AnonymousFox

//var/softaculous/schlix/changelog.txt

Release note (2026 June 02)
v2.2.9

Errata #6 (June 2, 2026): v2.2.9-6. Fixed gallery duplicate file insertion, datetime picker minimum width, installer error, updated schema.org for Contacts, fixed Block Manager - menu item visibility
	Errata #5 (Dec 2, 2025): v2.2.9-5. Fixed gallery viewer not including the correct CSS, corrected User application that display history when clicking new item, fixed XSS vulnerability bug when clicking New User (thank you to Akiner K who reported this security bug and provided reasonable time to fix)
	Errata #4 (Aug 11, 2025): v2.2.9-4. Fixed invalid redirect
	Errata #3 (July 25, 2025): v2.2.9-3. Added initial support for Bootstrap 5 CSS framework (still defaults to Bootstrap 4 for the time being), fixed more errors in PHP8.4, fixed incorrect custom header image display for Blog app, HTML (Web Pages) app will redirect to the frontpage if the first index page is called when the app is not the main frontpage application, fixed minor issues in default themes, fixed frontend edit control not loading if the main frontpage application is set to Landing Page, fixed Google Analytics block module, fixed menu generation for divider and parent submenu, removed "php_flag short_open_tag off" from the default .htaccess file as it causes errors on some web server under certain configuration.
	Errata #2 (June 10, 2025): More PHP8.4 fixes, updated FontAwesome 5 Free to 6 Free, fixed cookie issue if the CMS runs on non-standard port 80/443
	While SCHLIX CMS is currently still backward compatible with PHP 5.6 (which already reached its end of life in 2018), due to the changes in the recently released PHP 8.4, backward compatibility with PHP 5.6 may no longer be guaranteed next year.
	PHP 8.4 compatibility fix #1 session handler add ReturnTypeWillChange while maintaining PHP 5.6 backward compatibility as session_set_save_handler() with more than two arguments are deprecated
	PHP 8.4 compatibility fix #2: Implicitly nullable parameter declarations deprecated in skins library
	Fixed - minor issue with search box type (button vs submit)
	Updated - Mesage for database error handling
	Updated - Added "php_flag short_open_tag off" in .htaccess
	Updated - PHPMailer 6.7.1 to v6.9.3
	Updated - HTMLPurifier 4.15 to v4.18
	Updated - jstz 1.0.6 to v2.1.1
	Updated - Composer 1.10 to v2.20.25 (LTS). Tested on PHP 8.4 as well with E_DEPRECATED silenced.
	Updated - Bootstrap 4.6.2 to 4.6.3 with our own custom fixes.
	Updated - Bootstrap 3.4.1 to 3.4.6 with fixes from 7pro.ca.

Release note (2025 December 02)
v2.2.9

Errata #5 (Dec 2, 2025): v2.2.9-5. Fixed gallery viewer not including the correct CSS, corrected User application that display history when clicking new item, fixed XSS vulnerability bug when clicking New User (thank you to Akiner K who reported this security bug and provided reasonable time to fix)
    Errata #4 (Aug 11, 2025): v2.2.9-4. Fixed invalid redirect
    Errata #3 (July 25, 2025): v2.2.9-3. Added initial support for Bootstrap 5 CSS framework (still defaults to Bootstrap 4 for the time being), fixed more errors in PHP8.4, fixed incorrect custom header image display for Blog app, HTML (Web Pages) app will redirect to the frontpage if the first index page is called when the app is not the main frontpage application, fixed minor issues in default themes, fixed frontend edit control not loading if the main frontpage application is set to Landing Page, fixed Google Analytics block module, fixed menu generation for divider and parent submenu, removed "php_flag short_open_tag off" from the default .htaccess file as it causes errors on some web server under certain configuration.
    Errata #2 (June 10, 2025): More PHP8.4 fixes, updated FontAwesome 5 Free to 6 Free, fixed cookie issue if the CMS runs on non-standard port 80/443
    While SCHLIX CMS is currently still backward compatible with PHP 5.6 (which already reached its end of life in 2018), due to the changes in the recently released PHP 8.4, backward compatibility with PHP 5.6 may no longer be guaranteed next year.
    PHP 8.4 compatibility fix #1 session handler add ReturnTypeWillChange while maintaining PHP 5.6 backward compatibility as session_set_save_handler() with more than two arguments are deprecated
    PHP 8.4 compatibility fix #2: Implicitly nullable parameter declarations deprecated in skins library
    Fixed - minor issue with search box type (button vs submit)
    Updated - Mesage for database error handling
    Updated - Added "php_flag short_open_tag off" in .htaccess
    Updated - PHPMailer 6.7.1 to v6.9.3
    Updated - HTMLPurifier 4.15 to v4.18
    Updated - jstz 1.0.6 to v2.1.1
    Updated - Composer 1.10 to v2.20.25 (LTS). Tested on PHP 8.4 as well with E_DEPRECATED silenced.
    Updated - Bootstrap 4.6.2 to 4.6.3 with our own custom fixes.
    Updated - Bootstrap 3.4.1 to 3.4.6 with fixes from 7pro.ca.
	
Release note (2025 August 11)
v2.2.9

Errata #4 (Aug 11, 2025): v2.2.9-4. Fixed invalid redirect
    Errata #3 (July 25, 2025): v2.2.9-3. Added initial support for Bootstrap 5 CSS framework (still defaults to Bootstrap 4 for the time being), fixed more errors in PHP8.4, fixed incorrect custom header image display for Blog app, HTML (Web Pages) app will redirect to the frontpage if the first index page is called when the app is not the main frontpage application, fixed minor issues in default themes, fixed frontend edit control not loading if the main frontpage application is set to Landing Page, fixed Google Analytics block module, fixed menu generation for divider and parent submenu, removed "php_flag short_open_tag off" from the default .htaccess file as it causes errors on some web server under certain configuration.
    Errata #2 (June 10, 2025): More PHP8.4 fixes, updated FontAwesome 5 Free to 6 Free, fixed cookie issue if the CMS runs on non-standard port 80/443
    While SCHLIX CMS is currently still backward compatible with PHP 5.6 (which already reached its end of life in 2018), due to the changes in the recently released PHP 8.4, backward compatibility with PHP 5.6 may no longer be guaranteed next year.
    PHP 8.4 compatibility fix #1 session handler add ReturnTypeWillChange while maintaining PHP 5.6 backward compatibility as session_set_save_handler() with more than two arguments are deprecated
    PHP 8.4 compatibility fix #2: Implicitly nullable parameter declarations deprecated in skins library
    Fixed - minor issue with search box type (button vs submit)
    Updated - Mesage for database error handling
    Updated - Added "php_flag short_open_tag off" in .htaccess
    Updated - PHPMailer 6.7.1 to v6.9.3
    Updated - HTMLPurifier 4.15 to v4.18
    Updated - jstz 1.0.6 to v2.1.1
    Updated - Composer 1.10 to v2.20.25 (LTS). Tested on PHP 8.4 as well with E_DEPRECATED silenced.
    Updated - Bootstrap 4.6.2 to 4.6.3 with our own custom fixes.
    Updated - Bootstrap 3.4.1 to 3.4.6 with fixes from 7pro.ca.

Release note (2025 March 17)
v2.2.9
    Errata #3 (July 25, 2025): v2.2.9-3. Added initial support for Bootstrap 5 CSS framework (still defaults to Bootstrap 4 for the time being), fixed more errors in PHP8.4, fixed incorrect custom header image display for Blog app, HTML (Web Pages) app will redirect to the frontpage if the first index page is called when the app is not the main frontpage application, fixed minor issues in default themes, fixed frontend edit control not loading if the main frontpage application is set to Landing Page, fixed Google Analytics block module, fixed menu generation for divider and parent submenu, removed "php_flag short_open_tag off" from the default .htaccess file as it causes errors on some web server under certain configuration.
    Errata #2 (June 10, 2025): More PHP8.4 fixes, updated FontAwesome 5 Free to 6 Free, fixed cookie issue if the CMS runs on non-standard port 80/443
    While SCHLIX CMS is currently still backward compatible with PHP 5.6 (which already reached its end of life in 2018), due to the changes in the recently released PHP 8.4, backward compatibility with PHP 5.6 may no longer be guaranteed next year.
    PHP 8.4 compatibility fix #1 session handler add ReturnTypeWillChange while maintaining PHP 5.6 backward compatibility as session_set_save_handler() with more than two arguments are deprecated
    PHP 8.4 compatibility fix #2: Implicitly nullable parameter declarations deprecated in skins library
    Fixed - minor issue with search box type (button vs submit)
    Updated - Mesage for database error handling
    Updated - Added "php_flag short_open_tag off" in .htaccess
    Updated - PHPMailer 6.7.1 to v6.9.3
    Updated - HTMLPurifier 4.15 to v4.18
    Updated - jstz 1.0.6 to v2.1.1
    Updated - Composer 1.10 to v2.20.25 (LTS). Tested on PHP 8.4 as well with E_DEPRECATED silenced.
    Updated - Bootstrap 4.6.2 to 4.6.3 with our own custom fixes.
    Updated - Bootstrap 3.4.1 to 3.4.6 with fixes from 7pro.ca.

Release note (2024 February 19)
v2.2.8-3

Errata #2: More PHP8.2, PHP8.3 as well as backward compatibility fixes for PHP5.6, also fixed potential low-risk SQL injection (no admin bypass, must already be logged in as admin user to exploit) when saving application alias from config, updated JQuery to v3.7.1, updated PHPMailer to v6.9.1 (February 19, 2024)
    Errata #3: Fix CVE-2023-31505