Glad to announce the release of AjaXplorer 4.1.0 in the « dev » channel, fixing problems introduced by php5.4.0, adding a couple of low level features to improve performance and prepare forthcoming features, and fixing a lot of known issues (see detail changes below). Please test, report bugs, and let’s move on to the stable.

As a reminder, the minor version number 4.1.0 is odd, which means this AjaXplorer release is considered a « development » release, and once tested and bugfixed, it will come back to the « stable » channel under the 4.2.0 name. Actually, changes are not that huge, so it should not be too dangerous to upgrade, particularly if you want php 5.4 support. But if you have a conservative upgrade policy, you should definitely wait for the next stable release.

• License : Affero GPL
• Copyright : Charles du Jeu 2012
• Version number : 4.1.0
• Download : ajaxplorer-core-4.1.0.zip
• Install instructions : see the 4-steps installation guide
• Demo : http://ajaxplorer.info/demo

Upgrade from 4.0.4

Even if not a « stable » release, upgrade is possible via the automatic upgrade mechanism :

• Go to Settings > Global Options > Plugins > Update Engine and edit the plugin configuration
• Switch the « update channel » from « Stable » to « Development » and save the configuration
• Check for new update, the package 4.0.4-4.1.0 should appear
• Apply the update
• There is a little trick for this update : during upgrading, by default the new config file conf/boostrap_context.php does not override your current version installed. Now either remove the old version and override it with the new one (that was dropped inside conf/ folder with a « .php.new.date » extension), or at least manually include the following change in your old version :
  Add the following at line 46:
  define(« AJXP_PLUGINS_MESSAGES_FILE », AJXP_CACHE_DIR. »/plugins_messages.ser »); 

Changelog

[CORE & ACCESS DRIVERS]

• PHP 5.4 Support : Call-time pass by reference are deprecated, replace static calls to DOMDocument::loadXML
• Cross-Repository copy : two successive node expand changed the current repository to the destination repository (switch back replaced twice).
• Core : Fix mkdir() call for the cmd_outputs folder
• Metadata loading : Set a « hidden » metadata to a passed node
• Access.fs : handle symlinks more properly
• Access.fs : Filter files and folders when creating Zips, using PCLZIP_CB_PRE_ADD callback
• Access.smb : Clean URL everywhere, pass the Locale as environnement variable when defined
• Access.fs : Big typo error making the « nodeName » resetting useless
• Access.smb : override makeZip and allow its usage (by plugin configuration), as it can be an option when on a very fast network connection.
• Access.smb : fix « + » in folder name, use rawurldecode() instead of urldecode()
• Open_basedir : Multiple files downloads broken, do not « patch path » in readFile function when on the realFileSystem.
• Core.conf : Add a $context parameter to the user save() method, to avoid « over saving » data : if context is « superuser », save preferences and rights, where as in context « user » save only preferences.
• Core.uploader : should solve the problems of setting the upload limit.
• WebDAV Server : detect MiniRedir user agent
• Synchro : Recursive listing implementation & hooks applyCondition for better performances. Testing synchro tool
• Synchro : Various tricks to trigger the metadata updates from outside, and webdav optims

[AJAX GUI]

• Client Session timer: hook to « ajaxplorer:longtask_xxx » events to avoid disconnecting during very long task (namely uploads for the moment)
• Remember me : reported from 4.0.3 branch
• Tpl Logo image : Wrong content type header
• Massive deletion : POST instead of GET
• Error Message : Restyle message box (max height), fixed broken carriage return
• JSPacker : rtrim windows line feed

[OTHER PLUGINS]

• Conf.sql : Auto detect « objects » preferences and serialize them in the DB, adding the $phpserial$ prefix. Fixes AJXP_WEBDAV_DATA of users, as well as PLUGINS_DATA used by notify.phpmail
• Editor.diaporama : fix the « navigator » when the is a marginTop on the thumbnail, encodeURIComponent before triggering download action, otherwise breaks (e.g. & in file name)
• Editor.zoho : as reported by zoho support team, the Secret Key is in fact deprecated and no more necessary, apply node.before_change hook before saving
• Editor.pixlr : apply node.before_change hook before saving
• Editor.imagick : do not inverse slashes if not necessary!
• Editor.video : Pass alternate videos versions in the metadata, and set them as HTML5 video source (require an external pre-encoding)
• Index.lucene : ignore case for determining content-indexed extensions
• Uploader.* : trigger events ajaxplorer:longtask_starting / ajaxplorer:longtask_finished
• Auth.ftp : Force call to getServerFeatures() when coming from the login operation.
• Auth.ldap : Jon Peck ldap contrib : ability to configure DN as an array and iterate through them
• Meta.svn : manually set a library path to access the SVN commands.
• Meta.filehasher : new utility for accelerating synchronization, compute and store file md5 in metadata (if metastore active) and delete on file change.
• Action.powerfs : Fix zip delegation : do not sleep for one second, change the download mechanism, and place the zip inside the temporary folder, otherwise it makes problems for read-only folders. Allow compression when using powerfs in read mode, Todo : exclude hidden files from zip operation using an exclude list,
• Action.share : AjxpSharedDriver avoid error on empty glob(), fix typo error

[PERFORMANCES]

• Performance hunting : cache slow processing data when possible (registered extensions, messages, etc), either in memory (static var) or in cache files.
• New cache file : Define plugins_message.ser file cache, contains all i18n messages (collecting them was very long).

[TESTS AND INSTALL]

• New config file : New optional config file to set the configs that must be set before anything else : LOCALE, TMP_DIR, INI_SET
• Test.gpc : Totally commenting magic_quote_gpc breaks JSON if magic_quote is active!
• Test.writeability : Call is_dir silently to avoid error triggering and let the diagnostic tool run
• Tests failed : Suggest changes (in the new bootstrap_conf.php file)
• Documentation : Plugin Info XML, ability to browse many plugins folders (experimental)
• Security : Reported from 4.0.4 branch

•  Sharing : generate « Public link » for files and send them directly by email or in the clipboard, or send selected file directly as email attachment.
• Listening to the complaints, improved the Media Player, to play a whole folder containing audio or video, and better fullscreen handling for videos.
• Security fix if someone accesses the physical device

• Retina launch and icon for new iPad
• Implementation of the AjaXplorer sharing mechanism for files : « public links » generation and send by email automatically. Plus ability to send the file as attachment directly.
• « Open with » action available for every files (long press on a file).
• Fixed security issue if someone can access the device backups

More info on http://ajaxplorer.info/extensions/ios-client/

Enjoy.

Charles

This is a very important security upgrade for the 4.0 branch. A vulnerability was discovered that could allow a non-logged user to access other files on the server file system. The « remember me » mechanism was also improved to lower the session hacking probability in case of « cookie stealing ».

If you are still running the 3.2.4 version, switching to the latest 4.0.4 version would be a good idea for both security and stability reasons. But if it’s not possible there is a patch available for upgrading to version 3.2.5 (see below). Please note however that this 3.2.5 is more or less considered « end-of-life » release for the 3.2.X branch.

Please refer to the AjaXplorer 4.0 release if you are installing for the first time or want to upgrade from 3.2.4.

v4.0.4

• License : Affero GPL
• Copyright : Charles du Jeu 2011
• Download : ajaxplorer-core-4.0.4.zip
• Install instructions : see the 4-steps installation guide, or use automatic upgrade in the application.
• Demo : http://ajaxplorer.info/demo

v3.2.5

• Full package : ajaxplorer-core-3.2.5.zip
• Upgrade 3.2.4 to 3.2.5 : ajaxplorer-upgrade-3.2.4-3.2.5.zip

Changes with the previous version include :

• Huge performance improvement when parsing server response (listing files and folders)
• Images Preview : go to next/previous image with a finger swipe, switch to full screen by tapping.
• Images Preview : pass the server the dimension of the screen for a better thumbnail size. Only supported by AjaXplorer 4.0.3
• Auto-add server : when browsing to AjaXplorer ( > 4.0.3) via a web browser, click and add the server url to the remote servers.
• Deep refactoring of the code to separate the pure « Http AjaXplorer Client » from the Android specific displays. Should be transparent to the user.
• Fixed many crashes as reported automatically by the users.

See the dedicated page for more info : ajaxplorer.info/extensions/android/.

This is a bugfix for 4.0 branch, the update is available automatically via the upgrade tool in the application. See the detailed changelog below. Basically it fixes side-effects bugs introduced by the previous release. Next important new features will probably be in the dev branch for a while.

Please refer to the AjaXplorer 4.0 release if you are installing for the first time or want to upgrade from 3.2.4.

• License : Affero GPL
• Copyright : Charles du Jeu 2011
• Version number : 4.0.3
• Download : ajaxplorer-core-4.0.3.zip
• Install instructions : see the 4-steps installation guide, or use automatic upgrade in the application.
• Demo : http://ajaxplorer.info/demo

Changelog

You’ll find below a description of all changes made since version 4.0.2.

 [Fix side effects of previous release]

• Revert bootstrap_context commited once again with setlocale uncommented.
• PHPCLI test : detect the disabled functions to avoid ugly error at startup!
• The open_basedir fix for zip browsing was breaking the zip extension on download.
• Test glob result in upgrader
• Locked file could save content even if hook node.before_change returned an exception.

[Access Samba]

• Make smb access more robust : configure smbclient path, blur credential in debug, get the procopen error stream, etc…
• Access.smb : handle Windows case for smbclient+cygwin install. Nice!
• Fix a couple of samba tweaks, plus shared links when using auth.smb/access.smb, may impact other auth.** drivers
• Update access.smb documentation

[Users number scalability]

• New options for the ShareCenter : Ability to pass a regexp pattern to AuthService::listUsers()
• Touch a file in the cache to avoid triggering countAdminUser() if not necessary (ie do it only the very first time). Can be very long when a lot of users!

[Android client redirection]

• Adapt iOS GUI Plugin for Android as well, ability to set the app url via the configurations.
• Handle the skipANDROID parameter & cookie

[Other]

• Editor.diaporama : defer cache cleaning hook
• Editor.diaporam : allow the client to ask a specific thumbnail dimension => useful for mobile devices!
• Make joomla_auth_remote function more robust, when the HTML cannot be correctly parsed by a DOMDocument.
• Auth.remote MASTER_XXX variable documentation update, along with the website How-To.

This is a bugfix for 4.0 branch, the update is available automatically via the upgrade tool in the application. See the detailed changelog below. Among other, it fixes a potential security issue that could allow someone logged to get access to unauthorized .txt files on the server. The upgrade is of course HIGHLY recommended.

Please refer to the AjaXplorer 4.0 release if you are installing for the first time or want to upgrade from 3.2.4.

• License : Affero GPL
• Copyright : Charles du Jeu 2011
• Version number : 4.0.2
• Download : ajaxplorer-core-4.0.2.zip
• Install instructions : see the 4-steps installation guide, or use automatic upgrade in the application.
• Demo : http://ajaxplorer.info/demo

Changelog

You’ll find below a description of all changes made since version 4.0.1.

[Security]

• Fix a potential XSS via the doc feature

[Hooks]

• Ability to apply callbacks in a « deferred » way, i.e. after the output is sent to the client. Drastically increasing user experience.
• New hook « node.before_change », to be used by locking plugins

[Access drivers]

• Moved global parameters « hide folder, show hidden files, etc » to the filesystem_commons mixin.
• Test HIDE_XXX is not empty, otherwise there are false-negatives
• Try to chmod 755 publiclets to make sure they are executable.
• Typo error in the fixPermissions() routine
• Access.fs : Deploy various strategies to go around open_basedir php inconsistencies.
• Access.fs : Use copy() when driver is not remote, it’s much more efficient
• Access.fs : X-Sendfile needs UTF8
• Action.powerfs : Do not sleep() at the end of the archive creation, otherwise the zip_operation file is created again
• Access.fs : « Purge » action was commited commented

[Gui]

• Place the window.opener tentative inside a try/catch to avoid permission error
• Adapt tree scrolling when focusing on a given node, + compile
• Fix dragndrop & scrolling problems.
• NL2BR for line feeds in the notification body
• Editor.browser : url broken if there are paremeters in the current url
• Editor.browser : Filehandle left open, was breaking download on CentOS

[Plugins]

• Meta.simple_lock : Simple « locking » implementation : manually lock/unlock files to other users.
• Action.skeleton: custom_target_url typo error
• Auth.ftp : Translate FTP dynamic login screen / Translate yes/no options
• Uploader.flex : FlexUploadProcessor, double utf8 decoding was breaking special chars!
• Uploader.html : Make sure no to close the uploader if some file is still loading
• Uploader.html : Fix the allowed extension mechanism
• Access.ajxp_conf : fix MIXIN_MESSAGE appearance in Wallet data
• german translation for action.share
• Fix uploaders ALLOWED_EXTENSIONS usage (comma separated list), and text for other uploaders to enable flex if it’s the only one.

[Core & Language]

• Add a new test for detecting the CLI php
• Catch exception in webdav backend and encapsulate in a webdav error.
• Fix compat version of json_decode, and make sure to expect the « assoc » version of the function, as the compat version only support this (not the stdClass). Was breaking upgrade for php5.1.X
• Weirdness in serializations with the inferOptionsFromParent property, seem to be fixed by setting it private with getter/setter. Was breaking share metadata in templates children…
• For php 5.1, the protected nature of the properties fail, do not call them directly, use the getter() instead.

See http://ajaxplorer.info/documentation/administration/chapter-howtos/going-further-with-custom-variables/

• Login with your standard AjaXplorer login and get direct access to your repositories. Authentification already supports Basic Http as well as self-signed SSL certificates.
• Preview image files using the built-in previewer (that will use lightweight thumbnails generated by AjaXplorer when possible).
• Select media from your device library and upload directly to the server. We also recommend installing OI FileManager to be able to pick any file on your SDCard for uploading to the server.
• Stream audio / video to your iPhone (server version must be greater than 3.4 for this, otherwise the file be downloaded first before viewing).
• Edit textual files inside the application and save them back to the server
• Open any file types with external applications installed on your device
• And of course, perform standard file actions like moving items accross folders, deleting them, or creating new folders.

See the new dedicated page on the website for more info : ajaxplorer.info/extensions/android/. A special thanks to Daniel Lentz who helped debugging this first version and provided the Swedish translation. If you are interested in translating the application in your own language, please write to android (at) ajaxplorer (dot) info.

Like the iPhone/iPad application, it is not free as the rest of the platform, but I’m sure that any AjaXplorer happy user can understand why. This very first release will probably see upgrades coming in the forthcoming weeks, after passing the crash test of being installed on an awful lot of different devices, so please be patient, and do not hesitate to report problems.

[Edit] The first feedbacks seemed to indicate that the application were not working with AjaXplorer 3.2.4 (but ok with 4.0.x), nor with self-signed certificate. The package is already uptodate on the market, so this should be fixed. For the very early downloaders, you should be able to update on the Android Market[/Edit]

This release includes following changes :

New Features

• Basic HTTP Authentification support
• Autolock the application with a PIN code.
• « Pull to refresh » implementation (replaces the reload button)
• Preloading photos in background when viewing them.
• Send an image by email
• New application icon, to reflect ajaxplorer 4 changes.

Bugfixes

• Rotation was not working once in a sublevel
• Host & label legends were switched
• Problem when successive copies from external application
• Session problem when defining two servers with different users