Yii 1.1 support was originally announced as "Dec 31, 2015 (may be extended further if needed)". In March we've conducted a survey and since December is close, it's time to officially announce our decision.

Yii 2.0 has been a great success and even though there are still a lot of projects using Yii 1.1 we have to make a decision as our resources are limited. We have been focusing on Yii 2.0 development in the past year and there was not much activity for Yii 1.1.

We have now decided to not accept any features or enhancements for Yii 1.1 anymore. We'll close feature request tickets and related pull requests soon. As we also obviously do not have enough time to fix all the reported bugs ourselves we will review the open tickets and only keep the critical ones open. Most of bugs are open for such a long time that probably affected projects had already implemented workarounds anyway.

So here is the timeline: Yii 1.1 will receive critical bugfixes and PHP 7 compatibility fixes till the end of 2016. After that we will only respond to and fix security issues if any will be found until at least the end of 2018. Even after security support has ended, all the code and documentation will be still available.

If you have any questions or concerns about this, feel free to get in touch with us.

We are very glad to announce that we have a new member joining the core team. His name is Dmitry Naumenko and his GitHub ID is SilverFire. Dmitry is from Kiev, Ukraine. Despite not being long time contributor he displayed very good sense of the framework, thorough approach to development and issue discussion and great technical skills. We believe his joining the team will help us push Yii forward. Welcome!

We are very pleased to announce the releases of Debug, Bootstrap, Sphinx and Authclient extensions. We decided to decouple extension releases from the framework release to allow more flexibility and possible more frequent extension releases. Debug was released quite long time ago but at the time we were too busy for announcement.

Debug Toolbar version 2.0.5 (yii2-debug) ¶

Debug toolbar got some reliablity fixes, usability improvements and new features. It's now more compact, got more colors and better formatting.

We are very pleased to announce the release of Yii Framework version 2.0.6. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.

Version 2.0.6 is a patch release of Yii 2.0 which contains over 70 minor new features and bug fixes as well as numerous improvements to documentation and great progress on guide translations.

We thank our excellent Yii community who helped us with pull requests and valuable discussions. Thank you!

You may follow the development progress of Yii 2 by starring or watching Yii 2.0 GitHub Project. You may also follow Yii Twitter feeds or join Yii Facebook group to connect with other Yii developers.

We are releasing Yii 2.0.5 to fix a security issue found in the yii\web\ViewAction class. We urge all users of the class to upgrade their Yii installation to this latest release. Upgrading from 2.0.4 to this release is very safe as the release does only contain the bugfix for the vulnerability and will not break your existing code.

The vulnerability is in the ViewAction action. It is possible to execute any PHP file (a file ending with .php) on the disk by passing a relative path via view parameter. Since the issue was posted on the public issue tracker and is already known, we've fixed it and decided to make this release immediately.

We have reserved a CVE number (CVE-2015-5467) for this issue, which you can use to refer to it.

We are very pleased to announce the release of Yii Framework version 2.0.4. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.

Version 2.0.4 is a patch release of Yii 2.0 which contains over 100 minor new features and bug fixes. It contains a fix for the security issue CVE-2015-3397 that may allow XSS attacks to IE6/IE7 users. For this reason, you are urged to upgrade to this version if your applications are required to support IE6/IE7. We have added a new helper method yii\helpers\Json::htmlEncode() which should be used instead of Json::encode() if you use the result in Javascript code that is embedded in a HTML page to avoid the problem described above.

The release further adds a new core validator named EachValidator which allows you to validate every element in an array input. A new method named attributeHints() is added to yii\base\Model, which let you to configure input hints (in addition to input labels). And finally you can use indexBy() together with column() when performing database query with yii\db\Query. It will return an array of scalar values indexed by the specified column or computed indices. There are many other useful additions and changes to this release. Please refer to the core framework change log and the extension change logs.

We hereby thank to all contributors who have spent their precious time helping improve Yii and made this release possible.

You may follow the development progress of Yii 2 by starring or watching Yii 2.0 GitHub Project. You may also follow Yii Twitter feeds or join Yii Facebook group to connect with other Yii developers.

We are very pleased to announce the release of Yii Framework version 2.0.3. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.

Version 2.0.3 is a patch release of Yii 2.0 which contains about 50 minor new features and bug fixes. Complete list of changes may be found in the change log. We hereby thank to all contributors who have spent their precious time helping improve Yii and made this release possible.

Additional thanks goes to contributors improving documentation and translating into many languages.

We are very pleased to announce the release of Yii Framework version 2.0.2. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.

Version 2.0.2 is a patch release of Yii 2.0 which contains about 40 minor new features and bug fixes. Complete list of changes may be found in the change log. We hereby thank to all contributors who have spent their precious time helping improve Yii and made this release possible.

You may follow the development progress of Yii 2 by starring or watching Yii 2.0 GitHub Project. You may also follow Yii Twitter feeds or join Yii Facebook group to connect with other Yii developers.

We are very pleased to announce that Yii Framework version 1.1.16 is released. You can download it at yiiframework.com/download/.

In this release, we have included more than 120 enhancements and bug fixes. For the complete list of changes in this release, please see the change log. NOTE This release contains changes that break backward compatibility. Please read the upgrading instructions to learn how to upgrade.

We would like to express our gratitude to all contributors who have spent their precious time helping improve Yii and made this release possible.

We are very pleased to announce the release of Yii Framework version 2.0.1. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.

Version 2.0.1 is a patch release of Yii 2.0 which contains about 90 minor new features and bug fixes. Complete list of changes may be found in the change log. Besides code improvement, there are also a lot of improvements about the documentation, especially the Definitive Guide to Yii 2.0 which have been translated into several languages. We hereby thank to all contributors who have spent their precious time helping improve Yii and made this release possible.

You may follow the development progress of Yii 2 by starring or watching Yii 2.0 GitHub Project. You may also follow Yii Twitter feeds or join Yii Facebook group to connect with other Yii developers.

Yii 2.0 is finally coming, after more than three years of intensive development with almost 10,000 commits by over 300 authors! Thank you for your support and patience!

As you may have already known, Yii 2.0 is a complete rewrite over the previous version 1.1. We made this choice in order to build a state-of-the-art PHP framework by keeping the original simplicity and extensibility of Yii while adopting the latest technologies and features to make it even better. And today we are very glad to announce that we have achieved our goal.

Below are some useful links about Yii and Yii 2.0:

We are very pleased to announce the release of Yii 2.0 RC (Release Candidate). You may follow the instructions on yiiframework.com to install or upgrade to this version.

This RC release includes about 100 bug fixes and 200 new features and enhancements. It is a result of five months of intensive development since the prior Beta release. During this period, we have received a lot of help from the Yii community users. We hereby thank everyone who has contributed to Yii and made this release possible. You are the best!

Commonly Asked Questions ¶

We are releasing Yii 1.1.15 to fix a security issue found in 1.1.14. We urge all 1.1.14 users to upgrade their Yii to this latest release. Note that the issue only affects 1.1.14. All previous releases are not affected. Upgrading to this release from 1.1.14 is very safe and will not break your existing code.

The vulnerability is in the CDetailView widget. When a Yii application uses this widget and configures the "value" property of a CDetailView attribute using end user inputs, it may allow attackers to potentially execute arbitrary PHP scripts on the server. We are not showing how to exploit it here to allow users to upgrade before details about the exploit become publicly known. To our knowledge the details of this issue are only known to core team members.

We have reserved for this issue a CVE number (CVE-2014-4672) which you can use to refer to it.

We are very pleased to announce the Beta release of Yii Framework version 2. You can download it from yiiframework.com.

This Beta release includes hundreds of new features, changes and bug fixes that have been made since the alpha release. We will review the most important ones in the following. But first, we would like to answer some commonly asked questions regarding Beta.

Commonly Asked Questions ¶

We are very pleased to announce the alpha release of Yii Framework version 2. You can download it from yiiframework.com.

Yii 2 is a complete rewrite of Yii - one of the most popular PHP frameworks. Yii 2 inherits the main spirit behind Yii for being a simple, fast and highly extensible PHP framework. Yii 2 exploits the latest language features available in PHP 5.4 and embraces the best practices found in modern Web application development. For a complete description of the features offered by Yii 2, please check out The Definitive Guide and The Guide of Upgrading from Yii 1.1.

The alpha release of Yii 2 marks a major milestone in the course of Yii 2 development. It means that the code base of Yii 2 has reached a certain degree of stability. If you just start to learn Yii or you do not have a tight project schedule, you may consider using Yii 2. Please do not use Yii 2 in production as we may still introduce significant changes without prior notices.

Over the past two years, we have received tremendous contributions to Yii 2 from our community. We hereby thank every contributor for making this release possible.

We are very pleased to announce that Yii Framework version 1.1.14 is released. You can download it at yiiframework.com/download/.

In this release, we fixed more than 80 bugs and introduced more than 60 minor enhancements and features. We added CPasswordHelper that provides secure and up to date way to store and verify password hashes; We added CRedisCache to support using Redis for caching purpose; and Yii can now be installed as a Composer package. For the complete list of changes in this release, please see the change log.

We have received significant contributions to this release from our community users (e.g. creocoder, tom--, paystey, Ragazzo, antoncpu, Yiivgeny) to this release. We hereby thank their effort in making this release available.

It was recently announced that the Yii website was defaced, but until recently we were still investigating. Here are some details about what happened and what was affected:

1. The website's index.php was compromised through a vulnerability in the separate forum software (IPB, not Yii).
2. Neither the website's code nor Yii framework code was involved or part of the attack in any way. Hence, the security of the Yii framework remains as secure today as it was yesterday.
3. No framework downloads were affected, as the Yii framework source code is hosted externally.

Although we're storing passwords encrypted and are salting hashes, we may request you to change your forum account password soon.

Earlier today it was discovered that the entry page on the Yii website had been defaced. The website was restored in less than an hour from discovery of this event, and we are currently investigating the cause of it.

At this point we do not expect any of the Yii framework source code to have been affected, as the source code for the framework is hosted on external systems (GitHub and Google Code) which to our knowledge has not been affected.

As an extra precaution we do however recommend that if you downloaded a copy of the framework via the main website (www.yiiframework.com) earlier today, you delete that copy and download it again. The purpose of this is to be certain that the copy is really downloaded from Google Code and/or GitHub, even though there are no signs of downloads or source code having been affected by the defacement.

We will continue our investigation and take appropriate action once we have more information.

We are very pleased to announce the release candidate of Yii Framework version 1.1.14. You can download it at GitHub.

In this release, we fixed more than 80 bugs and introduced more than 60 minor enhancements and features. We added CPasswordHelper that provides secure and up to date way to store and verify password hashes; We added CRedisCache to support using Redis for caching purpose; and Yii can now be installed as a Composer package. For the complete list of changes in this release, please see the change log.

We have received significant contributions to this release from our community users (e.g. creocoder, tom--, paystey, Ragazzo, antoncpu, Yiivgeny) to this release. We hereby thank their effort in making this release available.

We are very pleased to announce that Yii 2 is now available for public preview at GitHub. This is a major milestone during the Yii 2 development which was started more than two years ago and has since undergone complete rewrite.

Note that Yii 2 is still under heavy development. We may introduce significant changes without prior notices. So please do not use it for production.

We sincerely invite you to review and play around the code, and give us feedback. We also welcome you to participate in developing Yii 2.

You may keep an eye on the following Yii 2 resources:

• Yii 2 code repository
• Yii 2 issue tracker
• Yii 2 design discussions