Categories
Security & Updates

Mahara Update 1.7.3 released

Mahara 1.7.3  Stable releases are fit for general use. 

Mahara is an open source e-portfolio system with a flexible display framework. Mahara, meaning ‘think’ or ‘thought’ in Te Reo M?ori, is user centered environment with a permissions framework that enables different views of an e-portfolio to be easily managed.

Mahara also features a weblog, resume builder and social networking system, connecting users and creating online learner communities.

Changes Details

  • Unset deleted institutions as parent authority to other institutions
  • For private profiles, hide all profile information from logged-out users
  • Bug – Make sure user has permission to publish artefacts
  • Bug – Check if the block instance belongs to the view
  • Bug – Add alt and title tag for blocks
  • Bug – Add missing lang string for warning
  • Bug – Fix permissions of group area
  • Validate $_SERVER[‘HTTP_HOST’] before using it
  • Stop empty resume birthdate from auto-filling to Jan 1, 1970
  • LDAP support for LDAP URLs with non-standard ports
  • Bug – Missing lang string for group page with clean URL
  • Bug – Rss images rendering too large in external feed block
  • Bug – Fix for pagination when in edit blockinstance doing search
  • Fix display of the name of the sharing group on the Group Participation report
  • Reduce false positives in syntax checket for unbracketed SQL tables.
  • Correct Mahara 1.7 version number
  • Bug – New fix for the YouTube issue
  • admin/upgrade.php: Make installer jump to the bottom of the page when install is done
  • Bug – Returning red colour to the ‘cron is not running’ message
  • Bug – Revert “Add protocol to Youtube iframe code”
  • view/view.php: Squelch a “headdata already sent” warning
  • Bug – Fix “Loading” message issue.
  • Update PREG_CLASS_SEARCH_EXCLUDE to latest from Drupal 6
  • Bug – Add protocol to Youtube iframe code

Fixed Bugs

Security issues

  • Arbitrary image download
  • User supplied $_SERVER[‘HTTP_HOST’] can be used for injections
  • Not checking ownership of blocks before editing them

Other issues

  • Make profile information not avaialble for public when not shared
  • The embedded iframe filter doesn’t support scheme-relative URLs such as “//youtube.com” (now used in the YouTube and Vi$
  • Pager in search in a block doesn’t work
  • After installation, make the installer “jump” to the “Continue” link at the bottom of the page
  • When an auth instance is deleted, disable it as a parent authority
  • LDAP support for non-standard port LDAP Urls
  • Reduce false positives in syntax checker for unbracketed SQL tables
  • Alt tag in the artefact chooser panel only says “Preview”
  • Some RSS feed channel images are rendered too large in External feeds block
  • Missing lang string for group page with clean URL
  • Missing lang string for existing URL on allowed iframes
  • Uploading a file – “Loading” message remains
  • “Cron is not running” not displayed in red anymous
  • Page view throws headdata warning, if group submissions enabled
  • Undefined variable $id in group/report.php
  • Internal search ignores ‘KATAKANA-HIRAGANA PROLONGED SOUND MARK’

More Information

  • Start Mahara
    In order to use Mahara you need a domain name (ex. yoursite.com) and web hosting service.
    If you don’t have a domain name 
    Register a Domain Name.
    To install Mahara choose one of our hosting plans. (all our packages includes Softaculous).
  • Hosted Mahara
    Contact us if you don’t need a domain or hosting service, and want to use Mahara anyway.
[otw_is sidebar=otw-sidebar-7]

[otw_is sidebar=otw-sidebar-8]

Blog: News & Updates

[otw_is sidebar=otw-sidebar-5] [otw_is sidebar=otw-sidebar-6]
[otw_is sidebar=otw-sidebar-9]