encryption library SecureHandler (getting rid of mcrypt extension)
IMP Language selection is now in User Profile (Default language is used on authentication page)
IMP User creation dialogbox improved with all user properties
IMP New user login availability is checked "live"
IMP Filtering counters in datatables
IMP Users Management dialogbox improved
IMP 2FA authentication change to improve security (no call to external QR generator)
UPD AES library updated
FIX "Find" feature: copy from public to personal folder, and list of folders is refreshed when copying an Item

#1679 Sort by don't work in Utilities/logs
#1676 Pre-auth XSS in index.php
#1674 name and lastname are changed on other user edit
#1672 Anonymous settings not stored
#1670 Incremental upgrade not active
#1669 Logout - Errors
#1668 File encryption is not correct in case of upgrade
#1666 Can`t set avatar
#1662 Can not delete folders
#1659 Third level of sub folders in the Personal folder are not seen
#1654 User management page - no "next" button
#1635 New folder inheritance of parent specific settings
#1631 Error could be appear on upgrade when checking folders and files
#1628 URL link to specific item does not work
#1627 Improved label preview length
#1625 Request to add/change password
#1624 Error 500 while importing item with API (with PHP < 7)
#1621 New option: OTV can be disabled
#1620 Direct copy password from seach results and large folders
#1616 Cannot show password with IE11
#1614 Generate personal folders sets regular root folders also as personal
#1608 All folders are deleted
#1603 Attached files disappears
#1601 Time zone can't be saved in My Profile
#1593 Insert duplicate label with API
#1592 Show Client IP in mail to admin about logged on users
#1588 Fix for OTV links
#1587 fix for e-mail to administrator on logon does not work
#1581 Fix for new folder Custom Fields inheritance
#1579 Fix for preventing a php fatal error
#1575 Fix for tree not loaded when user has no access to a folder with children
#1571 Drag and drop from PF to public folder makes item password corrupted
#1571 Create an item inside another folder than the one selected
#1561 Personal folder deletion deletes all
#1559 API IP Whitelist check does not consider XFF
#1556 Fix bug for upgrading old passwords
#1553 LDAP support - Add LDAP port - Add support multi LDAP server
#1551 Authentication through LDAP posix-search
#1550 2 Factor enabled but can still log in without code
#1549 Read Only users can use Personal Folders
#1543 Wrong Saltkey message after setting
#1533 The change of the main SALT Key doesn't work
#1532 Added error message in install.js if db-pw contains double quotes
#1531 Database otv table originator field should be int instead of tinyint
#1514 User language selection is done in Profile dialogbox
#1474 New option: create an item without password
#1472 "folder access" and "role" settings when adding new user + propage rights from one user
#1464 CSV files broken, html entities not decoded, newlines not stripped
#1422 Folders deletion protocol has been securized to prevent unconsistencies in folders tree
#1412 New option: Manager can move items they can view
#1408 Display folders visible by a user
#1299 Export to pdf or csv shows htmlencoded

Release 2.1.27.1

Refer to changelog file to know main changes in Release 2.1.27.

New during upgrade

When upgrading, you need to indicate a valid administrator name/password, and you will also need to copy the saltkey into a password filed. It will be saved inside your database.
No database data are shown anymore. If the database information are changing, you need to update the file /includes/config/settings.php before starting upgrade.

IMPORTANT NOTE for users that have migrated to 2.1.27.0 and that have file encryption option enabled

Files encryption process have completely being reworked. Before upgrading, please do the next:

• open upload folder
• copy existing files in a temporary folder
• restore the files from a backup of a previous version (for example 2.1.26)
• start upgrade

Newly introduced since 2.1.27.0

#1679 Sort by don't work in Utilities/logs
#1676 Pre-auth XSS in index.php
#1674 name and lastname are changed on other user edit
#1672 Anonymous settings not stored
#1670 Incremental upgrade not active
#1669 Logout - Errors
#1668 File encryption is not correct in case of upgrade
#1666 Can`t set avatar
#1662 Can not delete folders
#1659 Third level of sub folders in the Personal folder are not seen
#1654 User management page - no "next" button

Main changes in 2.1.27

New Defuse Encryption implemented in place of phpCrypt
NEW AGSES authentication implemented
NEW Custom Fields data can be encrytped or not in database
NEW Folder copy feature
NEW Mass move or delete operation on Items
NEW Item change proposal
IMP Implemented new session encryption library SecureHandler (getting rid of mcrypt extension)
IMP Language selection is now in User Profile (Default language is used on authentication page)
IMP User creation dialogbox improved with all user properties
IMP New user login availability is checked "live"
IMP Filtering counters in datatables
IMP Users Management dialogbox improved
IMP 2FA authentication change to improve security (no call to external QR generator)
UPD AES library updated
FIX "Find" feature: copy from public to personal folder, and list of folders is refreshed when copying an Item

#1635 New folder inheritance of parent specific settings
#1631 Error could be appear on upgrade when checking folders and files
#1628 URL link to specific item does not work
#1627 Improved label preview length
#1625 Request to add/change password
#1624 Error 500 while importing item with API (with PHP < 7)
#1621 New option: OTV can be disabled
#1620 Direct copy password from seach results and large folders
#1616 Cannot show password with IE11
#1614 Generate personal folders sets regular root folders also as personal
#1608 All folders are deleted
#1603 Attached files disappears
#1601 Time zone can't be saved in My Profile
#1593 Insert duplicate label with API
#1592 Show Client IP in mail to admin about logged on users
#1588 Fix for OTV links
#1587 fix for e-mail to administrator on logon does not work
#1581 Fix for new folder Custom Fields inheritance
#1579 Fix for preventing a php fatal error
#1575 Fix for tree not loaded when user has no access to a folder with children
#1571 Drag and drop from PF to public folder makes item password corrupted
#1571 Create an item inside another folder than the one selected
#1561 Personal folder deletion deletes all
#1559 API IP Whitelist check does not consider XFF
#1556 Fix bug for upgrading old passwords
#1553 LDAP support - Add LDAP port - Add support multi LDAP server
#1551 Authentication through LDAP posix-search
#1550 2 Factor enabled but can still log in without code
#1549 Read Only users can use Personal Folders
#1543 Wrong Saltkey message after setting
#1533 The change of the main SALT Key doesn't work
#1532 Added error message in install.js if db-pw contains double quotes
#1531 Database otv table originator field should be int instead of tinyint
#1514 User language selection is done in Profile dialogbox
#1474 New option: create an item without password
#1472 "folder access" and "role" settings when adding new user + propage rights from one user
#1464 CSV files broken, html entities not decoded, newlines not stripped
#1422 Folders deletion protocol has been securized to prevent unconsistencies in folders tree
#1412 New option: Manager can move items they can view
#1408 Display folders visible by a user
#1299 Export to pdf or csv shows htmlencoded

Release 2.1.27.0

Refer to changelog file to know main changes in Release 2.1.27.

BE CARREFUL: an improvement is on-going on attachments encryption/decryption process.

Main changes

New Defuse Encryption implemented in place of phpCrypt
NEW AGSES authentication implemented
NEW Custom Fields data can be encrytped or not in database
NEW Folder copy feature
NEW Mass move or delete operation on Items
NEW Item change proposal
IMP Implemented new session encryption library SecureHandler (getting rid of mcrypt extension)
IMP Language selection is now in User Profile (Default language is used on authentication page)
IMP User creation dialogbox improved with all user properties
IMP New user login availability is checked "live"
IMP Filtering counters in datatables
IMP Users Management dialogbox improved
IMP 2FA authentication change to improve security (no call to external QR generator)
UPD AES library updated
FIX "Find" feature: copy from public to personal folder, and list of folders is refreshed when copying an Item

#1635 New folder inheritance of parent specific settings
#1631 Error could be appear on upgrade when checking folders and files
#1628 URL link to specific item does not work
#1627 Improved label preview length
#1625 Request to add/change password
#1624 Error 500 while importing item with API (with PHP < 7)
#1621 New option: OTV can be disabled
#1620 Direct copy password from seach results and large folders
#1616 Cannot show password with IE11
#1614 Generate personal folders sets regular root folders also as personal
#1608 All folders are deleted
#1603 Attached files disappears
#1601 Time zone can't be saved in My Profile
#1593 Insert duplicate label with API
#1592 Show Client IP in mail to admin about logged on users
#1588 Fix for OTV links
#1587 fix for e-mail to administrator on logon does not work
#1581 Fix for new folder Custom Fields inheritance
#1579 Fix for preventing a php fatal error
#1575 Fix for tree not loaded when user has no access to a folder with children
#1571 Drag and drop from PF to public folder makes item password corrupted
#1571 Create an item inside another folder than the one selected
#1561 Personal folder deletion deletes all
#1559 API IP Whitelist check does not consider XFF
#1556 Fix bug for upgrading old passwords
#1553 LDAP support - Add LDAP port - Add support multi LDAP server
#1551 Authentication through LDAP posix-search
#1550 2 Factor enabled but can still log in without code
#1549 Read Only users can use Personal Folders
#1543 Wrong Saltkey message after setting
#1533 The change of the main SALT Key doesn't work
#1532 Added error message in install.js if db-pw contains double quotes
#1531 Database otv table originator field should be int instead of tinyint
#1514 User language selection is done in Profile dialogbox
#1474 New option: create an item without password
#1472 "folder access" and "role" settings when adding new user + propage rights from one user
#1464 CSV files broken, html entities not decoded, newlines not stripped
#1422 Folders deletion protocol has been securized to prevent unconsistencies in folders tree
#1412 New option: Manager can move items they can view
#1408 Display folders visible by a user
#1299 Export to pdf or csv shows htmlencoded

2.1.26-patch-1

Teampass 2.1.26 is released through 2.1.26-final-2.

How to?

New installation or upgrade from earlier version

If you want to deploy release 2.1.26, you can use this release. It includes all bug fixing since 2.1.26 was released. Follow instruction to install or upgrade.

Patching 2.1.26 instance

If you want to patch your current Teampass instance, you have different choices:

1. Download this package and overwrite all existing files
2. Only download the modified files and overwrite them (recommended)
3. Apply manually the patch in existing files

List of patches

Patch 1

Bug fix for #1550

Modified files

/sources/identify.php

Manual patching

• open file /sources/identify.php
• replace

    if (isset($_SESSION['settings']['google_authentication']) && $_SESSION['settings']['2factor_authentication'] == 1 && $username != "admin") {

by

    if (isset($_SESSION['settings']['google_authentication']) && $_SESSION['settings']['google_authentication'] == 1 && $username != "admin") {

Release 2.1.26 Final (2)

Refer to changelog file to know main changes in Release 2.1.26.

http://teampass.net/2016-05-13-release-2.1.26

Known bug (not corrected): #1375
Fix for #1527
Fix for #1375, #1486, #1487, #1489, #1491, #1494, #1497, #1498, #1500, #1502, #1503, #1504, #1508, #1510, #1512, #1515
Fix for #1414, #1402, #1407, #1409, #1421, #1426, #1415, #1383, #1378
New index in log_items table for performance improvement (#1396)
Fix for #1395, #1392 (requires to run upgrade.php), #1394, #1385, #1389, #1378, #976, #1384
Fix for #1380, #1278, #1381, #1386
Can't install v 2.1.26.11 #1371
Fix for #1292, #1369, #1361, #1353
Small improvements
Some cleanup
Fix for #1353,#1346,#1345,#1342,#1340,#1335,#1309
Fix for #1332, #1325, #1301, #1269
Fix: Impossible to proceed with 'password lost' process
Fix: OTV item not reachable
Missing Estonian files
#1229 CSRFProtector message while DUO is enabled
Fix for error during Install process
Fix for csrfprotector javascript error
Fixes of SQL error during installation and CSV import in case of MySQL instead of MariaDB
Fix for #1300, #1310, #1308, #1304, #910, #1295, #1298, #1299
Adapted DB structure for errors related to MySQL 5.7.x
SQL error shown when error fires at server level (through usage of a Developer Console)
Fix: Inconsistency in Delete & Restore process
Fix: Errors in CSV import process
Fix: API deletion
FIX: QRCode is not visible in Users list
FIX: Display inconsistancies in User log results
Possible for fix for csrfp.config.php not created
Fix for #1295 for upload issues
Fix for #1298
Fix for #1257
Fix for XSS in edit dialogbox

Release 2.1.26

DON'T USE IT IF NOT ENGLISH USER!!

Refer to changelog file to know main changes in Release 2.1.26.

http://teampass.net/2016-05-13-release-2.1.26

Known bug (not corrected): #1375

Fix for #1375, #1486, #1487, #1489, #1491, #1494, #1497, #1498, #1500, #1502, #1503, #1504, #1508, #1510, #1512, #1515
Fix for #1414, #1402, #1407, #1409, #1421, #1426, #1415, #1383, #1378
New index in log_items table for performance improvement (#1396)
Fix for #1395, #1392 (requires to run upgrade.php), #1394, #1385, #1389, #1378, #976, #1384
Fix for #1380, #1278, #1381, #1386
Can't install v 2.1.26.11 #1371
Fix for #1292, #1369, #1361, #1353
Small improvements
Some cleanup
Fix for #1353,#1346,#1345,#1342,#1340,#1335,#1309
Fix for #1332, #1325, #1301, #1269
Fix: Impossible to proceed with 'password lost' process
Fix: OTV item not reachable
Missing Estonian files
#1229 CSRFProtector message while DUO is enabled
Fix for error during Install process
Fix for csrfprotector javascript error
Fixes of SQL error during installation and CSV import in case of MySQL instead of MariaDB
Fix for #1300, #1310, #1308, #1304, #910, #1295, #1298, #1299
Adapted DB structure for errors related to MySQL 5.7.x
SQL error shown when error fires at server level (through usage of a Developer Console)
Fix: Inconsistency in Delete & Restore process
Fix: Errors in CSV import process
Fix: API deletion
FIX: QRCode is not visible in Users list
FIX: Display inconsistancies in User log results
Possible for fix for csrfp.config.php not created
Fix for #1295 for upload issues
Fix for #1298
Fix for #1257
Fix for XSS in edit dialogbox

Release 2.1.26 (20)

Refer to changelog file to know main changes in Release 2.1.26.

This release is created after a mistake in one of 2.1.26.18 commit where trash files where committed.
So this package is a cleaned up one.

http://teampass.net/2016-05-13-release-2.1.26

Known bug (not corrected): #1375

Newly added:

Fix for #1375, #1486, #1487, #1489, #1491, #1494, #1497, #1498, #1500, #1502, #1503, #1504, #1508, #1510, #1512, #1515

Previously introduced:

Fix for #1414, #1402, #1407, #1409, #1421, #1426, #1415, #1383, #1378
New index in log_items table for performance improvement (#1396)
Fix for #1395, #1392 (requires to run upgrade.php), #1394, #1385, #1389, #1378, #976, #1384
Fix for #1380, #1278, #1381, #1386
Can't install v 2.1.26.11 #1371
Fix for #1292, #1369, #1361, #1353
Small improvements
Some cleanup
Fix for #1353,#1346,#1345,#1342,#1340,#1335,#1309
Fix for #1332, #1325, #1301, #1269
Fix: Impossible to proceed with 'password lost' process
Fix: OTV item not reachable
Missing Estonian files
#1229 CSRFProtector message while DUO is enabled
Fix for error during Install process
Fix for csrfprotector javascript error
Fixes of SQL error during installation and CSV import in case of MySQL instead of MariaDB
Fix for #1300, #1310, #1308, #1304, #910, #1295, #1298, #1299
Adapted DB structure for errors related to MySQL 5.7.x
SQL error shown when error fires at server level (through usage of a Developer Console)
Fix: Inconsistency in Delete & Restore process
Fix: Errors in CSV import process
Fix: API deletion
FIX: QRCode is not visible in Users list
FIX: Display inconsistancies in User log results
Possible for fix for csrfp.config.php not created
Fix for #1295 for upload issues
Fix for #1298
Fix for #1257
Fix for XSS in edit dialogbox