RADICORE v2.36.0 released

Update CSRF processing to include GET as well as POST requests, and use a single csrf_id in all URLs. Rename 'reset' to 'resetBtn' in $act_buttons.

This version contains the following changes:

Database changes:

- none

Other changes:

  • updated include.library.inc and std.table.class.inc to change function ‘isPkeyComplete’ to ‘is_Pkey_Complete’.
  • updated function adjustQueryString() in include.libraray.inc to add $csrf_id to every URL.
  • updated include.session.inc to check CSRF_ID on GET requests as well as POST requests.
  • updated include.xml.php5.inc to use a single CSRF_ID instead of an array of ids.
  • updated numerous controllers in INCLUDES directory to rename ‘reset’ to ‘resetBtn’ in $act_buttons.
  • fixed bug in std.list3.inc which tried to read $dbinner when $dbmiddle was empty.
  • fixed bug in mnu_user_s05.class.inc which failed to use correct algorithm when decrypting user passwords.
  • updated menu/text/en/language_text.inc to includes message ‘e0049’.
  • updated menu/text/en/sys_language_text.inc to includes message ‘sys0229’.
  • updated xsl/logon.xsl to rename ‘taskid’ to ‘task_id’ to align with name within the database.
  • updated xsl/std.buttons.xsl to include single CSRF_ID on all URLs.
  • updated xsl/std.pagination.xsl to include single CSRF_ID on all URLs.

Published: 01 September 2026