v4.1.4 bugfix

• v4.1.4
  • bug fixes for backward compatibility, as well as addressing a bug with ampersands in filenames
  • required array value type checking done by in_array() to true (so '12.4' and 12.4 are not considered a match)

v4.1.3: security and bug fixes

v4.1.3 changes:

• upgraded packages to address security isues:
  • smarty/smarty (v5.1.0 => v5.3.0)
• backward compatibility fix for pre v14 versions of REDCap (without access to getDataTables() function)
• bug fix for Smarty "class not found" during template creation; implemented lazy loading.

CTE v4.1.2: retooling HTML escape

modified escape call to use EM escape code, instead of REDCap::escape

CTE v4.1.1: RC 14+ data export rights support, date formatting, library upgrades, bug fixes

CTE v4.1.1 chages:

• Basic date formatting through Smarty; can format with dd-mm-yyyy formatting by passing formatting information through the template as {$redcap['visit_date']|date_format:'%d-%m-%Y'} This will format the visit_date into two digit day, two digit month, four digit year. Please note: this is currently the only other format allowed outside the default REDCap display.
  • Added code to process the new format returned by REDCap::getUserRightsdata()
  • Fixed bug found when downloading a zip file of batched reports (modified headers set before download)
  • Modified code to store data into the proper redcap_dataX tables introduced in RC v14.0.
  • Upgrading packages to address security issues:
    • dompdf/dompdf (v2.0.3 => v3.0.0)
      • php-font-lib (0.5.4 => 1.0.0)
      • php-svg-lib (0.5.0 => 1.0.0)
    • masterminds/html5 (2.8.1 => 2.9.0)
    • sabberworm/php-css-parser (8.4.0 => v8.5.1)
    • smarty/smarty (v4.3.4 => v5.1.0)
  • New packages installed per upgrades above:
    • polyfill-mbstring (v1.29.0)

CTE v4.0.0 PHP8+, RC 12.4+ data export rights support

Release of CTE v4.0.0 to support RC v12.4+'s instrument-level data export rights scheme.

Minimum requirements:

• REDCap v12.4+. Please note: this release is not compatible with REDCap v12.0 and before, as it assumes the rights structure implemented in v12.4
• PHP v7.4+

Bootstrap-select fix, javascript library updates, maximum RC version 12.0

Updated bootstrap-select to 1.15.0-beta3 to address a bug in record list building.
Updated minimum PHP version to 7.4
Updated maximum REDCap version to 12.1

PHP8 compatibility fixes

Changes to code base to make v3.1.2 compatible with PHP 8.
Upgraded smarty to 4.3.1
Upgraded dompdf to 2.0.3
Modified calls per psalm testing output

Taint Analysis

Changes:

• Ran Psalm's Taint Analysis on code and fixed any reported vulnerabilities

Dependency Changes:

• Upgraded Smarty to v4.0.3, which includes fixes for security issues.

Logging Changes

Changes:

• Updated logging messages, so it's indicated that they're clearly associated with the module

Save Reports to File Fields

New Features:

• After pulling data into a report, users can save a PDF of it to a file upload field in their chosen record. This is not compatible with batch filling, and will override previously saved files. When saving to a repeatable event/instrument, the PDF will be saved to the latest instance.

Fixes:

• Module previously removed elements from a table row with data in it, which placed data under incorrect columns.
• Images were previously not found in PDF downloads. The src for images has been changed to a url, and DOMPDF sets isRemoteEnabled = true, which should fix the issue going forward. Images in existing reports will need to update their image srcs to urls.

Changes:

• Re-worked how secondary labels are retrieved, by retrieving them all before looping through a project's records and building the dropdown list. The goal was to reduce loading times on the index page.

Dependency Changes:

• Upgraded Smarty to v3.1.39, which includes fixes for security issues.