We are very pleased to announce the release of Yii Framework version 2.0.27.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.27 is a minor release of Yii 2.0. This release includes bug fixes accumulated since last release and a two enhancements from old pull requests:
When using incorrect alias or option in console it now lists correct ones.
appendTimestamp support was added to View methods registerCssFile() and registerJsFile().
We are very pleased to announce the release of Yii Framework version 2.0.26.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.26 is a minor release of Yii 2.0. This release includes bug fixes accumulated since last release.
Thanks to all Yii community members who contribute to the framework,
translators who keep documentation translations up to date and community members who answer questions at forums.
There are many active Yii communities so if you need help or want
to share your experience, feel free to join them.
A complete list of changes can be found in the CHANGELOG.
We are very pleased to announce the release of Yii Framework version 2.0.25.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.25 is a minor release of Yii 2.0. This release includes bug fixes accumulated since last release.
Thanks to all Yii community members who contribute to the framework,
translators who keep documentation translations up to date and community members who answer questions at forums.
There are many active Yii communities so if you need help or want
to share your experience, feel free to join them.
A complete list of changes can be found in the CHANGELOG.
We are very pleased to announce the release of Yii Framework version 2.0.24.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.24 is a minor release of Yii 2.0. In this release 8 bugs were fixed.
It includes further work on MSSQL, migration fixes, subdomain support for User::loginRequired() and a fix for logger replacement.
We are very pleased to announce the release of Yii Framework version 2.0.23.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.23 is a minor release of Yii 2.0. In this release 5 bugs were fixed with the main focus on MSSQL database support. All fixes were made by Alexander Kartavenko. Thank you!
Thanks to all Yii community members who contribute to the framework,
translators who keep documentation translations up to date and community members who answer questions at forums.
There are many active Yii communities so if you need help or want
to share your experience, feel free to join them.
A complete list of changes can be found in the CHANGELOG.
We are very pleased to announce the release of Yii Framework version 2.0.22.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.22 is a minor release of Yii 2.0. In this release community members fixed 6 bugs. Additionally, two very minor enhancements were made.
\yii\validators\DateValidator got $strictDateFormat property that enables stricter validation mode.
Debug log message for \yii\base\Action now includes controller name.
We are very pleased to announce the release of Yii Framework version 2.0.21.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.21 is a minor release of Yii 2.0 which fixes some bugs,
improves database connection performance and adding support for sameSite cookie option for regular and session cookies.
Info: yii\db\Query::select() and addSelect() now normalize the columns
when saving them to $this->select, so code that works directly with that
property directly may need to be modified.
We are very pleased to announce the release of Yii Framework version 2.0.20.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.20 is a minor release of Yii 2.0 which fixes some bugs.
No known changes that could affect existing applications were made.
We are very pleased to announce the release of Yii Framework version 2.0.19.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.19 is a minor release of Yii 2.0 which fixes some bugs.
No known changes that could affect existing applications were made.
We are very pleased to announce the release of Yii Framework version 2.0.18.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.18 is a minor release of Yii 2.0 which fixes some bugs.
No known changes that could affect existing applications were made.
We are very pleased to announce that Yii Framework version 1.1.21 is released.
You can download it at yiiframework.com/download/.
This release is a release of Yii 1.1 that
has reached maintenance mode and will, only receive necessary security fixes and
fixes to adjust the code for compatibility with PHP 7 if they do not cause breaking changes.
This allows you to keep your servers PHP version up to date in the environments where old Yii 1.1 applications are hosted and stay within the version ranges supported by the PHP team.
Yii 1.1.21 is compatible with PHP 7.3 that, at the time of this writing, has an announced security support until December 6, 2021.
We recommend to use Yii 2.0 for new projects as well as introducing Yii 2.0 for developing new features in existing Yii 1.1 apps, as described
in the Yii 2 guide.
Upgrading a whole app to Yii 2.0 will, in most cases, result in a total rewrite so this option provides a way for upgrading step by step
and allows you to keep old applications up to date even with low budget.
We are very pleased to announce the release of Yii Framework version 2.0.17.
Please refer to the instructions at https://www.yiiframework.com/download/
to install or upgrade to this version.
Version 2.0.17 is a minor release of Yii 2.0 which contains some bugfixes including a security fix.
No known changes that could affect existing applications were made.
We are very pleased to announce the release of Yii Framework version 2.0.16.1.
Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.
We are very pleased to announce the release of Yii Framework version 2.0.16. Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.
Yii 2.0 reached feature freeze more than a year ago, meaning that the 2.0 branch will only receive bug fixes. That was done in order to allow the Yii Team to focus on the upcoming Yii 3 rewrite. There's more on Yii 3 at the very end of this announcement.
We are very pleased to announce the release of the ApiDoc extension version 2.1.1.
This release fixes some issues with wrongly formatted PHPDoc and includes support for {@inheritdoc} tags.
It also improves Guide rendering by adding a table of contents if there is more than one headline.
Markdown code highlighting has been extracted into a trait MarkdownHighlightTrait, which can be re-used in different contexts.
We are very pleased to announce that Yii Framework version 1.1.20 is released.
You can download it at yiiframework.com/download/.
This release is a release of Yii 1.1 that
has reached maintenance mode and will, only receive necessary security fixes and
fixes to adjust the code for compatibility with PHP 7 if they do not cause breaking changes.
This allows you to keep your servers PHP version up to date in the environments where old Yii 1.1 applications are hosted and stay within the version ranges supported by the PHP team.
Yii 1.1.20 is compatible with PHP 7.2 that, at the time of this writing, has an announced security support until November 30, 2020.
We recommend to use Yii 2.0 for new projects as well as introducing Yii 2.0 for developing new features in existing Yii 1.1 apps, as described
in the Yii 2 guide.
Upgrading a whole app to Yii 2.0 will, in most cases, result in a total rewrite so this option provides a way for upgrading step by step
and allows you to keep old applications up to date even with low budget.
Today we are releasing several versions for Yii 2.0.x and official extensions to fix a security issue.
The problem addressed in these patches exists in ActiveRecord shortcut methods findOne() and findAll(), which may
allow SQL injection if input is not prepared properly. We consider this as a security issue in Yii because the documentation for these methods did not contain an explicit warning that there are cases when passing unfiltered user input might be dangerous. Thanks to analitic1983 for making us aware of the issue.
The nature of this issue does not solely exists in the Yii Framework but depends on how an application uses Yii.
We have changed Yii to be more robust against the worst impact of the problem (SQL injection), but applications may still be vulnerable
and changes to application code are necessary in some cases. As a safety measure, findOne() and findAll() are now limited to filter on
columns that are AR properties only. In the following we will explain the problem in more detail
and show which application code is affected and what needs to be adjusted on upgrade.
