Copyright (C) 2007-2013, CKSource - Frederico Knabben. All rights reserved.
### Version 2.3.1
Security Release:
It was possible to perform DOS attack by users authorized to use the sever connector and with permissions to upload files (ASP, PHP, ColdFusion).
It was possible to cause Denial of Service to files and folders on certain servers (like Apache) by users authorized to use the sever connector and with permissions to create folders. The attack was possible only inside a folder to which user had create folder permissions.
- Folders that start with a dot character are now disallowed by default.
- Fixed auto-renaming of files with multiple extensions: foo.tar.gz will be renamed to foo(1).tar.gz on second upload.
- Maximize did not work when CKFinder was added with appendTo()
### Version 2.3
- Added the new Maximize plugin.
- Multiple file selection: copying / moving / deleting / selecting multiple files is now possible.
- When no other selection function defined, double clicking a file will now execute the View command.
- File editor plugin was upgraded to use CodeMirror 2. C# support was added.
- It is now possible to select a file on startup by using the config.startupPath configuration.
- Added a new configuration option, config.sidebarWidth, to change the initial width of the sidebar (where the folders pane is located) with ease.
- The name of the file is now displayed when hovering over a file.
- Added a new API method, api.addFolderDropMenuOption, to add new options to the menu that opens once files are dropped into a folder.
- Added an option for plugins to specify if a toolbar button should be disabled when basket is empty.
- Added new translation: Catalan.
- Updated translations: Hebrew.
- Fixed: Thumbnails of custom sizes are now displayed correctly at the files list.
- Fixed: Files from the right resource type will be shown at the second opening of CKFinder via CKEditor.
- Fixed: Impossible to set height of CKFinder when using SetupCKEditor().
- Fixed: Extension is now uneditable in the ImageResize dialog window.
- Fixed: Hitting F5 and CTRL+R inside a CKFinder popup will not close the window.
- Fixed: IE will not show an error on the console when opening Developer Tools when inside the popup.
- Fixed: The "onbeforeunload" event of the host document will now be preserved.
- Fixed: The "Resize" dialog window looks better on Webkit.
- Fixed: The thumbnail inside the "Resize" dialog window is now limited in size.
- Fixed: An hidden CKFinder instance will now have correct height when shown.
- Fixed: The rememberLastFolder configuration now works when opening CKFinder as a popup.
- Fixed: In forced IE7 compatibility mode, IE8 did not display dialogs correctly.
- Fixed: It is now possible to use a callback for the Basket's context menu and toolbar labels, as well as custom language strings.
- Fixed: Layout may appear broken after upload.
- Fixed: IE 10: Compatibility with latest beta version.
- Fixed: Thumbnails were left in the old location when files were moved.
[PHP] - Added a new Zip plugin, that can create and extract zip archives and allows to download a folder or multiple files as a zip package.
[PHP] - Dropped support for PHP 4.x.
### Version 2.2.2
- Fixed: The new Chrome 20 is again causing issues with finder.popup(). The new fix should work for all future versions of Chrome.
### Version 2.2.1
- Fixed: finder.popup() does not work in Chrome 18.
### Version 2.2
Security Release: fixed filtering of unsafe characters for IIS6 web server.
- HTML5 multiple file uploads introduced.
- Files can now be uploaded by using the drag&drop in Firefox and Chrome.
- Added a read-only mode (config.readOnly), which if enabled, lets the user browse the files but not upload or modify them.
- CKFinder now supports common lightbox plugins by default when viewing files, and will use Colorbox to show images if no other lightbox plugin is loaded.
- "Upload" button in the toolbar now remains active after a file has been uploaded if the Upload Pane is still open.
- Improved formatting of file sizes.
- Dialog window definition now contains a new connectorResponse property which can use raw data sent from the server inside plugins.
- Added support for full URLs in the SetupCKEditor() method.
- Configuration objects passed to the SetupCKEditor() method are now in fact being used.
- Improved support for Android and iOS tablets.
- Updated translations: Slovak; minor updates in all other localizations.
- Fixed: Permission denied to set property Window.onbeforeunload.
- Fixed: ckfinder_v1.js: SetupCKEditor() and SetupFCKeditor() methods are causing a JavaScript error.
- Fixed: IE, Opera: Double clicking a file causes CKFinder to try to close the browser tab.
- Fixed: IE, Opera: CKFinder closes the browser tab after the tab which linked to it was closed.
- Fixed: IE, Opera: CKFinder tries to close the browser tab after pressing the F5 key (Refresh).
- Fixed: When CKFinder is integrated with CKEditor, the URL that is sent back from the Upload tab after a successful file upload is not being encoded properly.
- Fixed: It is impossible to view a file with a special character in its name.
- Fixed: IE8: Selecting a file requires a double click instead of a single one.
- Fixed High Contrast mode detection.
- Fixed: Flash uploader is unable to deal with unexpected errors.
[PHP] - Fixed: Incorrect encoding of file names returned after the file upload.
[PHP] - Added: Support full URLs in resolveUrl() to resolve to correct $baseDir.
### Version 2.1.1
- Sorting by file extension is now available.
- Clear Basket button is now only active when applicable.
- Added support for skins in custom paths (config.skin).
- Added a new API method to destroy an instance (api.destroy()).
- Added an option to specify additional parameters for server requests (config.connectorInfo).
- Added Czech version of CKFinder User's Guide ("Help").
- A callback function (config.callback) can now also be defined in the configuration file.
- Added RTL support for skins.
- Improved RTL support in the Flash upload component.
- Fixed: The Flash uploader used wrong URL to send files when CKFinder had an ID attribute assigned (as a result, the upload was never marked as completed).
- Fixed: Added protection against thumbnail caching. CKFinder was displaying an old thumbnail when a user deleted a file and then a file with the same name was uploaded.
- Fixed: [Opera] Double clicking on a folder opens the browser's context menu.
- Fixed: It was impossible to re-enable a disabled context menu command.
- Fixed: config.id is now available for reading within custom configuration.
- Fixed: [Firefox] JavaScript error when reloading the page where CKFinder is used as a popup.
- Fixed: [IE, Chrome] Focus is lost after closing a dialog window.
- Fixed: The startupPath option did not work.
- Fixed: Unable to use CKFinder inside modal dialogs due to inability to properly destroy the previous instance.
[PHP] - Fixed: When cookie contains an array, clicking the Upload button resulted in an error.
[PHP] - Fixed: The Watermark plugin (and the AfterFileUpload hook) did not work.
[PHP] - Fixed: Uploading files did not work when memory_limit was set to -1.
### Version 2.1
- Added support for multiple uploads using the Flash component.
- Improved rendering of thumbnails. Thumbnails are now loaded dynamically, only when the file is visible.
A configurable delay between requesting each thumbnail is available: config.thumbnailDelay.
- Added support for file upload using HTML5 FormData.
- Added an option to set the base user interface color: config.uiColor.
- File upload requires less clicks.
- Improved keyboard navigation and actions.
- Compatibility with mobile devices (Android and iOS).
- Added an option to show an arrow icon that will launch the context menu: config.showContextMenuArrow.