Downloads

Download tar.gz 15.96 KB
MD5: e04f1f3d2091f5a2abe98befe95f3ad2
SHA-1: 542fb4a30d283b456e1fb423cb46019be9fd0f8d
SHA-256: e57af78d2d29d3307b538d378327f97c7559d6cb3ea86719afb64e6a03f7d078
Download zip 19.12 KB
MD5: a5df0573719384b8f347e16d89e98cda
SHA-1: 6cb522c09695313f3ad2d30dfd48a40615298fee
SHA-256: a4504b13af2059322fb568b010d4a960843aed646ce2f597daf9006b9d12e124

Release notes

New features:
- #86875: Deleting invites of users that are about to be deleted. Orphaned invites will be cleared out when visiting http://www.example.com/update.php.
- #118823 Invite API: Add inviter to API arguments when deleting an invitation.
- Reusing user_password() for invite code generation.

Bugs fixed:
- #118849: Fixed missing delete link, despite "Allow deletion of joined users" is enabled (only true for deleted user accounts).
- #110795: Fixed the possibility for a maliscious user to reuse one invitation code over and over again.
- #106962: Fixed misleading watchdog error 'Registration code failed'.
- #106962 by knseibert: Fixed changed form_id for user settings form (5.x only).
- #118826: Verifying the user that tries to delete an invite. Previously it was possible to delete arbitrary invites if you knew its email address (or by using brute-force methods).
- Fixed several missing checks for an expired invitation code when a user tries to register.
- Fixed doubled expiration time calculation on invites page.
- Fixed unblocking of new user accounts, which was not limited to invite only mode. This broke sites where administrator approval for new user accounts is required.
- Fixed the notification that is displayed for the inviter when an invited user registers.
- Fixed queries for PostgreSQL.
- Fire 'invite' API event only if send was successful.
- Updated the database scheme to be more performant.

Created by: smk-ka
Created on: 12 Mar 2007 at 20:17 UTC
Last updated: 1 Aug 2018 at 19:44 UTC
Insecure
Unsupported

Other releases