AbleDesign

[Dan]

D-Man version 1.12 is now available and is presented on the online demo. Despite being a "point" release, the changes from v1.11 were pretty extensive.

Additions:

- when editing a download, the download_dir.php popup page is now enabled the same as with 'add' routines
- when validating a user account, clicking on the Validate button now automatically sets their account status to Active

Bug Fixes:

- fixed a bug in Netscape that kept the dropdown select boxes in add/modify/validate forms from displaying
- fixed a bug in the search form that kept the get_parent_id.php popup window from populating the main window with the selected Parent ID for downloads
- made some changes in the set_variables.php page to avoid header errors on some servers
- changed the D-Man version variable's name to not overwrite submitted version numbers when adding downloads

Miscellaneous:

- modified much of the user/downloads add/validate routines to allow you to easily add more fields to the database without having to make changes throughout the program
- changed variable naming on modify multiple routines to work consistently with various JavaScript functions
- changed the 'Title' column in the Downloads table (for new setups) to NOT NULL by default
- moved the maximum file size setting for uploads to a variable in config.php
- changed the browser checking routine to a faster method
- set_variables.php no longer requires numbering all the variables to be set, making it easier to add new variables in any order
- modified the code of several files to make the HTML pieces more easily editable

Cheers,
Dan

[Dan]

A potential security hole in D-Man v1.12 has been fixed. The error allowed someone who is logged in under a valid user account to download a file(s) that they are not authorized for, although it would have been rather inconvenient to take advantage of the bug.

The only file in the distribution that has been changed is download.php, so you will not need to update any of your other files.

Cheers,
Dan