Time Tracker 1.20 Change Log
This page lists changes in
Time Tracker version 1.20.
Changes in Time Tracker 1.20
Released January 26, 2022.
- 1.20.0.5620 - Removed Remote Work plugin.
- 1.19.34.5610 - Addressed CVE-2021-41139 situation in week.php.
- 1.19.34.5609 - Fixed CustomFileds class for adding a previously deleted option.
- 1.19.33.5608 - Dutch translation improved.
- 1.19.33.5607 - Started to check the status value in posts for sanity.
- 1.19.32.5604 - A couple more fixes to address CVE-2021-41139.
- 1.19.31.5603 - Added additional protection against an sql injection fixed in previous commit.
- 1.19.31.5602 - Fixed an sql injection vulnerability in groups.php.
- 1.19.30.5601 - Added validation of browser_today parameter in posts.
- 1.19.30.5599 - Added a check for passed in date to time.php.
- 1.19.29.5598 - Maintenance fixes.
- 1.19.29.5596 - Introduced entities_modified field in tt_groups table for future API upport.
- 1.19.28.5589 - Implemented report inactive projects display option.
- 1.19.28.5587 - Fixed ttUser::getUserDetails() function to allow supervisors work on behalf of users.
- 1.19.28.5586 - Some more improvenets to Brazilian Portuguese translation.
- 1.19.28.5582 - Dutch translation improved.
- 1.19.28.5580 - Improved Brazilian Portuguese translation.
- 1.19.28.5573 - Addressed a few more php8 warnigns, some html fixes.
- 1.19.28.5567 - Added a list of day records to puncher.php page to improve usability.
- 1.19.28.5566 - Style and security improvements for puncher.php.
- 1.19.28.5565 - Eliminated some more php8 warnings.
- 1.19.28.5562 - Added classes for some columns in report for custom CSS.
- 1.19.28.5561 - Implemented puncher as a plugin.
- 1.19.28.5555 - Renamed timer.php to puncher.php to implement it as a plugin.
- 1.19.28.5554 - Improved week view by remembering custom fields and also printing them when configured to do so.
- 1.19.28.5553 - Addressed a couple of php8 warnings.
- 1.19.28.5552 - Introduced a what is it link explaining custom CSS in display options.
- 1.19.28.5551 - Removed no longer needed NOTE_INPUT_HEIGHT from config.php.dist.
- 1.19.28.5550 - Fixed presentation issue on the login page.
- 1.19.28.5549 - Added a what is it link explaning delete invoice entries option.
- 1.19.28.5547 - Renamed template files.
- 1.19.28.5538 - Addressed a few php8 issues and warnings.
- 1.19.28.5535 - Addressed issue #110 for php8.
- 1.19.28.5534 - It is hard to believe but the entire app is now mobile friendly.
- 1.19.28.5524 - Recovered show note option on reports.php. Was broken in one of previous commits.
- 1.19.28.5523 - Ongoing work on mobile friendly reports. Fixed a bug on totals only reports with visibility of use_mark_approved and similar controls.
- 1.19.28.5514 - Some fixes for timer.php.
- 1.19.28.5511 - Removed all remaining legacy mobile pages.
- 1.19.28.5510 - Ongoing work on making mobile friendly pages. Ongoing work on addressing php8 issues. Moved timer.php from legacy mobile directory to root.
- 1.19.28.5448 - Fixed a presentation issue on user add and edit pages.
- 1.19.28.5447 - Ongoing work on addressing php8 warnings.
- 1.19.28.5433 - Added options for secure ldap authentication.
- 1.19.27.5431 - Fixed cross site request forgery vulnerability. See CVE-2021-29436.
- 1.19.26.5430 - Removed some more no longer used legacy mobile pages.
- 1.19.26.5429 - Finished work on sanitizing post parameters to reduce risk of SQL injections.
- 1.19.26.5421 - Added edit icons on reports to allow for quick edits.
- 1.19.25.5419 - More protection against sql injections.
- 1.19.25.5417 - Fixed SQL injection vulnerability in group_edit.php.
- 1.19.24.5416 - Added protection against brute force guessing of random codes used in password resets.
- 1.19.24.5415 - Fixed a critical security vulnerability with password resets. See CVE-2021-21352.
- 1.19.23.5414 - A minor fix to dbinstall.php to address a migration issue with custom fields.
- 1.19.23.5411 - A couple of minor fixes to remove php8 warnings. A fix for extra '+' character and end of line causing error (#105).
- 1.19.23.5410 - Dutch translation improved.
- 1.19.23.5407 - Removed no longer used legacy mobile pages.
- 1.19.23.5405 - Cleanup: removed no longer used templates.
- 1.19.23.5402 - Removed no longer used files.
- 1.19.23.5393 - Ongoing work on mobile pages. Fixed an issue with incorrect column span.
- 1.19.23.5387 - Some changes, refactoring, and improvements in translation files.
- 1.19.23.5383 - Cleanup. Removed no longer used legacy mobile client pages and templates.
- 1.19.23.5382 - Ongoing work on mobile pages. Added copytight notices on refactored templates.
- 1.19.23.5369 - Removed unnecessary assignments from JavaScript.
- 1.19.23.5368 - Fixed path to calendar icon for some DIR_NAME situations. Disabled logging a warning when DIR_NAME is not defined.
- 1.19.23.5346 - Removed not needed label tags.
- 1.19.23.5340 - Removed a redirect to lecacy mobile pages as we now have mobile time entry working.
- 1.19.23.5339 - Addressed a few more php warnings.
- 1.19.23.5337 - Fixed division by zero problem in pie charts.
- 1.19.23.5336 - More progress on removing conditions for PHP warnings.
- 1.19.23.5334 - Introduced a default value in TTUser::getConfigInt() function.
- 1.19.23.5333 - Removed a PHP warning on reports.php for 0 inactive users.
- 1.19.23.5332 - Updated smarty to version 3.1.36 to get rid of a PHP warning. Some fixes for no longer supported libchart library to remove PHP warnings.
- 1.19.23.5331 - Added a workaround into embedded MDB2 code to get rid of PHP warnings.
- 1.19.23.5329 - Removed deprecated function call and related code.
- 1.19.23.5328 - Changed software license to SSPL going forward.
- 1.19.23.5326 - Fixed adjusting today links to match user today.
- 1.19.23.5325 - Security fix for csv injections.
- 1.19.23.5324 - Security fix: added protection against flooding user mailboxes with too many password reset emails.
- 1.19.23.5323 - Security fix: disabling password reset link immediately after password change.
- 1.19.23.5312 - Removed unnecessary stuff from html head (#104).
- 1.19.23.5309 - Added a constant for app version in initialize.php. Ongoing work on improving mobile pages.
- 1.19.23.5297 - Dutch translation improved.
- 1.19.23.5291 - Started work on improving presentation for small mobile screens.
- 1.19.23.5288 - Introduced label.menu in translation files.
- 1.19.23.5287 - Fixed column span for reports with show note on separate row option.
- 1.19.23.5286 - Added a display option controlling whether to show custom fields in the list of records for each day.
- 1.19.23.5285 - Added week total on mobile time.php.
- 1.19.23.5283 - Fixed double-encoding of special characters on tme_delete pages.
- 1.19.23.5282 - Introduced a configurable login cookie name.
- 1.19.23.5281 - Introduced a configurable php session cookie name.
- 1.19.23.5280 - Refactored password_reset.php for consistency of success and error messages display.
- 1.19.23.5279 - Fixed headers in totals only reports when grouping by custom fields.
- 1.19.23.5278 - Fixed totals only reports when grouping by time custom fields to eliminate multiple rows.
- 1.19.23.5277 - Fixed reports for expenses when grouped by various custom fields.
- 1.19.23.5276 - Initial attempt to include custom fields in group by options in reports for user testing, with some known remaining issues.
- 1.19.23.5275 - Removed no longer used enablePlugin() function.
- 1.19.23.5274 - Removed no longer used string from translation files. Removed non-editable sender field from mail.tpl to simplify it.
- 1.19.23.5273 - Improved error reporting for recent registrations.
- 1.19.23.5272 - Cosmetic presentation fix for attachment display on projects.php.
- 1.19.23.5271 - Introduced EMAIL_REQUIRED config option.
- 1.19.23.5270 - Refactored I18n class. Shortened images directory name to img to keep things a bit shorter.
- 1.19.23.5269 - Changed APP_NAME named constant to DIR_NAME to better reflect its meaning.
- 1.19.23.5268 - Added a link explaining tracking mode.
- 1.19.23.5267 - Fixed broken PDF reposrts after renaming logo image.
- 1.19.23.5266 - Fixed language for the login screen.
- 1.19.23.5265 - Renamed tt_logo.png to just logo.png.
- 1.19.23.5264 - Started to use relative values in css for better presentation.
- 1.19.23.5263 - Save custom field values in session (#102). Added time custom fields storage in session to mobile time.php as in pr #102.
- 1.19.23.5262 - Moved the Required checkbox on top of tasks.php page to make it more visible.
- 1.19.23.5260 - Fixed behavior of Now buttons, broken in one of recent commits.
- 1.19.23.5259 - Dropped task_required field from tt_groups table as it is now a part of config field.
- 1.19.22.5258 - Fixed mobile timer.php for subgroups regarding task_required.
- 1.19.22.5257 - Refactoring and some fixes for task_required config option.
- 1.19.22.5256 - Moved task required option to tasks.php page.
- 1.19.22.5255 - A fix for week view for subgroups.
- 1.19.22.5254 - Simplified week view by removing Stop buttons for potential uncompleted records because they do not seem to belong here.
- 1.19.22.5252 - Some refactoring and fixes, mostly on week view for subgroups.
- 1.19.22.5251 - Some fixes to mobile timer.php for subgroups.
- 1.19.22.5249 - A fix for subgroups. Replaced tracking_mode with getTrackingMode() on time_delete.php page.
- 1.19.22.5248 - Fixed removed finish column on time.php, which was broken a few commits ago.
- 1.19.22.5247 - Refactoring. Also, fixes for mobile time_edit.php for subgroups and paid status.
- 1.19.22.5242 - Fixed date format for subgroups on time edit pages.
- 1.19.22.5241 - Improved export-import by including custom_css field and notification comments.
- 1.19.22.5239 - Improved usability of plugins.php page by hiding configure links when they cannot be used.
- 1.19.22.5238 - Usability improvements for Notifications plugin.
- 1.19.21.5235 - Replaced cal_days_in_month with generic date call (#99), created notifications that trigger based on hours (#98), some fixes on notification_add.php.
- 1.19.20.5234 - Fixed future entries behaviour for subgroups.
- 1.19.20.5233 - Added an option to introcude custom CSS for gtoups to customize presentation.
- 1.19.18.5228 - Added a config option whether to show not complete days in calendar.
- 1.19.18.5226 - Rewrote Calendar class for better clarity.
- 1.19.18.5217 - Some refactoring and fixes on mobile time.php. Updated Calendar class as per #97 (different style for not complete days).
- 1.19.18.5215 - Refactored ttTimeHelper::insert function further to obtain user_id from the global User object.
- 1.19.18.5214 - Refactored ttTimeHelper::insert function to use group_id and org_id from the global User object.
- 1.19.18.5212 - Fixed time edit pages for prepopulate_note option.
- 1.19.18.5211 - Added project checkbox validation for template_add.php and template_edit.php.
- 1.19.18.5210 - Fixed export / import to work with project to template binds.
- 1.19.18.5208 - Some usability fixes for Templates plugin.
- 1.19.18.5205 - Work in progress on an option to prepopulate note from template.
- 1.19.17.5200 - Added an option to bind templates to projects.
- 1.19.16.5190 - Applying .Auth_ldap::ldap_escape($login) to openldap (#93).
- 1.19.16.5189 - Patched ldap authentication to work with member_of groups (issue #90), also a fix for issue #89 (sessions timeout early).
- 1.19.16.5188 - Improved bot protection slightly.
- 1.19.16.5187 - Fixed ttValidDate function to handle DD-MM-YYYY date format.
- 1.19.15.5186 - Addressed several php warnings.
- 1.19.15.5181 - Fixed timesheet approval workflow.
- 1.19.14.5180 - Fixed week view for multiple custom fields.
- 1.19.14.5179 - Removed no longer used fields from tt_fav_reports table.
- 1.19.13.5178 - Fixed mobile timer.php page to display multiple custom fields.
- 1.19.13.5176 - Fixed import of report_spec field for fav reports. Also, some cleanup.
- 1.19.13.5174 - Fixed export of fav reports by including properly mapped report_spec field.
- 1.19.13.5173 - Added a capability to add attachments to expense items.
- 1.19.12.5172 - Some more progress with Remote Work plugin.
- 1.19.12.5159 - Got rid of a PHP warning when generating reports with 0 inactive users.
- 1.19.12.5158 - Removed WORK_DEBUG conditions to hopefully start user testing of Remote Work plugin features.
- 1.19.12.5141 - Fixed issue #82 - clients can mark their invoices paid/not paid.
- 1.19.11.5140 - Additional progress with Remote Work plugin.
- 1.19.11.5135 - Fixed fav reports sent in notifications for custom date formats.
- 1.19.10.5134 - Allowed comma-separated recipients in notifications.
- 1.19.10.5133 - Remote Work plugin related improvements.
- 1.19.10.5109 - Added audit info to some delete operations.
- 1.19.10.5108 - Ongoing improvements to Remote Work plugin and admin pages for it.
- 1.19.10.5092 - Added a clarifying comment for translators for error.file_storage and error.remote_work.
- 1.19.10.5091 - Removed FILE_STORAGE_URI from config.php.dist and set its default value.
- 1.19.10.5089 - Made Remote Work plugin available to start user testing and feedback.
- 1.19.10.5086 - Added getEmail function to ttUser class.
- 1.19.10.5085 - Added getGroupName function to ttUser class.
- 1.19.10.5084 - More progress on Rempte Work plugin.
- 1.19.10.5074 - Integrated some German strings from pr#81, the ones that seemed okay to do. Put clarifying comments for others.
- 1.19.10.5070 - Extended reports by adding filtering for text custom field values.
- 1.19.9.5067 - Refactoring. Put getOrgKey() function into ttUser class.
- 1.19.9.5065 - Refactoring. Put getGroupKey function into ttUser class.
- 1.19.9.5064 - Some progress on Remote Work plugin.
- 1.19.9.5061 - Updated ttTimeHelper class for showing custom fields on time pages.
- 1.19.9.5059 - Dutch translation improved.
- 1.19.9.5055 - Removed no longer used WEEK_START_DEFAULT from config.php.dist.
- 1.19.9.5054 - Added d-m-Y date format as an option.
- 1.19.8.5053 - Fixed filling dropdowns on reports.php page load.
- 1.19.8.5052 - Backticked rank in sql queries as it is now a reserved word in MySQL.
- 1.19.7.5051 - Increased chunk size for exports to speed things up.
- 1.19.7.5050 - Added sort options on invoices.php page.
- 1.19.7.5049 - Added label.sort_by to translation files as part of adding sorting to invoices.php (ongoing work).
- 1.19.7.5048 - Fixed export.
- 1.19.7.5047 - Fixed export of large tables by operating on smaller chunks at a time.
- 1.19.7.5046 - Fixed emailed reports by cron by including multiple custom fields.
- 1.19.7.5045 - Fixed emailed reports to include multiple custom fields.
- 1.19.7.5044 - Made progress on including custom field settings in fav reports.
- 1.19.7.5043 - Fixed exporting reports to pdf by adding multiple custom fields to output.
- 1.19.7.5042 - Fixed exporting reports to xml and csv by adding multiple custom fields output.
- 1.19.7.5041 - Fixed left joins for reporting on multiple time custom fields.
- 1.19.7.5040 - Initial release of multiple custom fields for user testing.
- 1.19.7.5039 - Added code to support multiple time custom fields to reports.
- 1.19.7.5038 - Added controls on reports.php for multiple time custom fields.
- 1.19.7.5037 - Fixed left joins in reports for user custom fields.
- 1.19.7.5036 - Starting to work on multiple time custom fields.
- 1.19.7.5035 - Added filtering for user custom fields of type text in reports.
- 1.19.7.5034 - More progress on user custom fields in reports. Dropdown custom field selectors are now working.
- 1.19.7.5033 - Fixed reporting on user custom fields for expense items.
- 1.19.7.5032 - Work in progress adding user custom fields to reports.
- 1.19.7.5030 - Added user custom fields on user_edit.php page.
- 1.19.7.5029 - Improved ttUser::markUserDeleted by marking user custom fields as deleted also.
- 1.19.7.5028 - Added code to insert user custom fields after user creation.
- 1.19.7.5027 - A bit of refactoring in user_add.php.
- 1.19.7.5026 - Added user input validation for custom fields on user_add.php.
- 1.19.7.5025 - Added custom field controls on user_add.php.
- 1.19.7.5024 - Added entity type as read only field on custom field edit page.
- 1.19.7.5022 - Introduced tt_entity_custom_fields table.
- 1.19.6.5021 - Added entity column on cf_custom_fields.php page.
- 1.19.6.5020 - Adjusted export-import to work with entity type in custom fields.
- 1.19.6.5019 - Changed entity_type datatype in database to optimize things.
- 1.19.5.5018 - More work in progress on custom fields extension.
- 1.19.5.5017 - Introduced dropdown.time to translation files.
- 1.19.5.5016 - Introduced label.entity into localization files.
- 1.19.5.5015 - Starting working on extending custom fields.
- 1.19.4.5014 - Added a link explaining record type.
- 1.19.4.5013 - Fixed sorting of projects in dropdown on the reports.php page.
- 1.19.4.5012 - Added a capability to see uncompleted indicators to users with view_users right.
- 1.19.4.5011 - Improved protection from mass bot registrations.
- 1.19.4.5010 - A bit of refactoring.
- 1.19.4.5009 - Moved Subgroups from top menu to group_edit.php.
- 1.19.4.5008 - Rewrote group dropdown fill function to include the entire organizational tree.
- 1.19.4.5007 - Introduced a separate page for advanced group settings.
- 1.19.4.5006 - Added an explanation link for group on the registration page.
- 1.19.4.5005 - Increased margin for top menus.
- 1.19.4.5003 - Dutch translation improved.
- 1.19.4.5002 - Changed Create group menu label to Register.
- 1.19.4.5001 - Fixed nav links visibility between day and week views.
- 1.19.4.5000 - Refactoring. Moved week_menu config option to plugin config.
- 1.19.4.4998 - Improved ttTimeHelper::holidayMatch to allow partial wildcards in year.
- 1.19.4.4997 - Removed show holidays config option.
- 1.19.4.4995 - Fixed week start for subgroups.
- 1.19.4.4994 - Removed holidays from translation files.
- 1.19.4.4993 - Adjusted monthly quotas plugin to use configurable holidays.
- 1.19.4.4992 - Implemented configurable holidays.
- 1.19.4.4991 - Wrote a validation function for holidays.
- 1.19.4.4990 - Introduced a debug option and a localization string for holidays.
- 1.19.4.4989 - Started to work on configurable holidays.
- 1.19.3.4988 - Fixed holidays display for subgroups.
- 1.19.3.4987 - Refactoring, moving plugin config options into group config field.
- 1.19.3.4985 - Changed title on week view to Week from Time.
- 1.19.3.4984 - Introduced a configirable option whether to show Week menu.
- 1.19.3.4983 - Renamed MULTITEAM_MODE to MULTIORG_MODE to better reflect the meaning of the constant.
- 1.19.3.4982 - Fixed approve_all_reports right assignment and check.
- 1.19.3.4981 - Another fix in week view for negative hours.
- 1.19.3.4980 - Another fix for negative hours.
- 1.19.3.4979 - Fixed prePopulateFromPastWeeks for week view plugin.
- 1.19.3.4978 - Cosmetic fixes.
- 1.19.3.4976 - Removed middots in menus to hopefully do better styling with css.
- 1.19.3.4975 - some more progress on work plugin.
- 1.19.1.4972 - Added attachment output on week view.
- 1.19.1.4971 - Merged getRecords and getRecordsWithFiles into one function to keep things compact.
- 1.19.1.4970 - Some refactoring and progress on work plugin.
- 1.19.1.4967 - Fixed monthly quotas for negative hours.
- 1.19.1.4966 - Fixed charts for negative hours.
- 1.19.1.4965 - Removed unneeded subtotal row on reports, fixed printing of 0 subtotals.
- 1.19.1.4964 - Fixed totals for 0 hours to not have minus sign.
- 1.19.1.4963 - Initial work done to support negative durations, some issues remain.
- 1.19.1.4962 - Introduced conditional display of label.users if there are no inactive users.
- 1.19.1.4961 - Some rearrangements in translation files.
- 1.19.1.4960 - Separated users section on reports in 2 for active and inactive users.