Less than a month after the previous release, Elgg 1.8.3 is ready for download. We closed over 60 tickets in making this release. Enhancements and new features include
We also fixed a lot of bugs. You can view a complete list of the closed tickets at our bug tracker site.
We had 7 developers contribute code to this release:
Thank you also to all those who reported bugs.
info@elgg.org
Security issues should be reported to security@elgg.org!
©2014 the Elgg Foundation
Elgg is a registered trademark of Thematic Networks.
Cover image by RaĆ¼l Utrera is used under Creative Commons license.
Icons by Flaticon and FontAwesome.
Great news...
One Q: " Developers, it is important that you use elgg_register_ajax_view() " - what will happen if existing plugins do not do this ? Do we need to go over every plugin before upgrading from 1.8.2?
Cash, could you please elaborate more on elgg_register_ajax_view()? I don't think we understand fully when and how it should be used. None of my ajax codes broke, is there a backwards compatibility?
Congrats!
Cash, does elgg_register_ajax_view() relate to this issue?
http://community.elgg.org/pg/forum/topic/836175/elgg-18-ajax-request-sporadic-problem-issue/
I am going to upgrade to 1.8.3 immediately to test the new ajax stuff!
Many thanks!
@Shrek8, it doesn't. It relates to a potential security hole, as far as I can judge from the trac ticket.
@Ismayil thanks! So let's wait for Cash's feedback about when elgg_register_ajax_view() where and when it should be used.
I have just installed ELgg 1.8.3
A one quick remark. In admin site the older version 1.8.2 is displayed instead of 1.8.3:
Statistics : Overview
Elgg version : Release - 1.8.2, Version - 2011122100
We added a special handler for serving html content through ajax in Elgg 1.8. I don't think many are using it yet. Basically, if you want to serve a view, you can view it at http://example.org/ajax/view/<name_of_view>/. It is more secure if developers explicitly register the views that they want to expose so we added this feature. The Vazco development team brought this to our attention.
The wire plugin uses this to load the parent post for a reply. This function uses the ajax handler. It passes the guid of the wire post and gets back html content.
@Tom - unless you are using the ajax handler, you don't need to update anything. Just grep for "ajax/view/" and that should turn up where it is being used. We use it once in the wire and once in core.
@Shrek8 - make sure you run the upgrade script.
Cash, this was tested with a fresh Elgg installation.
Ah, that's brilliant, Cash! Thanks for the clarification. I didn't realize there was an ajax handler. I can now rewrite bunch of code to simplify things.
Cheers