Difference between revisions of "Changelog Provider"

From regify WIKI
Jump to navigation Jump to search
 
(325 intermediate revisions by the same user not shown)
Line 1: Line 1:
 
== Information ==
 
== Information ==
  
Only the last few change-logs are available here for reference. Some older change-logs ( < V2.7.2 ) are currently '''only available in German'''.
+
This are the official changelogs for the regify provider software appliance.
  
== Update Nov 2015 V4.0.5 (announcement) ==
+
== Update 2026 V6 announcement ==
Patch release
+
Major release announcement
* New: If a user tries to login but is not found on the provider system, the provider is now trying to use the regify Provider Lookup Service (PLS) to find the user and, if password was correct in general, redirect him to the correct provider.
 
* New: Added regibox option for the export of user-data depending on product settings (admin).
 
* New: Added X-Frame-Option SAMEORIGIN to Apache configuration.
 
* Fixed problems during regibox invitations if e-mail address contained single quote.
 
* Fixed some missing French translations.
 
* Fixing counter reset issues of regimail users leaving accounts not reset if users FLAGS column was NULL.
 
* Fixed switched regibox size and regibox count values in monthly report.
 
* Fixed missing provider- and domain-name in monthly report if provider supports regibox.
 
* Fixed small layout issue in changing mobile number dialogue popup.
 
* Fixed available regibox feature option for customers if the provider is not configured for regibox.
 
* Fix possibility of representatives for regibox invitations.
 
* Enhanced "prices and conditions" templates to also show regibox pricing.
 
* Enhanced client protocol to also return "regimail mass" sender status during login.
 
* Enhanced client protocol to return more complete data for getUserData function.
 
* Enhanced error message if SMS activation fails.
 
* Updated administrator guide by adding regibox information.
 
* OS-Update: Security update (NSS version upgrade)
 
  
== Update 03. September 2015 V4.0.4 ==
+
'''New functionality:'''
Patch release
 
* Fixed wrong redirection after registration links where clicked (lead to downloads page).
 
* Fixed Provider-SDK function CheckUser() to demand super-user permissions.
 
* Fixed several French typos.
 
* Fixed group management dialogue which was missing a bit of space between the buttons.
 
* Fixed bug in admin statistics user graph that happened if there was a month with not a single new user.
 
* Fixed several displaying problems for users who are still using IE7 and IE8.
 
* Fixed several wrong placed mandatory signs on user invitation page.
 
* Fixed false 'you hit the size limit' messages in regibox in some circumstances.
 
* Replaced misleading red colour in regibox usage graphics to be green as long as limit is not reached.
 
* Added user related regibox usage information to several administration dialogues.
 
* Updated several provider documents (customizing, software deployment, etc).
 
* Added regibox functionality to track if a user started synchronizing a particular regibox (to offer invitation status to box owner).
 
* Make sure that e-mail addresses of regibox users do not contain leading or trailing spaces (become more tolerant).
 
* Several speed enhancements regarding regibox.
 
* Updated integrated regify client setups to version 4.1.2 (Windows only).
 
* Enhanced time-out tolerance for internal regibox SMB-share availability test.
 
  
== Update 22. August 2015 V4.0.2 (manual release only) ==
+
* New: Added support for SNI (multiple domains on single IP address).
Patch release
+
* New: Added support for DHCP.
* Fixed problems with regibox synchronization.
+
* New: Added support for SMTPUTF8 for SMTP email sending.
 
+
* New: Added support for LetsEncrypt certificates (ACME).
== Update 10. June 2015 V4.0.1 ==
+
* New: Removed the setup wizard pages. Instead, appliance menu assistant and web interface enables to set all needed config.
Patch release
+
* New: "SMS usage", "default dialing code" and the "enable regibox for all new users" setting is now editable per (sub)provider.
* Fixed problems while reading regimails on-line using Microsoft Internet Explorer.
+
* New: Account invitations now offer replacement value <INVMAIL> and set ReplyTo header to inviting user.
* Updated Apache cipher-suite
+
** Invitation templates footer text is enhanced to better match new behaviour.
** Making sure that RC4 encryption algorithm is never used any more for SSL/TLS connections - it was secure before but there have been very rare situations where it still was possible.
+
* New: Group administrators now can see all assigned email addresses of their group users.
** Disabling DHE_EXPORT from available cipher suites (Logjam attack).
+
* New: The regipay domain list and menu option ''regipay settings'' is removed because of zero usage.
* Added an additional "Downloads" link to the "my account" sub-menu (on users request).
+
* New: In expert mode (''SETTINGS'' - ''System configuration''), regimail and regibox lists are now sorted on pure date.
* Fixed on-line reading dialogue. It displayed a long list of recipients in one long line instead of doing word-wrap.
+
* New: Grahical captcha is replaced by modern and AI resistant captcha from [https://www.trustcomponent.com TrustCaptcha.com].
* Fixed CSS to prevent some older web-browsers from displaying a big box around checkboxes (eg Opera).
+
* New: Registration dialog is checking for possible landline phone number and gives warning (for most EU states + Switzerland and UK).
* Fixed the CSS design of some pages during user registration and password reset.
 
* Fixed a problem for printing an on-line opened regimail (it only printed the visible part).
 
* Fixed some typos and bad translations.
 
* Added the appliance documentation PDF to the web-administration documents page.
 
* Fixed displaying the old regify slogan in the logo at /pay.php (logo at the bottom of the page).
 
* Fixed some small design and layout specific issues.
 
  
== Update 19. May 2015 V4.0.0 ==
+
'''Bug fixes:'''
=== In short ===
 
* Completely '''re-engineered user navigation''' and new default design.
 
** Less clicks needed as main actions are reached by one click.
 
** Not so common menu entries moved to sub menus.
 
** The new layout scales fine to different screen resolutions including mobile screens (responsive design).
 
** Enhanced and more customization options.
 
** Additional "Account summary" page.
 
** Self learning to provide you with the most likely dialogue page upon login.
 
* '''regibox''' integration.
 
* Writing regimails online is now <u>end-to-end encrypted</u> by using JavaScript to encrypt/decrypt locally in the users web-browser.
 
* '''regichat''' will offer default text templates. They can quickly get inserted to the chat window.
 
* If no '''regichat''' responsive is available, the customer will get informed that he should come back later.
 
  
=== Details ===
+
* Fix: Sending from webbrowser sometimes denied sending even before daily limit was reached.
New features:
+
* Fix: Signup page respects default dialing code setting.
* Completely '''reworked user navigation''' and new default design.
+
* Fix: In user ''SETTINGS'' - ''My account'' - ''My representatives'' the representative info did not show representative role if a user was representative because of it's group membership.
* New scripting and customizing features (codeHeader.php and codeFooter.php).
+
* Fix: Links to external shop pages opened in the same tab instead of a new one.
* regibox integration.
+
* Administration dialog fixes:
* regichat now offering text templates.
+
** Fix: Subprovider color change changes main provider color instead subprovider (only in Manage Subproviders).
* Enhanced regichat behaviour in case of no available chat responsive.
+
** Fix: In administration, administrators are no longer allowed to move themselves to another subprovider to avoid deadlock situations.
* Enhanced notification on new orders for administrators.
+
** Fix: In user administration ''users mailaddresses'' the representative info did not show representative role if a user was representative because of it's group membership.
* Improved registration page design.
+
** Fix: Admin template editor replaced <DATE> tags by current date instead of keeping the tag.
* Administration now also offers CSV import to invite users (optionally into a group).
+
* Fix: Fixed issues with sub-provider regibox usage data export.
* Updated '''downloads''' page (now providing setups from our central regify servers, added regibox client).
+
* Fix: Fixed database update error if a first user authentication is rejected in "Authentication requests" admin dialog.
* Better advertising if user is using regify account without regimail professional.
 
* Administration is now offering a dialogue for (sub)provider menu flags (now usable with simple checkboxes).
 
* Extra regipay landing point (pay.php) allowing employees to easily read regipays without confusion by other functionality.
 
* New regibox related reports.
 
  
Internals:
+
'''Internal and platform changes:'''
* Updated user data page to be more responsive on errors (re-factored the whole page).
 
* Enhanced CSV import (group invitations) to accept more formats and auto-detect utf8 encoding.
 
* Fixed several spelling errors in all languages.
 
* All PDF documentation in admin pages is now using a unified layout.
 
* Enhanced Provider-SDK to also support new regibox features and complete regichat options.
 
* Provider management "maintenance mode" button is now making permanent entry in configuration.php (no automatic restore anymore).
 
  
== Update 17. December 2014 V3.5.2 ==
+
* Int: The new provider 6 appliance is based on Debian. By this, regify drops the usage of CentOS after 14 years. This are the benefits:
Patch release
+
** Debian is a more future-proof distribution with long-term support.
* Fixed user-admin dialogue problem in French administration.
+
** It offers more up to date drivers and software packages with up to date feature support.
* Fixed some monitoring issue causing standard monitoring call to fail.
+
** Providing reliable and faster security patches.
* Fixed problem that forced users to enter a phone number in user data dialogue if the provider does not use a SMS gateway.
+
* Int: New transactions sent using a specific ''commAddress'' are now also registering this address as sender address instead of the main account address.
* Fixed an issue regarding the e-mail template used for password reset (sometimes using main provider template instead of subprovider).
+
* Int: Added basic bot detection to prevent scripted attacks.
* Fixed a problem not displaying all countries and country-codes of countries with the same country-code (eg +1).
+
* Int: Adding new security measurements with new config options:
* Fixed an issue with invitation of additional regichat users during a running chat if the chat-interface is in French language.
+
** MAX_REGISTRATIONS_HOUR_MAILSERVER to limit manual user registration by used mailserver MX records per hour (default 4).
* Updated some authentication related language sentences.
+
** MAX_REGISTRATIONS_HOUR_IP to limit manual user registration by user IP address per hour (default 4).
* Updated OS bash to be '''ShellShock''' proof (The regify provider was not vulnerable to ShellShock attacks because there is no CGI running).
+
** MAX_REGISTRATIONS_DAY to limit overall manual user registrations per day (default 15).
* The appliance will no longer support SSLv3 to protect against SSLv3 issues ('''Poodle''' attack vector). This will cause IE6 to no longer work.
+
** ALLOWED_MOBILE_COUNTRIES to limit SMS sending to selected countries only (defaults to western EU).
 +
* Int: Stronger limit for password resets by SMS per phonenumber per day (Now only 2, applied for password reset).
 +
* Rem: There is no regibill validation dialog any more. Validate any regibill documents at [https://www.regibill.com www.regibill.com].
 +
* Rem: Old regify protocol V1 is no longer supported (affects very old and outdated client software only) (regify.php).
 +
* Rem: Setting constant AUTHTRANSMITTYPE is removed without replacement.
 +
* Rem: Setting constant DEFAULT_DIALING_CODE is removed without replacement.
 +
* Rem: Setting constant ENABLE_RGB_FOR_ALL is removed without replacement.
 +
* Rem: Setting constant DEBUGDISPLAY is removed without replacement.
 +
* Rem: Setting constant EMERGENCYURL is removed without replacement.
 +
* Rem: Setting constant SETPREMIUMANYTIME is removed without replacement.
 +
** Grouped users always get regimail ''professional'' date from the assigned group.
 +
** Users removed from a group always get regimail ''private''.
  
== Update 28. August 2014 V3.5.1 ==
+
== Update 12. May 2025 V5.3.4 ==
 
Patch release
 
Patch release
* Fixed a minor bug.
 
  
== Update 30. July 2014 V3.5 ==
+
* New: Enhanced version check for regibox managers.
=== In short ===
+
** If a regibox manager is about to become outdated, the provider will notify users by e-mail 30 days in advance on a daily basis until the expiry date is due.
* New product '''regichat'''.
+
** Upon expiration date, any outdated regibox manager is denied (error 4 → ''outdated regify software'').
* New product '''regigate'''.
+
** Minimum regibox version for this version is 2.1 for regiboxd and regibox Manager.
* Users can chose their own regify account password (optional).
+
* Fix: Enhance group management function 'remove user from group' to reduce confusion with account deletions.
* Groups can get defined as representatives.
+
** Renamed into 'take from group'.
 +
** Changed icon to not look like deletion.
 +
** Added a note to tell group admins that this will not delete the regify account.
 +
* Fix: Fixed error "The provided phone number is invalid." on group admin pwd reset on accounts without mobile number.
 +
* Fix: In maintenance mode, usage of the portal was not disabled if already logged in (not really an issue, just wrong).
 +
* Fix: In maintenance mode, captcha generation is now stopped.
 +
* Fix: regigate administration dialogue is now waiting up to 5 minutes for new IP addresses update and shows loader animation on button, preventing multiple clicks.
 +
* Fix: Fixing regibox invitations not received if receiver domain has restrictive DMARC headers.
 +
* Fix: Fix reply-to name for regimails written online in web portal (used senders email instead of name).
 +
* Fix: Eliminated random error messages like "Had to correct corrupt count -1 record for box..." in error log.
 +
* Fix: Eliminated random error messages like "ERROR: Missing or invalid language-code for template [box_invit_success]..." in error log.
 +
* Fix: Fixed provider API function [https://manuals.regify.com/docs/provider/5.3/provider_sdk/#mailcheckassignment mailcheckassignment] returning wrong answer if user is not registered at same provider.
 +
* Int: Added some element IDs for interesting elements on login and signup pages (for more easy CSS customizing).
 +
* Int: Enhanced captcha function.
 +
* Int: Enhanced regibox protocol to allow better control over conflicting file and folder creation, delete and update like...
 +
** create file in a folder that was deleted from someone else in the same moment.
 +
** rename or update a file/folder while it was deleted by someone else in the same moment.
 +
* Int: Enhanced user transport script to better handle regipay Plus users (only available to regify support).
  
=== Details ===
+
== Update 20. February 2024 V5.3.1 ==
New features:
 
* Including new regify client V4.0.0 setups.
 
* Added regichat feature to the regify provider.
 
* Added regichat API and API-Token handling.
 
* Added regichat shopping pages.
 
* Added regigate features and interfaces to the regify provider including HA (high availability).
 
* Enhanced registration dialogue (more clear, more easy, reduced number of fields).
 
* Enhanced optical styles (more modern).
 
* Now supporting groups as representatives (max. 5 times).
 
* Bank data dialogues now supporting IBAN and BIC values (IBAN is validated).
 
* Password reset dialogue now allowing users to enter their own password (optionally, with strength check).
 
* Dialogues now displaying the country names respecting the users chosen language (previously, always English).
 
* Allow admins to send unlock-code directly from manual authentication dialogue.
 
* The captcha for password reset is now more easy to read.
 
* Added enhanced logging viewer for administrators (master role only).
 
* Updated administrators user management dialogue to encapsulate options to some popup.
 
* Enhanced mobile number dialogues with country code dropdown showing country name.
 
* Subprovider administrators now also allowed to export payment- and user-data (administration role based).
 
 
 
Internals:
 
* Now supporting PFS (Perfect Forward Secrecy) for https connections with most modern browsers (reaching A- rating at Qualys test site).
 
* Enhanced IDS (Intrusion Detection System) to be generally more tolerant about cookies.
 
* Various speed optimizations.
 
* Added automatic database replication test (sending e-mail in case of replication failure).
 
* Added various CSRF (Cross-Site-Request-Forgery) checks to secure the pages.
 
* Group handling dialogues now working for up to 1000 users (500 before).
 
* Make provider-SDK more tolerant about existing but deleted user entries e-mail addresses.
 
* Enhanced handling of clearing failures.
 
* Added disk size checking (free disk space) for standard monitoring call.
 
* SMS sender name is now made from the providers domain.
 
* SalesID value is taken over from users to newly invited users.
 
* SalesID can be pre-given with a special link to the registration page.
 
* Added extra "X-regifyMailAgent: regimail" header to regimails sent online.
 
 
 
Fixes:
 
* Fix: Fixed several typos in language sentences.
 
* Fix: Fixed wrong username length check in userdata edit dialogue.
 
* Fix: Enhanced daily job in case of more than 10'000 transactions a day (script timeout on slower machines).
 
* Fix: Fixed some IE8 related incompatibilities (internal network access only).
 
* Fix: Enhanced MIME encoding of attached files for e-mails sent by the regify provider.
 
 
 
== Update 27. March 2014 V3.4.2 ==
 
 
Patch release
 
Patch release
* Enhanced registration GUI.
 
* Updated blackberry client to V1.8.3 (now supporting new cryptographic standards for upcoming systems).
 
* Changing date display for French language (better formatted).
 
* Various dialogue enhancements (password reset, registration, invitation).
 
* Enhanced IDS check to also ignore ShareThis and some Google tracking cookies.
 
* Making a user a regimail mass sender now automatically deactivates all notifier e-mail messages.
 
* Some admin dialogues now automatically offering respective PDF documentation for download.
 
* Ignore double entered users in shop dialogue (handled as one entry only).
 
* If shop is in manual process mode, the ordering process is more automated.
 
* Added phone number validation for password reset from the administration.
 
* Enhanced admins password reset dialogue (better descriptions and better SMS support).
 
* Captcha background is always solid now (no longer transparent, showing background images).
 
* Any IE7 compatibility is removed now. The regify provider will not work with IE6 or IE7 any more!
 
* regify changed his slogan and therefore the default logos have changed.
 
* Fix: Fixed some regibill validation problem with invalid PDF's and drag&drop upload.
 
* Fix: Fixed some XSS and CSRF attack vectors.
 
* Fix: Fixed some login problem in an edge case (client SDK related).
 
* Fix: Fixed IE8 switching to quirks-mode if provider is accesses from internal network.
 
* Fix: Fixed minor bug in provider if username contains ´ character in invitation function.
 
* Fix: Fixed a lot of typos and spelling errors.
 
* Fix: Fixed problems in changing mobile number dialogue of non SMS enabled providers.
 
  
== Update 07. November 2013 V3.4.1 ==
+
* New: Display a helpful error message if a password reset was requested by a non-activated account.
Bugfix release
+
* New: Show assigned coupon code in user data administration dialog (system admins only).
* Enhanced some SMS dialogs (being more explaining).
+
* Fix: Sometimes the "send me a copy" function in online regimail writing did not work.
* Enhanced IDS check to also ignore ShareThis tracking cookies.
+
* Fix: No error was shown if an invalid coupon code was entered during registration (it was simply ignored).
* Fix: Fixed a CSS bug that caused the download link to jump up when the registration link is disabled.
+
* Fix: Enhanced information and handling if > 25 regimails/day were sent using portal.
* Fix: Fixed some registration bug where, in some special cases, an e-mail address is left in the database of the provider.
+
* Fix: Enhanced error message if monthly regimail limit was reached.
* Fix: Preventing some false "headers already sent" alerts in log.
+
* Fix: List of uploaded documents (regipay plus) showed a navigation area with no function. Removed.
* Fix: Problem with missing sender name in online created regimails.
+
* Fix: Fix error log entries occuring after a user deleted his account (PHP Warning: Illegal string offset 'USERID').
* Fix: Fixed bug in Provider-SDK invitation resulting in missing Organisation name and AuthType information.
+
* Fix: Fix error log entries occuring after the administration pages are called with double slash (eg while pentesting).
* Fix: Some error messages have not been logged to error-log.
+
* Fix: Saving data of non activated users in user data administration dialog sometimes triggered error about email address and phone number.
* Fix: Fixed tab-order on registration page (order you step through the fields by using tab key).
+
* Fix: Sometimes regibox went to maintenance mode after the appliance menu regibox options were opened and closed without saving.
* Fix: Fixed problem returning to productive state after some clearing failure.
+
* Fix: New or changed regigate IP addresses (for whitelisting) were not updated.
 +
* Fix: Triggering a manual backup from admin GUI did not work.
 +
* Sec: Updated OpenSSH packages and supported algorithms to protect against Terrapin SSH issue (CVE-2023-48795).
 +
* Sec: Set PostFix config variables to protect from SMTP smuggling (CVE-2023-51764).
 +
* Int: The PENTEST flag also disables captcha validation for more easy testing.
 +
* Int: Adding CORS headers to apache configuration.
  
== Update 09. October 2013 V3.4 ==
+
== Update 20. April 2023 V5.3 ==
=== In short ===
+
Major release
* Complete '''revised and redesigned registration and password reset process and dialogs'''.
 
* Enhanced usage of '''SMS for security related processes''' and user communication.
 
* Completely '''revised login dialog''' (removed one tab and combined login and reading).
 
* Allowing '''drag&drop upload of files''' (online reading, writing).
 
  
=== Details ===
+
This is not only a release with a lot of new functions and updated user interface, it is also a cleanup and modernizing release.
New features:
 
* Completely '''revised and redesigned registration and password reset process''' and dialogs.
 
* Included '''regify provided SMS gateway''' for easy SMS usage.
 
* Completely '''revised login dialog''' (removed one tab and combined login and reading).
 
* Allowing '''drag&drop upload of files''' (online reading, writing).
 
* Slow file uploads now showing an '''upload progress bar''' (online reading, online writing).
 
* Option to '''chose the sender address during online writing''' (if multiple e-mail addresses are given).
 
* Added '''export functions for userdata and invoicing data''' (both exporting XML or CSV).
 
* Users now can see how long the web session stays active (on upper right). If it turns inactive, logout is called automatically.
 
* Transaction history views (regimail, regibill, regipay) now all allowing search and multiple pages.
 
* Transaction history views (regimail, regibill, regipay) now all allowing PDF download.
 
* Showing MySQL replication info in provider management dialog (administration).
 
* Enhanced usage of SMS for security related processes and user communication.
 
* Password reset can forward the request to the users "real" provider (by using PLS).
 
* Provider statistics now using modern graphics and animation for displaying more values.
 
* Provider statistics now showing member growth instead members per month.
 
* Added ToDo feature to help administrators to keep their provider clean and updated.
 
* Setup wizard now also supporting proxy server.
 
  
Internals:
+
* New: Completely new designed end-user interface.
* Added '''support for special ''connectors''''' allowing integration of archives or hybrid mail to the provider.
+
** Modern graphical user interface.
* Added '''"Mass Sender" type of user''' (now regimail professional, regimail private, regimail mass sender).
+
** Responsive for PC, tablet and mobile usage.
* Provider appliance does '''no longer need root CA certificates''' during certificate import.
+
** Enhanced top navigation with a new navigation structure, respecting the experience of the last years.
* Provider appliance '''now supporting VLAN's and network interface bonding'''.
+
** Easily customizable in corporate identity color and with your company logo.
* Provider appliance '''runs its own DNS server'''.
+
** Redesigned for better usability and accessability.
* Now the provider appliance '''supports automatic backups to SMB shares'''.
+
** Hiding any unavailable options from the user to avoid confusion.
* Provider appliance now offers '''complete diagnostics function''' to finish installation and help fix networking issues.
+
** Reduced many dialogs to the mandatory fields.
* Now it is possible to restrict SSH access to provider appliance to local subnet only.
+
** Added expert mode to hide beginner notes and enable some more pro functions.
* Supporting password reset by PLS request.
+
** Users getting warned if they use an old webbrowser (IE, old Opera, old Firefox, old Safari etc).
* Enhanced Provider-SDK functions and added some more status codes.
+
* New: Enhanced performance compared to regify provider 5.2.0 login page
* Supporting quick connection check by client software.
+
** Page loads 26% faster (2.3 sec -> 1.5 sec).
* Provider-SDK function ''usernewpassword'' now supporting more parameters.
+
** Page loads 61% less content bytes (551KB -> 213KB).
 +
** Page does 45% less requests (36 -> 20).
 +
* New: Re-designed regimail shop system for single users and group administrators.
 +
** Faster and more easy to understand. Follows current EU regulations.
 +
** More simple, offers always 1 and 2 years of regimail professional.
 +
** More transparent communication about prices and offer.
 +
** Prices and VAT are now entered in (sub)provider configuration (by (sub)provider administrators).
 +
* New: Enhanced online reading and writing (incl. reading regipay).
 +
** Much better handling of attachments and enhanced drag&drop and file selection.
 +
** There is no longer a fallback mode for very old webbrowsers like IE and old Safari. People must use an up to date webbrowser.
 +
** Internally now using [https://en.wikipedia.org/wiki/WebAssembly WASM] code to be faster and more secure.
 +
** New online regimail writing limits. Single attachments max. 8MB and 32MB for the whole regimail.
 +
* New: Support for [https://www.regify.com/?PageID=portfolio-regipay-plus regipay ''Plus''] online document access.
 +
* New: regibill validation dialog is enhanced and offers better drag&drop usage.
 +
* New: Enhanced group management dialogs (group admin).
 +
** Offers an extra page for Excel upload invitations.
 +
** Function to take former invited people back into your group.
 +
** Cleanup dialogs and remove popup windows.
 +
* New: User administration using normal/bold font instead of red/black color to indicate regimail private/professional.
 +
* New: Added [https://www.regify.com/index.php?PageID=portfolio-regipay-plus regipay ''Plus''] support to regify protocol (for use in client apps).
 +
* New: Dialogs using Captcha now rendering faster (registration, pwd-reset).
 +
* New: New ''qa.php'' page to give QA and support a quick overview about provider configuration.
 +
* New: New pentest mode, making pentesting more easy by deactivating specific security functions (PENTEST config option).
 +
* Rem: Removed (sub)provider flags ''A, C, D, E, F, H, K, L, P, S, V, X, 3, 4, 7'' due to minimal use.
 +
** See [https://manuals.regify.com/docs/provider/5.2/provider_documentation/#_sub_provider_menu_flags provider 5.2 docs] for menu flags reference.
 +
** They all now use the common default behavior or affected functionality does no longer exist.
 +
* Rem: Removed unused or redundant user data fields.
 +
** Removed users bank data information dialogs.
 +
*** Dropping tables ''tblbankaccounts'', ''tblaccounting''.
 +
** Hiding newsletter checkbox in account dialog.
 +
** Affects both user and admin dialogs.
 +
* Rem: Removed invoicing export function.
 +
** Removed internal processing of a user bank account.
 +
** Removed payments export in administration.
 +
** Removed admin options to manage internal users bank account.
 +
** Droping table ''tblexport''.
 +
** Removed DEBITSTATECHECK, RENEWALPERIODOFNOTICE and INVOICINGINTERVAL config options.
 +
* Rem: Removed functionality that tried to point you to most used page after login.
 +
** Generally, after login, all user logins start in account overview.
 +
** Users in a regipay group with available documents start in ''available documents'' view.
 +
* Rem: Removed membership advertisement pages in portal.
 +
* Rem: Shop system cleanup.
 +
** Removed option to buy for other people.
 +
** Removed ''customShop'' option for shopping pages.
 +
** Removed options to customize shopping form. Instead, we offer the most common fields by default.
 +
* Rem: Password reset dialog offers no auto-generate any more.
 +
* Rem: Displaying the password does no longer offer a print dialog (eg after registration).
 +
** Instead, we recommend users to use a password manager application.
 +
* Rem: Invitations using the portal do no longer allow to edit/change the user name as the inviting user.
 +
* Rem: Group management cleanup.
 +
** Removed "pull user into group" function.
 +
** Removed extra "invite user to group" function (standard invite now works like that).
 +
* Int: Removed the following configuration options:
 +
** PDFENABLED (now always enabled).
 +
** PREVENTREALSENDERADDRESS (now always preventing real sending address).
 +
** MTA_ADDS_CRLF (always use default).
 +
** DOCUMENTATION_DOWNLOAD_INFO_FILE (all documentation is now online).
 +
** DEBUGSLEEP (replaced by PENTEST option).
 +
* Int: Activated HTTP protocol compression for ''.js'', ''.css'' and ''.wasm'' file types.
 +
* Int: Webserver is now sending a ''Content-Security-Policy'' header to increase security.
 +
* Int: Removed all internal ''connector'' functionality.
 +
** This was no longer used since 2008 and therefore was removed from code and testing.
 +
* Int: Updated all appliance packages to most recent distribution version.
 +
* Int: Set all provider cookies ''SameSite'' attribute to ''Lax''.
 +
* Fix: Fixed filename issues downloading ZIP of regibox shares.
 +
* Fix: Fix issues in user import tool (error: missing CHATALLOWEDUNTIL).
 +
* Fix: Remove serving no longer needed ''/icons/'' folder.
  
Fixes:
+
== Update 20. April 2022 V5.2 ==
* Enhanced unicode capability for online writing and reading regimails.
+
Major release
* Removed length fixation of wizard field for clearing password.
+
* New: We are discontinuing ''regichat''. Due to this, all ''regichat'' references were removed from the regify provider completely.
* Limit number of coupon code days to max 365.
+
** Removed all CHAT_*, all REGICHAT_*, CHECK_HISTORY_INTERVAL and CHECK_IF_REGICHAT_LOADED_INTERVAL constants.
* Prevent some re-POST questions in FireFox and IE in provider customization dialog after an image was uploaded.
+
** Removed all regichat related email templates.
* Supporting more CSV file formats for group invitations.
+
** Sub-provider menu flags "Q", "R" have been removed.
* Fixed problems downloading XML reports in IE8.
+
* New: For German users, the term "regify-Provider" is now renamed to "regify-Anbieter".
* replaced deprecated <blink> tag by CSS animation.
+
* New: Enhanced optics for GUI tabs to be better recognizable as tabs.
* Added SAP single sign-on cookie exceptions to IDS (no longer triggering error).
+
* New: Many icons and images were replaced with better resolution versions or a font icon.
* Fixed a lot of translation typos and errors.
+
* New: Some unused options were removed from personal information dialog (username field, a header).
* Check for updates in provider appliance also checks for multiple updates.
+
* New: Enhanced several sentences and their translations to be better understandable.
* Some security related enhancements.
+
* New: Group administration dialog now has a refresh button (update members status).
* Some web configuration wizard settings have not been persistant if wizard was re-run.
+
* New: Group administration dialog is hiding useless options in case the group is a regipay group.
* Provider-SDK function ''usergetsettings'' now correctly returning numeric 1/0 instead of true/false.
+
* New: Invitation dialog now has a refresh button (update invitations status).
 +
* New: Shop order notifies provider by email about a new order. Now, the email also contains json with order details, allowing automated processing.
 +
* New: Provider-SDK ''userinvite'' function supports new parameter ''g'' (to auto-group invited user).
 +
* New: Provider-SDK got a new error code (36).
 +
* New: Provider administration pages...
 +
** The complete look and feel was updated. The interface scales to any screen size (better on 4K monitors).
 +
** Most dialogs are no longer opening popup windows. Instead, dialogs running inside.
 +
** Log viewer search is now also offering an end time.
 +
** Group deletion dialog offers to also delete the contained users.
 +
** Main page shows a warning if appliance websocket server is not running.
 +
** Main page notifies with blinking red flag about new orders and authentication requests.
 +
** Enhanced display of logfile content in administration main page.
 +
** Status display on administration main page updates every 5 seconds (no need for reload).
 +
** Documentation and help option now pointing to new help portal at manuals.regify.com.
 +
*** Removed DOCUMENTATION_DOWNLOAD_INFO_FILE constant.
 +
* New: Default "Admin" account is no longer allowed to log-in to the end user portal.
 +
* New: Sub-provider menu flags "5" and "6" have been removed (no longer needed).
 +
* New: Removed CK-Software shop option in sub-provider administration.
 +
* New: The activation email default templates have been enhanced (simplified, better colors for activation link).
 +
* Int: Removed option RENEWALPERIODOFNOTICE constant (was unused).
 +
* Int: Removed the options to limit mass sendings.
 +
** Removed SERVICEPRIORITY_REGIMAIL, SERVICEPRIORITY_REGIBILL, SERVICEPRIORITY_REGIPAY constants.
 +
** No further speed limit for mass sendings.
 +
* Int: Optimized storage and handling of users list of regiboxes.
 +
** Gaining better performance on installations with many regiboxes (with regibox manager 2.1).
 +
** Extended regibox protocol API for the new list form (with regibox manager 2.1).
 +
* Int: If regibox storage is exceeded:
 +
** regibox managers will no longer show notifiers for that case.
 +
** Instead, the 'owner' and 'causing user' will get informed by email (maximum once a day).
 +
* Int: Optimized output of portal reference URLs (no absolute pathes anymore).
 +
* Int: Switched regify clearing domains from ''regify.clearing.lu'' to ''clear-center.eu''.
 +
* Int: Removed provider setting MTA_ADDS_CRLF (no longer needed).
 +
* Int: Preventing too many SMS for password reset (max 3/day) and re-sending unlock code (max 2/day) per user.
 +
* Int: SMS url replacement is now supporting [e] parameter for check if text encoding is GSM 03.38 compatible.
 +
* Int: Added more protection against stupid antivirus scanners accepting or canceling invitations automatically. Same for PWD reset and self registration.
 +
* Int: Monthly reports now generated on the first day of a month, two minutes after midnight.
 +
* Int: Monthly reports are now also generated, if the system was offline on first day of a month around midnight (even days later).
 +
* Int: System is better protected against DOS attacks in Captcha generation.
 +
* Int: First and lastnames are allowed to be one character only.
 +
* Fix: Do not allow email address removal if the email address is vital for an existing regibox.
 +
* Fix: Better handling if the password of a user was reset by a database cleanup of the password field (eg after forcing users to generate a new password).
 +
* Fix: Fixed issues in reporting Excel invitation list errors.
 +
* Fix: Fixed accidential dot (.) in sender name for SMS sending in some cases.
 +
* Fix: Forward after timed out administration session forwarded to portal login instead of admin login.
 +
* Fix: Captchas were sometimes hard to solve. Now, the algorithm is producing better readable captchas.
 +
* Fix: PDF transaction list export for regibox invitations incorrectly mentioned creation entries as well (red).
 +
* Fix: regibox share ZIP download displaying some "please wait" until download starts (prevent irritation if compression needs some time).
 +
* Fix: If new users are created manually in web administration, dialog did not remember the mode if values were missing.
 +
* Fix: Appliance complained SSL certs that last longer than 390 days. Now it only complains if they last longer than 398 days.
 +
* Fix: Fixed database error 'Error in accept: Too many open files' on heavy load.
 +
* Fix: Fixing several security related issues.
 +
* Fix: Fixing CVE-2018-25032 (zlib compression vulnerability).
  
== Update 26. April 2013 V3.3.3 ==
+
== Update 03. November 2020 V5.1.2 ==
Bugfix release
+
Patch release
* Updated regify client setup to V3.10.0.1233.
+
* New: Showing provider logo also on mobile devices.
* Updated regify client deployment documentation.
+
* New: Enhanced downloads page by enhancing update.json parsing.
* Adding new regify protocol V2 support (needed for next versions of regibill and regipay desktop).
+
** Supporting a "hide" attribute to allow regify to hide products and versions from here.
* Prevent second monthly report on multiple replicated systems.
+
** Supporting "link" attribute to present an informational link instead of binary download.
* Fixed problem with visible HTML tags in PayPal shop pages and regibill transaction history.
+
** Always showing links for other OS (no longer hidden below).
* Fixed missing download link for RGF file if email sending on portal failed (online writing).
+
* Fix: In some configurations, the shop button in account overview is broken.  
* Fixed resetting language to browser default in popup windows (eg Terms) on some webbrowsers.
+
** Note: Shop button in "Communication" -> "Shop" and other locations were still working.
* Fixed error message 'missing function getFrom()' in some loadbalancer environments.
+
* Fix: Manage user dialog in administration does not show non-activated users by default (tick "Show only not activated users" to see them until you updated).
* Fixed swapped displaying of regibill standard and premium counters on administration pages.
+
* Fix: Fixed message about to much invitations for group administrators in some cases.
 +
* Fix: Better handling invalid date values for group administration.
 +
* Fix: Adding and deleting sub-providers was impossible since 5.1.0.
 +
* Int: Added "short" mode for regibox share protocol. Also added "protected" and "fileCnt" values for possible future use.
 +
* Int: Added DOS protection for ZIP download in regibox shares.
  
== Update 11. January 2013 V3.3.2 ==
+
== Update 21. September 2020 V5.1 ==
Bugfix release
+
Major Release
* Fixed problem while online reading if username contains umlaute (error 10 during reading).
 
* Fixed file permission problem if files are replicated over master-master replication (access denied during customization).
 
* Ensures that users are not getting deleted on local regify provider if clearing access is not possible.
 
  
== Update 2. November 2012 V3.3.1 ==
+
'''End user related:'''
Bugfix release and some new features
+
* New: Add ''regipay'' mode to groups.  
* Enhanced "open regify-file" tab on login screen (more easy to understand and use).
+
** Users in such group get a restricted portal interface, optimized for payslip readers.
* Enhanced file size checking for online reading.
+
** Users in such group get a hint where to find the payslips.
* Added MacOS client download links on all download pages.
+
** There is a new and optimized email template for invitations into such group (''invite_pay'' template).
* Allow free entering of users title (administration interface).
+
* New: regibox share is now better formatted and offers download as ZIP file.
* After account activation, the DOWNLOAD button now points to correct download location for your OS (Win, MacOS, iOS, Android).
+
* New: The captchas for registration and password reset are updated.
* Prevent uploading files in maintenance mode (validate regibill, upload on login).
+
** More secure (using SVG, rotation, using timing check).
* Fixed Intrusion Detection System (IDS) problem while sending online with certain messages.
+
** Better compatible with mobile devices (automatic resizing).
* Fixed upload problem with Chrome browser while validating regibill standard.
+
* New: There is only one regify account invitation allowed if the user never sent a regimail before (except of group admins).
* Fixed some problem while online reading chinese encoded messages.
+
* New: Activate "new device" notifier by default. Use better GeoIP service and template.
* Fixed tool tip text help for regibill and regipay transaction archive.
+
* New: Added Chinese country names in dropdown country selections.
* Fixed some IE7 and IE8 JavaScript issues for validating regibill standard.
 
* Fixed displaying wrong number of transactions left if user was regimail private and previously had some extended transaction limit.
 
* Fixed problem preventing sub-provider admins from editing their customizing files.
 
  
== Update 24. September 2012 V3.3 ==
+
'''Administrator related:'''
 +
* New: Added showing users statistics to ''hotline'' admin role.
 +
* New: Admin ''user list'' export now also includes invitation information.
 +
* New: Renamed "negotiator" columns in admin exports to "coupon code id".
 +
* New: Optional monthly provider report email is re-organized and contains some helping comments (REPORTCOPYADDRESS).
 +
* New: Provider billing documentation was enhanced by adding a "coupon code"s chapter and other updated information.
 +
* New: If admin installs an SSL certificate which lasts longer than 398 days, he gets a warning.
 +
* New: Appliance diagnostics also checks for working websocket connections from outside (regibox).
 +
* Fix: Replaced ''CodeMirror'' with ''ACE code editor'' component. Fixing flicker and jumping issues.
 +
* Fix: Export for regibox billing also listed users which registered after export period (numbers all zero, so no real issue).
 +
* Fix: Fix issues with authentication dialog not working (5.0.9 issue).
 +
* Info: We have tipps for [[SSH_Monitoring_with_Zabbix|monitoring with ZABBIX]].
 +
* API: The provider API function ''maildelete'' was enhanced for multiple addresses and corresponding documentation was clarified.
  
=== In short ===
+
'''Internal:'''
* Download the regibill validation report as PDF document.
+
* Sec: Disable support for TLS1.1. Now, TLS1.2 is the standard protocol. Note: TLS1.3 will not be supported in 5.1 versions.
* Every subprovider gets his own payment and shop options (incl. PayPal).
+
* Int: Allow file replication in maintenance mode to fix issues removing maintenance mode in cross-master setups.
* User login is possible with e-mail address instead of username, too.
+
* Int: Switch default regify SMS gateway to a new vendor (normally, no interaction needed).
 +
* Int: Ensure no email addresses removed from account if its registered as regibox owner (member has to confirm explicitely).
 +
* Int: Underlying OS updated to most recent patch versions.
 +
* Int: Removed config values REGIMAILPRIVATE and REGIMAILFLAT (were not used in the past).
 +
* Int: Removed "SelfAdmin", "RegimailPrivateDefined" and "RegimailFlatDefined" from monthly report.
 +
* Int: Remove all ALSO and AppDirect related code (cleanup).
 +
* Int: Removed the concept of "community" and "corporate" providers. Technically, everything is community now.
 +
** Meaning that there are no "deleted" users any more. Administration no longer offers search for deleted users.
 +
** Provider-SDK does no longer support UserType=91.
  
=== Details ===
+
== Update 16. June 2020 V5.0.9 ==
New features:
+
Patch release
* Download the regibill validation report as PDF document.
+
* New: Increased maximum number of representatives to 25 (former 5).
* Login will be possible with e-mail address instead of username, too.
+
* New: Self registration dialog now utilizing a captcha to prevent robots from registering or abusing the system.
* Users are getting an email about successfull authentication, too.
+
* Fix: Added missing log entries if a user was removed from a group by the group admin.
* Support for PLS service (makes users initial client installation much more easy).
+
* Fix: Fix broken ''Enforced Attachment'' links in Gateway protocol (regigate).
* Favicon will be customizable for each subprovider (png format, only for non IE browsers).
+
* Fix: For regibox manager V2, push notifications were missing if user accepted regibox invitation or boxes with no content were deleted.
* Full customizing synchronisation in clustered setups.
+
* Sec: Prevent ''HTTP host header attacks'' (no working attack known for previous provider versions).
* New maintenance dialog with new options in administration (DB synchronization, maintenance).
+
* Sec: Set new ''HTTP Strict-Transport-Security'' value max-age to be one year (previously 1/2 year).
* All users having a sales-id field, too (free to enter anything).
+
* Int: Now supporting ''recipientsHash'' value in provider protocol (newTransaction) to allow more than 5 representatives (client needs to support this, too).
* User administration allows moving users easily between subproviders.
 
* Administration gives now access to users internal bank account.
 
* Every subprovider gets his own payment and shop options (incl. PayPal).
 
* Enhanced customizing editor in administration (codemirror update).
 
* Individual report-code in free intervals for professional services.
 
* All ''regify premium'' texts are now fully translated to ''regimail standard'' and ''regimail professional''.
 
* Internal optimizations on cryptography (faster).
 
* Unlock codes will be output in blocks of four (more easy to read and enter).
 
* Enhanced upload dialog for files (rgf files, regibill validation, online writing etc.)
 
* Updated software deployment documentation to new regify clients V3.9.
 
* The transaction history export as PDF now fully supports unicode characters for message subjects.
 
  
Internals:
+
== Update 20. February 2020 V4.1.6 ==
* Overworked session handling allows user- and admin-session in the same browser at a time.
+
Patch release for very outdated regify providers still on version 4
* Sessions are now timing out depending on last activity.
+
* Int: Just fixing compatibility with regify Client V4.4 as an temporary help.
* Enhanced IE compatibility.
 
* Some english and french translation has been revised (better).
 
* Complete CSS styled bubble help (fully customizable now).
 
* Provider statistics no longer uses Google Charts API (administration).
 
* Enhanced framebuster framework regarding OWASP suggestions.
 
* Added ALLOWROAMING flag to enable/disable roaming participation for provider.
 
* Obligatory attachments now allowing .docx format.
 
* Setup packing using AppPack and signing of the setups is no longer needed for regify client 3.9 or higher.
 
* Changed ''regibill'' & ''regipay'' invoicing interval to weekly by default.
 
* Completely overworked logging mechanisms.
 
* Updated default ''mail_blacklist.txt'' (added some more spamming domains).
 
* Maximum authentication level of non-certified regify providers is limites to three.
 
* Enhanced regify client protocoll (''getconfiguration'' and ''login'' functions).
 
* Fix: Changing admin roles no longer needs logout/login to work.
 
* Fix: Prevent users from deleting their account if they have an administration role.
 
* Fix: Fixed problems if user data contains single quotes in two dialogs.
 
* Fix: Fixed problem writing online regimails after user changed his username in same session.
 
* Fix: Fixed problem writing online regimails after auto-login from client.
 
* Fix: Fixed bad layouting if provider does not allow the ''Downloads'' option on login page.
 
* Fix: Added french translation for default footer content.
 
* Fix: Added french translation for default terms and conditions and default prices page.
 
* Fix: Fixed session error for printing passwords dialog.
 
* Fix: Fixed problem if subject of online written regimails starting with minus.
 
* Fix: Fixed ignoring two-step password method while sending external invitation.
 
  
== Update 11. May 2012 V3.2.4 ==
+
== Update 20. January 2020 V5.0.8 ==
Bugfix release
+
Patch release
* fixed problem signing executables using a proxy server.
+
* New: Administration log viewer allows searching in comments.
* added PLS support (provider lookup service).
+
* New: Also allow password reset initiated from group administrator without knowing the mobile number.
* added more debugging options to web-calls (cURL).
+
* Fix: Fixed online reading error "TOTAL_SIZE" if RGF file was bigger than 15 MB.
* fixed httpd autostart problem on appliance restart.
+
* Internal: For new backup/restore and SSL offloader scenarios, the system now supports using only IP instead of domain for the main provider.
* updated appliance Apache and mod_ssl to CentOS release version httpd-2.2.15-15 and mod_ssl-2.2.15-15.
 
  
== Update 01. March 2012 V3.2.3 ==
+
== Update 06. November 2019 V5.0.7 ==
Bugfix release
+
Patch release
* fixing invitation calls using internal proxy.
+
* New: regibox manager with version less than [[Changelog_Regibox|version 1.5.2]] are no longer allowed (will trigger error 4 in old regibox managers).
* fixing missing re-send dialog for users authenticated using text messages (sms).
+
* Fix: Transaction counter for regify report sometimes returned numbers of previous month for overall transactions statistics.
* fixing problems with PayPal accounts and adding more detailed PayPal information to order.
+
** Please note that this counter is not relevant for any calculation of any cost. It is just statistical information.
* fixed occasional problem receiving regify_default_message.html on systems with subproviders.
+
* Fix: Database based file replication (master-slave or master-master) does no longer stop in maintenance mode to prevent issues coming back from maintenance.
 +
* Fix: Prevent changing users regibox settings if regibox is not configured at all (web administration only).
 +
* Fix: Fixed rare issue with websocket server hanging (100% CPU).
 +
* Internal: Enhanced options for customizing "Downloads" page image (for better compatibility).
 +
* Internal: regibox protocol handler now supporting metaData field (for managing special permissions of upcoming regibox manager V2).
 +
* Internal: Hosts-file entry for clearing DNS now updated from pkgs.regify.com (previously it was pls1.regify.com).
  
== Update 20. December 2011 V3.2.1 (Public since 01. Feb. 2012) ==
+
== Update 24. May 2019 V5.0.6 ==
 +
Patch release
 +
* Fix: Fixed problems in admin dialog for user creation if given email address contained leading or trailing spaces.
 +
* Fix: Decreased default limitation of Provider-SDK function ''gettransactionlist'' to 10.000 hits per request to avoid server side high memory consumption.
 +
* Fix: Enhanced error messages in regigate connector protocol if retrieving message key(s) fails.
 +
* Fix: Fixed some optical issue in signing regigate certificates dialog.
 +
* Internal: System now observes the expiration date of the regigate signing certificate. In case it runs out, it is getting re-signed automatically.
 +
* Internal: Some changes regarding new regibox file sharing protocol (beta, only for future regibox versions).
  
=== In short: ===
+
== Update 20. March 2019 V5.0.5 ==
* complete '''regibill''' and '''regipay''' integration.
+
Patch release
* Support for '''regimail private''' feature.
+
* New: We removed support for TLSv1.0 due to security concerns.
* Re-send unlock-code by SMS initiated by the user itself.
+
* New: Added GDPR compliant data download option to HELP AND FAQ page.
* Automatically signs regify-client setups (signed files for download by users).
+
* New: Added start time field to admin log search dialog. Enhanced date and time fields with new HTML5 types.
 +
* New: Added some extra security layer to some download functions.
 +
* New: Added functions for new regibox file sharing protocol (beta, only for future regibox versions).
 +
* Fix: Fixed issues while inviting new users to an already running regichat session.
 +
* Fix: In some circumstances, the provider sent regimail reminders to regibox owners after 3 days.
 +
* Fix: Tweaked some WebSocket parameters for better scaling with many regibox users.
 +
* Fix: Enhanced "online reading" help sentences.
 +
* Fix: Setup assistant did not correctly initialize Chinese templates.
 +
* Fix: Enhanced error message if cookies missing while password reset.
 +
* Fix: Footer code template needed some update.
 +
* Fix: Mobile country code field was partially hidden on small screens during sign-up.
  
=== Details: ===
+
== Update 09. October 2018 V5.0.2 ==
New features:
+
Patch release
* Enhanced guidance for users who recently have authenticated.
+
* New: Increased the number of allowed transactions in a regimail professional account from 350 to 500.
* Enhanced setup-wizard (after installation).
+
* New: Forward group admins with regipay capability to the group invitation dialog even if they click the ordinary invitation button.
* Enhanced customization dialog in administration.
+
* Fix: Reducing high CPU load on the appliance if a lot of regiboxes are synchronized with regibox managers pre V1.5.
** allows editing of all customization files in administration portal (browser).
+
* Fix: Cron jobs did not respect proxy settings.
** supports syntax highlighting for PHP, HTML, CSS and JavaScript.
+
* Fix: Prevent regibox advertising showing if no shop order mail address is set in administration.
** allows management of customized images.
 
* Better recognizable membership-state icons.
 
* Enhanced CSS design and more elements that allow CSS style options.
 
* New subprovider option to force SSL URLS even if ONLY_HTTPS is false (Loadbalancer).
 
* If a group-admin resets passwords, they are now sent using SMS, too.
 
  
Internals:
+
== Update 16. August 2018 V5.0.1 ==
* Updated handling of files in STYLE folder ('_' marks manipulated data, others remnain default).
+
Patch release
* Added customization dialog to subprovider admin role.
+
* New: Added some additional sanity check if someone edits provider main configuration file (complain about text outside of PHP tags).
* Better styled Download-page (with Operating-System icons).
+
* Fix: Enhanced error message if appliance internally triggers error 58 or error 59 (connectivity issues).
* User-Administration shows users counters (regimail, regipay, regibill).
+
* Fix: Mention prices "incl VAT" in regify (sub)provider settings.
* Removed cookie usage for regify.php (affects only Client-SDK connections).
+
* Fix: Fixed bug causing an error in authentication dialogue (if authentication was denied and comment was used).
* Switched regifycmd to most recent version (incl. SDK).
+
* Fix: Fixed and updated list of used components and license information on admin login page.
* Enhanced Debug-Options for the portal.
+
* Fix: Fixed some issue in WebSocket connection protocol for upcoming regibox V1.5 release.
* Removed GMTDIFFERENCE setting by replacing it with some automation (server timezone).
+
* Fix: Fixed issue that potentially prevented restart of WebSocket server after appliance update.
* Fix: Fixed bug with UTC-0 time in Identity-File.
+
* Fix: Fixed some issue in provider setup-wizard after fresh appliance install (invalid session, need login).
* Fix: Fixed JavaScript bug in JS/jsDialogs.js that occured on IE only.
+
* Fix: No longer displaying regibox creation entry in "regibox invitations" list (may confuse people).
* Fix: Fixed problem while login with username containing + or &.
 
* Fix: Fixed IDS problems with false positives on online writing regify messages.
 
* Fix: Fixed e-mail line feed madness by adding optional MTA_ADDS_CRLF switch.
 
* Fix: Fixed some issues while online sending regimail messages on redundant systems.
 
 
 
Appliance:
 
* Added configuration of NTP server.
 
* Enhanced hints for SSL certificate import.
 
* Better "View Database Status" dialog.
 
* Enhanced handling of user-manipulated files in STYLE folder.
 
* Supports automatic updates with updates.regify.com.
 
* Fix: changing provider servername in SSL mode breaks apache config.
 
* Fix: After failure of SSL certificate import, the SSH session crashed.
 
 
 
== Update 12. September 2011 V3.0.1 ==
 
 
 
=== In short: ===
 
* regibill and regipay integration
 
* supporting french as additional language
 
* comprehensive SMS support (registering, invitations etc.)
 
* enhanced and more clear login dialog
 
* many dialogs have been enhanced (user and administration)
 
* extended CSS support for more customizing possibilities
 
* supporting the regify Android app (free of charge in Google Market)
 
* delivery of the new regify-Client V3.7
 
** AddIn for Thunderbird supporting V4 to V7
 
** enhanced Outlook AddIn (save unencrypted copy while sending)
 
** better Proxy-Server support
 
** answer directly using Lotus Notes (Windows)
 
 
 
=== Details: ===
 
new Features:
 
* System manages bank-account for every user including direct debit authority checkbox.
 
* System allows to manage regimail, regibill and regipay by transaction.
 
* new Provider-SDK function mailcheckassignment to check, if an e-mail account is allready assigned to the service.
 
* new provider-protocol function getconfiguration returns a json array containing provider templates and other information.
 
* Overworked login-dialog (includes regibill now).
 
* Writing invitations shows and ensures the maximum number of chars in free text.
 
* Main-menu graphically shows the account-type (standard/premium) using a special icon.
 
* AUTHTRANSMITURLGOODRESULT supports now RegularExpressions.
 
* optional function AuthTransNumberConvert() allows admins to prepare numbers before inserting to AUTHTRANSMITURL.
 
* regify provider now allows users to enter their mobile number and their international VAT code.
 
* Portal locks and highlights user-data fields that are not allowed to edit because of a valid authentication state.
 
* User choses his main-mailaddress from a dropdown-box now (reduces complexity for user).
 
* Register- and Invitation is now able to use SMS to send the password (AUTHTRANSMITURL needed).
 
* Added french as the third supported language (both portal and administration).
 
* Added PRINT option to "regibill standard" validation page.
 
 
 
Internal:
 
* Administration Login shows licence information (regify and external components).
 
* Configuration has been split into two files (new configuration_default.php).
 
* Monitoring now triggers a warning if there are mails stuck in the system (tblmailjobs).
 
* Switched sender and recipient auth-level check to clearing (keep old method for compatibility).
 
* Add "Protocol" parameter for regify-protocoll (to allow regibill and regipay).
 
* Client-Software update adds [SECURITY] and ProviderKey values automatically to customize.ini.
 
* While MySQL database update, absolutely all tables and varchar fields are getting converted to UTF8.
 
* Administration of Invoices shows no "Payed" button if the price is zero.
 
* Standard Buying-Dialog does not show price, if the price is zero.
 
* Overworked design of steps and some other small graphics.
 
* All Bubble-help functions now are encapsulated by a function (InsertBubbleHelp()).
 
* Some dialogs have been overworked to use tabs to get a more cleanup interface.
 
* Added automatic generation of REGIFY_TEMP.
 
* Added setting of session.save_path to configuration_default.php.
 
* some more elements are now using CSS class for display (changeable by provider).
 
* completely overworked file-handling in STYLE folders (_Filename for individual, others are defaults).
 
* added PhoneMobile and VATNumber field to users dialogs.
 
* the new phpAutoLogin.php allows fast and secure opening of pages from clients.
 
* Enhanced language handling in some routines (BubbleHelp etc.).
 
* Fix: fixed some optical issues in the default CSS file.
 
* Fix: raised the needed Auth-Level for the provider-sdk funtion UserAuthenticate().
 
* Fix: Fixed QuickSearch in Grpup-Administration (accidentally searched in html, too).
 
* Fix: Fixed Tab-Script on IE8 (only working in Compatibility Mode).
 
* Fix: Fixed missing OK value of Provider-SDK function maildelete.
 
* Fix: Fixed problem with managing administration roles in subprovider management.
 
* Fix: Fixed wrong SENDERSNEEDAUTHLEVEL assignment in UserSetSettings function.
 
* Fix: Fixed "headers allready sent" php error, if the administration console is opened using http:// only.
 
* Fix: Fixed problem with wrong language in "new password" mails (accidentally used the admins language instead of user language)
 
* Fix: Fixed wrong template encoding (utf-8 / 7bit) and a small Quoted Printable issue.
 
 
 
== Update 01. March 2011 V2.8.0 ==
 
 
 
=== In short: ===
 
* Better Internet-Explorer compatibility of portal- and administration-dialogs.
 
* Enhanced help- and shop-dialogs.
 
* Enhanced administration-dialogs.
 
* Improved security.
 
* Prepared for Linux compatibility.
 
 
 
=== Details: ===
 
new Features:
 
* Online-reader (webinterface) shows authentication-state using the same images than the regify-client.
 
* Better Internet-Explorer compatibility of portal- and administration-dialogs.
 
* Enhanced help-dialog now showing phone-numbers for support.
 
* Enhanced shop-dialog(s) now showing phone-number for invoicing support.
 
* Download pages are containing documentation download, too (currently only german).
 
 
 
Administration:
 
* Better displaying of admin-dialogs on small browser-windows.
 
* Main administration-menu shows information about stuck e-mails and allows fixing (re-send).
 
* Invoicing allows searching for all transactions of a person, in one click.
 
* The monthly status-mail now contains information about the number of premium-users that have registered in a given month. Additionally, this function shows the premium-state of these users after a year (only encoded in json encoded, machine-readable values).
 
* Unavailable administration-menu options are now greyed out for a better overview.
 
* User-management now shows inactivated users by default, too (yellow state and grey color).
 
 
 
Internal:
 
* Calculation of unlock-code is now customizable by the provider (type and length).
 
* Completely removed options to restart or relength reminder period of transactions.
 
* If phpMailJob.php recognizes a timeout (4 minutes), all available mails will increase the RETRYS column by 2. This avoids endless mails in case of a script error (if php canceles script).
 
* User-interface shows a warning image, if a user try's to use attachments greater than 5MB using the web-interface (send online by portal).
 
* Preloader-image for upload-information is now loaded directly on login page display.
 
* New option REGIFYDEFAULTIDENTITY to define the identity-file to use for online mailer.
 
* Possibility to use a java version of regifycmd. Upon this, a Linux version of the regify provider is possible now (this is the main reason to rise the minor build number to 8).
 
* Included Linux version of AppPack. This allows windows setup creation on Linux systems.
 
* Optimized some dialogs and language items to get a more provider-neutral context.
 
* The enforced document now include the hashcode to the filename. So it is impossible to download a document without knowing the document-id and his hashcode (prevent data-leakage).
 
* The online-viewer for regify-mails allows only non-critical tags to be displayed and filters script, iframe, object and other tags. The functionality of form- and input-tags still persist.
 
* Completely overworked the JavaScript handling and inclusions to reduce data traffic and site-speed.
 
* Renewed tooltip-help (new style and no need for a pre-defined div-container).
 
* Replaced all round ball icons with alpha-png versions (better displaying on different backgrounds).
 
* Replaced the step-images with png style blue button step-images.
 
* LastActivity flags is set for portal logins and direct invitations, too.
 
* The size of the download in both download-dialogs is now calculated and formated automatically.
 
* Fix: Fixed Provider-SDK problem with external invitations and invitiationer mailaddress as base64 encoded variable triggering ERROR 14.
 
* Fix: New members will not get a termination date at 23:59:59 but 00:00:00. As of this, now the first day counts as the first of the free days.
 
* Fix: Fixed some security issues on different locations.
 
 
 
== Update 23. November 2010 V2.7.4 ==
 
 
 
=== In short: ===
 
* "forgot password" link on login page.
 
* Showing telephone numbers for technical and billing support.
 
* SDK support GROUP-MASTER flag (allowing group access for GROUP-MASTERS).
 
* Enhanced invoice-handling.
 
* Mailaddresses and usernames may get a length of 100 chars now.
 
 
 
=== Details: ===
 
new Features:
 
* "forgot password" link on login page (shows information about how to get a new one).
 
* portal may show hotline phone-number for technical and billing support.
 
 
 
Administration:
 
* Users can get the GROUP-MASTER flag. It enables manipulation of all group-members using the provider-sdk.
 
* Managing and handling of invoices has been enhanced. You now can display open, payed and cancelled invoices in one dialog.
 
* Invoices can get filtered by user-id.
 
* New user-search dialog in Group-Data administration and admin-roles administration.
 
* Sub-Provider dialog is extended with support phone numbers.
 
* Better naming in the authentication-dialog enhances understandability of authentication-state.
 
 
 
Internal:
 
* Provider-SDK respects new GROUP-MASTER flag, too. This affects the following functions: GroupGet, GroupGetUsers, GroupAddUser, GroupRemoveUser, UserChange, UserGet, UserNewPassword, MailAdd, MailGet and MailDelete.
 
* The Settings-Dialog is now visible to premium- and standard-users (previously only to premium members).
 
* Extended the maximum length for usernames to 100 chars (former 45).
 
* Extended the maximum length for mailaddresses to 100 chars (former 45).
 
* regify.php returns real name and main mailaddress as login-result, too (affects only internal regify-protocol).
 
* Fix: fixed premium-membership calculation (only if standard mailcount has changed).
 
* Fix: fixed case sensitive search using oracle in different administration-dialogs.
 
* Fix: fixed ignoration of DEFAULTTWOSTEPPROCEDURE flag in phpInvite.php
 
* Fix: fixed IDS false positives on Google analytics (__utm?) and IBM SingleSignOn (LtpaToken) cookies.
 
 
 
== Update 27. September 2010 V2.7.3 ==
 
 
 
=== In short: ===
 
* better calculation of rest-time, if group-admin extends the group membership using shop.
 
* Administration allows grouping and ungrouping of users, too.
 
* Better compatibility of IDS with Google Analytics cookies and IBM LtpaToken.
 
* Portal supports optional HTTP proxy for external URL calls.
 
* SDK features now full transaction history access.
 
* SDK features now user authentication.
 
 
 
=== Details: ===
 
new Features:
 
* Special job to delete temporary user-data that is older than 10 Minutes (phpCleanUp.php). Please adapt Taskplaner or task_5min.cmd! This replaces the usage of delage32.exe (remove from task_daily.cmd).
 
* Invitation to foreign provider supports parameter [ia] (Invitationer Auth-Level) as placeholder for transmission of inviting-parameters to external provider.
 
* If a group-admin buys premium-membership for his group, and changes the max-account number, the system automatically compensates the rest-time together with the difference between the old number of accounts and the new one.
 
* Download-pages are showing the current regify-client version.
 
 
 
Administration:
 
* Administration allows grouping and ungrouping in user management dialog.
 
* Users with administrative privileges are not allowed to get deleted anymore.
 
* Administration prevents errors if an allready assigned address should get assigned to another user.
 
* Administration menu shows number of open authentication requests (blinks if > 0).  
 
* Overworked administration-lists design (user styles for listfirst, listsecond)
 
* Fix: fixed a case-sensitivity problem with group user addition (only oracle)
 
* User-Administration shows number of hits.
 
* Administration-Dialog automatically switches to SSL url (in case it is only https:// and ONLY_HTTPS = TRUE).
 
   
 
Internal:
 
* IDS is adapted to work more tolerant on some special pages.
 
* Update PHPIDS from V0.6.3.1 to V0.6.4
 
* New Version of AppPack generates 48x48 regify icon using transparency for executable.
 
* EMERGENCYURL is only called if MAINTAINMODE is false (no SMS in manual maintenance-mode).
 
* Fix: Fixed wrong calculation of identity-hash (organisation has been missing).
 
* Support optional HTTP proxy for external URL calls (foreign provider invite, SMS calls etc.).
 
* QuickSearchField in Group-Administration (user-side) uses css-class now (additional class div.GroupQuickSearchField to regify.css).
 
* Added new functionality to register mailaddresses in clearing directly on activation. Currently, registration occurs automatically on first regify-usage. This may be to late and the provider now registers the address directly.
 
* SDK features now full transaction history access.
 
* SDK features now user authentication.
 
* phpLogin.php supports new hash-challenge login method for direct login (globe in client).
 
* Fix: fixed database insertion problem with message subjects longer than 100 chars (oracle).
 
* Fix: fixed problem with changing main mailaddress in user-administration (mailhash missing).
 
* Fix: fixed optical problems in PDF download of history with very long subjects.
 
* Fix: fixed a problem in SDK function userinvite, if the desired username is submitted, too.
 
* Fix: fixed a problem printing user-password in case of two step invitations.
 
* Final test and modifications for automatic update feature.
 
 
 
== Update 02. July 2010 V2.7.2 ==
 
new Features:
 
* PDF download of the complete transaction-history available.
 
* Complete rework of automatic update feature. In future the will be a ZIP file distributed, including all needed files and update_mysql.sql or update_oracle.sql. Now, this content is used for updating. Critical files will not get overwritten.
 
* Provider informs users and group-administrators about expiring premium-membership by e-mail. It is possible to define one or multiple intervalls to send such an expiration notification.
 
* Blacklist feature for invitations and registrations. The blacklist prevents registering of mailaddresses from such domains like trash-mail.com, spambog.ru, spamfree24.de and others.
 
 
 
Administration:
 
* User-Management shows a new column "group" that indicates the assigned group-id.
 
* Menu-Option "S" (downloads available) affects the download-link on the login-page, too.
 
* Removing a user from a group, and if that user has a longer premium-membership time as the assigned group, he will not get a standard-membership in that special case (only if SETPREMIUMANYTIME is FALSE).
 
* Fix: Viewer for phperror.log fixes wrong displaying of html tags (missing logout link).
 
  
Internal:
+
== Update 9. July 2018 V5.0.0 ==
* new mail-template 20 (inform user about expiration of his premium-membership)
+
This is a major release containing many new functions and also breaking some compatibility. For update information, please visit [[Update_5.0]].
* Fix: fixed a settings-issue in connection to oracle databases.
 
  
== Update 24. May 2010 V2.7.1 ==
+
End user related:
neue Features:
+
*New: Added '''Chinese language support''' (both user interface and admin interface).
* Identity-Hash Verfahren implementiert (Clearing muss noch aktualisiert werden)
+
*New: '''New function "My devices"''' is showing you the devices you used for log-in.
* Transaktions-History versteckt Doppel-Einträge, wenn der Kunde nicht die erweiterte Ansicht verwendet (vermindert Rückfragen)
+
*New: Added '''cookie check''' to prevent users reporting issues if they simply have turned off cookies in their web-browser.
 +
*New: Group administrators can '''re-send an invitation''' email.
 +
*New: regify accounts are blocked for 10 minutes if someone tried to login with wrong password for more than 10 times.
 +
*New: Account overview is offering some regibox advertising (only if provider supports regibox).
 +
*New: Account overview is showing group administrator name and contact information.
 +
*New: All users (self registered or invited) will have to explicitly accept terms and conditions during account activation (required by new GDPR/DSGVO).
  
Administration:
+
Admin user related:
* Statistik zeigt die Grafiken nur noch über die letzten 24 Monate.
+
*New: '''Replaced many icons by font icons'''. Thus, you can edit the color and icon itself much more easy using CSS.
* Administration erlaubt nicht das hochsetzen des Transaktionslimits bei gruppierten Usern.
+
*New: Portal administrators can '''re-send an invitation or registration email'''.
* Warnung, wenn Nutzerdaten von authentifizierten Nutzern verändert werden.
+
*New: User management search also searches in additional email addresses.
* Sicherheitsabfrage für "Authentifizierungsstatus zurücksetzen".
+
*New: Subprovider-Administrators can also edit their contact and support information now.
 +
*New: The (sub)provider is now able to choose the languages he likes to support. Others are not available for end users then.
 +
*New: Language flags are inserted using a simple function now. More easy to customize the footer.
 +
*New: Administration entries regarding provider settings and customization have been re-arranged to be more clear.
 +
*New: Direct access to users usage statistics and see last email log entries.
 +
*New: Provider maintenance dialog offers a SMS test function.
 +
*New: Customizing now also allows SVG and TTF files upload (for uploading and hosting own fonts for [[Provider_customization#Use_a_custom_font|CSS usage]]).
  
Internes:
+
Generic:
* Neues User-Flag "I" für Benutzer, welche im SDK für eine Einladung einen speziellen User als Einlader angeben dürfen (benötigt also dafür keine Super-User Rechte).
+
*New: Provider-SDK access is now restricted to given IP address(es) or ranges.
* Gruppieren von Nutzern mit erhöhtem Transaktionslimit ist nicht mehr erlaubt.
+
*New: Custom SMS sending functionality (URl call) to allow more placeholders for various SMS text encoding (eg UTF16).
* Authentifizierte Nutzer können Anschrift/Orga nicht mehr ändern.
+
*New: Terms and conditions page now offers a "print" button.
* Mailjob löscht MailJob Lockdatei, wenn diese älter als 4 Minuten ist (Fallback).
+
*Fix: Transaction history export using PDF is now using a font that supports Chinese subjects, too.
* Fix: Fehler bei der Ausstellung von Identitätsdateien behoben (Angabe des AuthLevel fehlte).
+
*Fix: Added support for Windows Phone to pay.php payslip download and on-line regimail reading.
* Fix: Fehler in der Anmeldeprozedur behoben (DATABASE: Error inserting with INSERT INTO tbluser SET USERTYPE=11...)
+
*Fix: Added more logging regarding user registration and account activation.
 +
*Fix: As usual, many sentences and template texts have been enhanced or corrected.
 +
*Fix: Email domain blacklist was not used for invitations using CSV/Excel upload.
 +
*Fix: The overall number of transactions in monthly report only counted opened transactions instead of all (not used for invoicing!).
 +
*Fix: Enhanced the invitation dialogue to better explain the usage of optional mobile number.
 +
*Fix: Excel and CSV import better trims leading and trailing spaces, does no longer complain about empty lines.
 +
*Fix: Fixed php syntax check in admin script dialogues (was somehow useless in provider 4.1).
 +
*Fix: Fixed password reset issue, introduced in pre-upgrade release 4.1.5.
 +
*Fix: Fixed issue where non activated additional email addresses were not automatically removed two days later.
  
== Update 30. April 2010 V2.7.0 ==
+
Security:
neue Features:
+
* Hardened the appliance against several attack vectors.
* Unterstützung von Oracle als alternatives Datenbank-System zu MySQL.
+
* Set Apache TraceEnable directive to "off" by default.
* Benutzergruppen.
+
* Enhanced SSL cipher suites to get even more security for SSL connections.
* Benutzergruppen mit eigener Gruppen-Administrator-Funktion.
 
* Intrusion Detection System PHPIDS wurde integriert (http://php-ids.org/)
 
* Einladungen können nun auch über Fremdprovider ausgesprochen werden.
 
* nicht innerhalb der Wiedervorlage geöffnete Transaktionen werden mit einem halben Punkt dargestellt (und grauem Text), wenn Sie im Anschluß doch geöffnet wurden.
 
* Das regify-Shopsystem ist nun in großen Teilen durch den Provider anpassbar. Die Unterstützung für eigene Shopsysteme und Anbindung weiterer Zahlungssysteme ist nun deutlich flexibler.
 
* Willkommensdialog nach Klick auf "Akzeptieren-Link" in den Mails ist neu gegliedert
 
** bessere Ansprache
 
** deutlichere Visualisierung zwischen lokaler Installation und Webnutzung
 
** Korrektur von Aussagen zum Setup-Assistent (startet nicht mehr autom. nach Setup)
 
* Authentifizierungsdialog wurde überarbeitet und kann nun individuell angepasst werden
 
* Wenn ein authentifizierter Nutzer eine Einladung ausspricht, so kann (optional) der eingeladene Nutzer direkt eine Authentifizierung erhalten (Net Of Trust).
 
* Offene Bestellungen können nochmals eingesehen werden (und nochmals in den Shop weiterleiten).
 
* Stellvertreter-Dialog zeigt nun einen erklärenden Informationstext.
 
  
SDK:
+
Other:
* SDK Funktion <inviteuser> kennt nun neue Parameter „invitation comment“, „personal message“, „username“, „invitationer full name“ und „invitationer organisation name“
+
*Internal: Now supporting e-mail addresses using unicode domains (Punycode support).
* Fünf neue SDK Funtionen für vollständige Gruppenverwaltung hinzugefügt
+
*Internal: Maximum number of group members is no longer fixed and can get adapted using MAX_GROUP_MEMBERS constant.
* Neue SDK Funktion für "neues Kennwort zusenden" hinzugefügt
+
*Internal: Provider-SDK now offers a new function called ''startchat'' and allows to run chats from scratch with no need of portal interaction.
 +
*Internal: Added web-socket server for providing push notifications to several products (eg regibox).
 +
*Internal: Enhanced CSS and JS provisioning on provider updates to make sure it loads new even if browser cache is active.
 +
*Internal: New getWebSession function in client protocol to replace older one in future regify client software.
 +
*Internal: Support script for user export/import now also supports transfer of grouping information.
 +
*Internal: Upgrade underlying operating system to CentOS 7.5 (also supporting SMBv2 for regibox and backup shares).
 +
*Internal: To prevent DNS issues with clearing (slow lookup sometimes), we added some auto-updated hosts file entries.
  
Administration:
 
* Administration erfolgt nun aufgrund von Administrations-Rollen.
 
* Konfigurationsdialog für Administrations-Rollen hinzugefügt (je Sub-Provider)
 
* Administration für Benutzergruppen und Domainlisten hinzugefügt
 
* Administration für Authentifizierung hinzugefügt
 
* Subprovider-Konfiguration optisch aufgeräumt und in ausklappbare Bereiche unterteilt
 
* Subprovider-Konfiguration erhielt eine Sicherheitsabfrage für "Subprovider löschen"
 
* Benutzerverwaltung bietet jetzt auch Sortierung nach "letzte Aktivität"
 
* Benutzerverwaltung kann User jetzt auch zu "Super-Usern" machen (für Provider-SDK)
 
* Konfiguration für Fremdprovider-Einladung hinzugefügt (je Sub-Provider)
 
* Der Statistik-Dialog wurde überarbeitet (übersichtlicher)
 
* Rechnungsverwaltung zeigt nun mehr Details (kompletter Bestelltext anzeigbar)
 
* Suche in Benutzern und Gruppen erkennt numerische Eingabe und sucht dann nach UserID
 
  
Internes:
 
* SDK unterstützt ein deutlich erweitertes "userinvite" (viel mehr Angaben)
 
* Umfangreiche SDK Funtionen zur Gruppenverwaltung
 
* Provider erlauben die Angabe von externen Einladungen an Fremdprovider
 
* der Provider versucht nun, die Clearing-Verbindung für eine User-Session konstant auf einem VPN-Kanal zu halten. Das ist Voraussetzung für den neuen Clearing-Betrieb.
 
* update.php enthält eine Option um den MySQL Master-Master Replikationsbetrieb vorzubereiten
 
* Subprovider können nun über STYLE/_LanguageShop.php auch eigene Shop-Sprachtexte angeben
 
* Die Monitoring-Option "type=monitoring" gibt nun OK, WARNING oder ERROR zurück. So kann besser zwischen kritischen und unkritischen Provider-Zuständen unterschieden werden.
 
* Das Maintenance-Failover wurde überarbeitet und wirkt nun besser auch mit einem Ausfall des CryptoServer.
 
* Wenn der Provider aufgrund eines Totalausfalles beim Clearing oder CryptoServer in den Maintenance-Modus geht, dann kann man jetzt eine URL aufrufen lassen (zB SMS-Versand).
 
* Der monatliche Statusreport an regify kann nun optional zusätzlich in Klartext an eine weitere Mailadresse versendet werden (zB Provider selbst).
 
* Die zu verwendenden Passwortlängen lassen sich nun Providerweit in der configuration.php definieren. Sprachtexte für zweistufige Anmeldung passen sich automatisch an.
 
* Menüseite der Nutzer zeigt Premium-Laufzeiten > 10 Jahre als *unbegrenzt*
 
* Die Session-ID wird bei jeder relevanten Aktion im Portal neu generiert (mehr Sicherheit).
 
* Der Administrationsdialog besteht nun ebenfalls auf SSL, wenn ONLY_HTTPS = TRUE gesetzt wurde.
 
* Verzögerung nach Fehl-Logins auf eine Zufallszeit zwischen 1 und 5 Sekunden geändert um Bruteforce-Angriffe deutlich zu erschweren (mehr Sicherheit).
 
* Nutzer, welche sich in der Community-Version löschten, werden 30 Tage danach endgültig aus der Datenbank gelöscht (ohne manuelles zutun).
 
* Fehlerhafte Logins (zB Benutzername/Passwort falsch) verursachen eine Zeitverzögerung von ein bis fünf Sekunden (Zufall). Dadurch werden Bruteforce-Angriffe wirkungsvoll gebremst.
 
* Template 11 erhielt die Anrede des Benutzers
 
* Template 12 erhielt einen Datum/Zeit Platzhalter.
 
* Fix: Einladungsdialog hat den Haken für "zweistufiges Kennwortverfahren" bei Fehleingaben im Anschluss vergessen (musste nochmal geklickt werden). Behoben.
 
* Fix: Problem mit leeren regify Mails behoben (online erstellt), wenn man schnell hintereinander den Erstellen-Dialog öffnet (alte rgf wurde dann vor dem Versand gelöscht).
 
* Neu: Ablage der rgf-Dateien in extra Unterverzeichnissen.
 
* Fix: Einladungsdialog-Problem mit ; (semicolon) im Freitext behoben (wird durch : ersetzt)
 
* Fix: An vielen Stellen wurde die Unterstützung von Sonderzeichen verbessert.
 
* Fix: Registrierungsseite hat nun einen "Startseite"-Button um zurückzukehren.
 
  
CSS Aktualisierung:
+
== Previous Changelogs ==
* neu: tableUserChoice
 
* neu: input[type=button] und input[type=submit] bekommen "cursor: pointer;"
 
* neu: a und a.small erhalten "cursor: pointer;"
 
* neu: OkDialog
 
* neu: listsecond hat weissen Hintergrund
 
* verändert: BrownBox (padding-bottom)
 
* removed: tableBoxText
 
* removed: div.MembershipBox
 
  
configuration.php:
+
You can find previous and outdated changelogs on a [[Changelog_Provider_History|separate changelog page]].
* neu: define('SETPREMIUMANYTIME', TRUE);
 
* neu: define('IDSPATH', "");
 
* neu: define('IDSTRESHOLD', TRUE);
 
* neu: define('EMERGENCYURL', "");
 
* neu: define('SHOPCURRENCY', "EUR");
 
* neu: define('CUSTOMSHOP', FALSE);
 
* neu: define('ORDERPAGEUSER', "");
 
* neu: define('ORDERPAGEADMIN', "");
 
* neu: define('USERPASSWORDLENGTH', 8);
 
* neu: define('USERPASSWORDLENGTHTWOSTEP', 12);
 
* neu: define('INVITATIONAUTHTOLEVEL', 0);
 
* neu: define('INVITATIONAUTHONLYSDK', TRUE);
 
* neu: define('AUTHTRANSMITURL', $url);
 
* neu: define('AUTHTRANSMITURLGOODRESULT', "100");
 
* neu: include_once("funcForm.php"); nach funcGadget.php
 
* neu: $AdminRoles[]
 
* entfernen: AUTHALLOWPERSON
 
* entfernen: DEFAULTAUTHENTICATIONSTYLE
 

Latest revision as of 14:54, 17 February 2026

Information

This are the official changelogs for the regify provider software appliance.

Update 2026 V6 announcement

Major release announcement

New functionality:

  • New: Added support for SNI (multiple domains on single IP address).
  • New: Added support for DHCP.
  • New: Added support for SMTPUTF8 for SMTP email sending.
  • New: Added support for LetsEncrypt certificates (ACME).
  • New: Removed the setup wizard pages. Instead, appliance menu assistant and web interface enables to set all needed config.
  • New: "SMS usage", "default dialing code" and the "enable regibox for all new users" setting is now editable per (sub)provider.
  • New: Account invitations now offer replacement value <INVMAIL> and set ReplyTo header to inviting user.
    • Invitation templates footer text is enhanced to better match new behaviour.
  • New: Group administrators now can see all assigned email addresses of their group users.
  • New: The regipay domain list and menu option regipay settings is removed because of zero usage.
  • New: In expert mode (SETTINGS - System configuration), regimail and regibox lists are now sorted on pure date.
  • New: Grahical captcha is replaced by modern and AI resistant captcha from TrustCaptcha.com.
  • New: Registration dialog is checking for possible landline phone number and gives warning (for most EU states + Switzerland and UK).

Bug fixes:

  • Fix: Sending from webbrowser sometimes denied sending even before daily limit was reached.
  • Fix: Signup page respects default dialing code setting.
  • Fix: In user SETTINGS - My account - My representatives the representative info did not show representative role if a user was representative because of it's group membership.
  • Fix: Links to external shop pages opened in the same tab instead of a new one.
  • Administration dialog fixes:
    • Fix: Subprovider color change changes main provider color instead subprovider (only in Manage Subproviders).
    • Fix: In administration, administrators are no longer allowed to move themselves to another subprovider to avoid deadlock situations.
    • Fix: In user administration users mailaddresses the representative info did not show representative role if a user was representative because of it's group membership.
    • Fix: Admin template editor replaced <DATE> tags by current date instead of keeping the tag.
  • Fix: Fixed issues with sub-provider regibox usage data export.
  • Fix: Fixed database update error if a first user authentication is rejected in "Authentication requests" admin dialog.

Internal and platform changes:

  • Int: The new provider 6 appliance is based on Debian. By this, regify drops the usage of CentOS after 14 years. This are the benefits:
    • Debian is a more future-proof distribution with long-term support.
    • It offers more up to date drivers and software packages with up to date feature support.
    • Providing reliable and faster security patches.
  • Int: New transactions sent using a specific commAddress are now also registering this address as sender address instead of the main account address.
  • Int: Added basic bot detection to prevent scripted attacks.
  • Int: Adding new security measurements with new config options:
    • MAX_REGISTRATIONS_HOUR_MAILSERVER to limit manual user registration by used mailserver MX records per hour (default 4).
    • MAX_REGISTRATIONS_HOUR_IP to limit manual user registration by user IP address per hour (default 4).
    • MAX_REGISTRATIONS_DAY to limit overall manual user registrations per day (default 15).
    • ALLOWED_MOBILE_COUNTRIES to limit SMS sending to selected countries only (defaults to western EU).
  • Int: Stronger limit for password resets by SMS per phonenumber per day (Now only 2, applied for password reset).
  • Rem: There is no regibill validation dialog any more. Validate any regibill documents at www.regibill.com.
  • Rem: Old regify protocol V1 is no longer supported (affects very old and outdated client software only) (regify.php).
  • Rem: Setting constant AUTHTRANSMITTYPE is removed without replacement.
  • Rem: Setting constant DEFAULT_DIALING_CODE is removed without replacement.
  • Rem: Setting constant ENABLE_RGB_FOR_ALL is removed without replacement.
  • Rem: Setting constant DEBUGDISPLAY is removed without replacement.
  • Rem: Setting constant EMERGENCYURL is removed without replacement.
  • Rem: Setting constant SETPREMIUMANYTIME is removed without replacement.
    • Grouped users always get regimail professional date from the assigned group.
    • Users removed from a group always get regimail private.

Update 12. May 2025 V5.3.4

Patch release

  • New: Enhanced version check for regibox managers.
    • If a regibox manager is about to become outdated, the provider will notify users by e-mail 30 days in advance on a daily basis until the expiry date is due.
    • Upon expiration date, any outdated regibox manager is denied (error 4 → outdated regify software).
    • Minimum regibox version for this version is 2.1 for regiboxd and regibox Manager.
  • Fix: Enhance group management function 'remove user from group' to reduce confusion with account deletions.
    • Renamed into 'take from group'.
    • Changed icon to not look like deletion.
    • Added a note to tell group admins that this will not delete the regify account.
  • Fix: Fixed error "The provided phone number is invalid." on group admin pwd reset on accounts without mobile number.
  • Fix: In maintenance mode, usage of the portal was not disabled if already logged in (not really an issue, just wrong).
  • Fix: In maintenance mode, captcha generation is now stopped.
  • Fix: regigate administration dialogue is now waiting up to 5 minutes for new IP addresses update and shows loader animation on button, preventing multiple clicks.
  • Fix: Fixing regibox invitations not received if receiver domain has restrictive DMARC headers.
  • Fix: Fix reply-to name for regimails written online in web portal (used senders email instead of name).
  • Fix: Eliminated random error messages like "Had to correct corrupt count -1 record for box..." in error log.
  • Fix: Eliminated random error messages like "ERROR: Missing or invalid language-code for template [box_invit_success]..." in error log.
  • Fix: Fixed provider API function mailcheckassignment returning wrong answer if user is not registered at same provider.
  • Int: Added some element IDs for interesting elements on login and signup pages (for more easy CSS customizing).
  • Int: Enhanced captcha function.
  • Int: Enhanced regibox protocol to allow better control over conflicting file and folder creation, delete and update like...
    • create file in a folder that was deleted from someone else in the same moment.
    • rename or update a file/folder while it was deleted by someone else in the same moment.
  • Int: Enhanced user transport script to better handle regipay Plus users (only available to regify support).

Update 20. February 2024 V5.3.1

Patch release

  • New: Display a helpful error message if a password reset was requested by a non-activated account.
  • New: Show assigned coupon code in user data administration dialog (system admins only).
  • Fix: Sometimes the "send me a copy" function in online regimail writing did not work.
  • Fix: No error was shown if an invalid coupon code was entered during registration (it was simply ignored).
  • Fix: Enhanced information and handling if > 25 regimails/day were sent using portal.
  • Fix: Enhanced error message if monthly regimail limit was reached.
  • Fix: List of uploaded documents (regipay plus) showed a navigation area with no function. Removed.
  • Fix: Fix error log entries occuring after a user deleted his account (PHP Warning: Illegal string offset 'USERID').
  • Fix: Fix error log entries occuring after the administration pages are called with double slash (eg while pentesting).
  • Fix: Saving data of non activated users in user data administration dialog sometimes triggered error about email address and phone number.
  • Fix: Sometimes regibox went to maintenance mode after the appliance menu regibox options were opened and closed without saving.
  • Fix: New or changed regigate IP addresses (for whitelisting) were not updated.
  • Fix: Triggering a manual backup from admin GUI did not work.
  • Sec: Updated OpenSSH packages and supported algorithms to protect against Terrapin SSH issue (CVE-2023-48795).
  • Sec: Set PostFix config variables to protect from SMTP smuggling (CVE-2023-51764).
  • Int: The PENTEST flag also disables captcha validation for more easy testing.
  • Int: Adding CORS headers to apache configuration.

Update 20. April 2023 V5.3

Major release

This is not only a release with a lot of new functions and updated user interface, it is also a cleanup and modernizing release.

  • New: Completely new designed end-user interface.
    • Modern graphical user interface.
    • Responsive for PC, tablet and mobile usage.
    • Enhanced top navigation with a new navigation structure, respecting the experience of the last years.
    • Easily customizable in corporate identity color and with your company logo.
    • Redesigned for better usability and accessability.
    • Hiding any unavailable options from the user to avoid confusion.
    • Reduced many dialogs to the mandatory fields.
    • Added expert mode to hide beginner notes and enable some more pro functions.
    • Users getting warned if they use an old webbrowser (IE, old Opera, old Firefox, old Safari etc).
  • New: Enhanced performance compared to regify provider 5.2.0 login page
    • Page loads 26% faster (2.3 sec -> 1.5 sec).
    • Page loads 61% less content bytes (551KB -> 213KB).
    • Page does 45% less requests (36 -> 20).
  • New: Re-designed regimail shop system for single users and group administrators.
    • Faster and more easy to understand. Follows current EU regulations.
    • More simple, offers always 1 and 2 years of regimail professional.
    • More transparent communication about prices and offer.
    • Prices and VAT are now entered in (sub)provider configuration (by (sub)provider administrators).
  • New: Enhanced online reading and writing (incl. reading regipay).
    • Much better handling of attachments and enhanced drag&drop and file selection.
    • There is no longer a fallback mode for very old webbrowsers like IE and old Safari. People must use an up to date webbrowser.
    • Internally now using WASM code to be faster and more secure.
    • New online regimail writing limits. Single attachments max. 8MB and 32MB for the whole regimail.
  • New: Support for regipay Plus online document access.
  • New: regibill validation dialog is enhanced and offers better drag&drop usage.
  • New: Enhanced group management dialogs (group admin).
    • Offers an extra page for Excel upload invitations.
    • Function to take former invited people back into your group.
    • Cleanup dialogs and remove popup windows.
  • New: User administration using normal/bold font instead of red/black color to indicate regimail private/professional.
  • New: Added regipay Plus support to regify protocol (for use in client apps).
  • New: Dialogs using Captcha now rendering faster (registration, pwd-reset).
  • New: New qa.php page to give QA and support a quick overview about provider configuration.
  • New: New pentest mode, making pentesting more easy by deactivating specific security functions (PENTEST config option).
  • Rem: Removed (sub)provider flags A, C, D, E, F, H, K, L, P, S, V, X, 3, 4, 7 due to minimal use.
    • See provider 5.2 docs for menu flags reference.
    • They all now use the common default behavior or affected functionality does no longer exist.
  • Rem: Removed unused or redundant user data fields.
    • Removed users bank data information dialogs.
      • Dropping tables tblbankaccounts, tblaccounting.
    • Hiding newsletter checkbox in account dialog.
    • Affects both user and admin dialogs.
  • Rem: Removed invoicing export function.
    • Removed internal processing of a user bank account.
    • Removed payments export in administration.
    • Removed admin options to manage internal users bank account.
    • Droping table tblexport.
    • Removed DEBITSTATECHECK, RENEWALPERIODOFNOTICE and INVOICINGINTERVAL config options.
  • Rem: Removed functionality that tried to point you to most used page after login.
    • Generally, after login, all user logins start in account overview.
    • Users in a regipay group with available documents start in available documents view.
  • Rem: Removed membership advertisement pages in portal.
  • Rem: Shop system cleanup.
    • Removed option to buy for other people.
    • Removed customShop option for shopping pages.
    • Removed options to customize shopping form. Instead, we offer the most common fields by default.
  • Rem: Password reset dialog offers no auto-generate any more.
  • Rem: Displaying the password does no longer offer a print dialog (eg after registration).
    • Instead, we recommend users to use a password manager application.
  • Rem: Invitations using the portal do no longer allow to edit/change the user name as the inviting user.
  • Rem: Group management cleanup.
    • Removed "pull user into group" function.
    • Removed extra "invite user to group" function (standard invite now works like that).
  • Int: Removed the following configuration options:
    • PDFENABLED (now always enabled).
    • PREVENTREALSENDERADDRESS (now always preventing real sending address).
    • MTA_ADDS_CRLF (always use default).
    • DOCUMENTATION_DOWNLOAD_INFO_FILE (all documentation is now online).
    • DEBUGSLEEP (replaced by PENTEST option).
  • Int: Activated HTTP protocol compression for .js, .css and .wasm file types.
  • Int: Webserver is now sending a Content-Security-Policy header to increase security.
  • Int: Removed all internal connector functionality.
    • This was no longer used since 2008 and therefore was removed from code and testing.
  • Int: Updated all appliance packages to most recent distribution version.
  • Int: Set all provider cookies SameSite attribute to Lax.
  • Fix: Fixed filename issues downloading ZIP of regibox shares.
  • Fix: Fix issues in user import tool (error: missing CHATALLOWEDUNTIL).
  • Fix: Remove serving no longer needed /icons/ folder.

Update 20. April 2022 V5.2

Major release

  • New: We are discontinuing regichat. Due to this, all regichat references were removed from the regify provider completely.
    • Removed all CHAT_*, all REGICHAT_*, CHECK_HISTORY_INTERVAL and CHECK_IF_REGICHAT_LOADED_INTERVAL constants.
    • Removed all regichat related email templates.
    • Sub-provider menu flags "Q", "R" have been removed.
  • New: For German users, the term "regify-Provider" is now renamed to "regify-Anbieter".
  • New: Enhanced optics for GUI tabs to be better recognizable as tabs.
  • New: Many icons and images were replaced with better resolution versions or a font icon.
  • New: Some unused options were removed from personal information dialog (username field, a header).
  • New: Enhanced several sentences and their translations to be better understandable.
  • New: Group administration dialog now has a refresh button (update members status).
  • New: Group administration dialog is hiding useless options in case the group is a regipay group.
  • New: Invitation dialog now has a refresh button (update invitations status).
  • New: Shop order notifies provider by email about a new order. Now, the email also contains json with order details, allowing automated processing.
  • New: Provider-SDK userinvite function supports new parameter g (to auto-group invited user).
  • New: Provider-SDK got a new error code (36).
  • New: Provider administration pages...
    • The complete look and feel was updated. The interface scales to any screen size (better on 4K monitors).
    • Most dialogs are no longer opening popup windows. Instead, dialogs running inside.
    • Log viewer search is now also offering an end time.
    • Group deletion dialog offers to also delete the contained users.
    • Main page shows a warning if appliance websocket server is not running.
    • Main page notifies with blinking red flag about new orders and authentication requests.
    • Enhanced display of logfile content in administration main page.
    • Status display on administration main page updates every 5 seconds (no need for reload).
    • Documentation and help option now pointing to new help portal at manuals.regify.com.
      • Removed DOCUMENTATION_DOWNLOAD_INFO_FILE constant.
  • New: Default "Admin" account is no longer allowed to log-in to the end user portal.
  • New: Sub-provider menu flags "5" and "6" have been removed (no longer needed).
  • New: Removed CK-Software shop option in sub-provider administration.
  • New: The activation email default templates have been enhanced (simplified, better colors for activation link).
  • Int: Removed option RENEWALPERIODOFNOTICE constant (was unused).
  • Int: Removed the options to limit mass sendings.
    • Removed SERVICEPRIORITY_REGIMAIL, SERVICEPRIORITY_REGIBILL, SERVICEPRIORITY_REGIPAY constants.
    • No further speed limit for mass sendings.
  • Int: Optimized storage and handling of users list of regiboxes.
    • Gaining better performance on installations with many regiboxes (with regibox manager 2.1).
    • Extended regibox protocol API for the new list form (with regibox manager 2.1).
  • Int: If regibox storage is exceeded:
    • regibox managers will no longer show notifiers for that case.
    • Instead, the 'owner' and 'causing user' will get informed by email (maximum once a day).
  • Int: Optimized output of portal reference URLs (no absolute pathes anymore).
  • Int: Switched regify clearing domains from regify.clearing.lu to clear-center.eu.
  • Int: Removed provider setting MTA_ADDS_CRLF (no longer needed).
  • Int: Preventing too many SMS for password reset (max 3/day) and re-sending unlock code (max 2/day) per user.
  • Int: SMS url replacement is now supporting [e] parameter for check if text encoding is GSM 03.38 compatible.
  • Int: Added more protection against stupid antivirus scanners accepting or canceling invitations automatically. Same for PWD reset and self registration.
  • Int: Monthly reports now generated on the first day of a month, two minutes after midnight.
  • Int: Monthly reports are now also generated, if the system was offline on first day of a month around midnight (even days later).
  • Int: System is better protected against DOS attacks in Captcha generation.
  • Int: First and lastnames are allowed to be one character only.
  • Fix: Do not allow email address removal if the email address is vital for an existing regibox.
  • Fix: Better handling if the password of a user was reset by a database cleanup of the password field (eg after forcing users to generate a new password).
  • Fix: Fixed issues in reporting Excel invitation list errors.
  • Fix: Fixed accidential dot (.) in sender name for SMS sending in some cases.
  • Fix: Forward after timed out administration session forwarded to portal login instead of admin login.
  • Fix: Captchas were sometimes hard to solve. Now, the algorithm is producing better readable captchas.
  • Fix: PDF transaction list export for regibox invitations incorrectly mentioned creation entries as well (red).
  • Fix: regibox share ZIP download displaying some "please wait" until download starts (prevent irritation if compression needs some time).
  • Fix: If new users are created manually in web administration, dialog did not remember the mode if values were missing.
  • Fix: Appliance complained SSL certs that last longer than 390 days. Now it only complains if they last longer than 398 days.
  • Fix: Fixed database error 'Error in accept: Too many open files' on heavy load.
  • Fix: Fixing several security related issues.
  • Fix: Fixing CVE-2018-25032 (zlib compression vulnerability).

Update 03. November 2020 V5.1.2

Patch release

  • New: Showing provider logo also on mobile devices.
  • New: Enhanced downloads page by enhancing update.json parsing.
    • Supporting a "hide" attribute to allow regify to hide products and versions from here.
    • Supporting "link" attribute to present an informational link instead of binary download.
    • Always showing links for other OS (no longer hidden below).
  • Fix: In some configurations, the shop button in account overview is broken.
    • Note: Shop button in "Communication" -> "Shop" and other locations were still working.
  • Fix: Manage user dialog in administration does not show non-activated users by default (tick "Show only not activated users" to see them until you updated).
  • Fix: Fixed message about to much invitations for group administrators in some cases.
  • Fix: Better handling invalid date values for group administration.
  • Fix: Adding and deleting sub-providers was impossible since 5.1.0.
  • Int: Added "short" mode for regibox share protocol. Also added "protected" and "fileCnt" values for possible future use.
  • Int: Added DOS protection for ZIP download in regibox shares.

Update 21. September 2020 V5.1

Major Release

End user related:

  • New: Add regipay mode to groups.
    • Users in such group get a restricted portal interface, optimized for payslip readers.
    • Users in such group get a hint where to find the payslips.
    • There is a new and optimized email template for invitations into such group (invite_pay template).
  • New: regibox share is now better formatted and offers download as ZIP file.
  • New: The captchas for registration and password reset are updated.
    • More secure (using SVG, rotation, using timing check).
    • Better compatible with mobile devices (automatic resizing).
  • New: There is only one regify account invitation allowed if the user never sent a regimail before (except of group admins).
  • New: Activate "new device" notifier by default. Use better GeoIP service and template.
  • New: Added Chinese country names in dropdown country selections.

Administrator related:

  • New: Added showing users statistics to hotline admin role.
  • New: Admin user list export now also includes invitation information.
  • New: Renamed "negotiator" columns in admin exports to "coupon code id".
  • New: Optional monthly provider report email is re-organized and contains some helping comments (REPORTCOPYADDRESS).
  • New: Provider billing documentation was enhanced by adding a "coupon code"s chapter and other updated information.
  • New: If admin installs an SSL certificate which lasts longer than 398 days, he gets a warning.
  • New: Appliance diagnostics also checks for working websocket connections from outside (regibox).
  • Fix: Replaced CodeMirror with ACE code editor component. Fixing flicker and jumping issues.
  • Fix: Export for regibox billing also listed users which registered after export period (numbers all zero, so no real issue).
  • Fix: Fix issues with authentication dialog not working (5.0.9 issue).
  • Info: We have tipps for monitoring with ZABBIX.
  • API: The provider API function maildelete was enhanced for multiple addresses and corresponding documentation was clarified.

Internal:

  • Sec: Disable support for TLS1.1. Now, TLS1.2 is the standard protocol. Note: TLS1.3 will not be supported in 5.1 versions.
  • Int: Allow file replication in maintenance mode to fix issues removing maintenance mode in cross-master setups.
  • Int: Switch default regify SMS gateway to a new vendor (normally, no interaction needed).
  • Int: Ensure no email addresses removed from account if its registered as regibox owner (member has to confirm explicitely).
  • Int: Underlying OS updated to most recent patch versions.
  • Int: Removed config values REGIMAILPRIVATE and REGIMAILFLAT (were not used in the past).
  • Int: Removed "SelfAdmin", "RegimailPrivateDefined" and "RegimailFlatDefined" from monthly report.
  • Int: Remove all ALSO and AppDirect related code (cleanup).
  • Int: Removed the concept of "community" and "corporate" providers. Technically, everything is community now.
    • Meaning that there are no "deleted" users any more. Administration no longer offers search for deleted users.
    • Provider-SDK does no longer support UserType=91.

Update 16. June 2020 V5.0.9

Patch release

  • New: Increased maximum number of representatives to 25 (former 5).
  • New: Self registration dialog now utilizing a captcha to prevent robots from registering or abusing the system.
  • Fix: Added missing log entries if a user was removed from a group by the group admin.
  • Fix: Fix broken Enforced Attachment links in Gateway protocol (regigate).
  • Fix: For regibox manager V2, push notifications were missing if user accepted regibox invitation or boxes with no content were deleted.
  • Sec: Prevent HTTP host header attacks (no working attack known for previous provider versions).
  • Sec: Set new HTTP Strict-Transport-Security value max-age to be one year (previously 1/2 year).
  • Int: Now supporting recipientsHash value in provider protocol (newTransaction) to allow more than 5 representatives (client needs to support this, too).

Update 20. February 2020 V4.1.6

Patch release for very outdated regify providers still on version 4

  • Int: Just fixing compatibility with regify Client V4.4 as an temporary help.

Update 20. January 2020 V5.0.8

Patch release

  • New: Administration log viewer allows searching in comments.
  • New: Also allow password reset initiated from group administrator without knowing the mobile number.
  • Fix: Fixed online reading error "TOTAL_SIZE" if RGF file was bigger than 15 MB.
  • Internal: For new backup/restore and SSL offloader scenarios, the system now supports using only IP instead of domain for the main provider.

Update 06. November 2019 V5.0.7

Patch release

  • New: regibox manager with version less than version 1.5.2 are no longer allowed (will trigger error 4 in old regibox managers).
  • Fix: Transaction counter for regify report sometimes returned numbers of previous month for overall transactions statistics.
    • Please note that this counter is not relevant for any calculation of any cost. It is just statistical information.
  • Fix: Database based file replication (master-slave or master-master) does no longer stop in maintenance mode to prevent issues coming back from maintenance.
  • Fix: Prevent changing users regibox settings if regibox is not configured at all (web administration only).
  • Fix: Fixed rare issue with websocket server hanging (100% CPU).
  • Internal: Enhanced options for customizing "Downloads" page image (for better compatibility).
  • Internal: regibox protocol handler now supporting metaData field (for managing special permissions of upcoming regibox manager V2).
  • Internal: Hosts-file entry for clearing DNS now updated from pkgs.regify.com (previously it was pls1.regify.com).

Update 24. May 2019 V5.0.6

Patch release

  • Fix: Fixed problems in admin dialog for user creation if given email address contained leading or trailing spaces.
  • Fix: Decreased default limitation of Provider-SDK function gettransactionlist to 10.000 hits per request to avoid server side high memory consumption.
  • Fix: Enhanced error messages in regigate connector protocol if retrieving message key(s) fails.
  • Fix: Fixed some optical issue in signing regigate certificates dialog.
  • Internal: System now observes the expiration date of the regigate signing certificate. In case it runs out, it is getting re-signed automatically.
  • Internal: Some changes regarding new regibox file sharing protocol (beta, only for future regibox versions).

Update 20. March 2019 V5.0.5

Patch release

  • New: We removed support for TLSv1.0 due to security concerns.
  • New: Added GDPR compliant data download option to HELP AND FAQ page.
  • New: Added start time field to admin log search dialog. Enhanced date and time fields with new HTML5 types.
  • New: Added some extra security layer to some download functions.
  • New: Added functions for new regibox file sharing protocol (beta, only for future regibox versions).
  • Fix: Fixed issues while inviting new users to an already running regichat session.
  • Fix: In some circumstances, the provider sent regimail reminders to regibox owners after 3 days.
  • Fix: Tweaked some WebSocket parameters for better scaling with many regibox users.
  • Fix: Enhanced "online reading" help sentences.
  • Fix: Setup assistant did not correctly initialize Chinese templates.
  • Fix: Enhanced error message if cookies missing while password reset.
  • Fix: Footer code template needed some update.
  • Fix: Mobile country code field was partially hidden on small screens during sign-up.

Update 09. October 2018 V5.0.2

Patch release

  • New: Increased the number of allowed transactions in a regimail professional account from 350 to 500.
  • New: Forward group admins with regipay capability to the group invitation dialog even if they click the ordinary invitation button.
  • Fix: Reducing high CPU load on the appliance if a lot of regiboxes are synchronized with regibox managers pre V1.5.
  • Fix: Cron jobs did not respect proxy settings.
  • Fix: Prevent regibox advertising showing if no shop order mail address is set in administration.

Update 16. August 2018 V5.0.1

Patch release

  • New: Added some additional sanity check if someone edits provider main configuration file (complain about text outside of PHP tags).
  • Fix: Enhanced error message if appliance internally triggers error 58 or error 59 (connectivity issues).
  • Fix: Mention prices "incl VAT" in regify (sub)provider settings.
  • Fix: Fixed bug causing an error in authentication dialogue (if authentication was denied and comment was used).
  • Fix: Fixed and updated list of used components and license information on admin login page.
  • Fix: Fixed some issue in WebSocket connection protocol for upcoming regibox V1.5 release.
  • Fix: Fixed issue that potentially prevented restart of WebSocket server after appliance update.
  • Fix: Fixed some issue in provider setup-wizard after fresh appliance install (invalid session, need login).
  • Fix: No longer displaying regibox creation entry in "regibox invitations" list (may confuse people).

Update 9. July 2018 V5.0.0

This is a major release containing many new functions and also breaking some compatibility. For update information, please visit Update_5.0.

End user related:

  • New: Added Chinese language support (both user interface and admin interface).
  • New: New function "My devices" is showing you the devices you used for log-in.
  • New: Added cookie check to prevent users reporting issues if they simply have turned off cookies in their web-browser.
  • New: Group administrators can re-send an invitation email.
  • New: regify accounts are blocked for 10 minutes if someone tried to login with wrong password for more than 10 times.
  • New: Account overview is offering some regibox advertising (only if provider supports regibox).
  • New: Account overview is showing group administrator name and contact information.
  • New: All users (self registered or invited) will have to explicitly accept terms and conditions during account activation (required by new GDPR/DSGVO).

Admin user related:

  • New: Replaced many icons by font icons. Thus, you can edit the color and icon itself much more easy using CSS.
  • New: Portal administrators can re-send an invitation or registration email.
  • New: User management search also searches in additional email addresses.
  • New: Subprovider-Administrators can also edit their contact and support information now.
  • New: The (sub)provider is now able to choose the languages he likes to support. Others are not available for end users then.
  • New: Language flags are inserted using a simple function now. More easy to customize the footer.
  • New: Administration entries regarding provider settings and customization have been re-arranged to be more clear.
  • New: Direct access to users usage statistics and see last email log entries.
  • New: Provider maintenance dialog offers a SMS test function.
  • New: Customizing now also allows SVG and TTF files upload (for uploading and hosting own fonts for CSS usage).

Generic:

  • New: Provider-SDK access is now restricted to given IP address(es) or ranges.
  • New: Custom SMS sending functionality (URl call) to allow more placeholders for various SMS text encoding (eg UTF16).
  • New: Terms and conditions page now offers a "print" button.
  • Fix: Transaction history export using PDF is now using a font that supports Chinese subjects, too.
  • Fix: Added support for Windows Phone to pay.php payslip download and on-line regimail reading.
  • Fix: Added more logging regarding user registration and account activation.
  • Fix: As usual, many sentences and template texts have been enhanced or corrected.
  • Fix: Email domain blacklist was not used for invitations using CSV/Excel upload.
  • Fix: The overall number of transactions in monthly report only counted opened transactions instead of all (not used for invoicing!).
  • Fix: Enhanced the invitation dialogue to better explain the usage of optional mobile number.
  • Fix: Excel and CSV import better trims leading and trailing spaces, does no longer complain about empty lines.
  • Fix: Fixed php syntax check in admin script dialogues (was somehow useless in provider 4.1).
  • Fix: Fixed password reset issue, introduced in pre-upgrade release 4.1.5.
  • Fix: Fixed issue where non activated additional email addresses were not automatically removed two days later.

Security:

  • Hardened the appliance against several attack vectors.
  • Set Apache TraceEnable directive to "off" by default.
  • Enhanced SSL cipher suites to get even more security for SSL connections.

Other:

  • Internal: Now supporting e-mail addresses using unicode domains (Punycode support).
  • Internal: Maximum number of group members is no longer fixed and can get adapted using MAX_GROUP_MEMBERS constant.
  • Internal: Provider-SDK now offers a new function called startchat and allows to run chats from scratch with no need of portal interaction.
  • Internal: Added web-socket server for providing push notifications to several products (eg regibox).
  • Internal: Enhanced CSS and JS provisioning on provider updates to make sure it loads new even if browser cache is active.
  • Internal: New getWebSession function in client protocol to replace older one in future regify client software.
  • Internal: Support script for user export/import now also supports transfer of grouping information.
  • Internal: Upgrade underlying operating system to CentOS 7.5 (also supporting SMBv2 for regibox and backup shares).
  • Internal: To prevent DNS issues with clearing (slow lookup sometimes), we added some auto-updated hosts file entries.


Previous Changelogs

You can find previous and outdated changelogs on a separate changelog page.