GitLab

Manual.rst: add description for new attribute 'capture'.
AbstractBuildForm.php: implement adding attribute.

Implemented: file upload check for mime type and max file size.
File.php, AbstractBuildForm.php: Implement FE_FILE_MIME_TYPE_ACCEPT and FE_FILE_MAX_FILE_SIZE

For updates of QFQ prior to 0.17.0, do:   ALTER TABLE  `Form` COMMENT =  'Version=<your old QFQ version>'
DatabaseUpdate.php, DatabaseUpdateData.php: new class.
QuickFormQuery.php: Add DB UpdateCheck
Database.php: moved to new subdirectory `database`. Add 'ALTER' as a new SQL command.
FormAction.php, TypeAhead.php, Report.php, Sendmail.php, FillStoreForm.php, Store.php, AbstractBuild.php, Delete.php, Evaluate.php: Update path to Database.php.

Implemented defaultEscapeType. configurable via config.qfq.ini (global) and per Form.
Implemented max GET parameter lenght. Default: 50. BTW: in phpunit test there have been a parameter 'file' which exceeds the limit of 32.

Config.qfq: Skip empty variable names - happens in phpunit tests. Read new `systemEscapeTypeDefault`.
Constants.php: renamed  TOKEN_LDAP_ESCAPE_* to TOKEN_ESCAPE_LDAP_*. Add TOKEN_ESCAPE_MYSQL, TOKEN_ESCAPE_NONE
Database.php: Set charset to real_escape_string() functions properly. Proxy for mysqli::real_escape_string()
Evaluate.php: Respect global escapeTypeDefault. Implement
formEditor.sql: add column `escapeTypeDefault`. Add FormElement 'escapeTypeDefault'.

Manual.rst: small abstract about implemented security enhancements in QFQ.
Sanatize.php: New function urlDecodeArr(). Decode all _GET vars.
AbstractBuildForm.php, BuildFormBootstrap.php: form head now contains the honeypot vars.

Play: ALTER TABLE  `FormElement` ADD  `encode` ENUM(  'none',  'specialchar' ) NOT NULL DEFAULT  'specialchar' AFTER  `subrecordOption` ;
Play: formEditor.sql

Attention: FEs with text=editor needs actions - the default of 'specialchar' prohibits saving of HTML tags.

FillStoreForm.php: Submitted values will be specialchars() before copying to STORE_FORM.
AbstractBuildForm.php: Counterpart of FillStoreForm.php - will htmlspecialchars_decode() values read from database. Replace 'checkType' and 'checkPattern' with CONSTANTS.
formEditor.sql: Added new column in FormElement. Add new FormElement 'encode' in FormElement-Editor. Add column 'encode' to all FormElement records.

Manual.rst: Prefetch doc enhanced.
Ldap.php: replacement of '?' in LDAP search not processed with MODE_LDAP_PREFETCH - fixed. FE_TYPEAHEAD_LDAP_KEY_PRINTF renamed to FE_TYPEAHEAD_LDAP_ID_PRINTF
AbstractBuildForm.php: copy 'FE_TYPEAHEAD_LDAP_ID_PRINTF' to SIP seems never be done - fixed

#3552 / typeAheadLdapSearchPerToken - webpass kann nicht gleichzeitig nach Vornamen und Nachnamen suchen
Neuen Modus 'typeAheadLdapSearchPerToken' implementiert.
Manual.rst: neues Feature dokumentiert.
Ldap.php: Neue Funktion 'explodePermutSearch()'.

Implemented.

#3536 / a) Datum (datetime / timestamp) werden nicht angezeigt, b) Angezeigte Datumsformat String und aktzeptierte Eingabe matchen nicht
Neu wird bei QFQ date/time/datetime kein HTML INPUT type=date|time|datetime-local mehr generiert, sondern ein 'text' - damit verlieren wir die Browserinternen Datepicker (Chrome, Opera) aber gewinnen die Kontrolle die Datumsformateingabe zurueck.

Es war ein Vergleich mit Typ '===': geaendert auf typlos '=='.

#3502 / TemplateGroups: Checkboxen werden beim ersten Speichern (insert) nicht geschrieben - ein anschliessendes Update ist ok
Das Problem tritt nur auf bei MultiCheckboxen. Neu werden im Store  STORE_ADDITIONAL_FORM_ELEMENTS (ist bereits frueher, extra fuer Checkboxen, eingefuehrt worden) fuer alle TemplateGroup FEs (type=checkbox) die Fake Elemente angelegt. Dazu wird neu NAME_TG_COPIES in dem FEs gefuellt mit dem 'TG max copies'-Wert.

AbstractBuildForm.php: No primary record leads to a problem that the default values, given as an array, are not replaced by scalar values. fixed.

Manual.rst: update doc how to insert/update/delete non primary templateGroup records.
FormAction.php: removed $templateGroupIndex - solved implicit by defining a LIMIT on 'slaveId' . Implemented '%D' (one below %d). Implemented FE_SQL_HONOR_FORM_ELEMENTS - reduces unecassary SQL queries.
HelperFormElement.php: moved function 'explodeTemplateGroupElements()' to 'QuickFormQuery.php'
Database.php: remove call to explodeTemplateGroupElements() - not necessary at that place.
QuickFormQuery.php: fill STORE_RECORD during Formload - to read templateGroup records very early. Local copy of `getNativeFormElements()`, new `explodeTemplateGroupElements()`

Mode: typeAheadPedantic
TypeAhead.php: Implemented new parameter  TYPEAHEAD_API_PREFETCH.
Ldap.php: add new mode MODE_LDAP_PREFETCH
AbstractBuildForm.php: If FE_TYPEAHEAD_PEDANTIC is specified, add attribute DATA_TYPEAHEAD_PEDANTIC,'true'

Implemented the option to make a form `readonly`. this can be done statically or dynamically via variable (e.g. SIP).
QuickFormQuery.php, AbstractBuildForm.php: Force 'readonly' by overwriting FormElement individual 'mode' setting.
BuildFormBootstrap.php: Introduced new variable F_SHOW_BUTTON.

#3447 / Icons das man im FrontEnd direkt das gewaehlte FormElement im Formulareditor bearbeiten kann.
AbstractBuildForm.php: Add checkbox left to the 'EditForm'-Button to toogle the 'FormElemnt'-Icons -as the regular 'Form Edit'-Pencil, the 'FormElement Checkbox' is only displayed if the user is logged in BE.
BuildFormBootstrap.php: new function 'buildEditFormElementCheckbos()'

Manual.rst: Updated doc for a) config.qfq.ini: LDAP_1_RDN, LDAP_1_PASSWORD, b) Form.parameter|FormElement.parameter: ldapUseBindCredentials
ErrorHandler.php: removed details - the end user should not too many details.
FormAction.php, Ldap.php, QuickFormQuery.php: implement 'ldapUseBindCredentials'
Ldap.php: set_error_handler() to catch ldap_bind() problems. Always set LDAP_OPT_PROTOCOL_VERSION=3 - this might cause problems with som LDAP Servers - we will see.

#3447 / Icons das man im FrontEnd direkt das gewaehlte FormElement im Formulareditor bearbeiten kann
AbstractBuildForm.php, BuildFormBootstrap.php, BuildFormTable.php: Function createFormEditorUrl extended to accept parameter, to make it more generic (best would be to use the 'Link' class). Build the FormElement Edit symbol as together with debug stack symbols

''abel' and 'note' are fixed - 'value' is still not updated, open.
HelperFormElement.php: buildFormElementName() had some issue if there was no $formElement[FE_NAME] defined. New workaround: take the $formElement[FE_ID] instead.
AbstractBuildForm.php: creation of JSON has been missed - now fixed. The $value is rendered (recent value), but probably the client is not prepared to update a non-HTML-input field. This has to debug with RO.

Fixed missing initialisation of $storeUse.

#3431 / typeAheadSql: columnname 'key' is a reserverd SQL statement - replace by 'id'. Additional the parametername 'typeAheadLdapKeyPrintf' renamed to 'typeAheadLdapIdPrintf'.
typeAhead.php: fixed typo.
TypeAhead.php: introduced new mapping from 'id' (SQL) to 'key' (API).
AbstractBuildForm.php: Constant renamed.
Database.php: update function makeArrayDict() to reflect name mapping.

abstractBuildForm.php: through fix #2064 the FE.checkType has not been used anymore. This is fixed now.

AbstractBuildForm.php: for Form subrecord columns, the default width limit of 20 chars are disabled in 'nostrip' is specifed.

AbstractBuildForm.php: Saving 'extra' FE in STORE_SIP has been done with inappropiate FE_NAME. Correct is the pure FE_NAME, without any extension like recordId. Unessary and broken decoding removed.

HelpFormElement.php: Introduced new constants HTML_DELIMITER_NAME, HTML_DELIMITER_ID
AbstractBuildForm.php: Saving 'extra' FE in STORE_SIP has been done with inappropiate FE_NAME. Correct is the pure FE_NAME, without any extension like recordId. Unessary and broken decoding removed.

Fix #3420 / Quicklink 'editform' on form: directs to the current T3 page which might be insufficient
AbstractBuildForm.php, Store.php: Introduce new config.qfq.ini setting 'EDIT_FORM_PAGE'

AbstractBuildForm.php, qfq-bs.less: in templateGroup removed CSS class `qfq-delete-button` and applied `qfq-note-no-padding`. New CSS class will be applied to Delete Button in template groups.

OnArray.php: new function 'arrayValueReplace()'.
AbstractBuildForm.php: Load foreign values in templatGroups.

AbstractBuildForm.php: use of new OnArray::...() functions.

Typeahead (#3369): Parameternames has changed, configuration is possible on the Form and on the FormElement.
typeahead.php: if there is an exception, the message body is sent as regular 'content' for the dropdownbox. At the moment this is the only way to transmit any error messages.
Ldap.php: missing FE_TYPEAHEAD_LDAP_KEY_PRINTF, FE_TYPEAHEAD_LDAP_VALUE_PRINTF will be substituted by the other. If both missing, an exception is thrown.

BuildFormBootstrap.php: wrapping of optional 'submitButtonText' now done with the configured form wrap setup
qfq-bs.css.less: dislay characterCount inside of input/textarea element.

AbstractBuildForm.php: #3374 - textarea elements now contains 'maxlength' attribute. Implemented 'characterCountWrap'

Ldap.php: fixed implementation errors of first run.
AbstractBuildForm.php: set defaults for limit and minlegth. Implement function checkSqlAppendLimit()

TypeAhead.php: Reformat of various constants. Hard coded LDAP query replaced by one submitted via SIP.
KeyValueStringParser.php: Implemented explodeWrapped() - behaves like 'explode()' but will respect strings wrapped in quotes as no explodeable.
Ldap.php: New class to manage LDAP access.
AbstractBuildForm.php: Add attributes DATA_TYPEAHEAD_LIMIT, DATA_TYPEAHEAD_MINLENGTH. Parsing of FormElement.parameter.typeahead* parameter.