1.9.10.2, Sipán

Chamilo 1.9.10.2 is a patch (minor) version of the 1.9.x branch, with bugfixes and a few new minor features, but more importantly fixes for vulnerabilities discovered in 1.9.10 and previous versions (as such, you can just overwrite previous files to upgrade from 1.9.8, 1.9.8.1 or 1.9.8.2 to 1.9.10.2).

Release name

Sipán is a small city on the Peruvian Coast where the remains of the Lord of Sipán (a ruler of the 3rd century AC) were discovered in 1987. It held many well-conserved offerings. We believe this version of Chamilo, containing additional fixes on top of an excellent 1.9.10 version, has its fair share of common points with Sipán.

Security

• (97fec37 - #7564) Fix multiple XSS & CSRF vulnerabilities
• (ba947ae - #7564) Use htmlspecialchars when parsing a URL
• (9da1112 - #7564) Fix partially #7564
• (0c65e9b) Format code + adding Security::remove_xss

Check our security page for more information

Improvements (minor features) and debug

• (96ab630 - BT#9494) Fix Exercise result if was added inside a LP
• (b6b54d5 - BT#9255) Fix bad condition that sets all documents to invisible
• (76c83f1 - BT#9255) Fix redirection after changing document visibility.
• (f58039e - BT#9571) Fix URL links
• (0fd3188 - BT#9559) Fix LP export to PDF
• (391fa4f) Fix reporting.
• (b540f82 - BT#9426) Add "allow_delete_attendance" option
• (c552d08 - BT#8986) Adding session support in forum copy from course to course
• (d0ed859 - BT#9436) Improve script to move users from course to session with all resources
• (c7b1706 - #7577) Fix query in buy_course plugin
• (b295372 - BT#9420) Blocking glossary in LP if not allowed
• (e75de5e - BT#9436) Script to move users from course to session with all resources
• (d74d700 - BT#9420) Fix setting show_glossary_in_extra_tools
• (11b0e96 - BT#9420) Adding glossary possible options
• (ba5b122 - BT#9494) Show exercises included in learning paths in the Gradebook
• (becb733) Fix queries in work tool.
• (0f4ac57 - BT#9324) Prevent session admins to see all users
• (709f388 - BT#9324) Add default setting for configuration.php for users list view filter for session admins
• (afbd8f3 - BT#8986) Fix session selection
• (6061f69 - BT#9324) Show only session admin created users in user list and in session creation- refs BT#9324
• (0c9ca6a - BT#9323) Add 'DISTINCT' to session list query to avoid returning repeated records
• (8cbb366 - #7540) Fix sub category creation
• (132919c - BT#9422) User in group can edit wiki page
• (fb445f8 - BT#9408) Fix queries in the report by question in exercises
• (1919394) Fixes certification validation. Takes the score not the percentage.
• (2812d60) Fixing header order in gradebook
• (d175690 - BT#9293) "*.phps" files are renamed to php when downloading a zip
• (ab6f1b2 - BT#9287) Fixes users order in gradebook
• (8da0d49 - BT#9380) Fixes fatal error in wiki in session
• (4704376) Adds nl.js file to fckeditor.
• (d1f552d) Fixes error when deleting a group tutors should be also removed.
• (cef6d39 - BT#9340) Adds students/tutors export/import
• (df11c14 - BT#9355) Fixes $groupId value was overwritten
• (50c9b18 - BT#9325) New feature: Edit extra content in admin panels
• (cebeba5 - BT#9340) Adds "users" field while exporting classes
• (762c4b3 - BT#8617) Fixes show_description when updating sessions
• (f14dfa4 - BT#8617) Adds show_description parameter in import csv files
• (e17cb4c - BT#9329) Checks only results with qualification
• (b82a265 - BT#9328) Adds importSubscribeStatic option
• (4eaeae3) When cleaning user LP results delete also the interactions and objs
• (3a7cf71 - BT#7802) Adding event comments
• (2fa3954 - #7370) Fix a few buy courses plugin issues
• (2fd2c2b - BT#9022) Add certificate path to the web service. Add 'add_gradebook_certificates_cron_task_enabled' configuration parameter

1.9.10, Huánuco

Chamilo 1.9.10 is a new minor version of the 1.9.x branch, with many bugfixes and a few interesting new features (as such, you can just overwrite previous files to upgrade from 1.9.8, 1.9.8.1 or 1.9.8.2 to 1.9.10).

Release name

Huánuco is a small city in the Peruvian Andes, Northeast of Lima. This is a special version in memory of our cherished development team member César Perales, who passed away on July 22nd, 2014, at age 27. César contributed mostly "in the shadow" to Chamilo LMS, allowing the rest of the team to contribute more actively. He was a vibrant young man. He will be missed. César lived in calle Huánuco, in La Molina, Lima, Peru, where other team members bid him their last farewell for his last, eternal trip.
To this image, this version marks a change of behaviour from the Chamilo team, maturing into another plane of existence. This year, Chamilo LMS got used in more contexts than ever before, with a growth that is superior to any other open source LMS out there. It has become a more reliable and versatile platform, that will serve its purpose, helping making education better and more widely available, better than ever before.

Security

All security issues are published and patches are attached on our security issues page. If you think you found an additional security issue you'd like to report, please check our procedure there.

• (8a75f65 - #7242) Fix SQL injection in mySpace/users.php
• (d64a02c - #7272) Fix SQL injection threats and replace SESSION variable with api_get_user_id
• (5879616 - #7275) Add security token to course copy tool
• (#7440) Fix a series of SQL injection vulnerabilities due to integer filtering

Possibly breaking changes

Two changes have been made to the forum tool code, which might make some of your forums disappear and require a direct database intervention.
First case: If you use forums with sessions and have placed a session forum inside a base-course forum category, the forum category will now no longer appear in any session, and as such, the session forums contained in that category will disappear. You can easily fix that by checking the c_forum_forum table for any record with session_id != 0 that points to a forum category that has session_id == 0. This is related to issue #7264.
Second case: In very rare occasions, if you use group forums and have had issues with posts appearing twice, then this release will fix this bug, but might also make some forum posts disappear. Although we could not reproduce the error, you should be able to fix it by changing the group_id column inside the c_forum_thread table. This is related to issue #7267
This is an exceptional event in the history of Chamilo, and we believe it should only affect very few portals, but we prefer to take precautionnary measures and warn you upfront.

New features

• (7e67dd2 - BT#9018) Add PDF export for student publications list
• (5e8ae68 - #7478) Add cookie warning message to comply with new European legislation
• (e637608 - BT#8814) Add "Auto attendance" based on course login
• (960899a) Add possibility to hide previous videoconferences even if recording is not enabled
• (3bc8fd6) Add $_configuration['document_if_file_exists_option']
• (73e3816 - BT#9247) Adding exercise_max_fckeditors_in_page setting
• (b14bcb3) Add option $_configuration['certificate_pdf_orientation']
• (7dbed80 - BT#8703) Add hosting total size checker
• (218dc6a - BT#9175) Add hosting_limit_active_courses setting
• (1d68db4 - #398) Support Opale/Scenarii by adding variable to better support SCORM 1.2 by watching over the definition, by the SCO, of the lesson_status and the call to LMSFinish() or the move to another element
• (57750c2 - BT#8900) Add progress in learning paths report
• (903436e - BT#8902) Add learning paths reduced report
• (1a6a4a9 - #7272) Add possibility for plugins to define main tabs
• (ef242ab - #7255) Add multiple file upload in forum, and show list of attachment files from view threads
• (c8f940b - #7338) Add REST web service to get personal messages (from inbox)
• (2db9057 - #7328) Add theme_backup and default_template settings
• (8d9a825) Add script to check users data in CSV file
• (f52df87 - BT#8845) Add script to move users from one course to another depending on them having passed an exam or not
• (27493b3 - #7324) Add possibility to hide recordings from students in conferences list in BBB plugin
• (c24c758 - BT#8840) Add $_configuration['auto_detect_language_custom_pages'] to detect the language in custom pages
• (a2ff44c - #7212) Add calculated answers feature (in beta test)
• (25cd7dd) Use .gitattributes file to enable special Github features for versions packaging
• (002a0ab - #7309) New icons for questions types
• (0d131f9 - BT#8746) Add option "include all users" to export
• (88126fe - BT#8796) Add option to prevent multiple simultaneous login option ($_configuration['multiple_connection_not_allowed'])
• (58334f8 - BT#8746) Add OnlyBestAttempts option to show only the best attempts in exercise results list
• (8ad728a - #7279) Add tour plugin
• (fc3508e) Add $_configuration['show_official_code_exercise_result_list'] to show the student's... official code in exercise results lists
• (6830ae3 - BT#8340) Add optional Memcache + DB persistence session storage mode (clusters context)
• (577c7e7 - BT#8703) Add $api_warn_hosting_contact() and $_configuration[1]['hosting_contact_mail'] to explain who to contact in case of reaching a hosting limit
• (5a5e6bc - BT#8736) Add $_configuration['email_alert_manager_on_new_quiz'] to send an e-mail to administrator for new quiz
• (ea16dbd - BT#8697) Add $_configuration['order_user_list_by_official_code'] to order users lists by official code
• (f286f35 - BT#7848) Add course legal agreement plugin
• (75045f7 - BT8730) Add pdf_logo_header setting
• (4601849, be487d6 - #7272) Add support for session in BuyCourse plugin
• (d06fd47 - #7275) Add support for sessions in course catalogue
• (eb45183 - BT#8662) Add $_configuration['hide_scorm_pdf_link'] to remove option to "download as PDF" in learning paths list
• (bea2ed0 - #7225) Add Clockworks SMS sending plugin
• (606c84b - #7236) Add $_configuration['course_catalog_hide_private'] option to hide private courses from courses catalogue
• (5720f35 - #7252) Add support for mobile phone numbers extra field type
• (7610baf - BT#8441) Add webservice mode to converter from ppt
• (2582408 - BT#8274) Add ViewerJS (view .pdf) in documents tool
• (3ef3032 - BT#8274) Add Wodo text editor (edit .odt and .odp) in documents
• (eadeaf8 - BT#8317) Add sessions duration feature
• (019987d - BT#8316) Allow courses to be sorted inside a session (requires manual database change)
• (bafcdef - BT#8611) Add option to make a copy of a surveys inside the same course
• (1ee0d78 - BT#8605) Add option to "add me as teacher in courses" during CSV import
• (9dbab31 - BT#8459) Add $_configuration['hide_scorm_copy_link'] to hide the icon in the learning paths list
• (d942e8e - BT#8457) Add $_configuration['allow_lp_return_link'] option to change the return link in LPs

Improvements (minor features) and debug

Please check the documentation/changelog.html for more details.

Stylesheets and theming

• No major style changes in this version, but a lot of visual improvements
• The possibility to select a template (from main/template/) through the configuration.php file has been added, although no new template is available yet (at least now you can create your own and use it)
• Old question types icons were replaced by new icons
• Old session "window" icon was replaced by a new icon

Web services

• (cce71ec - #7338) Add web services classes for autoload
• (595fafb - BT#8231) Add setting to decode UTF-8 in registration web services

Removals

• No removal worth mentioning in this version

1.9.8.2

Chamilo 1.9.8.2 is a very little patch version with one bugfix regarding the learning paths tool. Considering the fact that 1.9.8 is planned for the long term, we'd hate to have such a minor patch left on the side for a year or so. This will be packaged and promoted as 1.9.8, but the folder inside the 1.9.8 will be called 1.9.8.2, with a change to this changelog file and a one-line change to main/newscorm/learnpathItem.class.php (as such, you can update just this file to upgrade from 1.9.8.1 to 1.9.8.2. See the code change for detais.

1.9.8.1

Chamilo 1.9.8.1 is a patch version with one security patch on top of 1.9.8 (in the included library for FCKeditor). Please check our security issues page for more information.

1.9.8, "Thon"

Chamilo 1.9.8 is a minor stable version with a series of improvements on top of 1.9.6.
This version is the first Chamilo version to drop support for Internet Explorer 7. We insist that you recommend your users to use modern browsers that respect web standards. If they cannot avoid Internet Explorer, make sure they use at least version 10, which respects a little bit more than half of the W3C standards (but still much less than Firefox, Chrome, Opera or even Safari)

Release name

Thon is a small city in the Belgian region of Wallonia, several times classified as the most beautiful village of the South region of Belgium. It is a quite, beautiful place without anything out of the ordinary but made of beautiful, hundred years old homes built from famous Wallonia blue stone and crossed by the Samson river. Its stability and it's position just next to the large cliffs surrounding the Meuse are symbolically close to Chamilo 1.9.8, highly stable but a few steps away for the huge jump to the next major version.

Security

All security issues are published and patches are attached on our security issues page. If you think you found an additional security issue you'd like to report, please check our procedure there.

• Patches have been applied to one of the packages of FCKEditor used for image uploads in Chamilo 1.9.6.1. These patches are included in 1.9.8 (see issues 11 and 12)
• Some other possible XSS attack vectors through initially privileged access have been fixed (see issue #13)

New Features

• Plugins: added possibility to add menu tab entry for any plugin
• Added a way to hide course teacher, if there are too many
• Added OpenMeetings plugin for videoconference through Chamilo
• Allow student to check his/her test results if the date of the test is over
• Added option to prevent "login as" feature on enhanced-security portals
• Register "user disabling" action in important activities
• Make check_version() AJAX-based
• Added CAPTCHA on registration page (requires manual configuration edition)
• Added "Sessions subscribed to" icon in users list
• Exercises: Added auto-evaluation mode with feedback but without correct answer hint
• Course copy: Included work/assignments copy in course copy
• Tickets: new support tickets system integrated as a plugin (requires activation by admin)
• Groups: Added possibility to increase the number of users in a group above the category limit
• Added X-SendFile support to boost files download (requires manual configuration edition and web server modules)
• Added individual mode for users assignments to HR director
• Added list of students in course export
• Exercises: Added possibility to clear all results before a specific date
• Plugins: Added support for sessions in BigBlueButton plugin (requires re-installation or manual DB update)
• Exercises: Added auditing of "clean results" action by teachers
• Added support for "for" attributes in fields for WCAG/WAI AA compatibility
• Added user profile fields of type "File upload"
• Add Aiken (Word) import format in exercises
• Add browser language auto-detection at first connection
• Added BuyCourses plugin for PayPal payments

Improvements (minor features)

Please check the documentation/changelog.html for more details.

Debugging

Please check the documentation/changelog.html for more details on about 300 bugfixes

Stylesheets and theming

Stylesheets have been considerably changed in version 1.9.8, which might require a little update on your side if you have a custom stylesheet. We're sorry about it, but it was really necessary to improve the adaptability of the interface for mobile devices (which we are sure you will appreciate). If you only changed the logo, we recommend you make a copy of an existing Chamilo style (main/css/chamilo*) again, rename it and simply replace the logo then upload the new style. If you have more complex styles, you might want to ask for the assistance of your web designer at the moment you update Chamilo to this version.

• Updated logo to new Chamilo logo in config section
• Dropped support for IE7
• Improve styling for profile-attached files
• Great update to learning paths visualization
• Changed help image in learning paths
• Updated chat screen appearance
• (d64b865) Add "section-login" class in login pages

Web services

• Improved sessions list in sessions_list.soap.php and added GetLearnpathHighestLessonLocation() (also BT#6667)
• Updated WSCreateUser() to manage active status, added WSGetUser(), WSGetUserFromUsername() and WSSubscribeUserToSessionSimple() and fixed WSListSessions() to allow sessions sales from Ubercart Drupal module
• (43949c7) Add check on existence of extra fields (optional)
• Added WSUserSubscribedInCourse()
• (5ddc3c0) Assume student status in EditUser* services and prevent modifying an admin to student

Removals

• Custom tabs can no longer be defined directly in the settings_current table. If you have custom_tabs in this table (select * from settings_current where variable='show_tabs' AND subkey like 'custom_tab_%'), please add them through the homepage edition screen.
• Remove custom_tab_* feature

1.9.6.1

Security fixes were added see:

https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues

1.9.6, "Rochefort"

Chamilo 1.9.6 is a minor stable version with security patches and a series of improvements on top of 1.9.4.

1.9.4, "Puebla"

Chamilo 1.9.4 is a minor stable version with a series of improvements on top of 1.9.2.

1.9.2, "Hanga Roa"

Chamilo 1.9.2 is a minor stable version with a series of improvements on top of 1.9.0.

1.9.0, "Vogüé"

Chamilo 1.9.0 is a major stable version with loads of added features.

Release name

Vogüé is a small town in the French region of Rhône-Alpes, and one of the most beautiful villages of France. It features a 12th century, a generally very pretty landscape and is one of the few remote towns in current growth. One of our new development team members chose this familiar town because it inspires stability and diversity.

New Features

This version of Chamilo includes a few new features.

• Most Chamilo pages are now HTML5-compliant (#4400)
• Chamilo now implements an adaptative design which greatly improves its use on mobile devices (#4400)
• Plugins: The plugin system has been reworked a lot and new plugins were added Static, Facebook/Twitter share buttons, Videoconference (with BBB), etc (#4450, #4557). Now you can select where the plugins will be show, we call these Regions. New Hello World, Social tools and Show regions plugins added
• Admin: Feature for admin to recover deleted attendances (BT#3002)
• Documents: Record your voice (flash mode)
• Global: Platform-wide, FB-type chat with social network friends (#3565, #5264)
• Exercises: Added questions categories management in exercises (#294 & #3974)
• Admin: E-mail alerts can be configured and sent to specific users (#984, #4358, #4658)
• System: Migration to one single, simple normal form database (#1245, #3910, #4728, #4791) (heavy migration process but should result in lighter database processing, migration heavily tried by many testers)
• Global: New CSS framework added
• Global: Implementation of Twig Template System
• Global: A feature sniffer now can check if the user's browser has enough resources to use all features of Chamilo (#1337)
• Tracking: Teachers can now see their own results if they are subscribed to a course (#1409)
• Social: you can now choose when to receive e-mails from the social network notifications (this requires a working Cron setup)(#2189)
• Exercises: It is now possible to answer a question and "Mark it" for later review, then review all marked questions (#2486, #3958 & #4031)
• Agenda: You can now connect your calendar to your Google Calendar (#3040)
• Agenda: You can now see a specific event's details from inside the calendar view (#3143)
• Languages: Added structure for Turkish and Basque languages (#3350)
• Exercises: Audio recording question: students can now record their answers as audio directly from the browser or uploading an MP3 (#3478)
• Exercises: any question can now be "cloned" (#3551)
• Admin: It is now possible to search for platform settings, through a neat search box (#3655)
• Exercises: A button now allows you to save each question when going through the test, even in all questions on one page mode (#3683)
• Admin: Added default visibility settings for new courses (#3684)
• Admin: Added possibility to disable the documents quick list on courses list page (#3766 & #3904)
• Wiki: A search feature now lets you search in all wiki pages (#3849)
• Glossary: It is now possible to import glossary terms through CSV files (#3857)
• Course progress: It is now possible to import course progress (#3858)
• Exercises: There is now a report by question for exercises, in order to know which questions are too difficult or too simple for most students (#3864 & #3954)
• Wiki: The wiki now includes contributions statistics (#3870)
• Admin: A new administration top bar has been added, Wordpress-style, which should allow administrators to manage Chamilo much faster (#3899, #4162, #4843)
• Exercises: Added "all questions" selector for random number of questions to avoid having to re-edit each time (#3942)
• Learning paths: Students can now add new forum threads if forum included in learning path (#3944)
• Assignments: It is now possible to fulfill an assignment directly as an HTML document from the assignment tool (#3978)
• Plugins: The BigBlueButton plugin has been adjusted to work with BigBlueButton 0.80 and manage *
  webconference recordings from inside the course (#3988)
• Exercises: You can now add a congratulations text at the end of an exercise (#4074)
• Exercises: You can now watch the progress of your students, live, while they are taking an exam (#4100)
• Global: Added the possibility to vote for courses, and a "Popular courses" block on the homepage (#4191, #4200)
• Plugins: Added Shibboleth authentication plugin (#4554)
• Plugins: Added RSS feed plugin for course events (#4574)
• Plugins: Added statis HTML block plugin (#4575)
• Documents: Added WAMI Audio recorder in Flash to the documents tool (requires admin settings to be configured) (#4596)
• Plugins: Added a course search plugin to find a specific course by title (#4597)
• Plugins: "Share this" plugin (#4598)
• Admin: Added custom logged-out pages mechanism (#4610)
• Admin: Zombies! Now possible to disable old users (#4652)
• System: Added CDN static files controller for high-availability servers (#4653)
• Assignments: The teacher can now download all files from a specific assignment in one Zip (#4687)
• Documents: Added Flash(TM) webcam photoboot, whereby teachers (or students through groups) can take pictures from their webcam, wich get uploaded to the documents tool directly (#4856) (enable through admin settings)
• Plugins: Added plugin for School Server of OLPC Perú project (Squid proxy filtering from course) (#4925)
• Exercises: Added new type of questions that automate the repartition of score between available answers (#5012)
• Exercises: Time counter now changes color at 3, then 1 minute to increase awareness of student, and appears nicely in all-questions-on-one-page exercises (#5043, #5267)
• System: The stats collection of Chamilo.org is now automatic. If you want to disable this feature, edit admin/index.php and look for fsockopen() (#5104)
• Global: Improvements for iPad(TM) and iPhone(TM) by disabling auto-capitalization (#5116)
• Documents: Added thumbnails to the advanced files manager in the documents tool (#5142)
• Tracking: Added a personal timeline for students in their My reporting tab (#5163)
• Admin: Added notification to admins when a new user is requesting approval for account activation (#5178)
• Documents: Added Flash(TM) reader for Freemind's mindmap format

Improvements

See documentation/changelog.html for more details

Debugging

See documentation/changelog.html for more details

Style changes

Due to the move to HTML5, it is very likely that any older stylesheet will have to be updated when upgrading to Chamilo 1.9.

• Styles changed for all forms
• New top bar added (only for admins)
• Responsive layout for Mobile Devices

Security

• If you haven't updated to 1.8.8.6 previously, then you will benefit from 1.8.8.6's security patches by installing 1.9.

Known issues

• Document title: The option to NOT use a document title different than the filename in the documents tool has been removed. This means that if this setting was not set to the default option in your Chamilo option or if you have a very old installation that you have been upgrading over the years, you might experience problems accessing the documents. In this case, we recommend contacting an official provider of Chamilo to take this migration in charge.
• During upgrade, if your database ends with "c_", the installation process will report errors in the PHP error log. This is due to a check on the new c_id field for database normalization, but is not important. The corresponding logging code can be disabled in database.lib.php
• Agenda regression: because we implemented a much more usable and familiar agenda for most of you, and because we lacked some time to go into the details, we have temporarily removed the possibility to make an event visible to specific users (they are always visible to all the course users right now) - see task #5201 for details
• Exercises: When reviewing an exercise, hotspot questions results are not remembered see #3980
• Learning paths: Copying a learning path with embedded documents and exercises from one course to another might cause resource linking problems (images, audio, etc). We recommend copying the complete course and then removing unnecessary elements, or exporting the learning path as SCORM.

Third-Party Libraries additions/updates

• Fullcalendar js library version 1.5.2
• Twig Template system added
• Twitter Bootstrap CSS Framework
• More libraries were added but haven't been properly registered at this time...

Removals

• Removed deprecated "search" plugin (used to work with MnoGoSearch but hasn't been used for years to our knowledge - was successfully replaced by Xapian)
• Removed the RED5 installation guide from the documentation directory: the supported BigBlueButton videoconference system provides its own installation manual, linked from the Chamilo admin guide.
• Removed the "Use document title" option - now we force users to use a document title - this avoids many issues with documents names - see #3781