text/microsoft-resx
2.0
System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089
For a complete list of all bug fixes and enhancements, please see the <a target="_blank" href="http://support.dotnetnuke.com/project/Project.aspx?Tab=Changelog&PROJID=2">official change log</a>.
Below is a summary of the major features for each release. For more information about a specific issue please refer to the <a target="_blank" href="http://support.dotnetnuke.com/project/Project.aspx?Tab=Changelog&PROJID=2">official change log</a>.
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issues with the URL Rewriter.  There were several issues which could result in unreachable pages using friendly URLs.  We have added in validation logic to prevent pages from being created which would violate folder naming standards or which would result in two pages receiving the same Human Friendly URL.</li>
<li>Fixed longstanding issue in the file based caching provider.  There was invalid logic in the caching provider which prevented it from working correctly.  The provider has been re-written to resolve the problem and provide a stable platform for web-farm scenarios.</li>
<li>Fixed several dictionary errors.  These errors mostly occurred under heavy load or were otherwise intermittent.  Dictionary usage was evaluated throughout DNN and updated to utilize thread-safe approaches for updating and caching the dictionary.</li>
<li>Fixed an issue that prevented users in certain locales from adding modules to div based panes.</li>
<li>Added a new default skin that is more contemporary</li>
<li>Added a new default template that removes much of the clutter and unnecessary information.</li>
<li>Added a new Text skin object that allows you to add localized text to your skin.</li>
<li>Added a new Styles skin object that allows you to insert additional stylesheets into the page header.  Stylesheets can be optionally included using IE Conditional Comments.</li>
<li>Enhanced the Search skin object to include the option to display a dropdown list of web/site search options.</li>
<li>Enhanced the Update Notification Service to display information on new language packs that are available for locales which are currently installed.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li><span class="NormalRed">Critical </span>- <a target="_blank" href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno21/tabid/1174/Default.aspx">Authentication blindspot in User functions</a></li>
<li><span class="NormalRed">Critical </span>- <a target="_blank" href="http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryID/1987/Default.aspx">Validation failure in Repository Module</a></li>
<li><span class="NormalRed">Critical </span>- <a target="_blank" href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno23/tabid/1176/Default.aspx">Validation failure when loading skins</a></li>
<li><span class="Normal">Low </span>- <a target="_blank" href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno22/tabid/1175/Default.aspx">Information leakage in Install Wizard</a></li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 4.9.0 packages.  Please see the specific project pages for notes on what bugs or enhancements were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleDocuments/tabid/826/Default.aspx">Documents 04.01.00</a></li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleEvents/tabid/833/Default.aspx">Events 04.00.02</a></li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleHelp/tabid/850/Default.aspx">Help 03.00.02</a></li>
<li>HTML 04.08.01</li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleLinks/tabid/857/Default.aspx">Links 04.00.01</a></li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleNews/tabid/847/Default.aspx">NewsFeeds 04.00.00</a></li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleRepository/tabid/830/Default.aspx">Repository 03.01.15 </a></li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleSurvey/tabid/837/Default.aspx">Survey 04.50.00</a></li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleUserDefinedTable/tabid/877/Default.aspx">UserDefinedTable 03.05.01</a></li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleWiki/tabid/848/Default.aspx">Wiki 04.01.00 </a></li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ProviderFCKeditor/tabid/934/Default.aspx">FCK Html Editor Provider 02.00.02</a></li>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ProviderAuthentication/tabid/840/Default.aspx">AD Authentication Provider 01.00.04</a></li>
</ul>
What's New in {0}
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue with the cache which was preventing proper operation of the
scheduler.</li>
<li>Fixed issue with web crawlers which could cause thrashing in the cache</li>
<li>Fixed issue with the EventQueue to remove events that result in an
error. This prevents an event from filling the event log with errors.</li>
<li>Fixed issue with the RoleController.GetUserRoles method which introduced
a breaking change in 4.9.0.</li>
<li>Added a new column to the version table to distinguish between Community
Edition and Professional Edition installs</li>
<li>Added a new feature for logging server restarts in a web farm
environment.</li>
<li>Added a new admin Dashboard page. The dashboard provides a single
page where hosts can view an overall snapshot of their site.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li><span class="NormalRed">Critical </span>- <a target="_blank" href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno24/tabid/1188/Default.aspx">
User can access additional roles for which they do not have permissions</a></li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 4.9.1 packages.  Please see the specific project pages for notes on what bugs or enhancements were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li><a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ModuleDocuments/tabid/826/Default.aspx">
Survey 04.60.00</a></li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>
<a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ProviderAuthentication/tabid/840/Default.aspx">
AD Authentication Provider 01.00.05</a></li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul >
<li>
Added <a href="http://jquery.com/" target="_blank">jQuery</a> support
to the core platform.  jQuery will now be distributed as part of the
DotNetNuke installation and will be available for use by module developers.</li>
<li>
Added support for Internet Explorer 8 Web Slices.  Administrators can
configure any module to use IE8 Web Slices including the ability to set
time-to-live and expiration values.</li>
<li>
Removed distinction between admin modules and pages and normal pages.  This
allows administrators to easily delegate access to any portion of the
application to any group of users.</li>
<li>
Updated the installation services to support manifest files for all
extension types.  Now skins, containers, providers and modules are all first
class citizens that can be installed and uninstalled.</li>
<li>
Expanded XHTML, WCAG and ADA compliance.</li>
<li>
Refactored core to improve support for Unit Testing.  Refactored several
core classes to use interfaces and added a simple component factory to
provide dependency injection support. </li>
<li>
Added ability to deny permissions in the permissions grid.  This new feature
extends the permission framework to give administrators greater flexibility
in defining permissions.</li>
<li>
Added Widget framework.  The new Widget framework allows you to quickly add
JavaScript/html widgets to your site with very little effort.  The framework
supports the use of a simple object tag based representation which means you
don’t have to know JavaScript in order to add the widgets.</li>
<li>
Added new Object notation for using skin objects in Skins.  Skin designers
will no longer need to include separate XML files when creating and
packaging skins.  No more funky “[SKINOBJECT]” tags littering your html. 
This significantly simplifies the process of creating skins and further
opens up skin development to a broader group of designers.  If you include a
simple JavaScript reference in your HTML skin, you can even get a full
WYSIWYG experience when designing your skin.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>Includes a rollup of all 4.x security fixes</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.0.0 packages.  Please see the specific project pages for notes on what bugs or enhancements were corrected with each release.</p>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>
<a target="_blank" href="http://www.dotnetnuke.com/Products/Development/Forge/ProviderAuthentication/tabid/840/Default.aspx">
AD Authentication Provider 05.00.0</a><a href="http://www.dotnetnuke.com/Products/Development/Forge/ProviderAuthentication/tabid/840/Default.aspx">0</a></li>
</ul>
<p>
In addition to these highlights there are literally hundreds of bug fixes in
this release.</p>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Added the ability to perform permanent redirect from an existing page
using the page settings screen.</li>
<li>Fixed issue with the permanent forms authentication cookie which cause
problems in SSO environments.</li>
<li>Fixed issue which required a workaround to import page templates into a
portal</li>
<li>Fixed a caching issue which prevented modules from being properly cached
if they used a specific caching method overload</li>
<li>Fixed issue which resulted in an error installing the Broadcast Polling
Provider</li>
<li>Fixed tab redirect issue which allowed a user to directly navigate to a
tab which was supposed to redirect to another URL</li>
<li>Fixed a continuous redirect issue which occurred when trying to upgrade
from early 4.x releases to 4.9.1</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>None</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 4.9.2 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>None</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>FckEditor Provider 2.0.3</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Added the ability to automatically update user roles without requiring
the user to logout and log back in.</li>
<li>Changed the user deletion code to use a soft-delete rather than removing
the user record. This ensures that modules like the Forums behave
correctly for a previously "deleted" user.</li>
<li>Added IP logging to the User's table to capture the last IP address from
which a user logged in. </li>
<li>Fixed breaking change with case sensitivity in the name of skin panes.
This fix restores the case-insensitivity of previous DotNetNuke releases.</li>
<li>Fixed breaking change with ModuleId in DotNetNuke 5.0 which changed
ModuleId to a readonly value.</li>
<li>Fixed breaking change in CBO.FillDictionary to restore previous
behavior.</li>
<li>Fixed breaking change which prevented legacy skins from being installed
when using the auto-install option.</li>
<li>Fixed breaking change which prevented updated DLLs from being replaced
when repairing a module installation.</li>
<li>Fixed breaking change in HumanFriendlyUrls which prevented querystrings
from being properly read when using HumanFriendlyUrls</li>
<li>Fixed breaking change in legacy modules which would not store a zip file
which was not designated as a resource file.</li>
<li>Fixed breaking change in legacy modules which ignored zip directories.
DNN 5 changed this behavior.</li>
<li>Fixed breaking change in default.css which resulted in changes to
existing skin layouts.</li>
<li>Fixed issue with roles module which prevented users from delegating role
administration to a non-admin user.</li>
<li>Fixed issue which prevented some users from logging out due to the
inability of the system to detect their country.</li>
<li>Fixed issue with Module Action Menu which prevented it from opening
links in new windows.</li>
<li>Fixed issue that results in an error when the Cache logs an error under
the new CACHE_ERROR event type</li>
<li>Fixed a packaging issue with FCKEditor which caused the LinkEditor to
cause an unhandled exception.</li>
<li>Fixed an issue which resulted in the system not being able to display
the portalaliases screen</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>Fixed version nformation leakage issue in the install wizard</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.0.1 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>Forms and List 05.00.00</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>FckHtmlEditorProvider 2.0.3 </li>
<li>AD Provider 05.00.01</li>
</ul>
What's New
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Add Office 2007 File Extensions to default allowable file extensions in Host Settings</li>
<li>Add reference to SQL Server 2008 to Install Wizard to make it clear that SQL Server 2008 is supported</li>
<li>Moved Whats New Module/Page to Host menu as it contains content which is not applicable to the Administrator</li>
<li>Corrected a problem with "Auto" installation option which would occur when using a non-dbo database user</li>
<li>Inline updates to Text/HTML were not HTML encoded when stored in the database</li>
<li>App_Browser renamed to App_Browsers in order for ASP.NET to recognize it incorrectly</li>
<li>Pages in the navigation menu linked directly to a file no longer served the file correctly</li>
<li>Can not delete Portal if search items exist in the database which are associated to the portal</li>
<li>Removed None Specified option for Folders in Page Export feature as it could cause an error if a user clicked Export without selecting a folder.</li>
<li>Fixed major performance issue when adding new portals which would cause the system to unload and reload all cached objects</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li><span class="Normal">Low </span>- <a target="_blank" href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno25/tabid/1260/Default.aspx">HTML/Script Code Injection Vulnerability</a></li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 4.9.3 packages.  Please see the specific project pages for notes on what bugs or enhancements were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li><a target="_blank" href="http://www.dotnetnuke.com/Development/Forge/ModuleAnnouncements/tabid/924/Default.aspx">
Announcements 04.00.02</a></li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>None</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed a major module caching issue which resulted in empty content for webcrawlers</li>
<li>Improved performance of FormatRemoveSQL method</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li><span class="Normal">Low </span>- <a target="_blank" href="http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno26/tabid/1275/Default.aspx">Errorpage information leakage</a></li>
<li><span class="Normal">Low </span>- <a target="_blank" href="http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno27/tabid/1276/Default.aspx">HTML/Script Code Injection Vulnerability</a></li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 4.9.4 packages.  Please see the specific project pages for notes on what bugs or enhancements were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li><a target="_blank" href="http://www.dotnetnuke.com/Development/Forge/ModuleAnnouncements/tabid/924/Default.aspx">
Announcements 04.00.03</a></li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>Removed the AD Provider so that it cannot be installed by the Install
Wizard. It can still be manually installed.</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Added Content Versioning and simple workflow to the HTML module.</li>
<li>Added Admin Console module to simplify access to administrator and host
pages</li>
<li>Added publicly accessbile skin engine lifecycle events</li>
<li>Added audit trails to core system tables</li>
<li>Added built in support for Google Analytics</li>
<li>Added custom sitemap priorities</li>
<li>Enhanced the permission system to use the provider model, allowing for
custom permission providers</li>
<li>Enhanced caching to enable access by distributed caching systems</li>
<li>Enhanced installation and upgrade logic to automatically detect .Net 3.5
and to upgrade the web.config as appropriate.</li>
<li>Enhanced the extensions pages to show which modules are used and to show
the pages where they are currently in use</li>
<li>Enhanced the Scheduler to show a checklist of available servers in the
webfarm where scheduled tasks can be executed.</li>
<li>Enhanced the Scheduler to support multiple instances running on the same
server</li>
<li>Fixed issue with removing Superuser role from a user.</li>
<li>Fixed issue with deleting users which was not fully recognized by the
rest of the application.</li>
<li>Fixed issue with upgrades which would fail if .Net 3.5 was installed</li>
<li>Fixed issue with skins installed using the batch installer.</li>
<li>Fixed change to GetModulesByDefinition API method which resulted in
breaking change from DotNetNuke 4.x</li>
<li>Fixed CloakText API method which was broken in 5.0.1</li>
<li>Fixed issue with stored procedure for Dashboard which would fail with an
error if database account did not have permissions to the MSDB database.</li>
<li>Fixed issue where pages added while on a host page will not be
associated with a portal.</li>
<li>Fixed issue where the ReturnURL for the SendPassword and Register links
on the Login page were broken.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.1.0 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>Forms and List 05.00.02</li>
<li>Announcements 04.00.03</li>
<li>Reports 05.01.00</li>
<li>Events 05.00.01</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>FckHtmlEditorProvider 02.00.04 </li>
<li>AD Provider 05.00.02</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue which mis-assigned page permissions to new modules</li>
<li>Fixed issue where a fallback language is not defined</li>
<li>Fixed issue where portal administrator could not manage user roles</li>
<li>Added core sqlconnection pool segmentation to protect core from any
module issues</li>
<li>Fixed issue where Authenticated Caching setting was not getting saved
correctly</li>
<li>Fixed issue where code sub-directories are not properly removed in
web.config</li>
<li>Fixed issue with UpgradeIndicator which could throw an error under some
conditions</li>
<li>Fixed issue where data could become corrupted under extremely heavy load</li>
<li>Fixed issue where GetPortalRoles stored procedure was missing new audit
fields</li>
<li>Fixed issue where some DataReaders were not guaranteed to be closed if
an error occured</li>
<li>Fixed issue where GetFolders API method was changed resulting in a
breaking change</li>
<li>Improved performance by removing use of regular expressions in
Globals.CreateValidId</li>
<li>Fixed issue where all installed languages are enabled on all portals
after an upgrade</li>
<li>Fixed sitemap priority to use invariant format</li>
<li>Fixed issue where 05.00.00 SQL Upgrade script is incompatible with SQL
Server 2000</li>
<li>Fixed issue where HTML/TEXT module was not correctly handling Encoded
data</li>
<li>Fixed issue where hierarchical lists are not properly deleted</li>
<li>Fixed performance issue where delayed loading of some PortalSettings
results in race condition</li>
<li>Fixed issue where banners were not properly rotated</li>
<li>Fixed issue where "Create Language Pack" creates an empty package</li>
<li>Fixed upgrade issue when Active Directory provider is installed</li>
<li>Fixed issue which changed the Edit Module permission in 5.1 and restored
the 4.9.4 behavior.</li>
<li>Fixed issue where the resource verifier misses files to report</li>
<li>Fixed issue with control panel after installing the Turkish Language
Pack</li>
<li>Fixed issue where deprecated properties of the Membership provider
resulted in errors in the Token Replace API</li>
<li>Fixed PageLoadException errors caused by specific UserAgents being mis-identified
by the browser definition files</li>
<li>Fixed issue where "Premium Modules" settings don't work for upgraded
sites</li>
<li>Removed Classic ControlPanel from the distribution</li>
<li>Improved locking mechanism of GetCachedData</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.1.1 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>HTML 05.01.01</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>FilebasedCachingProvider 05.01.01 </li>
<li>DatabaseLoggingProvider 05.01.01</li>
<li>AspNetMembershipProvider 05.01.01</li>
<li>DNNMembershipProvider 05.01.01</li>
<li>SearchProvider 05.01.01</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue which caused modules not be properly upgraded to 5.x if they
were missing a manifest file</li>
<li>Fixed issue where register link on the login module did not work when
portal was configured for private membership</li>
<li>Fixed issue where en-US language was always enabled after an upgrade</li>
<li>Fixed issue where the language pack writer was not creating full
language packs.</li>
<li>Re-added the PageStatePersistence setting to the Host Settings page with
additional warning messages.</li>
<li>Fixed breaking change in ActionBase where properties were inadvertently
removed instead of being marked obsolete.</li>
<li>Fixed issue where User settings were relying on default values, but the
email API was not aware of the defaults.</li>
<li>Fixed issue where the HasObjectDependencies property of ScheduleItem was
not properly calculated.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>HTML/Script Code Injection Vulnerability in ClientAPI </li>
<li>HTML/Script Code Injection Vulnerability when operating with multiple languages</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.1.2 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>HTML 05.01.03</li>
<li>Events 05.00.02</li>
</ul>
<h3 class="SubSubHead">Assemblies</h3>
<ul>
<li>WebControls 02.02.00</li>
<li>ClientAPI 04.01.02</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue which caused the starter kit not to install properly</li>
<li>Fixed issue where cache was not working properly for web crawlers</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>HTML/Script Code Injection Vulnerability in ClientAPI </li>
<li>HTML/Script Code Injection Vulnerability when operating with multiple languages</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 4.9.5 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>HTML 04.09.05</li>
<li>Events 05.00.02</li>
</ul>
<h3 class="SubSubHead">Assemblies</h3>
<ul>
<li>WebControls 02.02.00</li>
<li>ClientAPI 04.01.02</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Added the ability to specify a subject line when emailing event viewer
logs</li>
<li>Modified the event viewer to include event logs as email attachments
when emailing the event logs</li>
<li>Added the ability to use dictionary objects for token replacement in
system messages</li>
<li>Fixed an issue which caused an error whenever edititng the Site
Settings.</li>
<li>Fixed issue which caused an error trying to retrieve a role group by
name</li>
<li>Fixed an issue which prevented a skin from being able to be re-installed
or uninstalled.</li>
<li>Fixed issue where Html module was displaying unpublished content</li>
<li>Fixed issue where URLs for pages within the site were always being
created as relative which is a change from previous versions.</li>
<li>Removed solution explorer page from the Admin menu and removed the
Marketplace feed from the OPML file.</li>
<li>Fixed issue with upgrading DotNetNuke 4.x skins when upgrading site to
DotNetNuke 5.x</li>
<li>Fixed issue which resulted in incorrect URL for SiteMap in a child
portal</li>
<li>Fixed issue which caused error when deleting files from the Host file
manager.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>None</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.1.3 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>HTML 05.01.04</li>
<li>Form and Lists 05.00.03</li>
<li>Forum 04.05.03</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>AspNetMembershipProvider 05.01.03</li>
<li>DNNMembershipProvider 05.01.03</li>
<li>FileBasedCachingProvider 05.01.03</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Added Module Information to the Help page </li>
<li>Added ability to view and edit the source files for a module</li>
<li>Enhanced the module creation wizard to simplify creating new module
definitions</li>
<li>Added the ability to automatically create a test page as a step in the
module creation wizard</li>
<li>Added a core API to support content localization</li>
<li>Added the ability to import/export page and module settings</li>
<li>Added the ability to immediately run a scheduled task</li>
<li>Added module caching provider API</li>
<li>Converted existing module caching feature to use new provider</li>
<li>Added page output caching provider API</li>
<li>Fixed issue where upgraded sites do not properly set the default
Language</li>
<li>Fixed issue where scheduler could execute a a long-running task multiple
times</li>
<li>Fixed issue where improperly formatted email addresses could result in
error when sending system emails</li>
<li>Fixed issue which resulted in incorrect URL for SiteMap in a child
portal</li>
<li>Fixed issue which caused error when deleting files from the Host file
manager.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>Fixed issue where Install Wizard could leak version information to
anonymous users</li>
<li>Fixed issue where search page might be vulnerable to script injection</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.2.0 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>HTML 05.02.00</li>
<li>Gallery 04.03.00</li>
<li>Wiki 04.02.00</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>FileModuleCachingProvider 05.02.00</li>
<li>MemoryModuleCachingProvider 05.02.00</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue where banners were not properly rotated according to the
specified views/clicks</li>
<li> Fixed issue where upgrades could fail if the the user account did
not have permission to update objects in some db schemas</li>
<li>Fixed issue where list values were visible outside of the Portal where
they were created.</li>
<li>Fixed issue where caching providers were not rendering unicode
characters properly.</li>
<li>Fixed issue with missing Telerik assembly in the source package.</li>
<li>Fixed issue where Ajax HostSetting was not properly set on upgrade from
4.x installations.</li>
<li>Fixed issues where upgrades would fail with a unique index violation</li>
<li>Fixed issue with the Starter Kit which was missing HTML module files</li>
<li>Fixed issue where page templates were not working correctly</li>
<li>Fixed default settings for the module and output caching providers</li>
<li>Fixed issue which prevented Blog module from working after some upgrades
to 5.x</li>
<li>Fixed issue when creating a new module in the Module Definition Wizard
if the .ascx extension was not specified.</li>
<li>Fixed issue where localization was not working if the application
virtual directory name was also part of the module name.</li>
<li>Fixed issue where the FriendlyName for Schedule Items was not being
saved.</li>
<li>Fixed issue where GetUserCountByPortal was making excessive database
calls instead of using cached values</li>
<li>Added binding redirect setting in web.config to prevent versioning
issues with Telerik assembly</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.2.0 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>Form and List 05.01.01</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>FileModuleCachingProvider 05.02.01</li>
<li>MemoryModuleCachingProvider 05.02.01</li>
<li>SchedulingProvider 05.02.01</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue where tabname lookup's were case-sensitive and caused
problems when loading controls.</li>
<li>Fixed issue where Captcha control did not include a value for the Alt
attribute.</li>
<li>Fixed issue where the Create New Module wizard allowed the user to
select an invalid 'Owner' folder.</li>
<li>Fixed issue where uninstalling a module with 'delete files' unchecked
deletes the files anyway.</li>
<li>Fixed issue where GetMappedDirectory would log an exception during
install.</li>
<li>Fixed issue where the Starter kit was missing the HTML module.</li>
<li>Fixed issue where the source package did not include the HTML module.</li>
<li>Fixed issue with missing databaseowner and objectqualifier tags in the
5.2.1 SqlDataProvider script.</li>
<li>Fixed issue where portal templates ceased working in 5.2.1.</li>
<li>Fixed issue with page quotas where GetTabCount stored procedure had not
been updated for localization changes introduced in 5.2.0.</li>
<li>Fixed issue where Host email test fails but no email addresses are
listed in the error message.</li>
<li>Fixed issue where temp files were left if extension installation was
cancelled.</li>
<li>Fixed issue where Captcha was not regenerated if login failed.</li>
<li>Reverted syntax that grants stored procedure permissions to previous
version, as GRANT EXECUTE TO was problematic on shared hosts.</li>
<li>Fixed issue where vendor registration email did not contain the vendor
name.</li>
<li>Added the ability to specify a custom animation function for the
Visibility Widget.</li>
<li>Updated title and help text to make optional for forcing a captcha for
associating logins clearer.</li>
<li>Added documentation to the Dynamic Module template that is displayed
when a new module is created using the template.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>None</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>No modules or providers have been updated in the 5.2.2 packages.</p>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed the issue where LinkClick.aspx links were incorrect for child portals</li>
<li>Fixed the issue with the PayPal URL settings.</li>
<li>Fixed the issue with logging into the site on 1st page load after upgrade.</li>
<li>Fixed issue where hosted jQuery did not use the correct protocol when SSL
enabled.</li>
<li>Fixed issue with inconsistent file/folder permissions tests. Test now runs
when the page is shown and user cannot progress until tests pass.</li>
<li>Fixed the issue with the SynchronizeModule in all install modes causing
an object reference error.</li>
<li>Fixed issue where captcha control showed after succesful registration if
the SMTP settings were not correct</li>
<li>Fixed issue where error message failed to display if control was not created</li>
<li>Fixed the issue where the Portal name was hard coded as 'PortalName' when
assigning modules to portals.</li>
<li>Fixed issue where security roles were not properly enforced between child
portals.</li>
<li>Fixed issue where large/javascript heavy pages could suffer from an MS Ajax
DeserializePrimitiveObject Invocation error</li>
<li>Fixed issue where the user is unable to change dbowner in the install wizard.</li>
<li>Fixed issue where spaces in control names caused error in new module control
wizard</li>
<li>Fixed issue with allowing a blank database name in Installation Wizard.</li>
<li>Fixed the issue where the www. subdomain of a domain is not part of the
portal aliases of a portal</li>
<li>Fixed issue where the Parent Tab was not showing in drop down if the user
had no edit rights on it.</li>
<li>Fixed issue where list values in profile properties only work on Portal
with PortalID=0</li>
<li>Fixed issue when unzipping files in the Host File Manager</li>
<li>Fixed issue where module message warning was not XHTML compliant</li>
<li>Fixed the issue where sometimes there were event log errors during installation
from importing HTML modules.</li>
<li>Fixed issue where installer feedback was not using passed parameter to output
feeback messages</li>
<li>Fixed issue with custom name space in Starter Kits.</li>
<li>Fixed issue where errors were logged during automated installs.</li>
<li>Enhanced create new module form to split file language and file name onto
seperate lines, and updated help text</li>
<li>Fixed missing objectqualifer in dataprovider script which could fail to
update installs without a default language</li>
<li>Updated data provider reference to use fully qualified typename which could
cause compilation issues with third party modules in some rare instances.</li>
<li>Fixed validation error handling in new module wizard</li>
<li>Updated text on create new module screen to clarify that make new folder
is only available on "New" option</li>
<li>Fixed issue where it was possible to create a module with a name or friendlyname
the same as an existing package</li>
<li>Fixed issue where invalid control name could crash New Module wizard</li>
<li>Fixed the validation of Module Control Name when creating a new module manually.</li>
<li>Enhanced New Module wizard to make friendly name a required field.</li>
<li>When using the create new module you can specify a control with spaces e.g.
"my control". Whilst this is valid for a control definition, as that is used
to create the file and also the inherits statement an error is caused as neither
of support spaces. To resolve we added code to remove spaces from control names
as they're not allowed.</li>
<li>Modified Install Wizard so that all tests must pass before installtion may
proceed. Tests are conducted either on entering the page or on clicking the
Next button.</li>
<li>Updated layout and help text of the "Create New Module" form and added some
code to remove spaces from module names to ensure only valid files are created.</li>
<li>Added the ability to use the PayPal sandbox for validating PayPal configuration</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>
<a href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno32/tabid/1507/Default.aspx">
User account escalation Vulnerability</a></li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.2.0 packages.
Please see the specific project pages for notes on what bugs or enhancements were
corrected with each release. </p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>Events Module 05.00.03</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">New Features</h3>
<ul>
<li><strong>Templated User Profiles</strong> - User profile pages are now publicly viewable</li>
<li><strong>Photo field in User Profile </strong>- Users can upload a photo to their profile</li>
<li><strong>User Messaging</strong> - Users can send direct messages to other system users</li>
<li><strong>Search Engine Sitemap Provider</strong> - The sitemap now allows module admins to plugin sitemap logic for individual modules.</li>
<li><strong>Taxonomy Manager</strong> - Administrators can create heirarchical category lists that can be shared and used across modules</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue with the Create New Module form not showing on upgrades.</li>
<li>Fixed issue where the Create New Module wizard allowed the user to select
an invalid 'Owner' folder.</li>
<li>Fixed the issue where adding query strings such as Mid=Crash showed an error
screen.</li>
<li>Fixed issue where the dashboard controls failed to load if upgrading from
a version prior to 5.1.0 to a later one.</li>
<li>Fixed issue where create new module from manifest was not working</li>
<li>Fixed issue where the red border around Administrator only content was not
displayed after upgrading from 4.x</li>
<li>Fixed the issue with the Market Place in the Solutions Explorer</li>
<li>Fixed issue where GrantStoredProceduresPermission and GrantUserDefinedFunctionsPermission
ran on every install/upgrade</li>
<li>Fixed issue where logging in as Registered User throws PageLoadException
in Event Viewer.</li>
<li>Fixed issue with creating new language packs.</li>
<li>Fixed issue with emails not having http in urls to external resources.</li>
<li>Fixed issue with caching providers not being defined in web.config in some
instances.</li>
<li>Fixed issue where the User Image showed in the search drop down box in Manage
Users.</li>
<li>Updated the portaltemplate.xsd to cater for new fields.</li>
<li>Update the Google Verification file content to match the new Google protocol.</li>
<li>Updated the Installation Wizard's Finished button text to "Start building
your new site!"</li>
<li>Updated the default menu provider to use the DNNMenuNavigationProvider.</li>
<li>Create Package button is now disabled until a package folder has been created.</li>
<li>Reduced the number of user events that are logged.</li>
<li>Optimized retrieving a module by its control key.</li>
<li>Added code to store the site map priority as a number, which allows any
valid localised single e.g. 0.5 or 0,6</li>
<li>Added new logic to only allow cancelling a module installation if the Core
Version is not sufficient for the module to be installed.</li>
<li>Added extra checks to the upgrade application logic when removing core modules.</li>
<li>Added a success message when exporting the Dashboard as xml.</li>
<li>Added more validation around editing a module control definition</li>
<li>Added the ability to disable portal folder synchronization on "hidden" folders.</li>
<li>Added a new check to test if all extensions are installed that are present
in a site template.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>
None</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.3.0 packages.
Please see the specific project pages for notes on what bugs or enhancements were
corrected with each release. </p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>None</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Issue fixed where Newsletter module only sent SMTP test email.</li>
<li>Issue fixed with signature change to Synchronize Folders methods.</li>
<li>Fixed the issue with the email notifications where the From and To addresses were swapped.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>None</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>
The following modules and providers have been updated in the 5.2.0 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.
</p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>XML Module 04.03.05</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3><ul><li>Fixed issue where portal settings were not saved per portal.</li><li>Fixed issue with importing page templates.</li><li>Fixed issue with updating Site Settings.</li><li>Fixed issue with System.Web.Extensions dependencies when running in ASP.NET 4.0</li><li>Fixed issue with User Profile and Custom Registration modules</li><li>Fixed the View Profile module so it displays a message if it is placed on a page which is not defined as the Portal's profile page.</li><li>Fixed issue with content list module not being added to search results.</li><li>Fixed issue with yellow screen on some upgrades.</li><li>Fixed issue with the packaging of Telerik RadEditor Provider</li><li>Fixed issue with displaying child folders in Telerik RADEditor Provider File dialogs.</li><li>Fixed issue where the registration email was being sent to the user being registered instead of the admin user.</li><li>Support icon in ribbon bar is now hidden in CE.</li><li>security bulletin can be read @ http://www.dotnetnuke.com/News/Securitybulletinno34/tabid/1531/Default.aspx</li><li>Fixed issue with missing fields in new vw_PortalsDefaultLanguage View</li><li>Fixd issue with Tags skinobject which didn't validate for empty strings.</li><li>Check issue DNN-12122, second to last paragraph. This behavior is according to spec.</li><li>Fixed issue with the name of the Content List module</li><li>Included latest release of Telerik controls.</li><li>Ensured compatability with ASP.NET 4.0 runtime.</li><li>Modified code to use more efficient string comparison methods.</li><li>Ported TelerikEditorProvider to Community Edition</li><li>Improved performance of GetTabPermissionsByPortal stored procedure.</li><li>Improved efficiency of core object caching.</li><li>Improved performance by precompiling commonly used regular expressions.</li><li>Ribbon Bar Control Panel –The new ribbon bar control panel provides content contributors with more editing options in a highly convenient format, allowing users to create pages, install new modules, edit content, and preview pages more quickly and easily than ever before.</li><li>added support for localising portal details. If a site is running with multiple active languages, the site settings page allows an administrator the ability to provide different settings for each language (culturecode).
In addition, this supports a fallback strategy where if no record exists for a language, a check is made for a record for it's fallback, and if no record exists then it fall's back to the portal default language.</li></ul><h3 class="SubSubHead">Security Fixes</h3><ul><li><a href="http://www.dotnetnuke.com/News/Securitybulletinno34/tabid/1531/Default.aspx">User account escalation Vulnerability</a></li></ul><h3 class="SubSubHead">Updated Modules/Providers</h3><p>
The following modules and providers have been updated in the 5.4.0 packages.
Please see the specific project pages for notes on what bugs or enhancements
were corrected with each release.
</p><h4 class="SubSubHead">Modules</h4><ul><li>FormAndList 05.01.02</li></ul><h4 class="SubSubHead">Providers</h4><ul><li>Telerik Editor Provider 05.04.00
</li></ul>
<h3 class="SubSubHead">
Major Highlights</h3>
<ul>
<li>Fixed issue with assembly version type.</li>
<li>Fixed issue where system mails are sent from the recipient's email address instead
of admin email address.</li>
<li>Fixed issue with logo in Ribbon Bar.</li>
<li>Fixed issue with race condition when adding entries to shared Dictionaries.</li>
<li>Fixed issue with scheduler exceptions when more than one language is defined.</li>
<li>Fixed issue when creating portals in non en-us culture.</li>
<li>Fixed issue with adding a new language.</li>
<li>Fixed issue with AJAX Script Manager</li>
<li>Fixed issue with Source Package not opening correctly in Visual Studio.</li>
<li>Fixed issue when logging into a multi-language portal when the user's preferred
locale is not set.</li>
<li>Fixed issue with generation of user links to use new Profile page.</li>
<li>Fixed issue with multiple cancel buttons on Add User screen.</li>
<li>Fixed issue with version number in Symbols package manifest.</li>
<li>Added missing release notes for 5.4.</li>
<li>Added label explaining portal localization drop-down on site settings. Updated static
localization text to more friendly form.</li>
<li>Updated version of Symbols package in manifest file.</li>
<li>Improved 5.4.0 and 5.4.1 upgrade scripts to better handle upgrades when multiple
languages are installed.</li>
</ul>
<h3 class="SubSubHead">
Security Fixes</h3>
<ul>
<li>* None</li>
</ul>
<h3 class="SubSubHead">
Updated Modules/Providers</h3>
<p>
The following modules and providers have been updated in the 5.4.1 packages. Please
see the specific project pages for notes on what bugs or enhancements were corrected
with each release.
</p>
<h4 class="SubSubHead">
Modules</h4>
<ul>
<li>Form and List Module 05.01.03</li>
<li>Blog Module 04.00.00</li>
</ul>
<h4 class="SubSubHead">
Providers</h4>
<ul>
<li>* None</li>
</ul>
<h3 class="SubSubHead">
Major Highlights</h3>
<ul>
<li>Improved performance of Sql script for listing modules by portal.</li>
<li>Improved DeleteModule method to handle instances where object may be null.</li>
<li>Increased the size of the Admin - Pages list box to cater for sites with a large
number of pages.</li>
<li>Updated the Installation Wizard's Polish & German language packs.</li>
<li>Fixed issue with emailing Vendor details to the Admin and conformation details to
the Vendor.</li>
<li>Fixed issue where Sitemap does not work if globalisation culture is a culture that
uses comma as separator</li>
<li>Fixed issue with missing type specification in SiteMapSettings.</li>
<li>Fixed issue where upgrade fails when site has a non-'en-US' default language</li>
<li>Fixed issue with link editor showing pages the user does not have View permissions
for.</li>
<li>Fixed issue with registration emails not being sent from Child Portals.</li>
<li>Fixed issue with Role update email not beiung sent to the user.</li>
<li>Fixed issue where default tabs for Site Settings were not created when creating
settings for a new language.</li>
<li>Fixed issue where localization upgrade script was incorrect and could result in
error on upgrade.</li>
<li>Increased the number of Users that a DNN installation can handle to 2.14 billion.</li>
<li>Fixed issue where localization updates were not properly applied to individual portals.</li>
<li>Fixed an Issue, where Language Editor returned to Language List on update of any
file.</li>
<li>Fixed issue with jQuery not loading early enough.</li>
<li>Fixed issue with email sending not recognizing HTML properly.</li>
<li>Fixed issue with port numbers in email address during installation.</li>
<li>Fixed issue with passing connection information to Sql Module.</li>
<li>Fixed issue where the User Skin object was ignoring the ShowUnreadMessages attribute</li>
<li>Fixed issue where the profile ImageEditControl datatype was only added to Portal
0.</li>
<li>Fixed issue with url formatting when no context exists. Adding "http" is fallback
position.</li>
<li>Removed "obsolete" state from DotNetNuke.Services.Mail.Mail.Sendmail.</li>
<li>Fixed rare issue where the install wizard could leak useful database connection
information under certain conditions.</li>
<li>Fixed issue where messenging module failed to filter for dangerous html/script.</li>
</ul>
<h3 class="SubSubHead">
Security Fixes</h3>
<ul>
<li>* None</li></ul>
<h3 class="SubSubHead">
Updated Modules/Providers</h3>
<p>
The following modules and providers have been updated in the 5.4.2 packages. Please
see the specific project pages for notes on what bugs or enhancements were corrected
with each release.
</p>
<h4 class="SubSubHead">
Modules</h4>
<ul>
<li>* None</li></ul>
<h4 class="SubSubHead">
Providers</h4>
<ul>
<li>* None</li></ul>
<h3 class="SubSubHead">
Major Highlights</h3>
<ul>
<li>Fixed issue where page level and TabPath were not properly updated for descendents</li>
<li>Implemented LinkClick functionality in Telerik editor.</li>
<li>Fixed issue with displaying a module on all pages.</li>
<li>Fixed issue with page management not working correctly.</li>
<li>Fixed issue where messaging was using incorrect logic to notify users.</li>
<li>Fixed issue with Event Log Email Notifications.</li>
<li>Fixed issue with PurgeExpiredItems when the portal's home folder may not have been
mapped correctly.</li>
<li>Fixed issue where bulk updates did not properly repair existing modules.</li>
<li>Fixed issue when hitting Enter while in the Tag edit text box.</li>
<li>Fixed issue with sending Event Viewer exception messages when using Secure SMTP.</li>
<li>Fixed a bunch of minor HTML formatting issues.</li>
<li>Fixxed issue with module caching being ignored for non-browser user agents.</li>
<li>Improved performance by only loading HTML Module menu when user is allowed to see
it.</li>
<li>Fixed issue where the DNNCountryEditControl does not return a value in the PropertyEditor</li>
<li>Fixed issue with using external URL Rewriters causing error in initWidgets.js</li>
<li>Fixed the issue with the ToolsFile property of the Telerik Editor to set the appropriate
property on the underlying RadEditor.</li>
<li>protection was added to ensure that a hacker who had a valid login to a site could
not use viewstate details to perform a cross-site request forgery to public functions.</li><li>
alter log files extension so their existance or contents cannot be useful to potential
hackers</li>
<li>an additional filter was added to the existing core blacklist filter to catch an
invalid tag that could lead to a cross-site scripting issue</li>
<li>at present profile properties automatically strip dangerous XSS characters from
data. In addition they support regular expressions to allow sites to configure the
allowable characters. We've added an additonal htmlencoding to ensure dangerous
html cannot be passed</li>
<li>due to a logical error in the profile property provider, it's possible for member
only profile properties to be displayed to non-members. Code was added to protect
against misconfiguration revealing sensitive data.</li>
<li>added additional encoding to sitelog to follow security best practices.</li>
<li>Improved security by HTML Encoding taxonomy tags.</li></ul>
<h3 class="SubSubHead">
Security Fixes</h3>
<ul>
<li><a href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno37/tabid/1568/Default.aspx">
Logfiles contents after exception may lead to information leakage</a> </li>
<li><a href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno38/tabid/1569/Default.aspx">
Cross-site request forgery possible against other users of a site </a></li>
<li><a href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno39/tabid/1570/Default.aspx">
Update inputfilter for invalid tag that could allow XSS attack </a></li>
<li><a href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno40/tabid/1571/Default.aspx">
Mail function can result in unauthorized email access</a></li>
<li><a href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno41/tabid/1572/Default.aspx">
Fix issue where member only profile properties could be exposed publically under
certain conditions</a></li>
<li><a href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno42/tabid/1573/Default.aspx">
Profile properties not htmlencoding data</a></li>
</ul>
<h3 class="SubSubHead">
Updated Modules/Providers</h3>
<p>
The following modules and providers have been updated in the 5.2.0 packages. Please
see the specific project pages for notes on what bugs or enhancements were corrected
with each release.
</p>
<h4 class="SubSubHead">
Modules</h4>
<ul>
<li>* None</li></ul>
<h4 class="SubSubHead">
Providers</h4>
<ul>
<li>* None</li></ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue with ExecuteSql method overloads to be able to handle ExecuteSQL(string,
nothing) again.</li>
<li>Fixed issue with Indirect Reference to DotNetNuke Library errors.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>None</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.4.4 packages.
Please see the specific project pages for notes on what bugs or enhancements were
corrected with each release. </p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li><a href="http://dnnmedia.codeplex.com/" >Media Module 03.03.00</a></li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>None</li>
</ul>
<h3 class="SubSubHead">
Major Highlights</h3>
<ul>
<li>Fixed issue with UsePortNumber.</li>
<li>Fixed issue with portals not being created after upgrade.</li>
<li>fixed issue where incorrect AdministratorRoleId could be added leading to UI incorrectly
showing "padlock" icons in permissions grid</li>
<li>Fixed portal creation so User profile page is set correctly.</li>
<li>Fixed issue with welcome emails not being sent if system is set to use a double
byte langugage.</li>
<li>Fixed issue with viewing Profile picture.</li>
<li>Fixed broken link to verify language resources.</li>
<li>Fixed issue. with Host updating Site Settings.</li>
<li>Fixed issue with HTML module's database level dependency on the Modules.ModuleTitle
field.</li>
<li>Fixed issue with Host/Admin being able to disable all languages.</li>
<li>Fixed issue with User Profile Image not showing.</li>
<li>fixed issue where it was possible to have a disabled portal default language by
enabling the applicable values on upgrade.</li>
<li>Fixed issue with Tab Order starting at -1 when hard deleted from Recycle Bin.</li>
<li>Improved performance by updating Data Access Block.</li>
<li>Fixed issue with File Manager when adding new folders, no longer have to Click the
root folder first.</li>
<li>Fixed parent drop down in edit page settings so that users who have edit rights,
bt are not Administrators get None Specified option.</li>
<li>Fixed issue with Profile Image Control.</li>
<li>fixed issue where wrong portalid was used if accessing site settings via host->portals
menu. This could display the wrong set of languages for a portal and lead to portal
display language being incorrectly updated.</li>
<li>Increased Visibility of PresenterBase's public properties' Setters to Public.</li>
<li>Ensured that the Language Combo is resorted when changed from Native<-->English</li>
<li>Fixed issue with GetTabPaths Stored procedure to handle null culture pages correctly.</li>
<li>Fixed issue with case insensitive fonts in Captcha control.</li>
<li>For ribbon bar control panel - NewRole icon was already present in package - reference
was incorrect.</li>
<li>Fixed issue with Telerik editor file management.</li>
<li>Fixed issue with exception thrown when creating new languages.</li>
<li>Fixed issue with upgrades when there are deleted portals.</li>
<li>Fixed issue where host vendors did not allow selection of an image from a host folder.</li>
<li>Updated Portal.template.xsd to allow isProtected node.</li>
<li>If a particular file is moving from a Secure Database type folder to a File System
folder, the file content ("Content" field in the Files table) is updated and set
to "NULL".</li>
<li>The Edit Profile link in the View Profile should redirect to the Manage Profile
page.</li>
<li>fixed issue where language editor page size was not defaulting to 10 as required.</li>
<li>Fixed issue with SendMail removing HTML formatting.</li>
<li>Updated Telerik components to latest release.</li><li>Packages now support Unit
Testing as well as users who do not want to load the Unit Tests.</li>
<li>Added new Default Visibility setting for Profile Properties.</li>
<li>Added ability to suppress auto-injected Module css class.</li>
<li>Added new Settings and Configuration properties to base Presenter class.</li>
<li>Improved logging during upgrades.</li>
<li>DotNetNuke currently has 2 types of folder permissions in the open core, READ and
WRITE. The READ permission actually serves 2 purposes. First, it defines whether
a role or user is able to open/view the files located in a folder. Second, it defines
whether a role or user is able to browse the list of files within a folder. Sometimes
these 2 purposes are not in alignment with one another. For example, it is possible
that you may want All Users to be able to open files in folder if they have the
full URL; however, you may not want All Users to be able to browse a listing of
all the files in the folder ( beecause exposing the full paths to all files may
be a security concern ). Windows IIS deals with this issue by including 3 types
of permissions for folders: Read, Write, and Browse Directory. DotNetNuke could
benefit by having a browse directory permission on folders as well.</li>
<li>Improved GetResourceFile method.</li>
<li>Verify Language Resources to Verify Language Resource Files to match the wireframes
for the Content Localization project.</li>
<li>Fixed UI of Resource Verifier and Language Editor to be consistent with updated
Language Module.</li>
<li>Added support for Media element in styles skin object.</li>
<li>Updated CoreSitemapProvider to use the ModifiedDate of the Tab and Modules on the
Tab for the LastModified date for the PageUrl.</li>
</ul>
<h3 class="SubSubHead">
Security Fixes</h3>
<ul>
<li><a href="http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno43/tabid/1612/Default.aspx">
Potential resource exhaustion</a></li></ul>
<h3 class="SubSubHead">
Updated Modules/Providers</h3>
<p>
The following modules and providers have been updated in the 5.5.0 packages. Please
see the specific project pages for notes on what bugs or enhancements were corrected
with each release.
</p>
<h4 class="SubSubHead">
Modules</h4>
<ul>
<li>Media Module 03.03.00</li>
<li>Events Module 05.01.04</li>
<li>IFrame Module 04.04.00</li></ul>
<h4 class="SubSubHead">
Providers</h4>
<ul>
<li>Solpart Menu Navigation Provider 05.01.00</li></ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Added feature to detect if a site is not running the suggested customErrors
configuration to mitigate the ASP.Net POET Vulnerability.</li>
<li>Updated the default web.config to use the recommended customerrors settings
to mitigate the ASP.Net POET Vulnerability.</li>
<li>Fixed Sitemap Provider so it only returns one page when multiple languages
are enabled and Content Localization is not enabled.</li>
<li>Fixed Telerik File Manager to make files stored using database folders visible
to the user.</li>
<li>Fixed issue where module developers using custom aspx pages that inherit
from basepage and use codeblocks get an exception</li>
<li>Fixed issue where the locale was not properly reflecting the querystring
and the users browser or portal settings.</li>
<li>Fixed issue where users were not granted proper permissions for the Templates
folder on install.</li>
<li>Fixed issue where missing objectqualifier would cause upgrade script to
fail.</li>
<li>Updated the url parser to take port 443 and ssl into consideration. its
no longer necessary to turn off human friendly or use-port number in web.config</li>
<li>Fixed behavior of Language detection when Content Localization is not enabled.</li>
<li>Updated update tab logic to take host tabs into consideration.</li>
<li>Fixed install template to ensure content localization is defaulted to off
for new installs</li>
<li>Updated the warnning dialog confirmation box to show the user name and the
role that the user is being removed from.</li>
<li>Fixed issue where tab hierarchy was not displayed properly when the tab
level was changed in the tab hierarchy.</li>
<li>Fixed issue where translators were not given the proper edit permissions
when content localization was enabled.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>
<a href="http://www.dotnetnuke.com/aspnetpoet.aspx">Added enhancements to
patch ASP.Net POET Vulnerability</a></li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.5.1 packages.
Please see the specific project pages for notes on what bugs or enhancements were
corrected with each release. </p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>Feedback Module 05.00.02</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Added Configuration Manager to allow host user to modify application configuration
files</li>
<li>Added automatic portal alias creation for single portal installs</li>
<li>Updated the file manager upload page to allow user to upload multiple files
without returning to the file manager page.</li>
<li>Updated Google Analytics script to support asynchronous mode</li>
<li>Updated default indexes on multiple tables to improve application performance</li>
<li>Fixed issue with Event Log Email Notifications.</li>
<li>Fixed issue where Telerik HTML Editor was unable to upload files to secure
or database folder.</li>
<li>Fixed issue where registration page is not set correctly during an upgrade.</li>
<li>Fixed issue where Sendmail stripped HTML and Links from emails.</li>
<li>Fixed issue where Ribbon Bar CSS was included on the page even when Ribbon
Bar was not visible.</li>
<li>Fixed issue where "My Folder" was not available in the URL control and the
Telerik HTML Editor</li>
<li>Fixed issue where the language skinobject dropdown does not maintain state
between postbacks</li>
<li>Fixed issue where the UserProfile PhotoURL property not set properly</li>
<li>Fixed issue where Data Caching code could result in race condition</li>
<li>Fixed issue where a portalalias with a trailing "/" would cause a 404 error</li>
<li>Fixed issue where reference copies of modules are not copied from the primary
to secondary language pages.</li>
<li>Fixed issue where a disabled language can result in orphaned pages which
are not localized with Content Localization</li>
<li>Fixed issue where content item wasn't being assigned to host tabs resulting
in error when changing the host page title</li>
<li>Fixed issue where localized grid header columns did not sort</li>
<li>Fixed issue where the ribbonbar control panel was not properly moving pages
when localization was enabled.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>
<a href="http://www.dotnetnuke.com/News/SecurityPolicy/securitybulletinno44/tabid/2035/Default.aspx">
Exception details may leak if logging provider unavailable</a></li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.6.0 packages.
Please see the specific project pages for notes on what bugs or enhancements were
corrected with each release. </p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>Events Module 05.01.05</li>
<li>Forums Module 05.00.00</li>
</ul>
<h4 class="SubSubHead">Providers</h4>
<ul>
<li>none</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue to remove preCondition checks when upgrading to .Net 4.0</li>
<li>Fixed issue where some valid domains were failing email validation checks.</li>
<li>Fixed issue where editing Host menu page settings assigns the page to a
Portal.</li>
<li>Fixed issue which caused XHTML validation problems in 5.6.0</li>
<li>Fixed issue where an aspx page in any subfolder was inaccessible.</li>
<li>Fixed issue where Config.Touch method signature had an unintentional breaking
change in 5.6.0</li>
<li>Fixed issue which caused error on adding new super user account</li>
<li>Fixed issue where Google Analytics was broken during upgrade to 5.6.0</li>
<li>Re-Added Checkbox to Profile Property Types</li>
<li>Added ability to perform 301 redirects or use canonical URLs when site has
multiple portal aliases.</li>
<li>Changed default viewstate encryption setting to reflect security best practices.</li>
<li>Added new core module to enable the use of Razor scripts in sites running
.Net 4.0</li>
<li>Added the ability to create Child Portal type aliases to existing portals.</li>
</ul>
<h3 class="SubSubHead">Security Fixes</h3>
<ul>
<li>
<a href="http://www.dotnetnuke.com/securitybulletinno45/tabid/2112/Default.aspx">
Edit Level Users have Admin rights to modules</a> </li>
<li>
<a href="http://www.dotnetnuke.com/securitybulletinno46/tabid/2113/Default.aspx">
Unauthenticated user can install/uninstall modules</a> </li>
<li>
<a href="http://www.dotnetnuke.com/securitybulletinno47/tabid/2114/Default.aspx">
Failure to filter viewstate exception details can lead to reflective xss issue</a>
</li>
<li>
<a href="http://www.dotnetnuke.com/securitybulletinno48/tabid/2115/Default.aspx">
Remove OS identification code</a> </li>
<li>
<a href="http://www.dotnetnuke.com/securitybulletinno49/tabid/2116/Default.aspx">
Add additional checks to core input filter</a></li>
<li>
<a href="http://www.dotnetnuke.com/securitybulletinno50/tabid/2117/Default.aspx">
Change localized text to stop user enumeration</a> </li>
<li>
<a href="http://www.dotnetnuke.com/securitybulletinno51/tabid/2118/Default.aspx">
Ensure that profile properties are correctly filtered </a></li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.6.1 packages.
Please see the specific project pages for notes on what bugs or enhancements were
corrected with each release. </p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>Newsfeeds Module 04.01.00</li>
</ul>
<h3 class="SubSubHead">Major Highlights</h3>
<ul>
<li>Fixed issue where HTML Editor dialogs were not displaying correctly in alternate
languages</li>
<li>Fixed issue with Regex for email validation</li>
<li>Fixed race condition in the core scheduler</li>
<li>Fixed issue where editing Host page settings would result in broken host
menu</li>
<li>Fixed issue where "Apply to All Modules" setting was not propogating settings
correctly.</li>
<li>Fixed issue where browser language detection was not working for child portals</li>
<li>Fixed issues where ASPX pages in subfolders were returning an error</li>
<li>Fixed issue where the Host Users list was not showing the correct users</li>
<li>Fixed issue where SendMail API was throwing validation error on valid email
address.</li>
<li>Fixed issue where adding runAllManagedModulesForAllRequests="true" to web.config
would result in some file types not being accessible</li>
<li>Enhanced Host>SQL module to log module usage</li>
<li>Enhanced user manager to allow users to be restored or hard-deleted</li>
<li>Enhanced the way modules are identified in HTML for easier CSS control</li>
<li>Added the ability to disable the Auto-PortalAlias feature</li>
<li>Added numerous performance enhancements</li>
</ul>
<h3 class="SubSubHead">Updated Modules/Providers</h3>
<p>The following modules and providers have been updated in the 5.6.2 packages.
Please see the specific project pages for notes on what bugs or enhancements were
corrected with each release. </p>
<h4 class="SubSubHead">Modules</h4>
<ul>
<li>Blog 04.01.00</li>
<li>Documents 04.01.02</li>
<li>Forum 05.00.01</li>
<li>RazorHost 01.00.01</li>
<li>Store 03.00.00</li>
</ul>