The Formcreator plugin for GLPI is a plugin that allows you to create easily accessible custom forms. By using Formcreator in GLPI, you can offer your users another method to create tickets. All forms are fully translatable and a wide selection of field types is available. Today we are pleased to announce the release of the Formcreator version 2.12.0 plugin.

Discover the new features:

• Translatable form! You can now translate any form into any language without duplicating it.

If you use anonymous forms, the plugin tries to detect the best language from the available translations.

• Change templates! Now you can set a change template to the target change, and inherit the template’s properties.
• A validator can update answers before accepting them.

Please, read the changelog here: link

Download new version here: click

Also discover GLPI features: https://glpi-project.org/fr/fonctionnalites/

Important note: this version is compatible with GLPI version 9.5.5.

Formcreator plugin for GLPI is a plugin which allows to create custom forms of easy access and also one or more tickets or changes when the form is filled. Today we are happy to announce the release of Formcreator plugin version 2.11.3.

Want to know more about how it works? Find the answer in our blog post.

Bug Fixes

• condition: avoid HTML entities in dropdown
• dropdownfield: disable recursivity
• fields: prevent empty expression evaluation
• form: bad sql expression for right check
• form: bad SQL to find validator groups
• form: compatibility with dark theme
• form: sort not applied on 1st display
• form: version check on import
• formanswer: load answers when validating a formanswer
• formanswer: no longer need to call showfields on display

Complete list of bugs: click here

Features

• form: enable / disable form with single click
• glpiselectfield: databases plugin support
• issue: change status conversion matrix

Download: click this link

After several weeks, Teclib’ is happy to announce the release of GLPI 9.5.5.

This release fixes a security issue that has been recently discovered. Update is recommended!

You can download the GLPI 9.5.5 archive on GitHub.

You’ll find below the list of changes in this bugfixes version:

• [security] Stored XSS in plugins information (CVE-2021-3486 by @n3k00n3)
• fix entity creation
• removal of raw html in massive actions list
• fix issue with date_creation fields updated with older instances of MySQL servers
• fix wrong count of software counts in assets
• Fix Core API errors on deprecation checks

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Looking for professional support? Check our GLPI Network Subscriptions offer or try GLPI Network Cloud. 

Teclib’ is happy to announce the release of GLPI 9.5.4.

 

This release fixes several medium security issues that has been recently discovered. Update is recommended!

You can download the GLPI 9.5.4 archive on GitHub.

Here is the list of security cases detected and fixed in this version:

• [security] Horizontal Privilege Escalation (CVE-2021-21326 by @indevi0us)
• [security] Entities switch IDOR (CVE-2021-21255 by @indevi0us)
• [security] XSS injection in ajax/kanban (CVE-2021-21258 by @lbpierre)
• [security] XSS injection on ticket update (CVE-2021-21314 by @ArianeBlow)
• [security] Stored XSS on documents (CVE-2021-21312 by @RedShellSec)
• [security] XSS on tabs (CVE-2021-21313 by @RedShellSec)
• [security] Stored XSS in budget type (CVE-2021-21325 by @lbpierre)
• [security] Remote objects instantiation (CVE-2021-21327 by @vadymsoroka)
• [security] Insecure Direct Object Reference (IDOR) on “Solutions” (CVE-2021-21324 by @indevi0us)

Note that some are present since a long time (version 0.68), but this time none of these issues were considered as high/critical.

We also fixed a lot of bugs, here are the important ones:

• We continue the work on stabilising the usage of laminas/mail library:
  • Handle RFC5987 format in Content-Disposition header
  • Fix email attachement decoding logic
  • Fix tickets ID fetching from email headers
• For the dashboards:
  • Fix graph counts
  • Add search filter criteria for widget by year
  • New filter ‘my groups’
• Misc:
  • Populate meta criteria in a generic way
  • Make custom css from entity inheritables

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project! 

Need professional support? Check our options here: https://glpi-project.org/subscriptions/

Formcreator plugin for GLPI is a plugin which allows to create custom forms of easy access and also one or more tickets or changes when the form is filled. Today we are happy to announce the release of Formcreator plugin version 2.11.0.

Want to know more about how it works? Find the answer in our blog post.

Bug Fixes:

actorsfield: missed function rename

• condition: loss of condition on submit button
• entityconfig: bad constant value
• form: add label to validator inputs
• form: add spacing between questions
• form: reimplement submit button conditions
• issue: loss of issue on automatic action
• question: handle long label display
• section: improve again UI

Full list is available here: click 

 Features

• condition: add condition to show or hide the item
• dropdownfield: integrate splitcat

Download: link

This version is beta. You may contribute to improve the plugin before the final release, planned for the last week of January 2021.

How can you help?

• Test the upgrade process of the plugin.
• Test the new features, especially the new questions layout for forms.
• Help to translate the locales in your language. Translations are stored on Transifex.

Download: click here

Important note:
The growing popularity of this plugin makes it used in more complex use cases. Recent issues and feedbacks shows that two important design solutions must evolve:

• entity restrictions in some parts of the plugin;
• consistency checks when showing forms to requesters;
• processing their answers
• consistency checks when designing forms.

These enhancements will impact some complex use cases by changing the available items of dropdowns / assets when a requester fills in a form. Those changes will occur only in minor versions updates.
In other words, we recommend you to check carefully forms containing questions related to dropdowns, assets, users and groups before upgrading to version 2.11.x.

This version contains the following change:

entity of dropdowns is now relative to the form, not the user. see #2023

Major features

• Questions are now positioned on a 4 columns grid and may have variable width
• Service catalog may split forms and KB in 2 distinct menu entries (disabled by default)
• Default sorting of forms (alphabetic, popularity) is now customizable (see entity > forms tab)
• Captcha for anonymous forms (disabled by default)

Deprecated

• SyncIssues automatic action is now disabled by default. Upgrading to 2.11 will disable it as well.

Teclib’ is happy to announce the release of GLPI 9.5.3.

 

This release fixes medium security issues that has been recently discovered. Update is recommended!

You can download the GLPI 9.5.3 archive on GitHub.

Here is the list of security cases detected and fixed in this version:

• [security] Any CalDAV calendars is read-only for every authenticated user (CVE-2020-26212)
• [security] Insecure Direct Object References in ajax files (CVE-2020-27662 && CVE-2020-27663)

Note that some are present since a long time (version 0.68), but this time none of these issues was considered as high/critical.

We also fixed a lot of bugs, here are important ones:

• we continue the work on stabilizing the usage of laminas/mail library:
  • Attachments were not imported as documents with specific content-disposition.
  • Some HTML mails were imported as text (and html was present in the description of the ticket).
• For the dashboards:
  • Bars and lines graphs were animated not correct inn recent versions of chromium based browsers.
  • Default pages for users without dashboard were empty.
  • Adding some missing filters: tech users and tech groups.
• Misc:
  • A new cli command to set GLPI configuration values.
  • Response time on personnal tab of index is now improved.
  • PHP8 compatibility.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

After several weeks, Teclib’ is happy to announce the release of GLPI 9.5.2.

This release fixes several security issues that has been recently discovered. Update is strongly recommended!

 

You can download the GLPI 9.5.2 archive on GitHub.

Here is the list of security flaws detected and fixed in this version:

• [security] SQL injection with a query parameter of user form (CVE-2020-15176)
• [security] Removal of .htaccess file in the files folder via a plugin endpoint (CVE-2020-15175)
• [security] Leakage issue with knowledge base (CVE-2020-15217)
• [security] Stored XSS in install script (CVE-2020-15177)
• [security] Minor SQL Injection in Search API (CVE-2020-15226)

Note, some are present since a long time (0.68).

We also fixed a lot of issues, here are important ones:

• mailgates issues:
  • encoding errors
  • missing images in some tickets
  • exceptions for some particular messages
• a small notice (listTables) was visible while updating to 9.5.1.
• in some rare cases, the encryption process of passwords could fail
• For the dashboards:
  • fix user preferences
  • fix overlap of mini dashboard above tickets list

And we worked on improving the dashboards:

• new summary widget
• new articles widget
• display labels on point and bar (with a new available option)
• cards have now a minimum size
• we added personnal filters. Toggle edit mode, and add filters on top of dashboards.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

GLPI team is happy to announce that the latest major version 9.5 is available on GLPI Network Cloud!

After several days, Teclib’ is happy to announce the release of GLPI 9.5.1.

This release fixes a security issue that has been recently discovered. Update is strongly recommended.

You can download the GLPI 9.5.1 archive on GitHub.

You’ll find below the list of changes in this bugfixes version:

• [security] SQL injection on new clone feature
• alignment of some table columns
• added domains in global search and Assets > global
• fixed several problems with email retrieval via email collectors
• fixed several display problems in the planning
• correction (and error display) of marketplace registration key input
• and others.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.