Pydio 6.4.2 Release Note

Pydio Core 6.4.2 fixes vulnerabilities discovered in remote download and some specific path filtering on Windows server OS. Installation is done via the "Stable" update channel in-app, or via Linux packages manager depending on your installation mode.

[Most noticeable changes]

Security issues on remote download and path traversal on Windows.
Fix Httpoxy by updating Guzzle library
Meterial Design follow-up : Icons, thumbnails view, search engine results
Fix indexation issues for synchronisation
Italian translations updated (DepaMarco), Czech translations updated (Svetlmodry)

[Detailed Changelog]

Update Italian translation for plugin 'access.ajxp_conf'
Update Italian translation for plugin 'access.ajxp_home'
Update Italian translation for plugin 'access.ajxp_user'
Adding Italian translation for plugin 'access.inbox'
Adding Italian translation for plugin 'action.disclaimer'
Update Italian translation for plugin 'action.scheduler'
Update Italian translation for plugin 'action.share'
Added test for intl php extension as it is used to localize month names (see IntlDateFormatter in AJXP_Utils::relativeDate)
Fixed test for detecting php apc extension (postive result even if apc was not loaded)
Update README.md
Update Release number
adding disclaimer on plugin doc
adding disclaimer on plugin doc and dependancies
Make sure to invalidate repositories cache after accepting user in DuoSecurity.
Add minimum characters number on UsersCompleter
Update hooks extraction
Update hooks extraction
Use caching to agressively store directory listings, nodes metadata and nodes stats. Introduced caching namespaces, we could even provide different backends for differents namespaces. Todo: create a user namespace to flush only specific resources.
Expand Doctrine caches implementation to add "deleteKeyStartingBy" when possible (currently only APC and Redis). If this feature is supported, activate the nodes cache layer (otherwise we cannot prune a full branch of the filesystem tree).
Confusion possible if overriding private method.
Fix cache invalidation
Empty mask filtering on meta.syncable can create an issue with sync downloads.
Make sure to Normalize_C the filename when uploaded from xhr.
Feed.sql: index should not be declared unique.
Delete imagick cache can be deferred.
Add test for AbstractCacheDriver
Fix APCIterator namespace Action.share : use ConfService::replaceRepository to trigger cache invalidation CoreCache: hook to workspace.after_update to clear associated cache contents
New action MigrateLegacyShares
Catch error on minisite migration
Add a MetaCacheService on the client side, caching Shared Data and Activity Feed with clever invalidation rules. Keep in memory for the moment, always clearing on workspace switch (and thus on logout).
Remove log.
Use new cacheService for workspace.info
Update README.md
Like was causing multiple rows to be added to ajxp_index when changing directory pathname
Correctly change index for children whose ancestors dir name changed
Fix SMB issue when trying to delete folder with a file named '0' in it
Rebase and update
Updated Italian translation for plugin 'action.updater'
Adding Italian translation for plugin 'auth.custom_db'
Suggest FIX for English translation of plugin 'auth.custom_db': replace 'connexion' with 'connection' that is more common
Fix error webdav in root folder
Fix user's roles update
Option to zip downloading files on the fly
Czech translation - plugins editor.webodf
editor.video czech translation
editor.text translation to Czech
editor.soundmanager translation
editor.infopanel translation
editor.exif czech translation
editor.codepress czech translation
editor.audio czech translation
editor.ajxp_graphs czech translation
Fix event on change error when cross-repository copy.
Fix load users' feed
Fix mapping to role id
Adding Italian translation for plugin 'authfront.cyphered'
Adding Italian translation for plugin 'authfront.duosecurity'
Adding Italian translation for plugin 'authfront.http_basic'
Adding Italian translation for plugin 'authfront.http_server'
Adding Italian translation for plugin 'authfront.keystore'
Adding Italian translation for plugin 'authfront.otp'
Adding Italian translation for plugin 'authfront.session_login'
Updated Italian translation for plugin 'core.ajaxplorer'
Change S3 clients instanciation.
SearchEngine: change "more results" messages, we may not know the exact total result count. (cherry picked from commit 58bbd23)
Set REPO_SYNCABLE on default repositories (cherry picked from commit 86497a8)
Adding react tap event clear dependency (cherry picked from commit 8c358fe)
Fix group sorting in orderRoles ( close #1126 )
Fix URL for plugins documentation
Set POST by default on client to avoid too long requests.
Fix root node actions detection. Do not display inbox in cross repo list.
Missing auto-complete styling for .e.g tags metadata.
Fix fireContextChange by passing a dataModel: fix right-click instabilities. (cherry picked from commit 9d9851b)
Fix possible issue in metastore for root node.
Fix ShutdownScheduler that could skip deferred events when already in deferred loop.
Dedup files in UserSelection
Enable "Explore" action on root folder.
Fix Team and Group listing and filtering by keeping an alt. pregexp value.
Fix #1108: Caching issues for unoconv-generated previews of office files.
Fix isUnique() function in datamodel.
Missing var in disclaimer javascript.
Refix group sorting. We must compare to 0.
Fix TeamsList searching
Css compile
Adding support for latest versions of ElasticSearch #1184
Raise filtering level when downloading from remote or extarcting archive.
Fix strange display in authentication panel by passing smbclient as param instead of global_param
Get editable value in FormManager. Close #1124
Imagick: close session to avoid blocking request when generating preview. Fix resize when loading page.
Multiple DL: get parent base for zip file.
Making sure node metadata for file info is valid for a deleted file #1127
Fix thumb positioning for Imagick preview
Implement font-based mime icons.
Rework Grid display w/ more space for thumbnails Display overlay icons in tree, that way we can enable some actions on root node (inc. watch on workspaces). (cherry picked from commit 9e0df5b)
update extensions
Readapt styles for font-based mimes
Css details
Add some extensions
New plugtype strings
Reload messages when switching language
i18n update
Escape quotes and parenthesis before setting backgroundImage style
fix FR typo
Re-implement QRCode feature for shared links
Add QRCode action for passing user / server name via qrcode to new mobile apps. Disabled by default.
Performance improvements mail digest
More detailed info about update sites
Quick fixes for inlineEdition - Probably to be rewritten properly.
Add pagination controllers in folders tree (when in Selector mode only) to allow copying/moving data around even if inside another page. Fix #1179
Make sure to save before trying to send an invitation to internal users. Fix #1166
Update abstractAuth plugin
Pass & in string return
Proxy latest_note to avoid re-asking authentification to update site.
Revert previous change, we already had the display_upgrade_note action.
Correcting security potential issue on windows in securePath
Fix infoPanel action bars initialization when in editor mode. Fix #1145
Update DL page for Sync Clients
Fix for #1117: don't remove tmp archive if using XSENDFILE
Fix resize issues when display images fullscreen in minisite. Fix #1168
Fix #1176: catching all exceptions when sending mails and adding errors to the end report
Fix z-index for videojs player, both in editor mode and fullscreen. Fix #1191
Use double-quotes instead of simple for links. Maybe see #1138
Fixing again parenthesis in background URL.
Metarialize search engine results
Adding composer.json to elasticsearch plugin
Do not encodeURIComponent for oldSchoolMailer - Should fix #1138
Fix #1180: Unpatch the path for zip files before we check against the…  …
Force overriding conf/extensions.conf.php during upgrade, as output f… …
Init new release note.
Fix JSPacker static function call.
Fix FormManager when setting default value inside group-based selectors

-------
Pydio Core 6.4.1 - Bug Fixes for 6.4

Pydio Core 6.4.1 fixes most blocking issues revealed by the massive upgrade to 6.4.0. Installation is done via the "Stable" update channel in-app, or via Linux packages manager depending on your installation mode.

[Overview]
Many issues fixed in shares, linked to the deep refactoring of this feature. Amongst others, the "shorten" plugins were broken.
* UI : Missing close button on some new dialogs, mobile display of the web UI was a little buggy
* CMS Bridges where broken due to an issue in the glueCode.php file
* Federated Sharing: some installs could have issues with URI's.


[Detailed Changelog]
Fix GlueCode.php
Use longer description in api generator.
Missing media.css file in gruntfile.
Missing log for ShareNode action
Fix method signature for PHP7
Expand api docs generator
Rework Share options for folders / files vs. public links / internal sharing - Fix #1143 Better invalid share detection and remove it from meta. Fix many error messages.
Update i18n
Core.mailer : add DROP TRIGGER IF EXISTS
Do not display section title if list is empty - Fix #1154
Fix #1148
Fix some media CSS
Fix various glitches on Spanish language. Close #1136
Fix #1128 : add the ability to reject a previously accepted share.
Make sure to transfer an empty DATA_TEMPLATE value to child repository - Fix #1152 Fix broken unsharing.
Remove legacy share js resources - Discourage people to use old themes for now.
Add a canWrite attribute on editors declaration, use it in ShareDialog to detect if a file has "writeable" editors and show an additional Edit permission for public links on files.
Fix various issues with shares lists, especially in My Account & Admin panels.
Use original_path for header if present in metadata.
Fix failed remote share: make sure to remove unnecessary data on failure.
Display close icon for mp3 player. Fix #1156
Fix htaccess tpl : replace ocs.php by opencollab.php
Rewire missing action for deleting user-created workspace.
Fixing S3 and webdav access
Fix to #1157: adding support for apcu
Fix to support mysqli
Display close icon for versioning plugins
Updated german translations and unified various words
Fixed typo
Fix broken shortener plugins : use a url.shorten hook instead of capturing share action output. Store data in share instead of metadata.

----
Pydio 6.4.0 is a stable release introducing many important new features!

Installation is done via the "Stable" update channel in-app.
Noticeable changes

Sharing Deeply Reworked
 * Ability to now share files with other users (without creating necessarily a public link)
 * Ability to toggle the visibility of a share inside a common workspace, to let other users edit this share
 * Implementation of the Federated Sharing API to allow sharing files and folders accross Pydio instances, and with other software providers implementing this API (currently OwnCloud).
 * Rework of the share panel, with direct-click for copy, better expiration date visualisation, and many more
UI transitioning smoothly to Material Design and ReactJS: following our previous work on the Enterprise Distribution with Material Design guidelines, and listening to your feedback about the UI. Changes are subtle (no big reorganization), but interface should be really clearer.
Mails Digest : avoid receiving tons of emails when watching for a file or folder modification, and opt-in for an hourly/daily/weekly based digest instead.
CacheService mechanism : extension of our previous work with in-memory cache to support many types of key-value stores (apc, memcache, reddis, etc..). We are using the well-established Doctrine Cache component.
WebDAV access driver was entirely rewritten using Guzzle
Amazon S3 Access Driver: improved, we now support PHP-SDK v2 and v3. Hook to our Cache Service for better performances.

[DETAILED CHANGELOG]
Italian translation: fix relative date format
German translations: New translations for user and role administration
Catalan & spanish tranlations
Encoding change from ANSI to UTF-8 in en.php
Missing comma & bad encoding in en.php
Bad encoding in en.php (ANSI)
core.notifications templates ca&es translations
German translations: New translations for user and role administration [FIX] * Added missing keys to other languages (ecept en and de)
Czech translation - meta.svn plugin
access.dropbox plugin translation to Czech
access.imap plugin translation to Czech
access.sftp plugin translation to Czech
auth.basic_http plugin translation to Czech
auth.cmsms plugin translation to Czech
log.syslog plugin translation to Czech
log.text plugin translation to Czech
mailer.phpmailer-lite plugin translation to Czech
uploader.plupload plugin translation to Czech
mq.serial plugin translation to Czech
mq.sql plugin translation to Czech
Update cms bridges release note
Added CA and ES dropzone files in Uploader.html plugin
core.ajaxplorer translation repair in catalan language
Initial commit: Uses doctrine cache drivers as main caching system
Loaded core cache directly from bootstrap.json and moved bootstrap handling to CoreConfLoader - Fixes
Fixes after scrutinizr run
Fixing deleted htaccess files
Fixing typo
Added translations for Core cache
Removed default value for bootstrap.json cache
Removed unnecessary call to deferBuildingRegistry
Camel casing Doctrine Cache Driver
Fix pluginInstance
editor.browser i18 ca & es updates
core.ajaxplores ca language updates
meta.watch ca & es translations
editor.browser ca&es files author fix
action.disclaimer. spanish and catalan translation
Start refactoring ShareCenter class (cherry picked from commit 89491d4)
Fix issues in LegacyPubliclet
Fix missing repository
Fix error case / default template.
Add ability to force PathStyle on S3 driver - Do not use make Custom URL and Region parameters exclusive.
ForcePathStyle
(action.compression]add index action at the end of the extraction
[action.comopression] adding index action at the end of the extraction
action.share : fix in ca & es files
Make sure to include zip files when filtering node name in search results
Massive refactoring of ShareCenter to make it simpler. New methods to collect metadata from children (only with metastore.serial) and avoid breaking links on parent (or other user) rename.
Declare $shares variable before passing by reference.
ShareCenter : carry on massive refactoring
Docs & typing
Start refactoring createSharedMinisite() function
Split ShareCenter class again and again: new model ShareLink. Fix issue with metadata moving.
Split ShareCenter class again and again: new model ShareLink. Fix issue with metadata moving.
collectChildrenWithRepositoryMeta : return relativePath from base node, not absolute in workspace.
Store share visibility always in shared repo options, not in share object Make moveSharesFromMeta recursive
Adding core access functionality to simplify addition of new driver through Guzzle, and added new WebDAV driver
[access.s3] Adding SDKv3 compatibility
[access.s3] Adding SDK and API version in the plugin
[access.s3] Overwrite the s3 stream wrapper
[access.s3] Adding Pydio CacheService to s3 Cache interface
New class for loading React component inside standard Dialog.
Add react-autosuggest to core bundle.
Enrich user_list_authorized_users with alternative format (xml) and more info about the users.
ignore new react build folder
Move PydioForm & ReactPydio modules in gui.ajax
Final refactoring of action.share PHP part
do not load pydio-mui here - todo : find where to load
Move mui css files inside gui.ajax
Small dialog styling evolution to be more compatible with material design widgets.
New react-based share dialog
Fix user search engine
Add missing resources for compilation.
Load alerts: silently test if file exists.
Authentification -> Authentication for English
Fix various UI stuff in ShareDialog Add Clipboard module for copying to clipboard Fix hidden Field in AbstractAjxpUser
Fix cache.doctrine empty options.
Fix cache plugtitle french translation
Cross-copy action: pass Repository object to UserSelection()
Adding guzzle, reformatting the code and adding the documentation
Removing guzzle tests from the package
Fixes to SMB auth: - Registered stream is smbclient://, not smb:// - smbclient binary path could not be set for auth plugin
Fix default tpl name
Fix unshare when removing users and no public link active.
Little Charset Bug in index message
dir_closedir() has no return value
Fixes for upload and deletion
Mitigate update role request
Fix image magick preview on multiple page office file
Fix switch to default start repository after loggin in by CAS
Method updateRepository() on AJXP_Sabre_Node to set repo after authentication succeed.
Move ContentFilter filterings to AJXP_MetaStreamWrapper instead of UserSelection and fsAccessDriver.
New ocs access point to implement Open Cloud Specification. DAV implementation working on public links. Update htaccess accordingly.
Simple skeleton for an "Inbox" workspace displaying all shares received.
Fixes on S3 new implementation
Refactor core.ocs to use namespaces and composer autoload.
Allow string in classname attribute to use backslashes in namespaces.
Added layer between pydio and pydio.dav to handle auth
Model implementation using simpleStore for OCS
Create Server for /shares/ access point.
Use remoteId as RemoteShare id.
Client & Server stuff for OCS
Plugin Sharing and OCS together. Ultra-basic UI for tests.
Change Core Access Plugin and WebDAV Client to use Scheme Translator Wrapper layers
Style remote-users-add form
Added layer between pydio and pydio.dav to handle auth
Fixing duplicate function name
Fixing the Meta Stream Wrapper
Update styling
fixes stat result handling in case of empty files, according to docs stat should return -1 or text error message small optimizations for handling of alternative stat commands
Added context handling in Meta Stream Wrapper
Create CompositeShare object - Change json output format to handle 1 or N links.
Added OCSClient to interface with OCS API
Rework OCS Links
Fixing error
Fixing OCS Client
use documentName
Switch to documentName
Fix some stuff on OCS
Fix when no share is enabled
ConfService: add some includeHooks to contribute with repositories.
Add a virtual folder at the root of the webdav to make it API-consistent (both folders and files are accessed via /../dav/DocumentName) Store remoteShares by token, not remoteId Ping back on Dav access point when receiving a share.
Last update of Inbox driver Ping remote when receiving share.
Fix download right management on public link.
Fix clearing shares
New PydioUsersApi in Core to encapsulate users related requests New react-based UsersCompleter component, including user creation form.
Use generic UsersCompleter and remove from ShareDialog. Use core PydioUsersApi as well. New react-based PydioMailer.
Move css from action.share to PydioMailer
Finish wiring mailer. Handle no mailer and force Old school case.
Wire password strength checker on user creation form and share password form
Handle custom RW permissions for remote users.
Mail notification not fully encoded UTF-8 if Win OS
Fix missing repo_label parameter
[access.s3]Changing require file name
Fix OCS Client with non empty base Path
Replace main share dialog
Massive i18n for new ShareDialog
Fix ocs with baseUri
Renaming
Renaming
Make webdav enabled by default Fix contentType detection and remote URL values for invitations.
Fix unshare Touch user role to trigger repo reload if user is logged. Fix reloadRolesIfRequired to make sure personalRole is in sync
[access.s3] Fix rename folder for SDK V3 and changing require file name
Migrate Info Panel modified from ShareCenter to ShareDialog
Do not list teams in usersOnly
Expose FEDERATED_SHARING_ENABLED setting Implement Readonly Mode on ShareDialog
Fix Exception Namespace - Close #1067
Move back the remote share /dav/ to root, do not create virtual folder anymore. For files, both the / and the /filename.ext send the same answer (stat of the file).
Change Invitation IDs from GUID to random Integers (requires one or more db calls). Fix #1065
Fix OCS unshare implementation
Disable Test File
Added caching of the Path Wrapper functionality and changed the hkey for the Stream Wrapper global caching
List Teams even if regexp is null and mandatory
Fix rights management : do not assign minisite-role for remote shares.
Implement accept / decline remote shares.
Another pass on inbox driver. Not sure it will be kept as is.
Adding OAuth Wrapper to the core access for Oauth2 authentification
Adding doctrine namespace key
First split of big css into smaller less files
Lessify
LESS : refactor / extract variables
Fixed timeout issue and added local caching to the path wrapper
Move old screen and xtree to less components
Update CSS - Change how we handle global_toolbar styling
Revert unnecessary commit
Smooth transition to material
Smooth transition to material
Add cssmin to package.json
Typo in package.json - Start fixing admin panel styles
Fix styling
Organize fonts - Add a subset of mdi. Will be enriched as needed. LeftNavigation: add user_create_repository action if present.
Fix fonts imports via less variable. Replace all share icons by new mdi-share-variant.
Actions, fonts, CSS ...
Rework Home Panel
Improve the user dashboard a bit.
Make the left nav panel open by default, closing after 3s
Css compil
Fix mdi icons font - fix top toolbar bg
Pass hasContentFilter info
Make LeftNavigation panel more generic
Use LeftNavigation component for Home page
Do not commit built form
Add build/ folder to ignore file
[core.mailer]Adding the grouped mail and the CRON
[core.mailer]Adding the user choice in the manifest
[core.mailer]Adding the mysql create file for the database
[core.mailer]Adding the postgreSQL create file for the database
[core.mailer]Adding the SQLite create file for the database
Fix splash style
Dashboard, home, login panels Hide tooltips on repo switch Special icon for Inbox workspace
Minsites: remove all inline style from manifest and put them in a dedicated stylesheet.
Various fixes on Share Dialog
Update website in email templates
Pass page_position parameter when opening search result in paginated context. Fix #1041
Check dibi::isConnected() whenever possible. Close #1043
Fix #1061
Missing resource in core.mailer
user_list_authorized_users : always send root node (ul).
Reset Download Counter
Fix videos in tutorial panel
Inbox and Share Notification in left menu
Adding hook to Repository loaded change
Fix to inbox and CacheService
Adding local status to the share notification panel
Observer repository_list_refreshed event
Stop Share Notification Dispatcher if noone is listening
Loading on load
Add two new properties on Repository object (repositoryType and accessStatus), publish them in the XML, parse them in the js model.
Change to the Left Navigation
Fix FilesList modifier
Rework Inbox Driver
Use the last_history pref to add a repository_last_connected timestamp and send it in repo list.
Last css compil
Inbox : replace left panel by a quick filter box
Left Panel icons
Count shared files access status
Fix repository_last_connected flag
Dialog box for remote shares
Replace alerts panel
Fix AjxpPane.parseComponentConfigs Typo in fsTemplatePart
Adding badge and overlay for the dialog
Handle empty message
Fix notifications actions in left panel
i18n inbox access driver
inbox: change buttons style
Adding inbox badge
Listening to repository refreshed on home page
Resolve AJXP_Exception deprecation warning
IE tweaks
Adding modal on demand instead of inline
Fix installer style
[core.mailer]Adding separator in the create sql file
[core.mailer]Adding character set in the create sql file
Fix to not display the share notification twice
AjxpMailer now has SqlTableProvider interface.
For OwnCloud compat, make sure to always ping the root of webdav, not /DocumentName
i18n on core.ocs and access.inbox
Adding owner to the remote share alert box
Add inbox repository by default
AjxpMailer install tables only for core plugin
First draf of 6.3.1 release notes
Fix mailer digest computes
Fix consume_mail_queue
Replace repositories
Missing resource
Fix source_path in new package.json files
Public links were broken by the repo filtering
Add optional css_path in package.json and force copy at upgrade time to make sure all resources are there before compilation.
Reorganize ajxp_home to avoid upgrade issue with previously deleted folder.
Fix "share file with new user" case by adding the inbox repository acl.
Forgotten console.log
Quick fix of "edit team" panel.
Admin fonts
Add access to inbox in root role during the update.
Small typos and IE fixes
Refix auto-completer open / close
Removing code from index.php, adding dependency in OAuthWrapper
Fix menu open / close
Missing resource
remove the default charset for sqlite table
remove the default charset for postfre table
adding 6.4.0 sql table
Prune some words from captchas ...
Fix horizontal bar on DL only template (IE / FF)
Fix #1076 : public link issue on windows server
Leftpanel overflow : set auto instead of scroll
Force LeftPanel to avoid scrolling on small lists (fix #1081)
Fix editor_action_bar buttons fonts
Fix #1080 - add check on min length when choosing custom link.
Enhance interactions on sharedialog based on checkbox values and current node type. Fix #1079
Small optimizations for file upload handling in rsync based part, no need to copy signature/delta files
Compile less for more browsers ( --autoprefix="last 2 version, > 10%" )
Switch leftpanel typo color to rgb() instead of rgba() for IE8. Error-catching on components load - was breaking ie8 interface.
WebSocket : listen to onerror / onclose events and fallback to polling.
Missing form component type "monitor", factorize with "button".
Set Inbox workspace rw (not only r) and manage various actions by either not importing them or disabling them. Disable "write" in stat based on shared repository permission.
Add forceComputeFit on codemirror editor to fix fullscreen resize problems. Fix #1083
Refix previous commit, force resizing after fullscreen end.
Fix Breadcrumb for very deep folders. Close #1006
Fix public links htaccess file for languages indicators containing dashes. Fix #1050
Fix #1078 - use Post instead of Get.
Fix css for selection cart and searchengine. Close #1082
Fix "My Group" sharing
Ignore error on ldap_sort as it's getting deprecated. Close #1031
Tidy up core.mailer : add a parameter to activate queue or not, for backward compat.
Artificially update setLeaf() on node it's a root of repository with content filter. Should fix #1090 Trigger "node.read" in inbox driver otherwise there is no notification. Fix #1087
Fix file name in zoho editor
Added translations to share dialog and updated german translations
Hook to workspace.share_metasources to disable repository_keywords on index.lucene for shared workspaces, as path is already resolved. Close #1017
Fix various stuff with sharing admin settings, format date, set maximum date, etc. Fix #1095
Throw error to prevent dialog closing on force password change action. Close #900
Fix scroll to selection when triggering setSelectedNodes from other view.
Pass an ajxp_im_time in the nodes / nodeDiffs results, allowing the UI to ignore events that are loaded after other modifications.
MessageExchanger : do not read pending IM's when registering a client on a given channel.
Fix node.change hook in meta.watch : artificially setting the node->leaf was messing things in other callbacks. Create a simple copy of the node. New dontBreakOnException XML attribute for hooks: ignore exceptions (log them) and don't break the loop for other callbacks. Default behavior stays "breakOnException" for backward compat (permissions exceptions for example).
Fix share deletion on node deletion : ignore repo-not-found error
Enable metastore and meta.watch for "inbox" workspace to trigger notifications
Fix #1099
Sharing . When share scope is public, send IM to reload connected UI's . ShareDialog: better indication when link is expired (fix #1101), do not show Stop Sharing if not owner of the share (fix #1102)
ShareCenter: Unused vars
Fix ShareDialog when not in a streamWrapper driver.
Fix styling
Fix textarea bottom border
Change target url
Change Remote Users legend
Fix multiple smb servers
Set Federated Sharing false by default. Handle share dialog when not active. Last i18n's in share dialog.
Add FR translation for OCS
Fix memory leak : reloading driverInstance may induce mem leaks. Make sure to do it only if necessary.
Fix strange offset in breadcrumb
Slug and UUID added as path variables
Re-enable Folders upload for Chrome / Mac (utf8 issues are now fixed). Rework UI when folders upload is enabled.
renamed AJXP_USE_UUID_PATH to AJXP_WORKSPACE_UUID AJXP_USE_SLUG to AJXP_WORKSPACE_SLUG
Update compiled version of ajaxplorer_boot
Move pyd.io to pydio.com references
Fix html / no html emails Fix triggers : do not insert original id.
Fix to #1100 - use AJXP_MetaStreamWrapper
Fix to #1100 - use AJXP_MetaStreamWrapper - for XACCELREDIRECT too
Fix to the #1100 issue
Fix D'n'D issues : conflict between uploaders dnd and ReactDND, create a fake custom backend to remedy. Close #1105
Some styling fixes on LeftPanel and WelcomePanel
Fix pyd.io in Credits file.
Passing correct options variable to the Doctrine Cache Driver
Fix Doctrine redis problem by passing correct options to the cache driver
Fix delete share from My Account (clear metadata) Fix AjxpMailer : renamed recipent to recipient Add tooltip on alerts list Many css fixes Disable bookmarklet action, never used
Rework tutorial & download panels on Home.
Remove action open_tutorial_pane
More styling on welcome page. DL links are optional.
Transition video panel - Crop video thumb - Autoplay video.
7s only
Add space before notifications numbers
Always pass the CREATE option to shared children, may be necessary for dynamic mounting. See #1098
Adding transition effect home panel
Use Modernizr no-cssreflections to switch svg background to standard image.
Do not set cache instance driver mandatory.
Fix focus issues on selection change & drag to select
Fix to Safari box shadow
Fixing the build for grunt
Fix to #1068: removed external users and added Groups instead
Fix various scrolling issues in UserCompleter for ShareDialog, show loading indicator, fix long group names.
Css Fixes for Mobile
Compiled css
Useless install tables button in mq.sql (using ajxp_simple_store). Close #1106
ShareCenter : do not forward events to ocs_remote share. Zoho : do not trigger unnecessary node.change if file was not modified.
Fix typo in Registry : user object is on _pydioObject, not self. Check for ajxp_readonly to avoid proposing writeable editors.
ZohoEditor : remove "write" attribute and send mode="view" for opening editor in readonly mode.
PixlrEditor: bettor error handling, recheck write permission.
OpenWith : check if node is readonly and do not display "write" editors in the menu.
Access.inbox : store stat in static variable after all modifications. Add extension to temp name as it is required for some editors.
Some fix for ZOHO Editor
Code analysis
Design for the boxes on the home page and scrutinizr for sqlConfDriver
Fix missing dependency in package.json
Fix wrong is_array call.
Fix logos not clickable on IE
Reverting to good'ol'blue png for upload progress background. Confusing for the users otherwise. Close #1112
Changing the icon on the home page
Auto rename share label #1111
Fixing the quota box home page
Removing debug delay
Removing debug
Adding timeout to the repository switch
Fix wrong message on group creation
Fix Getting Started video
Remove .bak file
Move breadcrumb height to a specific context to avoid breaking other templates.
Fix windows encoding issues when moving shares. Should fix #1114
Make LabelWithTip more generic
Rework home page with Material cards
Additional check on content of configs["REPOSITORIES"]
Adding inbox card and fixing ocs client issues
Repository : Nullate the internal driverInstance before serialization. Seems to fix the session corruptions issues.
UI fixes
Fix ReplicationPanel removeRow : swap row to remove to last position and let removeLastRow delete it.
Reload bootstrap_repositories just after clearing the cache, to avoid settings repository issues. Fix Css for replication groups in settings panel.
Fix #1120
Fix text-only emails, add new layouts; Fix useHtml applied to all users (close #1121)
FilesList : revert previous changes on Focus DataModel : ignore setSelectedNodes() if no changes InfoPanel : loadRepositoryInfo
Do not over-summarize notifications in email digest. Fix #1123
Fix "recipient" in 6.4.0 update sql scripts
Materialize connexion loader
Replace icon-remove by mdi.mdi-close wherever possible
Create 6.4.0 script
---------------

Pydio 6.3.1 is a development release introducing many important new features! As its name implies, it is NOT production-ready yet. However, the more you help us testing and you report issues, the quicker we will be able to transform it into a stable 6.4.

Please use Github to submit issues, making as sure as possible to submit only issues linked to this new release : regression of existing features, or problems with the new ones. Enjoy!
It's also a good time to help on translations with the new strings! Thanks for all your contributions.

Installation is done via the "Development" update channel in-app. They will not be any Linux Packages released for that version.
Noticeable changes

Sharing Deeply Reworked:
Ability to now share files with other users (without creating necessarily a public link)
Ability to toggle the visibility of a share inside a common workspace, to let other users edit this share
Implementation of the Federated Sharing API to allow sharing files and folders accross Pydio instances, and with other software providers implementing this API (currently OwnCloud).
Rework of the share panel, with direct-click for copy, better expiration date visualisation, and many more
UI transitioning smoothly to Material Design and ReactJS: following our previous work on the Enterprise Distribution with Material Design guidelines, and listening to your feedback about the UI. Changes are subtle (no big reorganization), but interface should be really clearer.
Mails Digest : avoid receiving tons of emails when watching for a file or folder modification, and opt-in for an hourly/daily/weekly based digest instead.
CacheService mechanism : extension of our previous work with in-memory cache to support many types of key-value stores (apc, memcache, reddis, etc..). We are using the well-established Doctrine Cache component.
WebDAV access driver was entirely rewritten using Guzzle
Amazon S3 Access Driver: improved, we now support PHP-SDK v2 and v3. Hook to our Cache Service for better performances.
Known Issues

Again, it's a dev release. There are some limitations that you should be aware of.
Internet Explorer Limited support : IE11/Edge should go pretty well, others, mmm, not sure :-)
Detailed Changelog

Italian translation: fix relative date format
German translations: New translations for user and role administration
Catalan & spanish tranlations
Encoding change from ANSI to UTF-8 in en.php
Missing comma & bad encoding in en.php
Bad encoding in en.php (ANSI)
core.notifications templates ca&es translations
German translations: New translations for user and role administration [FIX] * Added missing keys to other languages (ecept en and de)
Czech translation - meta.svn plugin
access.dropbox plugin translation to Czech
access.imap plugin translation to Czech
access.sftp plugin translation to Czech
auth.basic_http plugin translation to Czech
auth.cmsms plugin translation to Czech
log.syslog plugin translation to Czech
log.text plugin translation to Czech
mailer.phpmailer-lite plugin translation to Czech
uploader.plupload plugin translation to Czech
mq.serial plugin translation to Czech
mq.sql plugin translation to Czech
Update cms bridges release note
Added CA and ES dropzone files in Uploader.html plugin
core.ajaxplorer translation repair in catalan language
Initial commit: Uses doctrine cache drivers as main caching system
Loaded core cache directly from bootstrap.json and moved bootstrap handling to CoreConfLoader - Fixes
Fixes after scrutinizr run
Fixing deleted htaccess files
Fixing typo
Added translations for Core cache
Removed default value for bootstrap.json cache
Removed unnecessary call to deferBuildingRegistry
Camel casing Doctrine Cache Driver
Fix pluginInstance
editor.browser i18 ca & es updates
core.ajaxplores ca language updates
meta.watch ca & es translations
editor.browser ca&es files author fix
action.disclaimer. spanish and catalan translation
Start refactoring ShareCenter class (cherry picked from commit 89491d4)
Fix issues in LegacyPubliclet
Fix missing repository
Fix error case / default template.
Add ability to force PathStyle on S3 driver - Do not use make Custom URL and Region parameters exclusive.
ForcePathStyle
(action.compression]add index action at the end of the extraction
[action.comopression] adding index action at the end of the extraction
action.share : fix in ca & es files
Make sure to include zip files when filtering node name in search results
Massive refactoring of ShareCenter to make it simpler. New methods to collect metadata from children (only with metastore.serial) and avoid breaking links on parent (or other user) rename.
Declare $shares variable before passing by reference.
ShareCenter : carry on massive refactoring
Docs & typing
Start refactoring createSharedMinisite() function
Split ShareCenter class again and again: new model ShareLink. Fix issue with metadata moving.
Split ShareCenter class again and again: new model ShareLink. Fix issue with metadata moving.
collectChildrenWithRepositoryMeta : return relativePath from base node, not absolute in workspace.
Store share visibility always in shared repo options, not in share object Make moveSharesFromMeta recursive
Adding core access functionality to simplify addition of new driver through Guzzle, and added new WebDAV driver
[access.s3] Adding SDKv3 compatibility
[access.s3] Adding SDK and API version in the plugin
[access.s3] Overwrite the s3 stream wrapper
[access.s3] Adding Pydio CacheService to s3 Cache interface
New class for loading React component inside standard Dialog.
Add react-autosuggest to core bundle.
Enrich user_list_authorized_users with alternative format (xml) and more info about the users.
ignore new react build folder
Move PydioForm & ReactPydio modules in gui.ajax
Final refactoring of action.share PHP part
do not load pydio-mui here - todo : find where to load
Move mui css files inside gui.ajax
Small dialog styling evolution to be more compatible with material design widgets.
New react-based share dialog
Fix user search engine
Add missing resources for compilation.
Load alerts: silently test if file exists.
Authentification -> Authentication for English
Fix various UI stuff in ShareDialog Add Clipboard module for copying to clipboard Fix hidden Field in AbstractAjxpUser
Fix cache.doctrine empty options.
Fix cache plugtitle french translation
Cross-copy action: pass Repository object to UserSelection()
Adding guzzle, reformatting the code and adding the documentation
Removing guzzle tests from the package
Fixes to SMB auth: - Registered stream is smbclient://, not smb:// - smbclient binary path could not be set for auth plugin
Fix default tpl name
Fix unshare when removing users and no public link active.
Little Charset Bug in index message
dir_closedir() has no return value
Fixes for upload and deletion
Mitigate update role request
Fix image magick preview on multiple page office file
Fix switch to default start repository after loggin in by CAS
Method updateRepository() on AJXP_Sabre_Node to set repo after authentication succeed.
Move ContentFilter filterings to AJXP_MetaStreamWrapper instead of UserSelection and fsAccessDriver.
New ocs access point to implement Open Cloud Specification. DAV implementation working on public links. Update htaccess accordingly.
Simple skeleton for an "Inbox" workspace displaying all shares received.
Fixes on S3 new implementation
Refactor core.ocs to use namespaces and composer autoload.
Allow string in classname attribute to use backslashes in namespaces.
Added layer between pydio and pydio.dav to handle auth
Model implementation using simpleStore for OCS
Create Server for /shares/ access point.
Use remoteId as RemoteShare id.
Client & Server stuff for OCS
Plugin Sharing and OCS together. Ultra-basic UI for tests.
Change Core Access Plugin and WebDAV Client to use Scheme Translator Wrapper layers
Style remote-users-add form
Added layer between pydio and pydio.dav to handle auth
Fixing duplicate function name
Fixing the Meta Stream Wrapper
Update styling
fixes stat result handling in case of empty files, according to docs stat should return -1 or text error message small optimizations for handling of alternative stat commands
Added context handling in Meta Stream Wrapper
Create CompositeShare object - Change json output format to handle 1 or N links.
Added OCSClient to interface with OCS API
Rework OCS Links
Fixing error
Fixing OCS Client
use documentName
Switch to documentName
Fix some stuff on OCS
Fix when no share is enabled
ConfService: add some includeHooks to contribute with repositories.
Add a virtual folder at the root of the webdav to make it API-consistent (both folders and files are accessed via /../dav/DocumentName) Store remoteShares by token, not remoteId Ping back on Dav access point when receiving a share.
Last update of Inbox driver Ping remote when receiving share.
Fix download right management on public link.
Fix clearing shares
New PydioUsersApi in Core to encapsulate users related requests New react-based UsersCompleter component, including user creation form.
Use generic UsersCompleter and remove from ShareDialog. Use core PydioUsersApi as well. New react-based PydioMailer.
Move css from action.share to PydioMailer
Finish wiring mailer. Handle no mailer and force Old school case.
Wire password strength checker on user creation form and share password form
Handle custom RW permissions for remote users.
Fix missing repo_label parameter
[access.s3]Changing require file name
Fix OCS Client with non empty base Path
Replace main share dialog
Massive i18n for new ShareDialog
Fix ocs with baseUri
Renaming
Renaming
Make webdav enabled by default Fix contentType detection and remote URL values for invitations.
Fix unshare Touch user role to trigger repo reload if user is logged. Fix reloadRolesIfRequired to make sure personalRole is in sync
[access.s3] Fix rename folder for SDK V3 and changing require file name
Migrate Info Panel modified from ShareCenter to ShareDialog
Do not list teams in usersOnly
Expose FEDERATED_SHARING_ENABLED setting Implement Readonly Mode on ShareDialog
Fix Exception Namespace - Close #1067
Move back the remote share /dav/ to root, do not create virtual folder anymore. For files, both the / and the /filename.ext send the same answer (stat of the file).
Change Invitation IDs from GUID to random Integers (requires one or more db calls). Fix #1065
Fix OCS unshare implementation
Disable Test File
Added caching of the Path Wrapper functionality and changed the hkey for the Stream Wrapper global caching
List Teams even if regexp is null and mandatory
Fix rights management : do not assign minisite-role for remote shares.
Implement accept / decline remote shares.
Another pass on inbox driver. Not sure it will be kept as is.
Adding OAuth Wrapper to the core access for Oauth2 authentification
Adding doctrine namespace key
First split of big css into smaller less files
Lessify
LESS : refactor / extract variables
Fixed timeout issue and added local caching to the path wrapper
Move old screen and xtree to less components
Update CSS - Change how we handle global_toolbar styling
Revert unnecessary commit
Smooth transition to material
Smooth transition to material
Add cssmin to package.json
Typo in package.json - Start fixing admin panel styles
Fix styling
Organize fonts - Add a subset of mdi. Will be enriched as needed. LeftNavigation: add user_create_repository action if present.
Fix fonts imports via less variable. Replace all share icons by new mdi-share-variant.
Actions, fonts, CSS ...
Rework Home Panel
Improve the user dashboard a bit.
Make the left nav panel open by default, closing after 3s
Css compil
Fix mdi icons font - fix top toolbar bg
Pass hasContentFilter info
Make LeftNavigation panel more generic
Use LeftNavigation component for Home page
Do not commit built form
Add build/ folder to ignore file
[core.mailer]Adding the grouped mail and the CRON
[core.mailer]Adding the user choice in the manifest
[core.mailer]Adding the mysql create file for the database
[core.mailer]Adding the postgreSQL create file for the database
[core.mailer]Adding the SQLite create file for the database
Fix splash style
Dashboard, home, login panels Hide tooltips on repo switch Special icon for Inbox workspace
Minsites: remove all inline style from manifest and put them in a dedicated stylesheet.
Various fixes on Share Dialog
Update website in email templates
Pass page_position parameter when opening search result in paginated context. Fix #1041
Check dibi::isConnected() whenever possible. Close #1043
Fix #1061
Missing resource in core.mailer
user_list_authorized_users : always send root node (ul).
Reset Download Counter
Fix videos in tutorial panel
Inbox and Share Notification in left menu
Adding hook to Repository loaded change
Fix to inbox and CacheService
Adding local status to the share notification panel
Observer repository_list_refreshed event
Stop Share Notification Dispatcher if noone is listening
Loading on load
Add two new properties on Repository object (repositoryType and accessStatus), publish them in the XML, parse them in the js model.
Change to the Left Navigation
Fix FilesList modifier
Rework Inbox Driver
Use the last_history pref to add a repository_last_connected timestamp and send it in repo list.
Last css compil
Inbox : replace left panel by a quick filter box
Left Panel icons
Count shared files access status
Fix repository_last_connected flag
Dialog box for remote shares
Replace alerts panel
Fix AjxpPane.parseComponentConfigs Typo in fsTemplatePart
Adding badge and overlay for the dialog
Handle empty message
Fix notifications actions in left panel
i18n inbox access driver
inbox: change buttons style
Adding inbox badge
Listening to repository refreshed on home page
IE tweaks
Adding modal on demand instead of inline
Fix installer style
[core.mailer]Adding separator in the create sql file
[core.mailer]Adding character set in the create sql file
Fix to not display the share notification twice
AjxpMailer now has SqlTableProvider interface.
For OwnCloud compat, make sure to always ping the root of webdav, not /DocumentName
i18n on core.ocs and access.inbox
Adding owner to the remote share alert box
Add inbox repository by default
AjxpMailer install tables only for core plugin

----
Pydio 6.2.2

Pydio Core 6.2.2 is another bugfix release providing compatibility fixes for non-standard plugins to the core. See complete changelog below.
Thanks to the following contributors for this release: cdujeu, c12simple, Isma91, floffel03, rbrdevs, DepaMarco, Ellega. Olivier Paroz, Stéphane Chadeyron.

[Noticeable changes]

Over-agressive caching could end up creating issues in IE when switching workspaces
Security: sanitization strengthen for potential XSS attacks.
Fix regression on "Remember Me" switch
Fix Video Player for FireFox
Joomla Bridge Compatibility (broken by last Joomla version).

[Detailed Changelog]

Update Italian translation for plugins: 'access.ajxp_conf', 'action.compression', 'action.share', 'core.ajaxplorer', 'core.notifications'
Take the active mailer plugin , not the first that comes
[core.mailer] Update the class which takes the active mailer plugin
[conf.sql / access.ajxp_user] Improve Team management.
Websocket: if there's an internal BIND address, it's most likely the address the php server will have to connect to. Added a Todo to handle REST auth.
Unserialization can fail on some systems, make sure to reload role if it's not an object after waking up object.
Fix SFTP username containing dash character (git issue #1014)
[gui.user] Fix display & i18n message
[gui.ajax] Create a "legacy" version of the bundle without ReactDND, and add fallbackCondition and fallbackFile in the js/css ressources to load alternative versions.
Make test on personalRole stronger if there is an error at deserialization time.
IE Caching policy is too agressive, we have to add some random ID to force reload sometime.
Renamed constructor for PHP7 compatibility
Update CLA URL
Handle repository with deleted parent. Should fix #1025
Typo in getRelatedNotifications() method (not used).
Update CONTRIBUTING.md
[core.notifications] fix getRelatedNotifications()
Fix #1019
Util function to get user label either from role directly or from user object.
Fixed recursive indexation issue with FTP workspaces.
Wrappers must declare isSeekable() to enable listing optimizations in fsAccessDriver.
Make sure not to load an indexed document if the meta.change event comes from a "delete" operation.
Enforce sanitization of user id when sending to error log.
Update window.MessageHash when changing i18n. Alternative fix #1021
Typo in rest parameter for role_update_right
Pass optional parameters to the node->load() method.
Pass optional cursor parameter to the logs. SQL logger can use it as a query limiter to only load data starting from a given id. Return cursor attribute in XML as well.
Use udevil to mount instead of sudo
Improve performance: caching ldap search result in class static variable
Improve notifications on shared resources - Separate Location from the notifications - Avoid empty label in Alerts feed.
Better catch of imagick call error.
Fix tmp folder for unoconv
Strip only left space on dirname - Fix #1023
Imagick: Parameters should follow convert command.
Fix rewind on SchemeTranslator wrapper - Prevent editing meta on non-writeable resource.
[auth.remote] Make sure to keep the initial session.save_handler - Fix Joomla connector.
Joomla plugin: make sure to switch back to previous session, as the session content is saved in register_shutdown_handler.
Compute locationType when setting node, so that it can be serialized/unserialized
Do not cache Sharing configs - Fix #1013
Make sure to use === when comparing to constants, or repo 0 can be considered as repo_scope_all. Enable kvcaching in non-rest controller.
[ShareCenter] Fix unshare workspaces from My Account zone - Fix readonly mode not being switched correctly in some case.
Registry Cache Key : repo can be null.
Fix Exif metadata display in InfoPanel when no GPS parameter is defined in the plugin or no GPS data is present in photo.
Fix regression on contextual menu content and default item display.
Fix regression on "Remember Me" feature.
Replace pydio.getController().parseXmlMessage() by PydioApi.getClient().parseXmlMessage. Same for triggerDownload() moved as static method on PydioApi.
Fix Eml Attachment Download.
Replace all Controller.parseXmlMessage calls by PydioApi.getClient().parseXmlMessage in manifests.
Replace ' by " to avoid label truncating on users/teams listing. Better sanitization and error catching on Team creation.
Prevent editor.browser to open SVG files directly, always force as attachment.
Pass the $url to isSeekable(), allowing to return different value depending on the path (=> return false for Zip files in fsAccessWrapper, or it's messed up when browsing zip subfolders).
Declare restParams on compress in action.powerfs, otherwise API is not working for this action when plugin is active.
Fix ChangesTracker for filter + mask management. Fix indexation issue when copying folders.
Specific fix for video player for Firefox
Update sdk generator: do not skip already parsed actions.
* Setup wizard can now be translated completely * Added german translations for setup wizard
Fix display quota on FreeBSD
Fix file/folder message on move. Close and replace PR #1000 ($dirRes is never set in that case)
Update .travis.yml
Updated ca/es files
PHP7 Constructors fixes
PHP7 Constructor fixes
Missing Comma in ca.php
Add Travis Badge
Fix #1010 Zip Browsing on Windows Server
Add new parameter for signature - Add Frankfurt & Seoul Regions. Close #846
Fix log grouping Fix Copy Selection action
Fix google shortner api key - Close #1030
Make sure to not return an empty value.
Fix some specific zip extraction case on Windows Server.
Fix multimode value : check instance_name OR group_switch_value
Fix MacOS Yosemite / El Capitan Detection
Fix italian "Invite" button: missing translation strings.
HTML Base Tag is not correctly applied in IE10 when dynamically inserting "link". Add an data-hrefRebase tag to be processed (prepending the base) on ie10 only.
Close session when sending binary files. Could create a race condition with tryLogUserFromCookie.

--------------------------
Pydio Core 6.2.1 is a bugfix release providing compatibility fixes for non-standard plugins to the core. See complete changelog below.

Some servers do not return the "." value, send a fake stat in that case by grabing the stat from AJXP_DATA_PATH.
Fix tab char in sql script
[action.disclaimer] Make sure to invalidateLoadedRepositories() after updating the lock value.
[access.fs] Fix is_readable call for folders inside API. Fix #988
try catch every single file when we extract an archive
Update website
Update README.md
[meta.syncable] Fix a wrong flatten case when deleting/restoring to/from the recycle bin.
Fix shortcuts disabling on SearchEngine. Fix #994
Fix Root Group management issues.
Change DefaultRights management: update Root Group, do not update personal roles anymore, otherwise it always takes precedency on parent groups/roles. Do not skip the AJXP_CLEAR_VALUE, set to the merged role.
Fix display in search engine leaving the group headers on empty result.
Observable: make a copy of observers otherwise if there are many observeOnce ones they are not correctly applied.
Typo in EmptyNodeProvider Fix user history and ?goTo= mechanism. If skip_user_history is fale, use goTo, otherwise use URL directly.
User dashboard, switch action bars to dataModelElementId instead of global events.
Admin Panel: to not list Templates in group/roles ACL - Fix Legacy shares listing not properly filtered.
Core.* plugins should be appended at the beginning of active lists. Fix compatibility of remote logout with 6.2.X : add a forbidOverride attribute to block further merge in registry, otherwise session_login logout action will always take precedency.
Fix load binary
Make too short string smaller in french
Add include Hook for to load and update user info
Fix update template label
Pass a scope string or a repository object to getFilteredOption() to test on the AJXP_REPO_SCOPE_SHARED scope if necessary.
Fix typo in ENABLE_FOLDER_SHARING value testing Fix check for USER_SHARED_USERS_LIMIT on mergedRole instead of personalRole
Update getFilteredOption signature
Unused images - Fix #1001
Glob can return false on error, we should check before running a foreach.
[action.share] Reset max download and max expiration time Fix #1004
Fix CAS button in login interface in 6.2
Add method groupExists() instead of using listChildrenGroups() as it can create a recursivity in auth.ldap.
Add method groupExists() implement in serial and sql confdriver
Fix loop in creation of groupPath
[editor.pdfjs] Fix for IE when Pydio is inside an iFrame.
[auth] When guest is enabled, make sure to invalidateLoadedRepositories() at login time, otherwise they are already in the session. Fix #1002
[gui.ajax] FilesList: add bulkUpdating mode to avoid triggering initRows() on each child_added event.
[gui.ajax] Always limit search engine to 100 results by default, use bulkUpdating when parsing results, and display the total count plus a "show all" link.
[index.lucene] Send a tag in results if limit is set and number of hits is cut.
Compiled version of css
[editor.pdfjs] Add fake file name parameter to the file url passed to pdfjs, to have a correct info in the pdfjs properties viewer.
[phpversion test] Update php version to 5.4.
[gui.ajax] InfoPanel : display node label instead of basename if set.
Revert previous core plugins reordering issues
Fix actions disabling merging
[core.ajaxplorer] Update default WEBDAV_BASEURI as it was still /ajaxplorer/share.
[meta.git] Remove dependency to meta.svn plugin
[css] Fix contrast on history browser
[action.scheduler] Create simple react dashboard for enterprise admin panel. Just trigger same ol' actions.
[utils] getWorkspaceShortcutUrl use "?goto=" or "/ws-" depending on the skip_user_history status.
[AuthService] Avoid error if trying to execute tryToLogUser(). Log to error though. [authfront.webftp] Fix login form not closing after successfull login.
[ConfService] Use a dedicated UserAlertException to send back OAuth message and avoid removing temporary failing workspace from the list. Use it in access.dropbox driver.
Update package.json versions
[action.updater] Point to new update site
[access.ajxp_conf] Fix strange horizontal scrolling

-------------------


[Summary]

Pydio 6.2.0 brings massive performance improvements, many bug fixes from previous version, and a couple of new features:
 * Performances: we gained an average 5 times in performance on every request. Using optional in-memory KeyValue Caching adds a tremendous improvement for Rest calls (sync).
 * Tar gz / bz2 support: creation and extraction of archives
 * Web UI: Better mobile support. Under the hood, we started migrating our whole JS platform from legacy libraries to Ecma Script 6. We now use Grunt tasks to compile/minify the JS
 * Packaging: Rework of our Linux packages from ground up, splitting plugins into separate packages, with packaging best-practice in mind.
 * PHP7-Ready: we chased language issues that could compatibility problems with PHP7.
 * And many many bug fixed on all parts of the application, see Changelog below.

Contributors: cdujeu, svetlemodry, rimckenney, c12simple, Isma91, leobouilloux, huzergackl, DepaMarco, ecappa, sespivak, Uggy, sim1st. Thanks to all for making this happen!

[Upgrade notes: please read]

. This new version now requires a php version greater or equal to 5.4. We also dropped support for IE7. Yes we did. Make sure that you meet these requirements before upgrading!
. If you are using the meta.mount plugin, we removed entirely the "sudo" options for security reasons. If you were relying on that, you will have to hack-it-yourself.
. The ROOT_ROLE was replaced by a "Root Group" role concept: a role corresponding to the root of all groups, and as such applied automatically to every users.

For archive deployments, upgrade should be straightforward, but for Linux make sure to check our online How-To.

[Detailed Change Log]

Massive refactoring of AjaXplorer class into various subclasses (Registry & PydioUI).
Reduce global scope pollution. Fix some destroy implementations missing the cache destruction.
Massive JS refactoring: Core is now Prototype-independant, fully ECMASCRIPT6, transpiled by Babel. Many refactoring to decouple core Model from UI. Basic tests with WebComponents.
New resources for ES6 support.
Fix group listing for shared users when inside a group
Enable API for load_shared_element_data
Re-adapt CartManager to new API
Track ajxpNode.getChildren() usage for new api (Map instead of Hash)
Missing compat file
server_message "require_registry_reload"
More JS modules async loading to avoid loading scripts when they are not necessary
IE 9 & 10 Tweaks. Not working on IE8 Add JS modules dependencies.
Test file to be used with WebComponents
IE8 Support: - TODO: For the moment, disable the protolegacy stuff (drop IE7 support)? - TODO: Add es5 shim & es5 sham. To be detected based on user agent? - Strict usage of window.console, not just console.
Break is unreachable code.
Move loadActionsFromRegistry()
Set forceReload default value
Remove unnecessary images. Fix global variables Remove global delete calls - Normalize prototype class constructions Remove with calls
Avoid unnecessary resources on minisite
UserDashboard: do not load images as iframe.
Use flexbox instead of JS height computing when possible Buffer infopanel update to avoid blinking Optimize display. Avoid multiple $$ calls, avoid updating tree node label/icon if not necessary Defer AjxpDroppables initialization during tree rendering Remove resize listener on window for Scrollbar Still todo: recheck all editors
Split scripts into boot, core and ui. Currently boot is compiled old fashioned way, core is compressed & mangled, ui is compressed only.
Load repositories with a unique query instead of many small queries
Performances: store loaded repositories in session
Performance: user queriesCache for exposed properties list
LangUtils : deepCopy/merge objects, forceJSON array to object.
es6: fix Registry Loading
es6: try using GET and pass a ws_id paramter to use http caching on repository
es6: simple support for web components
Connexion: switch all requests to post by default. Api: put support for file upload / download directly inside api, implement upload inside Connexion
FilesList: use display flex instead of bloc if element has vertical_fit className
Simple React component wrapper inside existing UI.
Prefix all flexbox stuff
Index.php : read tmp_repository_id variable from get or post.
User Dashboard CSS: remove home_account_pane reference
JS Core: es6 transpiled version
Sql Log Driver: server many queries at once.
New parameter frequency on analytics queries
[ajxp_conf] Add some info in the various responses. Add limit & offset parameters on recursiveSearch New method filterFormElementsFromMeta to post data in a different format that standard form parameters. Delete action: grab parameter from window.actionArguments object
PydioApi: handle discrete setting FetchedResultPane: update jsdoc
Insert bundle.js in gui_debug.html
Add new methods to LangUtils
Admin: make main menu builder more modular
Handle Alias in config menus
ShareCenter: Fix authorization checking for various share types. Make sure to register the REQUIRES_INDEXATION flag on syncable shared workspaces to trigger indexation at first changes API call.
UserMetaManager: check metadata is not empty.
Add a MAIL_ENCODING parameter in the phpmailer plugin to eventually switch to 7bit for old Exchange+Outlook configs.
Reload_registry message: make sure to trigger only if required. This can end up in a loop. LangUtils new method for arrayWithout()
index.php test SDK: remove webcomponent reference
Reload_registry message: make sure to trigger only if required. This can end up in a loop.
React Implementation of UserDashboardHome
Adapt share action to window.actionArguments passing
New AjxpReactComponent in _ui list
All necessary exports
React Implementation of UserDashboardHome
Fixed minor layout problems in share dialog: * space for labels in editable_users_header was too small * editable_users_header was moved to left because of the toggle arrow
Imporved german translations of sharing function and added missing keys to all files
Make sure to use
Manifests: make sure to replace keywords not only on label.
Detect Pydio native apps by user-agent. New function renderSimpleListAsNodes Fix updateDefaultRights (from master)
New hook sec.access_ws
Reset content_filter option when saving repository
Avoid using class_exists() in relativeDate, it's too costly for perfs.
Group fields differently
Update client_unregister & client_consume channel actions
Optional parameter on list repositories to get only a specific template children. Editing template: unchecking boxes is broken, make sure to remove not used options from existing repo.
Use applyIncludeHook instead of applyHook otherwise it messed up registry loading.
fseek: $whence parameter is not properly passed to underlying stream. S3 driver: override appendUploadedData() function as the streamWrapper does not support "a+" mode.
Weird cases using ; instead of :
Isolate WelcomeComponents scope
We should get rid of sendSync() wherever possible.
rename folder
Remove modernizr & ajxp_utils from booter. Compile bundle into pydio.min.js
Last compile
Fix IE issues.
Update package
Use correct version of material-ui lib
New interface SqlTableProvider and use it for first install Detect session handler via conf Rest.php: there should be no reason to start the session here (to recheck)
Add info inside log table
Check that class is properly created (could be ignored if php 5.3)
Call session_write_close to speed up the queries processing
Create a pool of callbacks if a file is loaded many times at the same instant, otherwise it may reload the file from cache.
Fix remoteNodeProvider: empty response could end up in the node staying in _loading mode.
Do not disable session for the moment inside rest. We should instead set up a $useSession flag on ConfService similarly to AuthService - TODO
Add a $useSession parameter to ConfService and use in rest.php
Notification: optimize queries for userExists() calls
Repository: avoid error on parentTemplateObject type
PluginsService & Plugin Optimizations: -> Optimize requires file -> Load class only if plugin is enabled -> Lazily unserialize XML manifest -> Cache some xpath query results
New KeyValueCache, following Doctrine/cache interface, we should embed this lib. Currently only supporting APC. Cache plugins_registry always and full xml_registry for rest case only.
Expand clear_plugins_cache action to empty KVCache and eventually opcache as well.
Disable many unnecessary plugins by default, avoiding to load them if not really usefull.
Use $this->getXPath() instead of direct access to $this->xPath as the manifestXML may have to be loaded lazily.
Disable many unnecessary plugins by default, avoiding to load them if not really usefull.
Reduce DB query number for loading repository Log driver: get repository ID from context, avoid to trigger another db call.
Fix es6 (using Map instead of Hash)
Refactor getFilteredXMLRegistry() function Refactor clearAllCaches() function
Remove actions property from AJXP_Plugin, it's useless.
Second call of initActivePlugins() in rest.php seems useless. Commented, to recheck.
Properly invalidate KV cache when updating user / group / role / workspace
Re-enable auth.serial & conf.serial for startup
Remove @internal phpdoc key
Enable updateAdminRights() for the moment. TODO: we should find a way to pass through that only when required.
Add constant to ignore KVCache
Add $admin parameter to the countUsersForRepository function.
Add iconClass and description_template to drivers client_settings XML tag.
Edit meta_sources as bulk data
modified: ca.php modified: cs.php modified: da.php modified: de.php modified: en.php modified: es.php modified: et.php modified: eus.php modified: fi.php modified: gr.php modified: he.php modified: hu.php modified: it.php modified: ja.php modified: kr.php modified: nl.php modified: no.php modified: pl.php modified: pt-br.php modified: pt.php modified: ru.php modified: si.php modified: sv.php modified: tr.php modified: zh-tw.php modified: zh.php
Optional option "iconClass" for userWidget
Remove timer on router
Pass driver label in workspaces list.
Handle remote sorting when trying to guess the page position.
Sync ldap group membership, filter groups from group DN
Documentation authfront.cas
Send PLUGINS_SCOPE to roles and users as well. Add new filters user / repository_id to the sql log queries.
New function usersLastConnection on sqlLogger. New sub_action users_bulk_update_roles to avoid multiple query
Use multiple selector external module New function LangUtils.objectValues() to replace Object.values()
Typo in new code
Fix diagram axis redraw by pointing to a specific git repo instead of official release. To be changed when PR is merged and released.
Fix plugins values instance_name missing parameter.
Reorganize ldap parameters
Remove template workspace from the list
Send query metadata
PrototypeJS: do not override bind method if already native version.
Parameters grouping and defaults
Fix #955 - Clear selection on blur was breaking actions in user dashboard.
Fix #958 - Reset Password is broken due to URL rewriting when guest user is enabled.
Force string comparison for md5 checks (not used most of the cases) Exclude other tags from xss detection
Fix issues in git-log when spaces in folder path.
Update pdfjs to last version - Close #939
Remove all touch events management, simply disable scroller replacement when on mobile context. Should fix scrolling and button issues on mobile.
Bug video reading issue with the http range Should fix #954
fix settings/leftpanel in vision theme
Add react-dnd to resources
Add indexes on log table
Set the disclaimer validation in a group
Replace ROOT_ROLE concept by AJXP_GRP_/ : applied to the root of the groups. Add support for groups reordering Fix an old bug where a role could be ordered before the group tree.
Save the roles ordering
Pass sticky info
Update default_avatar image Use no_templates & templates_only attributes to identify the scope
Replace ROOT_ROLE by AJXP_GRP_/
Massive refactoring introducing a MetaWrapper to avoid encapsulate all nodes url in the pydio:// form. Wrappers specifics (getRealFSReference, getLastRealSize, isRemote, etc...) have been encapsulated as well and should not be called directly anymore. The MetaWrapper can register many subwrappers, once they are all used it will then translate the url to ajxp.XX SchemeTranslatorWrapper is an extendable wrapper simply translating URL to the next available wrapper from the MetaWrapper. Maybe could be simplified.
New unit tests
Fix #952 better logging Fix issue creating a group with same id is not checked Fix #937 Check that file is readable otherwise we cannot compute md5 on it.
Fix issue with .zip.zip extension #953
Fix slug issue - Close #938
Better way to detect mount status
Fix 5.4 syntax Remove creation of .ajxp_mount as it's not need since previous commit.
Keep up-to-date with develop
Grab last changes from MetaStreamWrapper branch
Fix Meta.user error after refactoring
Add Test Unit on Permission Mask
Change permission value
Delete function mergetree2
Fix available permission restriction
Add more assertions
permission
Implements JsonSerializable() : warning this is PHP5.4 ONLY! Fix setDeny()
Fix overrideMethod Init from array with "read", "write", .. object. Implements JsonSerializable, php5.4 ONLY.
Store masks in roles.
Manage masks
Updated ajaxplorer_boot
Do not load a repository that has a parentId pointing to a non-existing repo. Log an error instead. Do not store reference to this->parentTemplateObject, it can end up storing a null reference in the $_SESSION array.
Fix recursive listing broken by defaultOrderField mechanism.
Fix SchemeTranslatorWrapper. Store url instead of path when reading dir.
Fix PermissionMask & checks
Invoke is_readable() at some places to dynamically compute permissions
New method appendMetaWrapper
rmdir was broken due to wrapper
fix preview with unoconv of files with russian names
remove some tests
Fix max overriding order issue Send repo security scope to UI.
Fix typo in write2 function that was preventing correct Log In logging for WebUI.
Allow editing permission mask for non-editable workspace Tweak how we display Root Group role When editing a group, compute a "Parent Role" based on the parent groups
Use classnames module
Revert ajxp_home to non-react implementation Declare build and load React bundle separately, to avoid any compatibility issues with older browsers.
Root group role: do not show "ROLE_..." parameters, even if they have scope "Role".
Wrong call to React library
Fix AjxpTabulator layout when using Flexbox Add Roboto fontface.
Fix vision & umbra theme to make them barely usable. Remove oxygen.
Call isWriteable() on the root node as well, to send correct ajxp_readonly value.
Missing reloadOnServerMessage on shares list
Fix flex issues for minisites
fix smb streamwrapper name conflict
Never call the delete method of a Map directly, for backward IE compatibility.
i18n update
Fix splitter sizing, node insertion on descending sorting mode, remove unused variables Last booter compiler
Fix startup.phtml : prototypejs moved. Booter: make set DB conf by default.
Send also info about the workspaces shared with current user. Fix shares list issue - Ability for admin to list shares of a given user.
Fix typo in JSON breaking the right info panel initial size.
Implement Serializable on permission mask.
Home Dashboard: listen to repository_list_refreshed event and reload the list.
Remove the method call from the foreach() loop.
Fix selectAll() action in GUI - was breaking the recycle bin empty action.
Fix new Image() usage with prototype methods.
Fix RepositorySelect
Pass optional nodePathes on instant message to be later on filtered in channel.
Add many is_readable() checks wherever we send data. Add the logged user id as target for reload_bookmarks and reload_shared_elements messages, otherwise they trigger reload on other users MsObserver: ignore refresh if no repoId change. NotificationLoader: fix comma typo
Filter Changes, Feed and fork mask on shared folders.
!!TODO: Update PG & SQLITE tables and drivers. Add last_updated flag on ROLES, allowing the detection to reload a user repositories list inside a running session. Use AuthService::$bufferedMessage to attach an instant message to be sent once the mq plugin is initialized.
Commit bootstrap_context with KVCACHE_IGNORE by default.
Ignore kv cache
Auto-switch graph frequency to avoid super-heavy graphs.
Create wizard breadcrumb.
Add a "wizard mode" in FormManager for installer dialog. Rewrok the whole boot.conf installer with that.
Add optional "depends" attribute on js ressource.
Update prototypeJS to 1.7.3 - We should remove the legacy version.
Boot.conf generates a simple server uuid that can be used for various identifier (kvcache should use it)
Load JSON polyfill for IE7
New compression plugin to support TAR, TAR.GZ and TAR.BZ2 archive format
Fix "Pixlr" plugin because they switch to "https"
Revert the second call to initActivePlugins() in rest.php, as it can break some additional plugins loading after loading driver.
Fix share action in rest mode : share worked but metadata was not correctly updated.
Refactorize method(s) loadDriverRepository()
Send back the updated role to make sure the update() was working.
Update i18n messages in action.updater
writeRepositoriesData: remove unnecessary code Definitely skip the admin rights check, just give the access to ajxp_conf
Update restParameters and use UserSelection instead of 'file' variable in ShareCenter.
Remove skip_admin_rights parameter
Update grid-layout Update compression to new naming (pydio.Controller instead of pydio.actionBar)
Update manifest.xml
Fix soundManager load : do not check for registry.
Imap wrapper: fix stat to make sure it responds correctly to the is_readable test.
EmlViewer: remove unnecessary autoload
Fix parseUrl() to detect pydio:// instead of ajxp.xx://
Do no use flexbox on dialog content
Point to new MetaStreamWrapper Fix mobile flex issues
Massive clean: remove IE7 specific resources plus unused classes or archived classes.
Change check frequencies to 5s, replace "[]" to "array()" to avoid any problems later
Fix is_readable() call to root.
Fix long workspace names
Fix double share button.
Fix super long workspace names: limit to 3 letters for badge, fix CSS to adjust display.
Update gitignore
Adding Grunt task to compile core UI in gui.ajax
Replace the ["extension"] to "PATHINFO_EXTENSION" and change the progress number to whole number
Remove compiled resources. Update move dependencies at top level of gui.ajax.
Ignore specific resources
Updating Gruntfile.js
Add a check if he user try to compress an empty folder to avoid some problems...
Updating Gruntfile.js
Update package.json
Updating Gruntfile.js
Move grunt to devDependencies
Remove compiled files
Ignore core
AJXP_KEY_VALUE_CACHE
Mega-merge from deprototype branch
Double declaration
Fix lucene indexation when copying files accross workspaces.
Fix tag block removal
Add meta watcher by default in access fs
Fix various details on Share Center: display "view parameters" instead of "change parameters" if panel is in readonly mode. Disable some actions if in ajxp_* workspace.
Disable kvcaching by default.
Fix some flexbox issues in IE
Fix IE horizontal scroller in FetchedResultPane
Fix wrong shares list for workspace with id 0 : do not use empty().
Update Italian translation for plugin 'access.ajxp_conf'
Update Italian translation for plugin 'access.ajxp_home'
Update Italian translation for plugin 'access.ajxp_shared'
Update Italian translation for plugin 'access.ajxp_user'
Italian translation for plugin 'action.antivirus'
Update Italian translation for plugin 'action.cart'
Italian translation for plugin 'action.compression'
Fix smbclient error if filename contents '#'
Translate "Root Group"
Fix tests syntax: use __construct(), remove strange semi-colomn after class creation.
Use __construct instead of AbstractTest constructor
Use __construct instead of AbstractTest constructor
Light revamping of diagnostic tool.
Add dirname and filename in log table to be able to filter on these. Pass a "files" array to the log method when possible.
Fork materialUI and create our own branch as we are using Less framework. Update grunt file to build materialUI before bundling.
Publish permission mask as json.
Inform that a workspace does have a permission mask.
Code Inspection
Update README.md
Error when removing user from share if the workspace does not have meta.watch.
Narrow-down textarea selector for submitting comment, otherwise it takes the wrong one (typically if file/folder is shared).
Fix some notifications issues with shared users.
Fix login dialog positioning.
Pass isHidden to createUser function and send to the hook as well.
Add a small opacity animation on info panel async blocs to avoid heavy blinking.
PhpDocs
Revert specificy parameter type as it creates false negative documentation bug.
Replace run build by babel to avoid dependency to jsx
Add JS compilation step to the build
Test an upgrade with new dev version 6.1.0
6.1.0 Release Note
Typo in column name Force updating gui.ajax if any modification detected
rootGroup can be empty
Update sql scripts for pg and sqlite, and build script to make sure to include them correctly.
Fix with pgsql file
pg and sqlite sql updates
Fix postgre issues with new fields / indexes.
Fix mergeNodes: use cloneNode() to avoid reference mess up.
Fix BackgroundTaskManager initialisation, and make sure to read the node_diff message.
Tar/gz/bz2 Support : refactor compress action into compress (server) and compress_ui (client): override the latest with the new plugin action.
Fix 404 error on "plugins" image.
Fix message id in span
Some exception can break the search results listing. Catch it.
RepositoryFilter is wrong in alert feed if repo is 0
Fix opener positioning
Try to skip HTACCESS step : if AJXP_PACKAGING is not zip ( = linux packages ), or if content of the htaccess is already correct.
Settings and welcome were switched. Put them in the right order to fit with dist .htaccess
Forgotten console.log
Chasing Strict Standard issues
Limit Extract action to tar, gz and bz2 files
Refactor the awful JS code for triggering download in a PydioApi.downloadSelection() method.
Add the filename*= header for IE, based on mwehr suggestion. To be tested extensively.
Fix js errors in comments and info panel detection. Add bootstrap.json to the list of files hidden by default.
Fix php parsing error in hu.php. Probably fix #930
forgotten var_dump
Unused variable
Remove var_dump instruction
Revert the filename*= commit. Definitely not working on IE.
Fix #931
Fix de language file - Close #933
Fix EXIF extractor output for XML, and add a format parameter to ask for JSON instead.
Go through unnecessary todos.
Add more check on user before modifying a share.
Refactor minsite_session and download management.
Fix "discrete" parameter passing. Fix small Open Layer map not showing when panel is hidden.
Fix setting/unsetting watch on shared folder. Fix notification grouping in alert feed.
Disable logo click is use is not authorized to switch to the associated workspace ( mostly ajxp_home ).
Refix IE Overflow
Fix metadata breaking json when no searchable is set. Fix #973
Skip updating embed_code if link is expired (error). Rewrite getFlashVersion() function (removed from Controller) in ajxp_utils.
Avoid error trying to load binary without any user logged - See #946
Make sure to filter search results with access driver hidden configurations.
Missing translation for desktop notification button.
Add a new parameter for low-resolution background image, and trigger it if viewport width is smaller than 600px ( => mobile )
Fix FoldersTree config for smb driver
Fix wrong date in search results
Fix branding styling on legacy links.
Make sure to pass a variable as reference
Add english message to the 17th message of the plugin
Add french message to the 17th message of the plugin
Add english message to the 17th message of the plugin
French typo
Change : Now we catch error by sending them to the progress file
Plugin doc of action.compression
Save share after updating watch status for folder sharing
Append optional bootstrap instructions by scanning once (and caching result) the plugins folders looking for bootstrap.php files.
Catching some error in the extract part
Same as previous but for defining / overriding default repositories
Silently try to write the two new cache files, to avoid errors if data folder is not yet writeable (first screen).
Overriding CSS properties in ajxp-mobile.css to improve the navigation
Adding >script< at line 819 to fix JS not interpreted
Set a manager on git actions
Update of widget_sample, contributed by Ecappa
Whitespace breaks git log : do not use --follow option in that case (will not follow renaming).
Check $ctxId is not 0 (considered empty)
Clean Code Deprecated Constructors
Make sure to not throw errors if data/ is not writeable, or it breaks the starting script.
Wrong test for write permission
Do not display RootGroup for groupAdmins
Modularize installer functions.
Update : the message to display the progress of the exraction is compression.13 not compression.12
Turkish translate of the name and the description of the plugin
Turkish translate of the different messages of the plugin
Refactor Installer
Fix special characters in file name #
Remove oxygen in selector.
Detect El Capitan
Fix imagick generate office files
Fix call to filterNodeName(): pass an "" parameter will trigger the is_file() test.
Fix Favicon for WebDAV, was still using the old one.
Although not active by default and properly documented, we remove the sudo option, it's giving too much power to the server. See discussion in #972
missing "," character in couple of en.php files - this one is related to my previously submitted PR https://github.com/pydio/pydio-core/pull/851
uploader.html Czech translation updated continuing as per the previous PRs opened under https://github.com/pydio/pydio-core/pull/843
uploader.html cs-dropzone png picture created manually in Gimp as similar as possible to the other one's available
Recapitalize result keys for PostgreSQL
Display a small how-to when upgrade is not possible in-app (because of linux packages).
In SERVER_DEBUG mode, try to detect if a DB version is necessary, and log it both in the Pydio logs and generic error_log.
Reorganize some gui.ajax parameters
editor.pdfjs Czech translation
core.uploader Czech translation
Remove react-tap-event, loaded by material-ui
Add support for authenticated upgrade site.
Set package name in an external variable.
Action.compression: fix name stripping on file / folder
meta.simple_lock Czech translation created
meta.git Czech translation created
gui.user Czech translation
Fix encoding issue, especially on Windows: - Parameters passed via url in rest api gets mangled because of urldecode(), make sure to re-apply toUTF8() - Once decoded, we must make sure to apply the correct encoding before inserting / searching the DB.
Add composer.json to install OpenStack SDK at last good commit before the project was declared EOL.
Add some checks - Do not display plugins that are disabled.
action.powerfs Czech translation
action.avatar Czech translation
access.demo Czech translation
Make sure to use a default value on mandatory group_switch field.
Rename test scripts from 6.1.0 to 6.2.0 Update 6.2.0.php to re-enable plugins by default to avoid issues.

-------------------

Pydio 6.0.8 - Security Update & Bug Fixes

[06.26.2015] Pydio 6.0.8 is another security update fixing XSS vulnerabilities discovered by Lane Thames and William Sörderberg.
It also fixes various issues with indexation, sorting, and reverts some changes from previous version.
Upgrade is straightforward and recommended, either in-app (archive deployments) or via Linux repositories (apt-get / yum).

Contributors: cdujeu, Lane Thames, William Sörderberg, c12simple, DepaMarco, FireFoxIXI, Sandoracs

Minor update of german translation (mainly to unify the strings)
Small fixes for the german translation of access.ajxp_conf
Add LDAP support.
Italian translation for plugin 'meta.monitor_fs', 'mq.serial','mq.sql' and FIXED English one
Italian translation for plugin 'shorten.bitly', 'shorten.multi', 'uploader.flex', 'uploader.html', 'uploader.http'
Add delete button on minisite
Fix meta.mount fs on 6.0.7
Reload_registry message: make sure to trigger only if required. This can end up in a loop.
Mysql: Tablename may create an error when getting size and count
Added minor tweaks for getting the S3 driver working with EMC ViPR
Add new DIRNAME mode for sanitization, same as filenames except that it lets the / pass through. Use strpos() instead of deprecated ereg() function.
Should fix #912 (alert on watch broken in some cases)
Fix #919 - Disable right click in FetchedResultPane
Tweaks to support "dot" character in custom links handle - Fix #905
ShareCenter: Fix authorization checking for various share types. Make sure to register the REQUIRES_INDEXATION flag on syncable shared workspaces to trigger indexation at first changes API call (should fix #913)
UserMetaManager: check metadata is not empty. (cherry picked from commit ac99bf4)
Add a MAIL_ENCODING parameter in the phpmailer plugin to eventually switch to 7bit for old Exchange+Outlook configs. (cherry picked from commit 98eebeb)
Perf: load repositories with a unique query instead of many small queries (cherry picked from commit c955991)
Slight doc issue
Italian translation for plugin 'uploader.jumploader'
Italian translation for plugin 'uploader.plupload'
Updated Italian translation for plugin 'core.ajaxplorer'
Hide Native App download panel on Windows Phone
Fix minisite login background by loading configs via JS.
Clean listing code for sorting, get page_position on demand when listing unique file, fixes search results not going to correct page when pagination is on.
Antivirus: make sure to do nothing when node is a folder, do not scan it!
Repository Creation Time was overriden by parent repo when created for sharing.
Fix 2G limitation on windows in many places ( do not use filesize directly )
Repository securityScope() : check the CONTAINER option if it exists for object-based drivers.
Fix auto update via proxy
revert cef1688f1e38830badefa1d147b48400cd09d7f2
Add a default sorting field and direction for server sorting. Set this params via the filesystem mixin instead of access.fs only.
Fix SearchEngine template configuration issue on various remote drivers.
Catch an OpenLayer error.
Fix and improve various sorting aspects. Deselect everything on blur in search engine and fetchedresultpane, otherwise further click on the same item does nothing.
Catch Zip decompression errors.
Fix workspaces securityScope() for templates that predefine a Path (or Container) value.
Make sure to not propagate a share event to a workspace parent if it's a template.


--------------------
Pydio 6.0.7

Security Update

Pydio 6.0.7 is a Security Update linked to vulnerabilities discovered by Lane Thames. It also fixes various small bugs.
Upgrade is straightforward and recommended, either in-app (archive deployments) or via Linux repositories (apt-get / yum).
Contributors: Cdujeu, Lane Thames, C12simple.
SMB Auth: include domain name to user name
Get list of repository automatically
Massive refactoring of ElasticSearch plugin. Keyword search and indexed fields is working.
AuthService test userExist and create new
Add new parameter in ShareCenter to force password on public links.
InfoPanel: catch modifier evaluation error - CSS: hack transparent backgrounds for IE8 using \9 symbol.
Correct smb path string
ShareCenter : fix link pointing to a non-existing repository
ShareCenter.js: forgotten console calls
ShareCenter: Catch exceptions when forwarding changes, otherwise it stops the loop.
AjxpUtils::convertBytes : handle comma - Ajxp_VarsFilter::filter : pass an object or an id as resolve user
Major update of ElasticSearch implementation / Refactor some method to common parent with Lucene.
Check userExist to create new user for new sharing
Add a new dependency type phpExtension to avoid loading plugin that have a strong dependency to one or more php extensions.
Remove (beta) from sync clients buttons
ShareCenter: Fix "Preview" checkbox being automagically rechecked. Check template is not ajxp_unique_dl.
Start refactoring major JS resources. Split into subfolders.
Display admin Search Results with USER_DISPLAY_NAME
Webdav error on smb workspace
Shared user watch is not correctly removed when user is removed from "Share with..." list.
Improve sanitization in Mysql driver and locally in XHRUploader.
Limit API connection "Login" logs to one per hour, otherwise it fills the log table, and makes the analytics quite slow.
Better commands sanitization to limit admin rights.
Fix text logger: was broken due to the clone call on object: refresh the fileHandle resource on clone.
Fix group listing for shared users when inside a group (cherry picked from commit a9fdc8c)
Ability to use multiple secure_token in one session, to avoid force reload on new tab. Notify existing windows with <require_registry_reload>.
IE8 Fixes - Fix #899 : remove tooltip when refreshing templates.
Make Etherpad more simple: support only .pad extensions, disable hideExtension() hook.
Refix c0205642045e943c086eb054f3947d5311d9997e : case is different if group listing is allowed on all groups or sub groups only.
Pass AJXP_VALUE_CLEAR as metadata value to force clearing key after array_merge()
Fix un-removed notification by checking ACL when listing the watches and updating metadata accordingly.
Fix Zip options tweaking, by properly separating zipBrowsingEnabled vs. zipCreationEnabled.
Use Dibi syntax for cross-db limit
Fix Jumploader not correctly sending node.change event (thus missing indexation)
Fix PLUploader : new way to get secure_token


------------------
Pydio 6.0.6 - April 9, 2015

Pydio 6.0.6 mostly provides bugfixes and security improvements for the v6 branch, but it also adds some interesting features in the field of metadata and search engine.
Upgrade is straightforward and recommended, either in-app (archive deployments) or via Linux repositories (apt-get / yum).
Contributors: Cdujeu, DepaMarco, C12simple, Ellega, Kluckow, Huzergackl, Raiatea, Garnetius, Svetlemodry. Big up!

## New Features
New Mozilla PDF.JS pdf viewer.
New metadata type "tags" with auto-completion and special display.
Rework of the SearchEngine ergonomy: better list reloading, direct access to advanced mode, better handling of advanced external metadatas.
New filter action in Datagrid for logs: quick filtering on any column value.
Add a button in settings to clear cache
Revert the automatic switch to mysqli, which seems to create problems on some systems.

## Plugins Fixes
[meta.mount] Remove type strict comparison for mount_env_passwd option.
[action.powerfs]PowerFS don't works if Command Line "enable" and accent (Windows OS)
[auth.cas] Fix cas in client mode (click two times for login)
[scheduler] Form validation for Schedule Task at client side
[scheduler] Clean scheduler actions - Fix #838 Fix french translation (run current task, not tasks)
[action.share] Update the plugin JavaScript code for iframe and shared file preview.
[access.s3] Fix setMetadata() on metastore.s3 plugin, broken for non-ascii chars, the CopySource parameter must be urlencoded.
[metastore.s3] Use rawurlencode instead of urlencode
[editor.imagick] Add Illustrator File to Image Magick
[editor.ckeditor] Adding a delay in CKEditor data loading seems to avoid random blank screen.
[auth.cyphered_post] Add a switch to active repository
[authfront.otp] Fix login form display in authfront.otp.
[editor.etherpad-lite] Big update of the Etherpad-lite integration. Seems like we cannot detect pads with no author, we would have to set up a task to clean orphan pads. Should Fix #865 Fix #867
[meta.mount] Set the "use 32 result code as success" via option (default true for non-regression). Close #824
[index.lucene] Better error logging when lucene fails to open or create an index.
[index.lucene] Lucene: detect if the tmp index is currently being modified (last 3 minutes) to avoid multiple indexation tasks loaded concurrently.
[index.lucene] Fix meta fields indexation issues (on node.change event).
[action.powerfs] Use DIRECTORY_SEPARATOR in powerfs plugin for operation_id file.
[mq.sql] Notifications queuing: fix SQL implementation that fails selecting the max value as the column is varchar (use sql CAST expression). Remove unnecessary create.sql scripts.
[core.index] Do not call is_dir on trigger node.index on the root node. It can create problems with non-fs workspaces like SMB for indexation.
[access.fs] Internalize setHiddenAttribute in fsAccessDriver instead of AJXP_Utils
[mq.sql] Feedstore: forward "reload_user_feed" event to parent repository if any. Fix i18n issues for "watch/stop watching" button Ignore notif to delete if already deleted.
[sync] Detect when update queries are applied on non-indexed items using getAffectedRows()
[sync] Automatically disable the keystore generate_auth_token action if Session Set Credentials is set in config. This will force systematic basic_auth.

## Core & Performances
Core performances: . AJXP_Controller: Minimize xPath calls by implementating a hookCache . AJXP_Plugin: reduce serialization - AJXP_PluginService: Try to use cache for softLoad operation (still return a cloned version of the cached plugin) . AJXP_Utils: cache the result of cleanDibiDriverParameters() function as it is called many times.
Fix OS detection - Add iPad & iPhone
RunTests: Fix apiPost function()
If a client is posting bad parameters, it can end up copying a file into itself.
Revert the automatic switch to MySQLi, add a parameter instead.
Perfs: avoid reapplying role if already in the user's roles.
Hard reload node data with clearstatcache() call on node update Add a seed with file modiftime to make sure thumbnail is reloaded on change
Fix comparison issue for AJXP_METADATA_ALLUSERS value. Could lead to share metadata.
Typo in mailer, fix #864
Fix various issues with Forget Password action - Fix #863
Prevent some plugins to be disabled - Close #873
Add utils in node for moving meta on node change
Add a hook on node.change to move bookmarks metadata, should fix #870 We should refactor all the bookmarks management into a proper plugin. At the moment, moving to recycle is not considered deleted.
Use protocol in runTests script - Fix #871
Set nodes as nonLeaf when we know it - Fix #859
Add the function filterNodeName() to the AjxpWrapperProvider, and use it in the webdav collection to correctly load the hidden files/folders configurations. Alternative to fix #862 and fix #861
Fix edge-case where user cannot change its starting workspace
Now that we need rewrite rules anyway, set the corresponding option to true by default in action.share
Switch TRANSMIT_CLEAR_PASS to hidden parameter (don't remove it totally for backward compatibility) - Close #875
Add a getOptionAsBool() function abstractAuthDriver and use everywhere we use TRANSMIT_CLEAR_PASS. Handle all possible values (true, "true", 1, etc...).
Plugin : load global_param and param configs definitions
Do not override __AJXP_VALUE_SET__ value. Typo in AJXP_SAFE_SECRET_KEY.
Move decypher function in AJXP_Utils instead of AbstractAjxpUser. Do not override __AJXP_VALUE_SET__ when parsing standard form. New parameter $complexChars in generateRandomString function.
Unused decodeUserPassword method (use AJXP_Utils instead).
Use AJXP_Utils function for decyphering password
Make sure not to use the repositories cache if not yet initialized.
Meta.quota: make sure to respect hierarchy by trying to get quota of parent repository owner if it exists (can be a template child without owner), then from the currently logged user, then from the repository config. Fix #884
Hunting while(!feof(..)) calls missing a test on the resource: can trigger an infinite read and a CPU hog.
Default "Cache Master Users" parameter to False instead of True
Remove meta_fields, meta_types, meta_labels from node metadata, use exposed plugins configs instead. Fix CSS labels on detailed view.

## Authentications & Security
Strip query string part of the url, otherwise using query like ?xdebug=true appends the query part to the base value.
Login: empty the fields values only after response is received.
Pass session credentials to command line via ENV variable. Generate a unique secret key at install for tokenisation of CLI calls instead of using default one.
Prefix cyphered passwords inside role parameters with a specific string. listParameters() removes prefix by default, can either keep it ($preserveCypheredPasswords) or blur passwords ($blurCypheredPasswords) by replacing with __AJXP_VALUE_SET__ value.
Massive changes for better handling parameters values in ajxp_conf driver.
Fix various buttons issues with reset password (fix #885) and handle case insensitive logins.
Add more logs for various "preview" operations (Imagick, Diaporama, etc)
Fix pruneTemporaryKeys for PostgreSql
FINAL_KEY is not used anymore, remove it.
AJXP_Utils: Make sure to remove = from base64encoded string when generating random string.

## GUI
In standard List mode, show additional metadata (like in v5) by hovering rows with mouse. Permanent display can be customized by CSS.
Change place of "Set as default workspace" checkbox as it was no more accessible.
Missing fitParent creates resizing issue in IE for My Account pane.
Rework of the SearchEngine ergonomy: better list reloading, direct access to advanced mode, better handling of advanced external metadatas. New filters feature in FilesList to dynamic filter contents. In table mode, adds headers with input texts. In standard List mode, show additional metadata (like in v5) by hovering rows with mouse.
Activate the new filter action in datagrid for logs
Add a "filter" button using the new FilesList feature in ajxp_datagrid : applicable to logs directly.
Fix Search input opening when media queries are applied
Reset MetaSource selector after adding (to focus on the new instance).
Fix scroller issue
Fix message box blinking and style.
User.js Detect and log circular references Fix circular references in AjxpTabulator (init Tab with object clone).
Fix small glitch in PreviewFactory

## Internationalisation (i18n)
Update de.php
missing "," character in various en.php files
Fix workspace display when using russian language on IIS.
Italian translations
Updated german translations, fixed translation keys and made more plugins translatable

Pydio 6.0.5 - Bugfix Release, again

This is fixing some annoying issues introduced by 6.0.4. Upgrade is recommended and simple. Changes described below.

Revert "close search engine on context change" as it breaks results pane in admin
Move Multi & WebFTP login screen into dedicated authfront plugin, as previous fixes in AJXP_PluginsService changes the plugins loading order.
Prevent FTP login screen modal closing
Fix #847: share link with non-ascii filename on windows IIS
Fix scrolling issue: use a fixed scrolling step instead of a fraction, could make it hardly usable for long listings
Upgrade instructions

In-app upgrade: automatic.
Linux Packages: automatic via yum / apt-get


Pydio 6.0.4 - Bugfix Release

Date: March, 3rd 2015
License: Affero GPL
Download: Sourceforge Project
Source Code: Github Project
Copyright: Abstrium SAS / Charles du Jeu 2015
Upgrade: In-app upgrade for archives installs - RPM/DEB update
Contributors: Charles du Jeu, Tran The Cuong, Andypmuc, Ndeet, Flauschbaellchen - Thanks to all of you!

Update de.php
Fix #834 - Wrong message on group deletion
CartManager is triggering the old-fashion public link
Make sure to push the newly activated plugins at the end of the list. Should fix #822
Transport a contextual user ID as a node property or through the URL. Pass a contextual user to the VarsFilter::filter() function Fix shareEventsForwarding when in a personal workspace (shared events not going to parents, preventing sync for example)
Performances: do not call getRole() again if role is already loaded in the loop
Meta.mount: New option to delete mount point on unmount
Fix #803
Open search box when clicking on magnifier.
Modal: handle case where dialogTitle is positioned absolute. Modify CSS accordingly.
Typo prevented shared users deletion when not logged as admin
Try base64_decode for legacy - Was breaking the mp3 player in a shared minisite
Fix repository exposed property, values not correctly retrieved
Error in slug generation, make sure to look at the reserved slugs when building new ones
Share users list: Add an option to not trigger any listing if no regexp is sent
Fix error if msgExchanger is not set.
Use loadNodeInfo() instead of stat in ChangesTracker, otherwise eventForwarding can end up indexing a folder as file.
[index.lucene] Typo calling getUser() on wrong object
Introduce an AJXP_METADATA_ALLUSERS metadata users scope to gather meta from all users. Used in eventForwarding for ShareCenter.
Big refactoring to decouple meta.syncable from index.lucene: core.index is now responsible for triggering a recursive indexation and sending corresponding events.
Fix #842 : API issue on IIS when in root folder.
Fix inZip detection for UserSelection built without "dir" parameter.
Set pydio global variable from within AjaXplorer class, not only Bootstrap (skip updating bootstrap)
Consume_channel: avoid repeating query if previous query is not yet finished
Make sure to unset currentIndex to trigger the __destruct function and release all handlers on files. Prevented the cleaning of the TMP index on Windows.
Fix Quota computation on MacOS server
The indexIsSync() feature can be triggered with bad value, creating issues in synchro
Comment out debugs from authfront.keystore , too verbose.
Refactor upload method to make it more readable. Fix wrong event sent after partial uploads.
Translate PHP errors
Move fsAccessDriver functions to its parent AbstractAccessDriver
Update "Observe Storage" mechanism to make it more reliable and less frequent.
Do not set default plugin value if not in meta source.
Fix Analytics Dashboard for Sqlite and PostgreSQL drivers
New parameter in Index.Lucene to hide the "My Shares" section
Close SearchEngine on context_changed
Mark a repository for REQUIRES_INDEXATION at share time. Trigger indexation if necessary when requiring changes - Fix auto-indexation on first search.
Trigger events on workspace before/after create/update/delete Hook indexers (lucene & meta.syncable) to the after_delete event to clear the indexes.
Sync: trigger client last_seq reset if the sequence ID is greater than the current max of the changes table. Foresee the need to vacuum the changes table.
Search results are limited by max-height (ndeet)
Fix Dav configuration when Server URL is set (andypmuc)
Sanitize function: trim spaces only no the left, or it can break when syncing files with trailing space
Secure error message on rename operations by catching the result

Pydio 6.0.3 - Important Bugfix release

Date: Feb, 10th 2015
License: Affero GPL
Download: Sourceforge Project
Source Code: Github Project
Copyright: Abstrium SAS / Charles du Jeu 2015
Upgrade: In-app upgrade for archives installs - RPM/DEB update
Contributors: Charles du Jeu, Tran The Cuong, Nicolas Pouliquen, DepaMarco, Elangenhan, Gerald ST, NHellFire, Anael Mobilia, Dmitri Bosenko, Jaroslav Lichtblau - Thanks to all of you!

Probably found the root cause of "Ooops your language file is empty..."
Admin Delegation: fix various criteria filtering and workspace listing conditions that were breaking template-created workspaces for group Admin, as well as returning wrong users count (although correct users list).
Fix various customization options: logo height/width + add a class to the main element observing the current workspace slug, can be used for specific welcome, settings, etc styling.
Changed action name
Changed action name
Added Plugin Parameters
Added configuration parameters
meta.user plugin translation into Czech
meta.comments plugin translation into Czech
core.ajaxplorer Czech translation update, as there was already something available
FIX: Changed some translations to convert accented letters
FIX: Some other little changes in Italian translations
Fixed some little translation error
FIX: Italian little fixes
Italian translation for plugin 'editor.imagick'
Italian translation for plugin 'editor.openlayer'
Italian translation for plugin 'editor.other'
Italian transtaltion for plugin 'editor.pixlr'
Make sure to use the dirDefault attribute when overriding the ls action, or it can be lost by XML merging. Was breaking folder opening in guest user mode.
Fix video player overlap with menu in FF and IE
Fix wrong typing for settings leftpane initA value, was making the right pane disappear if folded.
Fix positioning problems that could lead to the right panel totally disappearing
Stop observing click after clicking on a workspace to avoid multiple loading Replace margin-top by top positioning to use window height instead of window with as reference. z-index and width fix in gui.ios
Faster Loading GUI
conf.sql plugin Czech translation
Update ru.php
access.mysql Czech translation
missing "," character in access.mysql en.php file causing missing string via php2po transition
Fix cpane_container positioning for minisites
Update ru.php
Create ru.php
Update ru.php
Update ru.php
Update french translation
Expand a simple diagnostic tool to test REST API on a given workspace. Call runTests.php?api=true to trigger.
Filter the for(var k in ...) entries with hasOwnProperty() call in RoleEditor. Fixes #789
Do not include shared repositories in updateAdminRights or it can end up filing the role with tons of repos.
Fix sqlite deleteRepository case - Use better error message and log SQL error. Fix #779
The return of the QRCode - Fix #783
Add an optional parameter to use a specific header value (e.g. X-Forwarder-For) instead of local detected IP in the logs. Fix #763
Do not trigger error on fopen (it is catched later).
Experimental feature to monitor underlying storage changes. To be tested.
access.fs: Sort filenames case insensitive
Index new detected items recursively
Move folder operation for s3: get all keys with prefix, copy objects to new key and delete old ones.
Make sure to catch exception on S3Client->headObject calls. Could lead to NoSuchKeyException in some cases (minisites).
Make sure to use minisite_session parameter in plUploader
Plupload Fix Minisite-Problem
Italian translation for plugin 'editor.soundmanager'
Italian translation for plugin 'editor.text'
Italian translation for plugin 'editor.video'
Italian translation for plugin 'editor.webodf'
Italian translation for plugin 'editor.zoho'
Fix videos tutorial zIndex issue
Fix #807 - Change language on Public minisite Error
In some case it's possible to hit save on non-writeable workspace, which creates duplicates. Fix #806
UI bug, fix #796
Issue in static repository id was creating a bug in updateAdminRights, inflating admin role until DB error.
Disable guest user detection for minisite. UpdateAdminRights : do not call method in foreach loop
Display a new panel in My Account to manage api keys. Let this plugin active for all protocols otherwise it will not appear in web interface. Ability to manually revoke one or all keys. Hook to the new user.after_password_change event to revoke all keys automatically. New osFromUserAgent function for prettier display. Minor tweaks in core js/css
Fix guest login screen
Drop IE6 support (png hack, useless) Clean parameters passed to bootstrap using exposed plugin configs instead. Create aliases in window: pydio and pydioBootstrap objects:
fix typo
Clean legacy hard-coded gui preferences, and use get/setUserPreference method in classes. Make sure display pref is loaded at init time for FilesList, shoud fix #777
Fix "Share folder as workspaces only" parameter
Re fix #777 : hidden columns were broken
Little Charset bug in User Feed
Italian translation for plugin 'gui.ajax'
Italian translation for plugin 'gui.ios'
Italian translation for plugin 'gui.light'
Italian translation for plugin 'gui.mobile'
Italian translation for plugin 'gui.user'
Replace dibi minified by latest head to fix #610 Add autoloader for dibi and remove requires
Display issue in non-writeable workspaces
Performance issues with innerText usage
Make sure to re-display the authorization URL in case of step 2 error.
getFilteredOption() : pass an optional userObject to be used as mergeRole resolver
Quota filtered Option: grab values from parent repository owner, not current user.
Better response for update_user_group - Fix #725
Add IPTC support, inspired by and close #577
ZIP with SMB Access don't work
Fix tree issue when domain name contains 'plus'. Manual merge & close #681
Fix #819 (missing log refresh button) and fix #820 (restore old "Copy as Text" button)
Fix the way scheduler handle the "*" users to make it less consuming (not necessary to load whole user objects, jst their ID.). Always use queue mechanism.
Perf issues with massive ldap directories: divide listing time by 2
Add an option to disable the bruteForce test (and thus the Captcha)
New option "leavesOpenOnSelect" on search engine used in the admin panel, to avoid never-ending searching on the correct user page. Fix #814
Catch handle erros on purge operations
Use background-size: cover when possible (fix #821)
Fix login header in multi mode. Remove login_patch.xml that was not used anymore
Fix api test script
Make sure db is connected for serial-based setup that would use the DB only for indexation.
Fix API Auth form some server+php configs
Add the comment SetEnvIf instruction for PHP-FPM setups.
When fake MemberOf enabled, depend ldap system, the member/memberUid value (attribute of group) is cn (short) or dn (full name). In general, this value is dn but in ldap of Apple, he use cn
Do not set write persmission on stat_hash, or it prevents the sync of readonly workspaces


Pydio 6.0.2 - Microfix for install screen

Previous release fixed XML problems by xml-encoding some messages, which breaks the HTML display of the install wizard.
Please see 6.0.1 for release note.

Pydio 6.0.1 - Bugfix & Security Release

This is a bugfix & security release for v6. Upgrade is recommended. Main bugs fixed are:

White-screen on upgrade if Server URL is manually set
Italian language breaking workspace creation
New ldap_paged_control php functions can issue warnings on php 5.6
Fix WebDAV root listing and authentication problems on REST api.
A potential vulnerability reported by Axel Hinrichs

Date: Dec, 12rd 2014
License: Affero GPL
Download: Sourceforge Project
Source Code: Github Project
Copyright: Abstrium SAS / Charles du Jeu 2014
Contributors: Charles du Jeu, Tran The Cuong, Axel Hinrichs

Changelog

Fix SQL. insert on update a role (improve performance only for mysql)
Add script to upgrade 525 to 600
Fix ldap_paged_control issues and warnings
Fix Regexp for parsing minisite_session, could break IE & FF downloads for password protected links
Make sure that stream is correctly opened, otherwise it can fill the log with errors.
Fix html base if set via SERVER_URL parameter
Fix authentication on rest api
Missing translation on the first 3 fields of the create user dialog (via sharing).
Fix root listing of webdav (accessing to /shares/)
Add a parameter to open workspace by simple click in the home page.
Make sure to xmlEntities() the CONF_MESSAGE and MIXIN_MESSAGE values as we are inside attributes.
Update share.php template


------------------------------
Last Major release Pydio 6.0.0
------------------------------

The Pydio Team is thrilled to announce Pydio 6, a major stable release. Main features include a full UX reloaded, new
server capabilities to enable sync with the future PydioSync client, an analytics dashboard for admins, and many, many
more. You can have a complete product tour here.

IMPORTANT: if you are using the following plugins: auth.serial_otp, auth.cas, auth.basic_http, PLEASE DO NOT UPGRADE
NOW as they must be replaced by their new 'authfront' counterparts. Please read more on this How-To.

Release Data

Date: Dec, 3rd 2014
License: Affero GPL
Download: Sourceforge Project
Source Code: Github Project
Copyright: Abstrium SAS / Charles du Jeu 2014
Upgrade: In-app upgrade for archives installs - RPM/DEB require manual script upgrade
Contributors: Thomas Nicot (UX), Charles du Jeu, Tran The Cuong, Nicolas Pouliquen, Pär Strindevall, Martin Schaible,
Lawrence Ho, Arnold van Blanken, Marco De Pardi, Anael Mobilia, Dmitri Bosenko, Florian Vogt, Gerrit Pannek, Max Ruman,
Stefan Huber, Christian Foellmann, John Regan, Sylvain Mandon, Gerald Me, Matthieu Simon, Florian Huwyler,
Aaron Guggisberg, Stefan Wüthrich, Teki Imai, Nicola Mustone, Mike Rhuner, Mike Smorul, Pablo Daniel Rey, Steve Ludovicy,
Lukasz Lis.


Upgrade Process

Archive-based installs (zip/tar.gz):
From 5.2.5: automatic with in-app upgrade. Make sure to backup both your DB and your files.
From 5.3.4(dev): automatic with in-app upgrade, only files are impacted.
Linux packages (deb/rpm) - Please READ
Please read the detailed upgrade how-to. Baseline is that the apt-get/yum will not update DB, but there is a script ready for that, that you can run manually.

--
See core/doc/PREVIOUS_RELEASES file to learn more about previous releases.