We are very pleased to announce the release of Auth Client extension version 2.2.12.
This version fixes and enhances OpenID Connect client, adds application name check for Facebook client, and adds AuthAction::$defaultClientId and AuthAction::getClientId().
See the CHANGELOG for details.
We are very pleased to announce the release of Yii Framework version 2.0.16.1. Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.
Version 2.0.16.1 is a bugfix release of Yii 2.0 which fixed regressions in 2.0.16.
We are very pleased to announce the release of Yii Framework version 2.0.16. Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version.
Version 2.0.16 is a minor release of Yii 2.0 which contains more than a hundred enhancements and bug fixes including security fixes.
Yii 2.0 reached feature freeze more than a year ago, meaning that the 2.0 branch will only receive bug fixes. That was done in order to allow the Yii Team to focus on the upcoming Yii 3 rewrite. There's more on Yii 3 at the very end of this announcement.
Today we are releasing several versions for Yii 2.0.x and official extensions to fix a security issue.
The problem addressed in these patches exists in ActiveRecord shortcut methods findOne() and findAll(), which may
allow SQL injection if input is not prepared properly. We consider this as a security issue in Yii because the documentation for these methods did not contain an explicit warning that there are cases when passing unfiltered user input might be dangerous. Thanks to analitic1983 for making us aware of the issue.
The nature of this issue does not solely exists in the Yii Framework but depends on how an application uses Yii.
We have changed Yii to be more robust against the worst impact of the problem (SQL injection), but applications may still be vulnerable
and changes to application code are necessary in some cases. As a safety measure, findOne() and findAll() are now limited to filter on
columns that are AR properties only. In the following we will explain the problem in more detail
and show which application code is affected and what needs to be adjusted on upgrade.
We are very pleased to announce the release of the redis extension version 2.0.7.
This release makes the extension compatible with PHP 7.2 by refering to BaseObject instead of the Object class in Yii.
It also adds simple ORDER BY support to the ActiveQuery so DataProvider functionaility is now fully supported.
we are very pleased to announce the release of some extensions, which among other things include fixes to makes them fully compatible with PHP 7.2:
Bower has changed their registry URL some time ago and has now announced to deprecate the old URL. Old registry will be disabled next Wednesday. In order for your work not to be affected make sure to update your composer asset plugin to the latest version:
composer global require "fxp/composer-asset-plugin:^1.4.2"
Versions prior to 1.4.2 use the https://bower.herokuapp.com/packages URL for fetching bower packages, which currently redirects to https://registry.bower.io/packages. This URL will be disabled on Wednesday, October 26, 2017 according to the Bower announcement so asset plugin versions prior to 1.4.2 will not be able to fetch any packages.
If you have any questions or comments on this topic, there is a forum topic for discussion.
We are very pleased to announce the release of Yii Framework version 2.0.12. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.
Version 2.0.12 is a minor release of Yii 2.0 which contains more than 100 enhancements and bug fixes.
There are minor changes that may affect your existing applications so make sure to check the UPGRADE.md file.
We are very pleased to announce the release of Yii Framework version 2.0.11. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.
Version 2.0.11 is a minor release of Yii 2.0 which contains more than 110 enhancements and bug fixes.
There are four minor changes that may affect your existing applications so make sure to check the UPGRADE.md file.
We are very pleased to announce the release of Yii Framework version 2.0.10. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.
Version 2.0.10 is a minor release of Yii 2.0 which contains more than 80 enhancements and bug fixes.
There are four minor changes that may affect your existing applications so check the UPGRADE.md file.
We are very pleased to announce the release of Yii Framework version 2.0.9. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.
Version 2.0.9 is a minor release of Yii 2.0 which contains about 60 minor new features and bug fixes.
There are two minor changes that may affect your existing applications so check the UPGRADE.md file.
We are very pleased to announce the release of Yii Framework version 2.0.8. Please refer to the instructions at http://www.yiiframework.com/download/ to install or upgrade to this version.
Version 2.0.8 is a patch release of Yii 2.0 which contains about 100 minor new features and bug fixes in 300 commits, by 64 contributors, changing 150 files.
There are extra steps to do while upgrading so check the UPGRADE.md file.
We are very pleased to announce that Yii 2 is now available for public preview at GitHub. This is a major milestone during the Yii 2 development which was started more than two years ago and has since undergone complete rewrite.
Note that Yii 2 is still under heavy development. We may introduce significant changes without prior notices. So please do not use it for production.
We sincerely invite you to review and play around the code, and give us feedback. We also welcome you to participate in developing Yii 2.
You may keep an eye on the following Yii 2 resources: