FM / tcexam

/var/softaculous/tcexam

Name	Size	Mode	Actions
images/	-	0755	rm
php53/	-	0755	rm
php56/	-	0755	rm
php71/	-	0755	rm
php81/	-	0755	rm
php82/	-	0755	rm
upgrade/	-	0755	rm
changelog.txt	2709	0644	edit dl rm
check_utf8.php	1095	0644	edit dl rm
clone.php	5587	0644	edit dl rm
edit.php	5081	0644	edit dl rm
edit.xml	433	0644	edit dl rm
extend.php	11666	0644	edit dl rm
fileindex.php	644	0644	edit dl rm
import.php	3427	0644	edit dl rm
info.xml	2535	0644	edit dl rm
install.js	921	0644	edit dl rm
install.php	7087	0644	edit dl rm
install.xml	750	0644	edit dl rm
md5	1898	0644	edit dl rm
notes.txt	1483	0644	edit dl rm
tce_config.php	6081	0644	edit dl rm
tce_config_.php	7540	0644	edit dl rm
tce_db_config.php	4221	0644	edit dl rm
tce_general_constants.php	2517	0644	edit dl rm
tce_paths.php	4836	0644	edit dl rm
update_pass.php	298	0644	edit dl rm
upgrade.php	5409	0644	edit dl rm
upgrade.xml	381	0644	edit dl rm

Edit: /var/softaculous/tcexam/changelog.txt (2709B)

17.0.0 (2026-06-23) [BREAKING CHANGE]
	- Major modernisation release. Please read UPGRADE.md before updating an existing installation.
	- PHP 8.2 or newer is now required.
	- Dependencies are now managed with Composer; running "composer install" is required before use.
	- Externalised the previously bundled libraries to Composer packages: PHPMailer, phpCAS, RADIUS and TCPDF.
	- Replaced TCPDF with the tc-lib-pdf engine (plus tc-lib-barcode, tc-lib-color and tc-lib-file) for all PDF generation, OMR answer sheets, QR codes and the colour picker.
	- PDF fonts are now generated at install time into the vendor directory; the bundled 27 MB fonts/ folder has been removed.
	- Upgraded PHPMailer to the 7.x series.
	- Removed the legacy register-globals emulation; all controllers now read request inputs explicitly from $_POST/$_REQUEST.
	- Security hardening: install-time random K_RANDOM_SECURITY with fail-closed PDF result tokens, fixed SQL injection and XSS issues, IDOR fix for non-admin editors, safer file/URL handling and CSPRNG-based codes.
	- Accessibility overhaul (WCAG 2.1 level AA): semantic landmarks, skip links, ARIA roles, labelled forms and screen-reader cues.
	- Migrated the HTML output from XHTML 1.0 Strict to HTML5.
	- Replaced the virtual keyboard and old Internet Explorer workarounds; added a new calendar widget and a native HTML5 colour picker.
	- Added a PHPUnit test suite plus Docker-based integration tests against MySQL/MariaDB and PostgreSQL.
	- Added a Docker runtime (Dockerfile + docker-compose) for evaluation and deployment.
	- Added build tooling: Makefile targets, GitHub Actions CI and mago lint/format.
	- Internationalisation: kept the TMX format and added a "make lang" build/validation step for the translation caches.
	- New configuration constants: K_USRREG_ALLOWED_GROUPS, K_CAS_SERVICE_BASE_URL, K_FILE_ALLOWED_PATHS, K_FILE_ALLOWED_HOSTS and several K_PDF_* options.
	- Overhauled the documentation: rewritten README, INSTALL, UPGRADE, CONTRIBUTING, SECURITY and CODE_OF_CONDUCT, and consolidated the installation instructions into a single up-to-date manual (install/README.md).

*************************************************

16.6.3 (2026-04-16)
	- Fix potential security vulnerability issues.

16.6.2 (2026-03-08)
	- Add K_USRREG_ALLOWED_GROUPS configuration entry to set the allowed registration groups.
	- Sanitize fields and additional checks.
	
16.6.1 (2026-03-04)
	- Update TCPDF.
	- Sanitize XML fields.

17.2.0 (2026-06-25) - Fixed creating and importing questions and answers on databases using the utf8mb4 character set (issue #461); the binary uniqueness-check collation is now configurable via the new K_MYSQL_QA_BIN_COLLATION constant. 17.0.0 (2026-06-23) [BREAKING CHANGE] - Major modernisation release. Please read UPGRADE.md before updating an existing installation. - PHP 8.2 or newer is now required. - Dependencies are now managed with Composer; running "composer install" is required before use. - Externalised the previously bundled libraries to Composer packages: PHPMailer, phpCAS, RADIUS and TCPDF. - Replaced TCPDF with the tc-lib-pdf engine (plus tc-lib-barcode, tc-lib-color and tc-lib-file) for all PDF generation, OMR answer sheets, QR codes and the colour picker. - PDF fonts are now generated at install time into the vendor directory; the bundled 27 MB fonts/ folder has been removed. - Upgraded PHPMailer to the 7.x series. - Removed the legacy register-globals emulation; all controllers now read request inputs explicitly from $_POST/$_REQUEST. - Security hardening: install-time random K_RANDOM_SECURITY with fail-closed PDF result tokens, fixed SQL injection and XSS issues, IDOR fix for non-admin editors, safer file/URL handling and CSPRNG-based codes. - Accessibility overhaul (WCAG 2.1 level AA): semantic landmarks, skip links, ARIA roles, labelled forms and screen-reader cues. - Migrated the HTML output from XHTML 1.0 Strict to HTML5. - Replaced the virtual keyboard and old Internet Explorer workarounds; added a new calendar widget and a native HTML5 colour picker. - Added a PHPUnit test suite plus Docker-based integration tests against MySQL/MariaDB and PostgreSQL. - Added a Docker runtime (Dockerfile + docker-compose) for evaluation and deployment. - Added build tooling: Makefile targets, GitHub Actions CI and mago lint/format. - Internationalisation: kept the TMX format and added a "make lang" build/validation step for the translation caches. - New configuration constants: K_USRREG_ALLOWED_GROUPS, K_CAS_SERVICE_BASE_URL, K_FILE_ALLOWED_PATHS, K_FILE_ALLOWED_HOSTS and several K_PDF_* options. - Overhauled the documentation: rewritten README, INSTALL, UPGRADE, CONTRIBUTING, SECURITY and CODE_OF_CONDUCT, and consolidated the installation instructions into a single up-to-date manual (install/README.md). ************************************************* 16.6.3 (2026-04-16) - Fix potential security vulnerability issues. 16.6.2 (2026-03-08) - Add K_USRREG_ALLOWED_GROUPS configuration entry to set the allowed registration groups. - Sanitize fields and additional checks. 16.6.1 (2026-03-04) - Update TCPDF. - Sanitize XML fields.