Users

Version 3.1.0b1: - New: Failed passwords are also counted per user account - after 10 failures the account cannot log in until 60 seconds pass with no further failure - Change: Only a Master Admin can open, save or generate a new password for admin and master accounts (matches delete and block) - Change: A successful login no longer clears the failed login counter for the IP address - Change: The session gets a new session ID at every login - Change: Accounts in an admin approval quota can no longer activate themselves with an activation link - Change: Changing a password (by the user or an admin) now ends all other sessions and removes all remember-me logins for the account - Change: The session cookie is set as Secure on SSL sites - Change: The Who's Online template function renders even when only visitors (or nobody) are online - Change: Log in and password reset by email are refused when the email address is used by more than one account - the user sees a new message and a CRI Activity Log entry names the address - Change: Account activation links use a new random activation key - the user_validate value is now used only as the unsubscribe token (activation links already sent to pending accounts keep working) - Change: Password reset keys, remember-me cookies, unsubscribe tokens for new accounts and generated passwords are created with a secure random generator - Change: The whois lookup in the ACP now uses RDAP over https (with certificate checks) instead of ARIN whois over http, and shows the actual network holder, country and abuse contact for addresses in every registry (RIPE NCC, APNIC, LACNIC, AFRINIC), not just North America - Change: whois IP lookups open in a modal window (a popup on Jamroom Core versions before 7.1.0b1) - Change: The disk usage report in the data browser opens in a modal window (a popup on Jamroom Core versions before 7.1.0b1), and the whois page no longer has "close" buttons - Change: whois lookup window no longer shows a page banner - the modal title bar shows "whois lookup: " - Change: Users whose quota does not allow a module are refused on every view of that module that checks quota access (update, delete, settings, lists and create save views), not only on its create form - as before version 2.9.7 - Change: For power users, quota access outside create forms is checked against the profile the item or submitted form belongs to, not the profile they viewed last (an item id is only used when the URL is for the module being checked) - Bug Fix: online_status only accepts the default template or a cached custom template - Bug Fix: The pending users / User Browser bulk delete did not apply the admin and master account checks used by single delete - Bug Fix: Account self delete worked with "Allow Delete" off, worked for admin accounts, and deleted the profile even when other users were linked to it - Bug Fix: The pending users / User Browser bulk delete deleted a home profile even when user accounts outside the batch were linked to it - Bug Fix: The activation resend permission was not tied to a user account and was never cleared - Bug Fix: The old password check on the re-authenticate form had no failure limit - Bug Fix: Session sync deleted the profile sync marker from the wrong profile - Bug Fix: Language import overwrote strings of the first module when a file covered more than one module - Bug Fix: Delete language did not validate the form and did not stop on an invalid language - Bug Fix: Bot sessions were kept for 4 hours instead of 15 minutes - Bug Fix: PHP warning for an undefined variable on logged-out page views of a privacy level 2 site - Bug Fix: Who's Online threw a PHP 8 TypeError when users of different groups shared a profile - Bug Fix: Password reset checked the blocked flag on the wrong record - Bug Fix: Non-admin users were logged in during maintenance mode before being stopped on the next page - Bug Fix: Whois lookup cut values that contain a colon, and the whois page did not escape its output - Bug Fix: Account email changes were only checked for an existing address when "Re-Authenticate" was on - Bug Fix: At exactly the quota's Max Items the create form was still shown, and saving it failed with a general error - the form now shows the maximum items notice - Bug Fix: Renaming an account accepted a name used by another member's profile, the name of a deleted account in the Recycle Bin, or a banned name - renames now use the same rules as signup (admins may still use a banned name) - Bug Fix: Saving notification settings stored any posted event name and value - only notification events and the delivery options offered for them are saved now - Bug Fix: A notification delivery option the user is no longer offered (for example after a quota change) was still used, and an unknown value sent nothing - both now send email - Bug Fix: Logging out left the logged-in session stored under its previous session ID until it expired - logout now deletes it - Bug Fix: PHP 8.3 "Automatic conversion of false to array" deprecation on every templated signup - Bug Fix: installing new language strings did not reset the language caches (wrong cache keys, PHP 8 warnings) - Developer: "jrUser_session_get_user_info()" and "jrUser_check_login_cookie()" functions to look up the user of a session or remember me cookie without starting a session (read only) - Developer: jrUser_check_quota_access() takes an optional profile_id - views that load an item or category pass the profile it belongs to - Developer: Sessions use a SessionHandlerInterface object instead of six callback functions - session_set_save_handler() with callbacks is deprecated in PHP 8.4 and removed in PHP 9 - Developer: Admin and master user ID lookups were not cached for the request Version 3.0.4: - Change: Added a date range picker to the dashboard graph for "Daily Active Users" Version 3.0.4: - Bug Fix: Prevent redirecting to an XHR request page after log in Version 3.0.3: - Change: Update bundled Crawler Detect library to version 1.3.0 Version 3.0.2: - Change: Update bundled Crawler Detect library to version 1.2.118 Version 3.0.1: - New: Added captcha field to login and signup templates. Version 3.0.0: - New: "Allow Delete" global config option added and if enabled allows users to delete their own account - New: "Delete Account" button added to the User Settings section that shows if delete is enabled - New: "Delete Checked" option in User Browser for deleting multiple accounts at once - Change: Updated all activity log entries from the User Acccounts module with "user:" prefix - Change: Update bundled Crawler Detect library to version 1.2.112 - Change: Replace phpass password hashing library with PHP built in password functions - Change: A maximum password length check has been added limiting passwords to max 80 characters - Bug Fix: A bug was fixed where an admin account could be deleted when deleting a linked profile Version 2.9.17: - Change: Changed how notification preference keys are stored to minimize DB storage - Change: Updated bundled Password hashing library to version 0.5 Version 2.9.16: - New: "login_activity_log" Advanced key added that will prevent logging of user logins to Activity Log - Change: Optimizations to expired session cleanup queries Version 2.9.15: - New: "User Signups" dashboard panel (use in place of the Profiles module "Signups Today") - Change: Daily Active Users is computed as midnight -> midnight System Time instead of the previous 24 hours Version 2.9.14: - New: "Resend Checked Users" button added in the Pending dashboard to resend activation email to multiple users - New: "online_user_info" event trigger added with session info for online users - Bug Fix: The "Use Default" button for changed language strings in the "Language" tab may not be clickable Version 2.9.13: - Bug Fix: Duplicate user emails could be created when changing account email Version 2.9.12: - Change: Additional updates and tweaks to support PHP 8+ Version 2.9.11: - Change: Update bundled Crawler Detect library to version 1.2.109 - Change: Tweaks and updates to run better on PHP 8+ Version 2.9.10: - Change: Updates to get session handling working better with PHP 8 Version 2.9.10: - Bug Fix: Deleted user account DataStore keys could remain in session after session_sync() call Version 2.9.9: - Change: Dashboard User Browser updated to use Search module's Full Text indexing if enabled Version 2.9.8: - New: "delete_user_init" event added that is fired just before a user account is deleted Version 2.9.7: - Change: Updated Quota check functions to work better for Power User quotas - Change: Updated User Browser to work with core key search methods Version 2.9.6: - New: "loaded_language_strings" event trigger fired with viewing user language strings - Bug Fix: Profiles created by a Power User may not show the correct profile image Version 2.9.5: - Bug Fix: Notification options for email_only modules could show Private Note option Version 2.9.4: - Change: Updated account_save view so variables in "get_save_data" event are changeable Version 2.9.3: - New: The ability to block or unblock a user programmatically has been added - Bug Fix: The "Forgot Note" was not showing if "Enable Templates" was not enabled Version 2.9.2: - Bug Fix: Possible "Too few arguments to function" Fatal PHP Error when syncing a session Version 2.9.1: - Bug Fix: Possible SQL error during an integrity check if custom language strings contain non-UTF8 Version 2.9.0: - New: "notification_plugins" event added to allow other modules to inject new notification options - New: "notification_event" event added that is fired when displaying each notification option - Change: User Notifications updated with new framework for integrating notification options - Change: The last selected Notification Option will show as default after making a notification change - Bug Fix: Success message not showing on User Signup if admin validation enabled in signup quota Version 2.8.4: - New: "session_sync" event added that is fired when a user's session is synced - Bug Fix: Custom form fields set to "required" were not working correctly on Signup form Version 2.8.3: - Change: Updated CSS so select element for Quota in signup template matches text input style - Bug Fix: Possible "Invalid Form Validation Received" error when using login templates - Bug Fix: "_user_id" was "0" when referenced inside "signup_created" listener for admin created user Version 2.8.2: - Bug Fix: "Unauthorized" user error when submitting a form via an XHR call may not show Version 2.8.1: - Bug Fix: "Auto Login Reset" set to "permanent" may not set auto login cookie correctly Version 2.8.0: - New: Updated user_login.tpl and user_signup.tpl to use new activity indicator in Core 6.5.0+ - Change: Unsubcribe flow has been changed to no longer required a confirm email step - Change: Updated email_notify_signup_message.tpl to include Geo location if available - Change: "Remember Me" cookie updated to work with core provided cookie functions - Change: "Create SSL URLs" global config option has been removed - no longer used - Change: jrUser_session_sync() function $user_id parameter is no longer used - Change: Update bundled Crawler Detect script to latest release - Change: Profile Pulse browser local storage keys are reset on logout Version 2.7.5: - New: "user_forgot.tpl" added for use in Forgot Password view if "Enable Templates" option is active Version 2.7.4: - New: "can_edit_item" event trigger added that is fired to check if a user can modify a DS item Version 2.7.3: - Change: User name can no longer also be an email address (user_email will contain the email address) Version 2.7.2: - Change: User Data Browser updated to search user_name and user_email as default search Version 2.7.1: - Bug Fix: Some temporary session variables may not be kept when calling jrUser_session_sync() - Bug Fix: Multi-profile users may not be able to edit the profile information for additional profiles Version 2.7.0: - New: "New Password" Admin button in Account settings to generate new password and notify user - Bug Fix: Banning an IP Address was not removing the sessions associated with the IP address Version 2.6.7: - Change: "Block User" check box no longer shows in Account Settings for Master admin users - Bug Fix: Checking the "Block User" option in the User Account screen was not blocking the user - Bug Fix: Resetting their password could allow a blocked user to log in Version 2.6.6: - Change: Improved language string caching Version 2.6.5: - New: "Banned Bot" banned item plugin to allow banning web bots by name Version 2.6.4: - Bug Fix: Notification updates when done by admin was not working Version 2.6.3: - Change: Language string caching will now use local caching if enabled - Change: "Delete user account and profile" is grayed out in User Browser if user has no profile - Bug Fix: login and signup templates were not using the correct variable for the notes section - Bug Fix: Possible SQL error when user search includes non-UTF8 characters Version 2.6.2: - Bug Fix: Deleting pending user accounts from Pending Users section may not delete User account Version 2.6.1: - Bug Fix: Users can now select items per page on the pending Users list - Bug Fix: Notification update was using the wrong profile and user IDs when being updated by admin Version 2.6.0: - New: Updated account tabs functions to make it easier for other modules to be integrated - New: "Block User" admin Account Settings field for unblocking blocked User Account - Change: Updated to work with new Recycle Bin functions found in Jamroom Core 6.2.0 - Bug Fix: Pending Users list would only show the most recent 10 pending users Version 2.5.4: - Bug Fix: Users logged in for a very long time could lose the active profile info from their user session - Bug Fix: Enabling "Create SSL URLs" may result in an SSL warning if Site Privacy is set to "private" Version 2.5.3: - Change: Optional signup and login timeline entries now saved as status updates - Bug Fix: Profiles with more than 10 user accounts may not show all accounts in "online" list - Bug Fix: Users with multiple profiles could show incorrect "Home Profile" in Account Settings Version 2.5.2: - New: Options added in Pending User screen to activate or delete all pending users - Bug Fix: Errors encountered when using templated Signup may not show on signup form Version 2.5.1: - Bug Fix: "Notifications" tab may not show to multi profile users who have not logged out in a long time - Bug Fix: Admins unable to change password on regular user account if password change is pending Version 2.5.0: - New: "Enable Templates" global config option to enable 100% templated login and signup views - New: "is_admin_check" and "is_master_check" event triggers added for checking if user is admin or master - New: "user_browser_row" event trigger fired with user data for each row in the User Browser - New: Profile Disk Usage now shown beside profile name in User Browser (for profiles using disk space) - New: jrUser_reset_cache() can now accept an array of user_id's instead of a single user_id - Change: If a user account has never logged in "never" will show for Last Login instead of "-" - Change: Bundled Crawler Detect library updated to version 1.2.66 - Bug Fix: user_last_login key only being set in user account validation - now set to 0 on account create - Bug Fix: User accounts missing "user_last_login" key will now be repaired during module repair - Bug Fix: Profile Settings may be missing "Account" tab for users with multiple profiles - Bug Fix: Email opt out text was missing the word "out" Version 2.4.0: - New: "Notification Layout" global setting added to support Compact and Expanded Notification layout - New: Added plugin support for User Sessions minute maintenance cleanup event - New: Updated signup activation email regarding using the notification tab to control emails received - Bug Fix: First account created in system was being checked for restricted user names - Bug Fix: System reset developer tool may fail to complete Version 2.3.1: - Bug Fix: Some user names could be incorrectly flagged as invalid by the Spoofchecker - Change: Updated "users online" function to be much faster on very large sites - Change: Master admin users can no longer change their own User Group Version 2.3.0: - New: Spoofchecker support added to detect Unicode confusables in user names (PHP 5.4+) - New: Signup User Name checked against a list of reserved words not allowed in User names - New: "Enable Bot Sessions" global config option to enable Web Bot sessions - Change: By default web bots no longer create User Sessions - Bug Fix: "Visitor" online user counts was including bot count - Bug Fix: "Remember Me" cookie may expire after 14 days if Auto Login Reset set to "permanent" Version 2.2.10: - New: "users + visitors online" and "visitors online" dashboard panels - Change: Updating Account Settings deletes any pending "forgot" password reset codes - Change: Bundled Crawler Detect library updated to version 1.2.55 - Bug Fix: User last login time may not be updated for sessions longer than 24 hours - Bug Fix: Monthly and Daily Active users graph values not including private profile users Version 2.2.9: - Bug Fix: Order by Last Login time in User Browser was not ordering correctly Version 2.2.8: - Bug Fix: Redirected URL for when a user is not logged in may be wrong for some users Version 2.2.7: - Bug Fix: Unable to create a new user without profile if user name matched existing profile name Version 2.2.6: - Change: Changing password logs out all other browser sessions except the active one - Change: User names can no longer contain < or > characters Version 2.2.5: - Bug Fix: Dashboard online user count was no longer including site visitors Version 2.2.4: - New: Detected bot sessions are limited to 3600 seconds to prevent session table build up - Bug Fix: {jrUser_whos_online} template function not working if using Redis sessions - Bug Fix: Users Online dashboard panel count is 1 higher than actual online users Version 2.2.3: - New: Support added for online user counts for bots when using a session plugin Version 2.2.2: - New: You can now select the Signup Quota when using the Site Builder signup widget - New: Session sync functionality added to properly sync active users when quota changes - Bug Fix: Signups from template code in Site Builder not saving user name or email address Version 2.2.1: - Bug Fix: Site Builder Login/Signup widget not showing the selected option Version 2.2.0: - New: Quota option to add signups and logins to the timeline - New: Users linked to multiple profiles now indicate their "Home Profile" in Linked Profiles - New: Users with multiple profiles now show all their linked profiles in Users Data Browser - Change: Signup and Login forms now have separate help text in the Language tab - Change: Updated session handling to be faster as well as verify linked profile IDs - Bug Fix: User data could be cached when re-authenticating email address change - Bug Fix: Users Online may only show 1 visitor even when multiple are online - Bug Fix: Changing user language on pages other than the account page might not persist - Bug Fix: Users may not sync with Quota changes made when users are online - Bug Fix: Auto login cookie may be incorrectly reset after only 2 days - Bug Fix: User data could get out of sync if re-authenticate was active - Bug Fix: Some User account data not being removed when Developer Tools "Reset System" tool is run Version 2.1.2: - New: Activity Log entry for invalid password at login for admin and master users - Bug Fix: Possible incorrect user_id after jrUser_session_sync() Version 2.1.1: - Bug Fix: Unchecking "Disable All Notifications" may not save changes Version 2.1.0: - New: "Active Session System" global config setting if module session handlers installed - New: "Login Note" global config setting to set a custom note (HTML allowed) on the login form - New: "Signup Note" global config setting to set a custom note (HTML allowed) on the signup form Version 2.0.8: - Change: Daily Active Users dashboard shows active users for current day (vs previous 24 hours) - Bug Fix: Cloned languages may not be setup properly on a new module install - Bug Fix: Date in Daily Active Users dashboard graph was off by one - Bug Fix: Banned Email match on User Email may not show correct error message Version 2.0.7: - New: User Browser delete confirmation modal to delete user OR user + profile - Change: "word-break" class added to Location column in Who's Online to break long URLs Version 2.0.6: - Change: "Not Authorized" page continue button loads /user/login page for non-logged in users Version 2.0.5: - New: "Export Language Strings" tool for exporting language strings to a file - New: "Import Language Strings" tool for importing an exported language file - Bug Fix: Some module tabs may not always show in the user Account Settings Version 2.0.4: - Bug Fix: Signup Quota select field could show even if only one quota has signups enabled Version 2.0.3: - New: Unsubscribe support for email addresses not tied to user accounts - New: Updated to listen for new email_addresses Core event for suppression list Version 2.0.2: - New: "Block" button in User data browser to easily block and unblock a user and profile - Bug Fix: Possible error when modifying a user account created by different module Version 2.0.1: - New: "Signup Redirect Page" Quota Config setting to redirect to specific page after signup - Bug Fix: jrUser_session_sync() could delete valid form notices on location redirect Version 2.0.0: - Bug Fix: Who's Online not showing different user accounts logged in on same IP Address - Change: Notifications section updated to no longer use the Module name as the selector - Change: Updated invalid login check functions to no longer "block" - Change: "Change Notification" global config now notifies users when they change their password - Change: Bundled Crawler Detect library updated to latest version Version 1.8.7: - New: Whois lookup functionality changed to new tool using "whois" command from operating system - Bug Fix: "unsubscribe_confirm" view redirecting to user login if Site Privacy is not public - Bug Fix: "Auto Login Reset" function using 14 days internally instead of config value Version 1.8.6: - New: Daily and Monthly active users dashboard panels and graphs - Change: User Account form updated to prevent Safari auto fill for admin users Version 1.8.5: - Change: Account/Notifications tabs will not show to Power users for profiles with no user account - Bug Fix: Removing "Disable All Notifications" causes all notifications to be set to "Do Not Notify" - Bug Fix: Possible that any notification that notifies multiple users by email could have multiple footers - Bug Fix: Who's Online may not always show latest activity for logged in users - Bug Fix: Newsletter notification option showing Private Note option although it does not work Version 1.8.4: - Change: Double opt-out now implemented for removal of all Notifications for non-logged in users - Change: Notification tab updated to be easier to use with a large number of notification options - Bug Fix: Some notification options may not show that should based on Quota settings - Bug Fix: Fix and cleanup of user passwords wrongly saved to the User DataStore - Bug Fix: Some users getting cached error that they are not active after activating account Version 1.8.3: - Bug Fix: Switching User accounts from Dashboard may not show all Account tabs correctly - Bug Fix: Invalid URL created in the pending user search form field - Bug Fix: Delete pending user button was sending the user id, and not the profile id - Bug Fix: "Success" message was no longer showing when saving Account settings Version 1.8.2: - Change: Users Online IP Address info check changed to https://dnsquery.org - Bug Fix: Some Custom form designer fields may not be saved on Signup Version 1.8.1: - New: Quota Config validation for Power User accounts to ensure valid Quotas are allowed - Change: URL length for memory URL increased from 256 bytes to 4096 bytes Version 1.8.0: - New: "Total User Accounts" and "Bots Online" Dashboard panels are now available - New: MIN Activity Log entry is created when a user unsubscribes from all notifications - New: Quota option to redirect users to specified page upon login - New: Existing user image can be removed by clicking on "X" in existing user image - New: "hourly_notification" event fired hourly for timed notifications from modules - Change: Search form in Users Online now searches more fields than just the username. - Change: Added session check on unsubscribe view to check user account if logged in - Change: Added a confirm form on the unsubscribe page - Change: Amount of session data that can be stored has been increased to prevent rare SQL error - Change: Updated to work with new Repair Modules event provided by System Core - Change: Login and Signup widgets now use existing login/signup form instead of a template - Change: when modifying a user account the user name no longer shows if admin modifying own account - Change: Updates to support new Jamroom Core 5.3.0 Recycle Bin - Change: Module name changed from "User Accounts" to "Users" - Bug Fix: "unsubscribe" view was not using language strings so could not be translated - Bug Fix: Notification changes not being saved properly and may revert on refresh of form - Bug Fix: User entering an invalid username on signup was getting an incorrect error message - Bug Fix: User entering an invalid unsubscribe URL getting a blank error message - Bug Fix: '@' could be entered as first character in User Name and Profile Name - Bug Fix: Account Tabs may not show all options for Power and Multi-Profile users - Bug Fix: Deleting active profile from a multi-profile user may not revert to remaining profile(s) - Bug Fix: User Account tabs were checking current profile quota instead of home profile quota - Bug Fix: "Remember Me" cookie could create invalid keys in DS after user account deleted - Bug Fix: "Remember Me" cookie cleanup not always working - Bug Fix: "Account Settings" and "Logout" could not be changed in language strings Version 1.7.3: - New: "Show Bots" button in Who's Online listing to show known bots accessing the site - Change: New Crawler-Detect library used to detect bots - Change: URLs inside of [code] blocks are not changed if Create SSL URLs is enabled - Bug Fix: jrUser_get_profile_home_key() content not being reset with Cache Reset - Bug Fix: Some "remember me" cookies could be deleted earlier than configured Version 1.7.2: - Bug Fix: Viewing account info for invalid account was showing User info of viewer - Change: Loading of user language strings uses less memory Version 1.7.1: - Bug Fix: User could be redirected to invalid page on login if attempting to view a private profile - Bug Fix: "user_updated" event trigger not firing when admin updates a different user account Version 1.7.0: - New: "notify_user" event fired when a user is about to be notified via email or PM - New: Added "module" parameter to jrUser_whos_online template function - Bug Fix: Fix regression introduced in 1.6.2 for signup quotas that prevented them from changing - Bug Fix: "Site Privacy" index showing when visiting domain.com/user even if not enabled Version 1.6.2: - Bug Fix: Embedded signup forms do not display signup quotas correctly if there are multiple options Version 1.6.1: - Change: Signup widget for the Site Builder system submission method. Version 1.6.0: - New: Login and Signup widget for the Site Builder system - New: "site_privacy_check" event for modules to add allowed views when site is private - New: quota_id passed to /user/signup now selected as default if multiple signup quotas allowed - New: If saving Global Config with "Create SSL URLs" enabled, SSL support is checked before enabling - Bug Fix: Setting a site to private could block the Support Tickets "webhook" - Bug Fix: Signup Notification email sent twice if Admin Validation enabled and an account is approved Version 1.5.13: - Bug Fix: URL in forgot password email forcing login on sites with "Private" Site Privacy Version 1.5.12: - Bug Fix: "Create Account" button showing on Login page even if Signups are turned off Version 1.5.11: - Change: Update so OneAll Login works correctly if Re-Authenticate config setting is "on" Version 1.5.10: - New: Required signup form fields "display group" setting validated on Integrity Check Version 1.5.9: - Change: "Signup" and "Forgot Login" forms show result page instead of refreshing form Version 1.5.8: - Bug Fix: Admin created accounts with "Create Password" may not send new user email Version 1.5.7: - New: "signup_validate" event trigger added for modules to validate submitted Signup data Version 1.5.6: - Bug Fix: Options showing in Notifications when user does not have Quota access to the module - Bug Fix: Searches in "View Keys" Datastore Browser mode reverting to normal user listing - Bug Fix: Redirect for password authentication not working in some cases for Admin users Version 1.5.5: - Bug Fix: Possible "Invalid Activation Key" error on new account validation Version 1.5.4: - New: Detection of user language based on browser settings if language has not been set - Bug Fix: user account information could show cached info in Account Settings section for admin Version 1.5.3 - Change: user_name and user_email are now "trimmed" on signup to prevent leading and trailing spaces Version 1.5.2: - Change: Users with inactive accounts now have "not active" highlighted in User Browser - Change: Admin modifying account from User Browser now returns to User Browser on save - Bug Fix: "Log Off" button from Who's Online in Dashboard results in 404 not found page Version 1.5.1: - Change: verify.php functionality moved to verify_module event listener - Bug Fix: User could signup with same name as a module URL, resulting in a 404 not found Version 1.5.0: - New: "Re-Athenticate" Global Setting to force entering old password on password and email changes - New: "Email Change Notice" Global Setting sends an email to the old email address on email change - New: "New Device Notice" Quota Config option for notifying users when logged in on new device - New: 7, 30, 60 and 90 day options added to "Auto Login Reset" Global Setting - Change: Global Options form layout updated to better group config options - Change: Successfully updating User Account settings no longer redirects to User Profile - Bug Fix: User Group select field may not always show on User Account form for Master Admin Version 1.4.1: - Bug Fix: jrUser_notify in a loop may skip email notifications in some situations Version 1.4.0: - New: "Site Privacy" Global Config option added for creating a public/private site Version 1.3.5: - Change: Updated Account Settings form so Master Admin options show properly at bottom - Bug Fix: jrUser_session_is_valid_session() was always returning false Version 1.3.4: - Bug Fix: Users Online dashboard panel would sometimes show blank Version 1.3.3: - Bug Fix: New language strings from updated modules and skins not being added to Cloned languages Version 1.3.2: - Bug Fix: skip_session support not working correctly for views named the same in different modules Version 1.3.1: - Bug Fix: Custom form fields on signup page not being saved properly to the User DataStore Version 1.3.0: - New: "Clone Language" tool updated to update exiting languages with new module and skin Language Strings Version 1.2.9: - Bug Fix: user_updated / user_created values in jrCore_list calls had their values swapped Version 1.2.8 - New: Ability to "undo" block all notifications when clicking on an unsubscribe link from an email footer - Change: User session is now synced before any quota limit check is performed Version 1.2.7: - New: Signup email address is now checked for Banned email/domain if Banned Items module is installed Version 1.2.6: - Bug Fix: Login was broken after the 1.2.5 release Version 1.2.5: - Change: URL history mechanism updated to handle session changes better Version 1.2.4: - Bug Fix: invalid user_id in account tabs not loading viewing user information correctly - Bug Fix: Create New User Account not redirecting to proper profile_id when Create Profile is checked Version 1.2.3: - New: "Create User Profile" checkbox in Create User form to skip creating profile for new account (for linking to existing profile) Version 1.2.2: - Bug Fix: Modify Account with linked profiles could unlink a user's home profile from their account Version 1.2.1: - New: "Admin Validation" signup method support for allowing users to signup with admin validation - New: "Reset Language Strings" tool for resetting the language strings for a specific module or skin - Change: only language strings for active skin are loaded version 1.2.0: - New: "Delete" button in User Browser to only delete the User Account (and not the linked Profile) - New: "delete_user" event trigger fired when a user account is deleted Version 1.1.16: - Bug Fix: URLs created for the Banned Items module to ban an IP Address were not correct - Bug Fix: registered module Accounts Tabs could still show even if module was not allowed in Quota Version 1.1.15: - Bug Fix: Default Language setting not working properly for first time site visitors Version 1.1.14: - Bug Fix: radio selections on notifications account tab may not show properly - Bug Fix: "login_success" event not being fired on successful login using "Remember Me" cookie Version 1.1.13: - New: "account_tabs" event fired when a user is viewing their Account Settings section - Change: online_status now cached for up to 15 seconds to improve performance - Change: very long user action lines in Who's Online will now be wrapped - Bug Fix: Language selection from Skin template may not "stick" Version 1.1.12: - New: Profiles linked to more than 1 user account now show a User Account jumper in account settings - Bug Fix: Profiles linked to more than 1 account passed incorrect user_id on account tabs Version 1.1.11: - New: When admin is modifying tweaks for another profile, a message is shown Version 1.1.10 - Bug Fix: Who's Online not lined up correctly if Banned Items module not installed Version 1.1.9 - Bug Fix: logged out users not being shown the default system language. Version 1.1.8: - Bug Fix: jrUser_reset_cache() was not working with user_id 0 to clear non-logged-in users cache Version 1.1.7: - Bug Fix: searching the user browser for numeric values would return more than were actually matched - Bug Fix: jrUser_notify() for email option now returns bool false on invalid email address Version 1.1.6: - New: changes to support variable items per page in Data Browser Version 1.1.5: - User Data Browser now searches all user fields by default Version 1.1.4 - Bug Fix: Default Profile Quota now properly used on signup page if there is more than one signup quota Version 1.1.3: - Who's Online now shows logged in users first, with visitors last - Known web crawlers/spiders/bots no longer show in Who's Online or Online counts Version 1.1.2: - Bug Fix: Language Jumper in skin ACP is resetting to module view - Users Online template updated to link with users profile for multi user profiles Version 1.1.1: - New "Create SSL URLs" config setting to rewrite non-SSL URLs to SSL URLs for logged in users. - If user is already logged in, clicking on login now takes them to their profile. - Bug Fix: On unsubscribe from all notifications, the users cache is now reset so they see the correct notice. Version 1.1.0: - New Signup Notification Global Config option for notifying admin users when a new account is created - New Delete Language tool for deleting user languages no longer being used. - Modules registering for notifications can define a custom quota field for showing/not showing in User Notifications section. - Bug Fix: Fixed bug where removing all additional linked profiles from a user account resulted in an SQL error. - Bug Fix: Instant Validation signup method was not working properly - Adding new Changelog Version 1.0.0: - Initial Release