LORIS Release 19.0.1

This fixes some bugs that have been found since the LORIS 19.0.0 release, in particular:

• Fixed bug in the DQT preventing filtering in some cases
• Fixed bug where surveys could not be loaded in IE
• Fixed the display of error messages in imaging uploader

LORIS Release 19.0.0

• Full list of changes

New Features

The primary new functionality of LORIS 19.0 is the ability to have
publicly accessible modules, which can be accessed by users that
are not logged in. This architecture is currently used by the
login module, but may be used by any module that has a public
component and is available for any content to be hosted in LORIS.

Updates and Improvements

All LORIS modules which are part of the core LORIS distribution
have been updated to use the "modern" module architecture, where
there is a Module class within the module's namespace which describes
metadata about the module (such as whether or not it should be
publicly available.) Modules that do not have a Module class should
still work, but are deprecated and support will be removed in a
future LORIS version.

Along with this new feature, 19.0 contains a number of bug fixes
and fixes a number of warnings that were generated by certain pages
and minor improvements such as the media and imaging uploader
displaying the maximum upload size of a file to the user before
they attempt to upload a file, rather than an error afterwards.

Caveats for Existing Projects

The _setupPage() function of LORIS pages have been removed. This
was used as a pseudo-constructor, and most of the logic has been
moved to the real class constructor. (The setup() function still
exists, to set up the page after authentication, and in most cases
all that is required is renaming the page function and removing
assignments to $this->form or $this->CommentID.)

Help content for modules is now managed as markdown files within
the help/ directory of the module. Any customized content from
the help editor should be backed up before upgrading. (The help_editor
module remains as a way to customize help content for instruments.)

Upgrade Notes

To upgrade LORIS from 18.x, you must do the following:

1. Upgrade the code
2. Run the script tools/cleanup_mri_tables_for_19-0_release.php from the LORIS tools directory to ensure there is no orphaned data in tables that this release adds foreign keys to. (Note: This script will fail if you aren't inside the tools directory.) Ensure this script ran properly before proceeding to the next step to avoid database errors.
3. Run the SQL patch SQL/Release_patches/18.0_To_19.0_upgrade.sql

LORIS Release v18.0.5

This fixes some minor issues found in LORIS since LORIS v18.0.4

• [Install/Vagrant] Add dependencies to Vagrant so that it works
• [Brainbrowser] Upgrade BrainBrowser to incorporate bug fixes from BrainBrowser. This improves loading of some scans.
• [Media] Fix potential SQL injection vulnerability in media module (#3349)

LORIS Release v18.0.4

This fixes 2 minor bugs which were discovered since the v18.0.3 release. Namely:

• [user_accounts] There was a bug causing examiners with a "0" in their ID to not be considered valid. This is fixed. (#3242)
• [issue_tracker] PHP notices were causing warnings to be printed in the issue tracker ajax calls, causing the frontend to think issue creation failed with some combinations of php.ini settings. These notices are fixed. (#3241)

LORIS Release v18.0.3

This addresses bugs that have been discovered since the 18.0.2 release of LORIS. In particular, the following bugs are addressed:

• [tools] Fixed a bug DB_date_zeros_removal.php script used for upgrading (#3195)
• [create_timepoint,new_profile] Improved site validation on form (#3210)
• [Core] Fixed user that User::singleton() returns for command line scripts (#3212)
• [MRI Violations] Fix Site Filter for projects with more than 9 sites(#3222)

LORIS Release v18.0.2

This release clears the backlog of minor bug fixes that didn't make it in to the LORIS v18.0.0 release, or were discovered after release. Future bug fix releases will happen on an as-needed basis.

The full list of changes are as follows:

• [Core] Fix issues when user logs in by typing their username in a different case than is stored in the database (#3178)
• [Instruments] Fix saving of instruments where the column name is a number (#3179)
• [Instrument List] Fix the CenterID access check in the instrument list module. (#3182)
• [Instruments] Fix bug where "0" was refused as a value in required fields. (#3180)
• [Dashboard] Fix convert array to string error in dashboard (#3149)
• [DQT] Fixed a bug where the CouchDB MRI Import script was failing with strict MySQL settings (#3131)
• [Imaging Uploader] Prevent upload duplication when the same file is uploaded twice.
• [Heroku Install] Fixed Heroku postdeploy password generation (#3171)
• Update VERSION file

Known Issues:

• Running 18.0 Upgrade Process PHP scripts as well as other tools/* commandline scripts may generate notices/error messages; this NDB_Client issue is addressed in upcoming bugfixes (e.g. #3212)

LORIS Release v18.0.1

This bugfix release fixes minor issues that weren't fixed in time for the LORIS v18.0.0 release, or that were discovered since.

The next bugfix release is scheduled for October 20, 2017.

The full list of fixes in v18.0.1 are as follows:

• Properly escape table and column names in upgrade script (#3168)
• The instrument setup() function now matches its parent, fixing PHP warnings (#2916)
• Post data is re-sent, rather than discarded after a redirect (#2941)
• The UI should say username, not email on the reset-password page (#3042)
• Improve entropy in temporary password generation (#3045)
• Fixed MRI Protocol Show/Hide links (#3057)
• Fixed Excel Dumps URL rewrites (#2978)
• Fixed empty result in getMaxThreadStatus for NDB_BVL_Feedback (#3141)
• Fixed "Please click here to go back" link RM13189 in imaging uploader
• Declare User::isPasswordStrong to be a static function, fixing some PHP warnings (#3169)
• Added slashes at the end of account links on login screen, which prevents an unnecessary redirect (#3176)

LORIS Release v18.0.0

LORIS v18.0 is the next major release of LORIS. It adds the ability for users and examiners to be affiliated with multiple sites, as well as adding 433 other bug fixes and minor changes.

• Full list of changes

New Features

• [Core] Users and Examiners may be affiliated with more than one site. Note that a multi-site user will hold the same level of privilege on data across all affiliated sites, and cannot yet create new candidates/visits via API.
• [Imaging Browser] A new Config module setting called "tblScanTypes" defines which modalities should have quality control performed. In the Imaging Browser, the "T1 Done" and "T2 Done" columns are now customizable to any set of modalities using this Config setting, and the "New Data" column shows only new scans from these designated modalities.
• [LorisForm] Readonly elements and Radio button support added in PHP-coded instrument forms

Updates and Improvements

• [Media] File names that are uploaded must now be unique.
• [BrainBrowser] The version of BrainBrowser included in LORIS is upgraded, which should fix issues loading scans from certain scanners but be otherwise unnoticeable.
• [Login] Captchas are improved by changing them to use the google reCAPTCHA service rather than a custom implementation

Notes for Existing Projects

• [API] The v0.0.1 is now deprecated and will be removed in a future release. v0.0.1 is a proper subset of v0.0.2, so upgrading should be transparent and only require changing "1" to "2" in any calls to the API.
• [Security] The old (unused) Password_MD5 column is removed. LORIS has used PHP's more secure password API for a number of releases, but the column remained so that existing users could still login (and the password hash would be upgraded upon login). The insecure hashes are now completely removed. As a result, passwords can no longer be reset via the MySQL commandline -- instead, run the new tools/resetpassword.php script, or have the user click the "Forgot your password" link.
• [Radiological Review] The Final Radiological Review module was removed, as it was only used by a single LORIS project and not sufficiently generic to be used by others. If you were using it and need access to it, please contact the loris-dev mailing list for help on how to install it into your project/ directory.
• [Config] In the config.xml file, the <database> subtag of CouchDB was renamed to <dbName> to avoid conflicts with the MySQL database config setting. If you have CouchDB setup in your config.xml, you'll need to rename this tag.
• [Core] Caveat re multi-site User feature: users have the same level of privilege across all sites. E.g. a user who hold Edit/modify privileges (for the purpose of one site) will also be able to modify all affiliated sites' data.

Upgrade Process

Unfortunately, due to changes in constraints in the database schema upgrading this version of LORIS is a multistep process. After updating the code, you must:

1. Source the SQL file SQL/Release_patches/17.0_To_18.0_upgrade_A.sql
2. Run the script php tools/DB_date_zeros_removal.php to remove invalid dates in MySQL.
3. Run the script php tools/populate_examiners_psc_rel.php to populate the new multisite examiners table with existing examiners.
4. Source the SQL file SQL/Archive/18.0/2016-06-01-update_zero_fields_statements.sql to add constraints on the tables modified by the script in step 2.
5. Source the rest of the schema changes in the file SQL/Release_patches/17.0_To_18.0_upgrade_B.sql
6. Review the file SQL/Archive/18.0/clean-up/Clean_up_patch.sql which removes and cleans up various columns after backing up any data in those tables.
7. Run composer install --no-dev from the LORIS directory to update any LORIS PHP dependencies.

LORIS Release v18.0.0 (Release Candidate 3)

This release candidate fixes a variety of bugs on the user_accounts page, related to changes to examiners in 18.0 that were discovered in RC2.

LORIS Release v18.0.0 (Release Candidate 2)

This release candidate fixes a few issues found in LORIS 18.0.0rc1. In addition to the notes from RC1, it has the following changes:

• The SQL patch included some changes from a hardcoded database. These are fixed.
• The executable bit was set wrong on a number of files. These are fixed.
• The upgrade instructions for the examiner fix are clarified slightly (by removing some duplicate instructions which are done automatically in a later script.)
• If filters were set on a different page and then you accessed the imaging uploader, the imaging uploader would maintain the filters with no way to reset/remove them. The imaging uploader now automatically resets server-side filters when accessed.
• A CenterID column in the Reliability class which was updated to reflect the new multi-site changes (which was missed before the first RC)
• The Dashboard now shows the issue tracker widget if the user has only the issue_tracker_developer permission.