views 6.x-2.2

This release fixes a security issue. See SA-2008-075 - Views - SQL Injection for details.

Bugs fixed:

• #305756: Number formatting caused illogical rounding.
• #324272 by neochief: hook_pre_render never called.
• #324058: Broken queries created by string values in multiple fields.
• #324726: "tag" fields should be autocomplete in View edit.
• #324058 by yched: Make aliases safer for many to one tables.
• #325765: Prevent key merge errors on query::add_where and query::add_having.
• #324378: Minor usability improvements to the list page.
• #326934: Need another check to make sure already added aliases do not get blown away.
• #324513: If a relationship table was added more than 1 hop away from the base, SQL errors resulted.
• #326129 by mindgame: Not between operator did not function.
• #326198: != mistakenly typod as = (display only)
• #326379: Provide a default title for the archive view.
• #327151: Add filter for node_counter.timestamp.
• #327113: Clean up error text when display will not validate.
• #307287: (Panels related) view::preview() would override previously set arguments if no arguments were sent.
• #321589: Comment template preprocessor misnamed so it would not fire.
• #329746: Comment rendering in the node row style was not working.
• #321109: view::destroy() needs to unset current_display or future init_displays won't work.
• #325115: If the block description is not set, show the display title as well as the view name in block administration.
• #327604 by henrrrik: should use multibyte string functions.
• #328933 by cmyers: views_handler_filter_date fails to use exposed operator.
• #332568 by Moonshine: Correct views performance timers.
• #332679 by yched: render_link() does not check for empty data.
• #333593: Incorrect reference to non-existent views_handler_join in help/api-tables.html.
• #334337 by miro_dietiker: Documentation clarification for arguments, blocks and PHP Code plugins.
• #336456 by dww: Date filter had trouble with NULL operators.
• #336125 by nedjo: Missing filter for node translation.
• #337360: Menu selection causes crash if menu module not active.
• #339295 by katbailey: AJAX paging could fail with the same view in multiple tabs.
• #339676 by nedjo: Source translation had wrong filter handler.
• #340002 by hass: Allow the "Add display" button to wrap for translations whose phrase is longer.
• #340033 by pancho: Clearer wording on some field help texts.
• #340515: views_perm() was incorrectly views_ui_perm().
• #330897: Invalid displays causing 'path' lookup to crash.
• #339674 by nedjo: Translation code cleanup.
• #341897: views_perm() mistakenly declared in views_ui.module.

Other changes:

• Reorganize the analysis code into analyze.inc to make it easier for people to find the code and use it externally.
• #298884 by neclimdul: Requested missing filter to filter for whether a user has a picture or not.
• #336531 by dww: Set boolean filter to not use a checkbox which is lesser UI.
• #338632 by drewish: Remove use of format_rss_channel and use proper templating instead.
• #326034 by yched: Allow short names in admin summaries via new "title short" definition.
• #335613 by swentel: Add hook_views_api() setting to bulk export.
• #339707 by nedjo: Add filter to show child translations.
• #284768 by drewish: Proper templates for RSS feeds rather than format_rss_item().