sysPass 2.0-beta

I'm proudly to announce that sysPass has reached its 2.0 beta version.

This release is a turn in the sysPass development, because a bunch of code improvements, including refactoring, standards compliance, performance, etc. Besides those low level changes, there are many new features and visual improvements:

• Material Design Lite is adopted as default only theme (I haven't enough time to maintain both themes).
• Account tags
• Favorite accounts
• Public Links
• Linked accounts
• Improved items management
• In-App notifications
• Plugin architecture
• DokuWiki integration

Please, take a look to the new features at https://demo-dev.syspass.org or download from this site.

Many thanks to all those contributors and donors that helped to solve issues, gave any feedback and appreciate this piece of software.

Rubén D.

Critical Bugfix

IMPORTANT: Please upgrade to the latest version.

An special URL would reveal critical information from files in the webserver.

• [FIX] Critical bugfix that prevents directory traversal in JS/CSS includes. Thanks to Jan Van for the notice
• [FIX] Bugfixed resource includes

Happy Holydays

Many thanks to all contributors!!. Hope to be the latest 1.2 release, because 2.0 is coming soon...

• [FIX] Solves #323, help display for bind password on LDAP configuration in classic theme. Thanks to @ejouvin
• [FIX] Solves #325, Custom field creation, "empty" type list in theme classic. Thanks to @ejouvin
• [FIX] Closes #319.
• [FIX] Fixed issue when showing password through web UI. Closes #30. Thanks to @Naelwan for the feedback
• [FIX] Closes #313, closes #317, closes #328. Fix for php7 for users / groups / profiles display. Thanks to @ejouvin
• [MOD] Modified alertify theme for MDL
• [FIX] Closes #352, Closes #329
• [FIX] Closes #293, closes #292. Enforces MySQL password on installation
• [FIX] Closes #321. Thanks to @ejouvin for the feedback
• [FIX] Solves #345. Send request for account isn't working on classic theme. Thanks to @anburhce for the feedback

Minor Fixes

Many thanks to all contributors

• [FIX] Fixed API request error when user's preferences are not set. Thanks to @jtorresc for the feedback. Closes #290
• [FIX] Fixed DB host check regexp during installation on material-blue theme. Thanks to @TheMengzor for the patch
• [FIX] Fixed Javascript load error in classic theme
• [FIX] Solves #287. Fixed issue when parsing account's password from ajax response.
• [MOD] Modified some css styles.
• [MOD] Added newline tag for notes on account view. Closes #286. Thanks to @Andresju for the feedback.
• [MOD] Added some tips about login info in demo mode.

Fix zxcvbn lib name

• [FIX] Fix zxcvbn Javscript lib name
• [MOD] Update version

Critical Fix

You would need to apply this fix if you migrated from 1.1 to 1.2.0.15

• [FIX] Fixed user migration from 1.1
• [MOD] Add dot to LDAP group name chack regex. Thanks to @davidpsc. Closes #280
• [MOD] Improved user migration handling.
• [MOD] All input strings are trimmed

Bugfixes

• [FIX] Fixed LDAP mail retrieving when multiple mail addresses are set. Thanks to @ArminXG. Closes #278
• [MOD] Add LDAP mail mapping. Related #278
• [FIX] Fixed user migration process.
• [FIX] Fixed resetting search filters.
• [FIX] Fixed basic auth check. Thanks to @davidpsc . Closes #275
• [FIX] Fixed LDAP user search filter when ADS is not set. Solves #277

Installation Fix

• [FIX] Fixed issue when installing sysPass. Solves #272
• [FIX] Fixed issue when retrieving HTTP headers on non-Apache environments.

Bugfixes, improvements and updates

This release solves many issues and updates some 3rd party components. Special thanks to all contributors that reported the issues and helped to solve them.

No database update is performed, but is advisable to make a backup on every update.

• [FIX] Fixed issue when pressing copy-to-clipboard icon.
• [FIX] Fixes #215. Password is not shown when it contains special chars. Thanks @Goatmaster for the feedback.
• [FIX] Fixes user-in-group checking for accounts ACL. Related #263
• [FIX] Fixes retrieving username from LDAP.
• [FIX] Fixes LDAP group name lookup. Related #257, #258, #264,
• [FIX] Closes #237. Fixed missing field for main group change in account view. Thanks to @sintbert for the feedback.
• [FIX] Closes #221. Fixed missing apache_request_headers function. Thanks to @alexanderbuhler for the feedback.
• [FIX] Closes #243. Fixed LDAP URL issue when using ADS auth. Thanks to @guannais for the feedback.
• [FIX] Closes #222. Fixed default DB column values when mysql is set in strict mode. Thanks to @tdk1069 for the feedback.
• [FIX] Related #245. MySQL sysPass user account creation error.
• [FIX] Fixed issue when caching objects in session cache.
• [FIX] Fixed LDAP check when ADS is set. Thanks to @eth0h4ckr for the feedback.
• [FIX] Closes #264. Fixed LDAP group listing issue when there are more than one group with the same name. The first one is picked. Thanks to @eth0h4ckr for the feedback.
• [FIX] Closes #264. Fixed LDAP ADS listing issue when base search is set to the domain top level. Thanks to @eth0h4ckr for the feedback.
• [FIX] Closes #267. Fixed view account link issue.
• [ADD] Dutch translation. Big thanks to @MikeyHoef. #254
• [MOD] Improved actions handler and try o fix edit icon issue. Related #253
• [MOD] Updated Material Design Lite to 1.2
• [MOD] Updated clipboard.js to 1.5.12
• [MOD] Javascript improvements.
• [MOD] Modified search behavior. Now the enter key needs to be pressed to perform searches. This prevents to fulfill the key buffer and server overhead.

Bugfixes

Thanks to all contributors!

• [ADD] Added temp master password counter (max 100 attempts)
• [FIX] Fixed issue when paging accounts when sort key was set.
• [FIX] Closes #204. Fixed LDAP group search when ADS is set. Thanks to @vplanas
• [ADD] Add styles.css minimized version file
• [FIX] Closes #196. Fixed textarea element name. Thanks to @joeg1484 and @st3reo
• [FIX] Improved installer when database is located in another host.
• [FIX] Enforce 32 bytes IV length.
• [FIX] Minor bugfixes
• [FIX] removed required field for database password in installer script. So, installation can be done if no password is set for the database user. Thanks to @sgrund