project 5.x-1.3

This release fixes two security vulnerabilities described in DRUPAL-SA-CONTRIB-2009-001. Sites are urged to upgrade immediately. In addition to these security updates, this release includes the following changes since version 5.x-1.2:

Project module

Bug fixes

• #235037 by aclight and dww: Fixed critical bugs in project_page_overview() query and logic. It wasn't using the {project_release_supported_versions} table, so download links were sometimes pointing to the wrong releases.
• #239240 by aclight and hunmonk: Fixed bug where browse by date only worked with project_release and taxonomy modules (for no good reason).
• #211188 by aclight: Fixed bug where project node teasers were different when filtering by a version which was caused by the node type not being included in the query for the project browsing pages.
• #233052 by aclight: Fixed bug with hook_project_page_link_alter() when a project disables its issue tracker.
• #327285 by dww: Fixed bug introduced in #218571 where release-related links were added to project nodes that had disabled releases.
• #293148 by dww and wsherliker: Fixed some minor accessibility problems with the project quick navigation block (added title attribute to the drop-down and added better validation to give a meaningful error).
• #231558 by dww: Removed the stale 'release_directory' column from the {project_projects} table.
• #253914 by scor and aclight: Fixed typo in taxonomy help page.
• #256975 by aclight: Fixed PHP notice in project_taxonomy(). In 5.x, hook_taxonomy() takes an array, not an
  object, as the 3rd parameter.
• #231392 by dww: Minor fixes to a comment (pointing to the wrong issue nid and some wording/formatting).

New features

• #168819 by Crell, aclight, and dww: Added a block that provides a search box restricted to project nodes if search.module exists.
• #157514 by Gabor Hojtsy, dww, and moshe weitzman: Added ability to retrieve an XML list of all projects.
• #342476 by dww: Consolidated the project node UI by floating the link sections ("Resources", "Support", etc) into a 3 column layout.
• #310446 by dww: Added a 'Search issues' link under the various view links on project nodes.

Project release module

• #231614 by aclight and hunmonk: Prevent database errors in project_release when API compatability terms are not defined.
• #204140 by dww: Fixed project-release-create-history.php to produce the right XML from the new
  {project_release_supported_versions} schema from #203313 and #176776, which update_status uses thanks to #197186.
• #232812 by dww: Fixed a bug in the generation of release history files where a development version could be recommended instead of an official release due to not sorting to ensure -dev are always last.
• #126554 by dww: Fixed (hopefully final) edge case bug when the packaging script is publishing the first release for a new major version. Now, after all the release nodes have been published, the packaging script invokes project_release_check_supported_versions() on each project/major version that was created or updated to ensure that the {project_release_supported_versions} table is still valid. This commit also moves the code to clear the download table cache out of hook_nodeapi() into project_release_check_supported_versions().
• #235035 by aclight, agentrickard: {project_release_default_versions} table is not dropped in update 5200.
• #286430 by slantview, aclight and dww: Moved the definitions of constants that used t() to inside hook_menu() so that the global locale variable is already initialized (improves performance).
• #97145 by aclight: Always allow users to leave the version alone when replying. This allows the currently selected version to appear on an issue, even if it happens to be unpublished.
• #267854 by dww: Fixed wrong menu title when adding a release node.

Project usage module

Bug fixes

• #319427 by jdubbwya and drewish: Fixed bug where the project_usage tables were not being droped during uninstall.
• #271288 by greggles: Fix duplicate insert errors in project-release-serve-history.php when recording usage statistics. This may not make the problem go away entirely, but using this approach should reduce the window for the race condition.
• #344344 by drewish and dww: Fixed bug where weekly usage stats were not processed if there is a full week of data but the script was run less than 1 week ago. The script now processes weekly data if there's a full week (or more) of data since we last processed, not necessarily if there's been a full week of wall-clock time since it last ran.

New features

• #168009 by drewish and dww: Added code to help prevent (at least limit) project_usage abuse by also recording the IP address.
• #165380 by drewish (mostly), with dww, hunmonk, pwolanin, and aclight: Added /project/usage to make usage statistics visible. Related issues:
  • #325444 by dww and sun: Made usage statistics EVEN MORE visible. Added links to the stats from project pages and release nodes, and fixed up the stat pages themselves to provide links back to various things (since the breadcrumbs are easily overlooked, and using a link as a page title is inconsistent with the rest of Drupal).
  • #327548 by gpk, aclight, dww, webchick, drewish, greggles: Improved help text at the top of the project usage pages.
  • #326031 by dww: Changed links in the project/usage overview table to use the project short name (e.g. project/usage/drupal) as the URL, instead of the project node id (e.g. project/usage/3060).
  • #326094 by drewish (with minor changes by dww): Changed project and release usage statistics pages to use charts from Google chart API in addition to displaying the tables of raw data. See also #347159.
  • #348578 by drewish: Don't display any usage stats for releases with no data.
  • #348578 by dww: Fixed the text when there's an empty project usage table. If there are no rows in the usage table, it just means there are no releases with usage data, not necessarily no releases at all.
  • #348562 by drewish: Added IDs to the usage tables for easier theming and JS.
• #326197 by drewish, dww and hunmonk: Moved usage processing into a separate script and fixed various bugs including showing empty weeks and eating data when you tried to process from the wrong timestamp.