Program: CWE-434
Project: CVE-2017-15054
Buggy source:
2.1.27
 9/
 Fixed a possible XSS (credit to ADLab of Venustech)
 Improved security related to User Management
 	> a manager could potentially act on users not related to him
 Improved security related to Items Management
 	> a user could potentially act on Items he should not have access to
 Securized script.backup.php by adding a security key
 Fixed some other security failures (credit to ​security at Amossys)
 #1945 Cannot delete items
 #1944 File upload results in error
 #1941 Visualisation problems

 8/
 Delete install folders and files during installation process
 Custom Field value can be masked
 Database password is encrypted in settings.php file
 PHPMailer library updated to 5.2.23
 TwoFactorAuth library was updated
 Configuration variables are not set in SESSION anymore. Now read from tp.config.php file.
 Fix: issue on offline export
 Fix: error on deleting a folder at root
 #1939 Unable to change page (role management)
 #1937 Error while using script.backup.php in standalone
 #1935 Add folder results in Requested JSON parse failed
 #1933 Trying to move folder results in error message
 #1932 Keepass upload fails
 #1927 Changing language is not possible for users
 #1924 Moving items give error: Requested JSON parse failed
 #1923 Red wheel keeps turning, blocks display of new items
 #1919 Upgrade to release 2.1.27.8 converts encrypted database password back to clear-text
 #1915 Cannot Edit or Delete items in the Personal folder
 #1909 Roles Management - Problem with acess rights "Edit" "Delete"
 #1903 SSH Password Change does not work
 #1900 Forgot your password --> Page reload automatic
 #1891 Install error - Uncaught Defuse\\Crypto\\Exception\\BadFormatException: Encoded data is shorter than expected
 #1899 Active Directory authentication not working on fresh installed Cent OS 7
 #1890 access rights in manage roles
 #1888 Export to CVS --> empty file (0 kb)
 #1886 JSON Error when importing with an apostrophe (‘)
 #1885 Undefined index: SSL_SERVER_CERT
 #1884 Cannot delete custom fields - hangs indefinitely after confirm with spinning gear
 #1882 Can't see any entry on any folder, using any account
 #1881 Doesn't auto-delete install/ folder after installation completed
 #1880 Custom Fields, Not encrypted/decrypted when toggled in Custom-Field Settings Screen
 #1872 New Admin User login not working -JSON Parse file failure
 #1870 Logic issue in headers sending
 #1866 CSV import with empty url leads to value 0
 #1862 Import from Keepass.xml to Personalfolder no access to Item
 #1857 API: Folders created at level 0 instead of correct level
 #1856 Robustified tp.config.php creation in case of upgrade
 #1851 Fix ldap suffix
 #1850 Missing iconv in Docker
 #1840 Added the "download" attribute
 #1837 JSON error in Find page when user has no folders to browse
 #1834 Typo in sources/main.functions.php
 #1833 Opening a one time view page give a notice: A session had already been started...
 #1830 Salt key field has already a character filled in.
 #1829 Attachments is broken after upgrade from 2.1.27.0. Fix in progress
 #1828 No error message when duplicate item names at personal keys
 #1826 New dockerfile and docker-compose.yml
 #1820 group vertical scroll bar not work correctly
 #1819 Fix for QR sending from login page

 6-7/
 Fix: upgrade process with encrypted attachments
 Fix for #1806

 5/
 New: Custom Fields are only visible if defined
 Fix issue in tree if subfolder is visible while parent is not
 Fix issues regarding DUOSecurity
 Fix upgrade doesn't start in case that sk.php file has moved
 Fix for Custom Fields not displayed as defined by `order` field
 #1796 Can't add folder from API
 #1787 email notifications are not sent if there are any admins with empty email address
 #1776 Allow restricting items to users and roles - Wrong Item Owner
 #1775 Can not decrypt a created crypted Backup - Improved encryption with Defuse
 #1774 Announce this Item by email
 #1769 Installation issue - no admin account is created
 #1762 Share user rights works backwards
 #1761 Reset of my Personal Saltkey
 #1743 Enable anonymous LDAP queries
 #1690 Unable to set/save personal salt key with LDAP user

 3-4/
 New: Multiselection in Roles vs Folders matrix
 New: LDAP configuration test mode (in progress)
 Fix: Prevent moving a folder to one of its child folder
 Fix: Global saltkey change
 Fix: Copy folder does'nt copy included items
 Fix: Encrypt/Decrypt attachments feature from admin page
 Fix: SQL injection corrected in users.queries.php (author: Pang@ADLab of Venustech)
 #1742 Fix for issue #1539 verifying LDAP groups properly
 #1740 Missing buttons on Users page
 #1737 Cannot import files
 #1735 Dockerfile - PHP extension "curl" is loaded Extension curl is not loaded
 #1733 Copy Item doesn't work if copy from public to public folders
 #1731 Cannot login in after fresh install
 #1729 Protection against bigger data than database field size
 #1727 Cannot edit or delete entry in the Personal folder

 2/
 Secure fixes
 Session increase time feature is now increasing with the expected user session duration
 Default language cannot be changed fix
 Fix for "hide not accessible folders" option
 #1725 Some fixes
 #1723 Fix spin not removed while reseting user saltkey
 #1722 SELinux issue leads to upload impossible
 #1718 Moving a folder to itself
 #1717 After deleting a folder, items are still visible in search page
 #1713 Doubleclick on directory shows items twice
 #1710 Error on psk change
 #1709 Missing field in table on fresh install
 #1707 "Restricted To" not working correctly when creating new items
 #1706 User can edit & delete items without rights
 #1696 Fix for no log for OTV
 #1695 Manager can create folder at root from Items pas
 #1686 Fix for item History dialogbox
 #1685 Fix in Portuguese file
 #1684 Estonian language still missing
 #1679 Sort by don't work in Utilities/logs
 #1676 Pre-auth XSS in index.php
 #1674 name and lastname are changed on other user edit
 #1672 Anonymous settings not stored
 #1670 Incremental upgrade not active
 #1669 Logout - Errors
 #1668 File encryption is not correct in case of upgrade
 #1666 Can`t set avatar
 #1662 Can not delete folders
 #1659 Third level of sub folders in the Personal folder are not seen
 #1654 User management page - no "next" button

 2/
 New   Defuse Encryption implemented in place of phpCrypt
 NEW   AGSES authentication implemented
 NEW   Custom Fields data can be encrytped or not in database
 NEW   Folder copy feature
 NEW   Mass move or delete operation on Items
 NEW   Item change proposal
 IMP   Implemented new session encryption library SecureHandler (getting rid of mcrypt extension)
 IMP   Language selection is now in User Profile (Default language is used on authentication page)
 IMP   User creation dialogbox improved with all user properties
 IMP   New user login availability is checked "live"
 IMP   Filtering counters in datatables
 IMP   Users Management dialogbox improved
 IMP   2FA authentication change to improve security (no call to external QR generator)
 UPD   AES library updated
 FIX   "Find" feature:
       - copy from public to personal folder
       - list of folders is refreshed when copying an Item
 #     Copy folders
 #1635 New folder inheritance of parent specific settings
 #1631 Error could be appear on upgrade when checking folders and files
 #1628 URL link to specific item does not work
 #1627 Improved label preview length
 #1625 Request to add/change password
 #1624 Error 500 while importing item with API (with PHP < 7)
 #1621 New option: OTV can be disabled
 #     New option: create Item without password
 #1620 Direct copy password from seach results and large folders
 #1616 Cannot show password with IE11
 #1614 Generate personal folders sets regular root folders also as personal
 #1608 All folders are deleted
 #1603 Attached files disappears
 #1601 Time zone can't be saved in My Profile
 #1593 Insert duplicate label with API
 #1592 Show Client IP in mail to admin about logged on users
 #1588 Fix for OTV links
 #1587 fix for e-mail to administrator on logon does not work
 #1581 Fix for new folder Custom Fields inheritance
 #1579 Fix for preventing a php fatal error
 #1575 Fix for tree not loaded when user has no access to a folder with children
 #1571 Drag and drop from PF to public folder makes item password corrupted
 #1571 Create an item inside another folder than the one selected
 #1561 Personal folder deletion deletes all
 #1559 API IP Whitelist check does not consider XFF
 #1556 Fix bug for upgrading old passwords
 #1553 LDAP support - Add LDAP port - Add support multi LDAP server
 #1551 Authentication through LDAP posix-search
 #1550 2 Factor enabled but can still log in without code
 #1549 Read Only users can use Personal Folders
 #1543 Wrong Saltkey message after setting
 #1533 The change of the main SALT Key doesn't work
 #1532 Added error message in install.js if db-pw contains double quotes
 #1531 Database otv table originator field should be int instead of tinyint
 #1514 User language selection is done in Profile dialogbox
 #1474 New option: create an item without password
 #1472 "folder access" and "role" settings when adding new user + propage rights from one user
 #1464 CSV files broken, html entities not decoded, newlines not stripped
 #1422 Folders deletion protocol has been securized to prevent unconsistencies in folders tree
 #1412 New option: Manager can move items they can view
 #1408 Display folders visible by a user
 #1299 Export to pdf or csv shows htmlencoded

2.1.26
 #1537 Homepage not loading in French
 #1527 Error Field 'timestamp' doesn't have a default value
 #1526 New .htaccess file in ./includes/config
 #1525 Bad encoding in previous used passwords list
 #1515 Cannot add new users if similar user name exists
 #1512 Long folder names break UI
 #1511 Fix on LDAP due to library upgrade
 #1510 During upgrade, clean personal_folder field in DB
 #1504 Error while creating a new user with API
 #1494 csrfp.config.php not updated on URL change
 #1491 Added check against only numeric folder name
 #1489 JSON error on quick search if no folder access
 #1497 Nothing happens when clicking "Remove orphan items from database"
 #1375 Symbol < breaks password in One Time View page
 #1481 Query error
 #1476 Fix personal folder update script for
 #1463 PDF Export still broken
 #1454 API outputs deleted passwords
 #1453 API should have function "userpw"
 #1452 API should also output the url to each password
 #1457 New email address not used until logoff & logon
 #1450 Purge log feature - purges nothing
 #1449 Delete category hangs UI and crashes PHP
 #1448 admin delete removed password multiple select not working
 #1445 Password label doesn't preserve '\' character
 #1439 Fix for large files upload
 #1438 Sanitize ampersand to URL encoding in csrfp.config
 #1426 Fixes for many critical issues with OTV
 #1421 Item will not be automatically deleted when accessed through otv option enabled
 #1415 Installation Issue and PDF export password field mask
       Fixed problem for user to change self password
       Fixed problem for deleting all directories
 #1414 Subfolders created into personal folders are presented in Folders and Roles management
 #1409 Updated PDF library to fit 7.x PHP
 #1407 Remove Save button in 2FA settings tab
 #1402 User can define his timezone
 #1395 Error with Chrome while upgrading
 #1394 Replace ascii characters in cpliboard copy
 #1392 Corrected sql error while restoring database
 #1389 Requested JSON parse failed when copying item
 #1386 JSON parse failed (history item view)
 #1384 SyntaxError: Invalid Character if Syslog enabled
 #1383 Export to PDF - Incorrect formatting
 #1381 LDAP user have unlimited access on first logon
 #1380 CSV or KeePass Import - Title as "0"
 #1378 JSON parse error when changing user password (with several roles)
 #1369 Cannot save some settings
 #1361 Duo prevents the ability to add/edit items
 #1353 Add ldap_start_tls if set
 #1346 On upgrade settings.php not found
 #1345 Admin, password change and logoff not working
 #1344 Wrap all non-GROUP BY columns in an aggregate function (MIN)
 #1342 Change my password screen loop
 #1340 Upgrade process last step
 #1335 This page doesn't exist
 #1328 Minimum password complexity for folders and items
 #1334 Fix "installation related pages" dead link
 #1333 Fix LDAP search base input
 #1332 API not allowing roles separation of pipe '|'
 #1326 Fixed LDAP functionality
 #1325 updated Dockerfile
 #1310 Addes Estonian language
 #1309 error while loading folders (if simplify tree option enabled)
 #1308 Teampass hangs when a folder is create with option "New sub-folder inherits rights from parent folder" enabled
 #1301 add ldap_search_base record for db init
 #1300 After 3 bad login attempts, user needs to wait 10s before new try
 #1299 Export to pdf or csv shows htmlencoded
 #1298 Backup-filename on 2.1.27 contains /
 #1292 SyntaxError: JSON.parse: unexpected character at line 1 column 1 of the JSON data
 #1284 fix for can_manage_all_users update during upgrade
 #1279 SyntaxError: Unexpected token î in JSON at position 0
 #1278 CSRFProtector protection while restoring a backup file
 #1276 MySQL 5.7 query error
 #1269 Typo error
 #1263 Error at line 75 in suggestion page
 #1251 Improving CSRFP configuration
 #1240 Security fixes on some missed queries and on non-protected text fields
 #1241 OTV visible more than one time
 #1238 Fix for upgrade.php where mysql_result() command were still not replaced
 #1235 Import from Keepass: missing items with the same title
 #1229 CSRFProtector message while DUO is enabled
 #1225 Unable to Access OTV Link
 #1224 Fixed errors in export_to_html_format
 #1211 No FA code sent from home page
 #1210 Fix for main.queries.php
 #1206 Fix for importing files
 #1203 Needed PHP extensions check during install & update process
 #1197 Awesome Font 4.5.0
 #1193 When I login with user admin " loading ... " and it does not finish
 #1192 Cannot save "enable attachments encryption"
 #1188 Implemented proposals for source code improvement
 #1186 open/highlight folder tree of displayed item
 #1183 Syntax Error on personal folders option
 #1181 403 Access Forbidden by CSRFProtector! at config save
 #1178 New user right added for managing all users (super Manager)
 #1174 Adding LDAP groups support to 'posix-search' LDAP auth
 #1172 Complete number of Items displayed in Tree
 #1158 Admin password cannot be changed
 #910  Backslashes in accounts are not copied to clipboard
 #268  Password recovery "Forgot your password?" don't do anything
 NEW: Server user password change through SSH connection
 NEW: Upgrade database handler improved for better upgrades management
 NEW: New user right added for managing all users (super Manager)
 FIX: If expiration engaged and password is changed, the warning is still present.
 FIX: New suggestion folder could remain empty in some specific cases.
 FIX: By creating a role, this new one is directly visible by creator.
 FIX: Security issue with downloadFile.php. Now protected by session and htaccess.
 FIX: QRCode is not visible in Users list
 FIX: Display inconsistancies in User log results
 Fix: Inconsistency in Delete & Restore process
 Fix: Errors in CSV import process
 Fix: Impossible to proceed with 'password lost' process
 Fix: OTV item not reachable
 Analyzed with RIPS (https://www.ripstech.com/) against security bugs

2.1.25
 #1169 sending Google Authenticator code through index page
 #1160 hiding user password change option if DUOSecurity
 #1152 Error while saving settings
 #1149 log failed user authentication
 #1148 Answer from Server cannot be parsed!
 #1147 Mask/Display password not logged
 #1146 Roles on separate pages
 #1144 Login failure gives odd error
 #1143 import csv double quotes issue
 #1141 Syslog
 #1140 Security fix for Multiple vulnerabilities
 #1135 DataTables warning : table id=t_users - Invalid JSON Response
 #1128 Requested Json Parse Failed
 #1123 No Item to show in a folder after upgrading
 #1122 When deleting an item, confirmation modal doesn't show the name of the item to be deleted
 #1120 Not connect.n Verify Network
 #1114 Cannot Delete Favorites Due to "undefined function prefix_table() "
 #1108 Table teampass_keys missing!
 #1103 omplexity Matches new password but still claims otherwise
 #1102 Users cannot create folders
 #1096 One time link view problem
 #1095 Move Personal folder to Group Folder
 #1086 "Error Encryption of the Password" after update
 #1078 Send events to syslog
 Fix for changing SaltKey in admin page
 Fix for complete list of Roles in Admin Roles page
 Fix for Users and Items currently edited list that were not proposing "next" button
 Fix for label “By clicking the save button, you will delete ….” persistent
 Fix for list loaded twice if double click in Tree folder
 Fix for search result not displayed if previous folder was empty
 Fix for possible sql injection via LIMIT parameters
 Fix on profile dialogbox
 Implemented Deletion and Restoration events in item's History
 Implemented better handling of User role selection
 Implemented multi personal folders
 Implemented CSRFP library usage for security purpose
 Implemented new "Yes/No" button in settings page
 Implemented log view for failed authentication
 Implemented Tree sequentially load (via ajax)
 Add new item from API (for teampass-connect) (not yet tested)

2.1.24
 #1090 - Fix for Export to PDF last folder not taken into consideration
 #1088 - #1085 - Password show problem
 #1087 - Managers can edit and delete Items they are allowed to see flag
 #1085 - Fix for copy to clipboard that sometime fails to work correctly
 #1073 - User can create folder on root without permission
 #1074 - Read only user can create folders + wipe out all items on remove folder
 #1069 - Knowledge Base can not change page
 #1068 - personal saltkey not saved
 #1067 - Suggestion feature not working
 #1064 - Record in db are not deleted when you delete in GUI
 #1058 - Fix API issue while adding an item
 #1063 - Fix for Forgot password not working
 #1062 - Warning for hex2bin function usage (PHP>5.4)
 #1061 - for for Can not import password from keepass xml
 #1055 - Personal item cannot be deleted
 #1048 - Encryption error flag is visible for no reason
 #1045 - Missing fields in table (pw_iv and data_iv)
 #1042 - Added pagination in Users page
 #1042 - Pagination on Users Page
 #1060 - Added new logging events (password copied, password shown)
 #1041 - "Forgot your password?" not working
 #1027 - User right more refined with "No deletion" possible right
 #953 - Make sure to rebuild the tree when creating an user with a personal folder
 #1035 - added php-xml install check
 #950 - #1005 - can not create Admin account
 #936 - #937 - Session file_exists not allowed while running through open_basedir restriction
 #970 - API special char fix
 #962 - Error message when using the Find-function
 #955 - Fix LDAP Settings UI
 Fix passwords are empty when importing from Keepass
 Fix empty URL column in off-line html
 A lot of small fixes
 New: implemented 2factor authentication DUOSecurity feature
 New: create User via API
 New: Vietnamese language added
 New: Tree structure is loaded dynamically
 New: Notification to Managers for awaiting suggestions

 2.1.23
 #727 - #729 - Encoding problem
 #799 - Error: Field 'field_1' doesn't have a default value
 #830 - Fix documentation syntax
 #829 - Removing unecessary php closing tags
 #807 - Fix rights based on roles for new folders
 #808 - Add a SMTP security parameter to the email configuration
 #805 - Keepass Import improvements
 #790 - Install fixes
 #835 - Links in items description don't work
 #817 - Wrong number of users online
 #838 - Fix for mysqli encoding
 #839 - Keepass fixes
 #853 - New setting for default session expiration delay
 #851 - Multiple fixes for LDAP integration
 #814 - #857
 #880 - Fix for View logs error redeclared function getBits
 #881 - Fix for "Forgot your password?" not working
 #900 - Fix for New folder incorrect permissions (read-only)
 #890 - Fix for Personal Folder only read permission
 #910 - Fix for Backslashes in accounts are not copied to clipboard
 #913 - Fix for 'Announce this item by email' fails
 #915 - Export to PDF corrected
 #907 - Move folder feature
 #917 - Fix on API
 #941 - Fix for user_not_exists message (LDAP)
 #988 - Error on copy item
 #992 - Added to Log User Created By
 PR : #871 - #887
 API: add FIND feature
 Fix: copy not possible in RO folders
 Fix: If GA activated, Users can ask for a new code from the login page
 Fix: Off-line file url was not correct in download button
 Removal of Keys table
 Implementation of PhpCrypt library as encryption library (AES-128 with CBC mode)
 Implementation of Awesomefont in Items page
 Clean up of old comments
 Added "long press" to show password
 Fix of bug in Offline export
 List of Users is now loaded through Ajax to prevent timeout in case of long list of users
 Personal saltkey change is now performed through Ajax to prevent timeout in case of long list of passwords
 Fix for users with "Allowed folders" that can't write inside them.
 Removed extra files from Yubico folder
 Update process: suggestions passwords are reencrypted
 Suggestion migrated to new encryption

2.1.22
 #700 - Errors related to "includes/js/jstree/themes/default"
 #718 - Two factor authentication: "This user has no email set!"
 #674 - API - User rights
 #697 - Default language setting, not being applied to automatically created ldap users.
 #698 - Default language setting, not being applied to newly created users.
 #707 - httpRequest is missing in upgrade process
 #725 - Disable button after item creation or edition
 #720 - cannot sign up to 2factor
 #690 - limit password export via PDF/CSV to user/group
 #745 - Enable again save_button after error on Add/Edit Item
 #739 - OTV correction
 #731 - Export password to file
 #653 - Passwords preprended during upgrade
 #767 - Backup restore feature fix
 #774 - Call to undefined method DB::queryInsert
 Other: #711 - #699 - #726 - #744 - #684 - #737
 New - Rights "Read / Write / No Access" added to folders for better rights management
 New - quick copy to clipboard for password and login
 New - New option : Prevent against duplicate items in same folder
 New - If folder is read-only for the User then it is striked-through
 Changed - list of restricted users refined by folder selected
 Fix - Not possible to see more than 8 Roles in Roles matrix

2.1.21
 #597 - Rapid click on save button on "Add a folder"
 #599 - SQL:AUTO_INCREMENT id --> language
 #600 - preg_replace(): Unknown modifier '|'
 #598 - Extra fields in home page
 #602 - can't change user password by very heavy complexity
 #603 - password complexity check only in javascript
 #415 - Items are not show when in folder view. Can easy search and open.
 #578 - API generate new key
 #580 - Redirect to login page when accessing directly an item (if not logged)
 #576 - Mismatch email_body tags
 #607 - HMTL export erroneous download link
 #622 - Tooltip on left menu buttons
 #619 - CSV Import does not import passwords
 #617 - CSV Import doesn't handle passwords with quotes well
 #627 - Complete authentication bypass
 #626 - API vulnerable (improvement in progress)
 #633 - favicon correction
 #636 - MySQL on non-standard port
 #632 - Refactor order of index.php
 #629 - A password for admin account is required during installation
 #654 - Tab character breaks json format
 #652 - one-time view not working when interface is in French
 #658 - Rapid Click on Item Copy
 #657 - Rapid Click on Password Creation
 #656 - Can't Create Folder as User
 #643 - email charset in UTF-8
 #641 - Add and save item -> double click on that icon won't work
 #671 - When password is generated, it is added in confirm field too
 #672 - Changing password makes account inaccessible
 #637 - Multi Domain LDAP
 #673 - Changed strategy for quick icon clipboard copy
 #639 - Design fix in admin page
 #681 - Fix for Folder and Users creation as Administrator
 #680 - Set custom expiry for one time view link
 #682 - Fix SMTP authentication which were used regardless of the settings
      - Fix a query used in the "lost password" management.
      - Fix the mysql error message when the session_expired page is accesseded...
 - New option permitting to send or not an email to User when admin changes his password
 - Fix for image viewer when option files encryption is set
 - Fix for password complexity level update

2.1.20
 #492 - Default admin password not working
 #509 - Password complexity
 #493 - Unable to purge logs
 #503 - manual insertions in Items History log not working
 #494 - Logs > Administration JSON error
 #491 - Applying email address to user
 #441 - Attachments encryption
 #459 - Turn off strict mode
 #477-#452 - Fix for upgrade
 #459 - Turn off strict mode
 #472 - Error on line 582 index.php
 #474 - Set default to checked for secure passwords
 #497 - Moved GA QR code creation to administration
 #487 - Off-line mode, link make the page scroll up
 #533 #521 #528 - Installation issue
 #525 - Settings.php should not be commited
 #527 - Potential security bug
 #485 - CVS Import on V 2.1.19 quotes problems
 #544 - DataTables warning: JSON data from server could not be parsed
 #547 - User search
 #520 - API access
 #549 #550 - Server Time in footer
 #539 - New feature: Simplify Items Tree
 #547 - Search in Users page
 #401 - Folder role inheretance on new folder
 #552 - added MBstring check
 #554 - Search-Page "Jump to item"-Button not working correctly
 Fork from slimm609 - Encrypted Sessions and CSRFGuard enabled
 Issues with folder creation in "personal folder"
 #536 - one time view page for anonymous user
 #517 - New feature: Suggest items system
 New feature: Sub-folder inherits of parent folder

2.1.19
 #413 - fix for PHP Parse error: syntax error, unexpected '['
 #447 - fix for PHP Fatal error: Cannot redeclare getBits()
 #442 - problem edit folder
 #399 - Export encrypted passwords (off-line mode)
 #408 - Personal Salt Key changing doesn't work
 #419 - Password complexity not refreshed
 #418 - English translation improvement
 #407 - "Restricted to" feature improvement
 #402 - In item list, description is cut with <br />
 #393 - Password input and confirmation field location
 #388 - Unable to move items between folders
 #400 - Extra fields for Item
 #414 - Maintenance mode during upgrade can be disabled
 #389 - Language dropdown not working
 #392 - Check of absolute path for SK.PHP
 #385 - Email not sent ... check your configuration (to be checked)
 #379 - CSV importing not working (to be checked)
 #134 - Login After Session Expires
 #429 - Changed user.psk field to allow NULLs
 #428 : error: iconv(): Detected an illegal character in input string
 #426/#430 : New option to disable information loading in Admin page
 #142 - Google Authenticator implemented
 * Dialogbox not closed when changing folder name
 * Display Item details through Find page error

2.1.18
 #315 - jstree style.css badly referenced
 #314 - Folder is not being deleted
 #320 - Enabling LDAP prevents local admin login
 #317 - server expected extensions are tested
 #318 - Upgrade process badly creates sk.php file
 #348 - Fix for undefined index "isAdministratedByRole"
 #350 - Fix for Lock and delete user actions don't refresh page
 #354 - Fix for removing folders
 #359 - Fix for initial user password change complexity check
 #371 - Fix for uploaded files corrupted
 #291 - Fix to support openLDAP / posix style LDAP
 #361 - Option to use login password as SALT key
 * Fix - no possibility to update a Role
 * Fix - editing users by clicking on the fields broken
 * Fix - parse error in database errors log
 * New - requested user password complexity shown when changing password
 * New - option for deactivate client-server encryption (usage of SSL)
 * New - in tree, new counters added (subfolders and items in subfolders numbers)
 * New language added - Catalan

2.1.17
 * New exchange encryption protocol. No key is visible. The channel is
 encrypted at start of session.
 * HTTPS connection can be activated (be carefull, you need a certificate)
 * Change Users passwords encryption
 * Corrected - once clicked on not authorized Item, any Item selection was
 no more possible.
 #283 - Rights on a folder created at root are set.
 #285 - New settings: Anyone can modify option can be activated by default
 #287 - newly created personal folders ar propergated to the group
 #289 - Personal folder name badly constructed
 #270 - Restricted items visible in Find results
 #298 - Protection against bad actions on personal folders
 #299 - User can be explicetly administrated by Managers of specific Roles
 #300 - Personal SK is encrypted in COOKIE
 #301 - Corrected query call error
 #302 - Under "Views" users can see items that exist in personal folders
 that have been accessed
 #307 - fclose() statement badly placed

2.1.16
 * #245 - #248 - #249 - #265 - #266 - #267 - #268 - #273
 * #277: Change personal saltkey error

2.1.15
 * list of bugs corrected: #242 - #254 - #244 - #247 - #256 - #250 - #254 - #248
   #243 - #252 - #232 - #240 - #260 - #259 - #262 - #251 - #236
 * MySQL hashing => todo
 * CSV importation

2.1.14
 * list of bugs corrected: #238 - #235 - #239 - #203 - #201 - #233 - #226 - #236
   #228 - #189 - #234 - #225 - #239 - #194 - #86
 * Corrected bug for sending emails
 * Different small corrections

2.1.13
 * Code improvement for PSR compliance
 * jQueryUI updated to v1.9
 * Cleanup unused files
 * #207: Managers can only see the Roles they are allowed to.
 * #190, #192, #199, #202, #196, #204, #191, #214 corrected
 * Correction: taking into account user "can create at root level" setting
 * Added: saltkey is exported in a unique file that should be moved outside
   "www" server scope.
 * Added: 2-factors authentication
 * Added: new check when Role creation
 * Added: new check for database query error
 * Added: Item in edition will lock any other edition
 * Added: New administrator View permitting to view "Users actually connected"
   and "Tokens taken for Items in edition"
 * Added: User account contains now Name and Last Name fields

2.1.12
 * #188
 * #185 Started adjusting codebase to follow PSR 1 and PSR 2 based on ecaron
 		work (thank you)

2.1.11
 * #184 - bug correction

2.1.10
 * #161 - #100 - #175
 * #163 Personal saltkey duration based on cookie (under option)
 * share item -> manage error when email not sent
 * Improved/corrected export CSV and PDF
 * Correction: During upgrade, languages table is wrong
 * Personal Saltkey is stored in cookie (new admin setting)
 * Emails settings are moved to admin settings page (no more in settings.php)
 * Files folder is now a setting (to improve security)
 * Exported PDF is encrypted (contributor: Jay2k1)
 * #168 Add description field in PDF
 * #174 User creation and modification log

2.1.9
 * #126-#132-#130-#131-#139-#129-#141-#146
 * Italian translation
 * Find page - focus in search box (contributor: Jay2k1)

2.1.8
 * SF 206
 * #107-#95-#102-#103-#67-#32-#87-#71-#125-#120-#116-#111-#108-#104-#90-
   #85-#78-#48-#34-#67-#75-#82-#84
 * bug correction cache table
 * view Item details from the Find page
 * CSV export  -> started
 * mail notification when selecting an item
 * share Item by mail
 * add email field in Item form
 * automatic deletion of Item after X opening or after limit date
 * Roles / Folders matrix: Roles passwords complexity shown

2.1.7
 * SF 247 - 248 - 261 - 264 - 265 - 266 - 267
 * 67:	protect uploadify library => different file protection added
 * protect Downloadfile.php
 * SF228: reset personal saltkey (purge personal items)
 * SF262: copy of item is in log
 * old password in log was badly encoded
 * item copy from search page corrected
 * some rights checks added before action
 * email send to new created user

2.1.6
 * #59: settings.php email setting errors
 * #67: Protected upload file
 * added email notification for user requiering an access to a restricted item.
 * 264:	Feature Request: Password History

2.1.5
* #56: Temporary solution for keeping old ADMIN profile rights

2.1.4
* Corrections: SF237, SF240, SF243 , #29, #25,  #32 , #36 , #37 , #39 , #40
	SF257, SF259, SF239, #41, #40, #51
* Improvements:
	SF232
	SF231:	How to Restrict Admin from Viewing items
	#31: new setting option for dynamic list
	#27: new subfolders only associated to the same roles as the parent folder
	#33: folder management in items page
	Changing SALT key from admin pages

2.1.3
* upgrade improvement in case of upgrading from 1.x version.

2.1.2
* improved upgrade connection errors and automatic credentials import
* Corrections: #4, #7, 236

v2.1.1
* 2 bugs correction

v2.1
* Licence has changed to GNU AFFERO GPL 3.0
* 203 - password complexity on Roles
* 121 - Default language can be set + user language stored in DB
* Encrypt old passwords in LOG_ITEMS table
* started CRON activity for emails sending
* new option: send email to Admins when users get connected
* "Restricted to" field not viewable to everyone
* add an icon for hide/show passwords in clear text (toggle button)


Fixed version (ground truth):
2.1.27
 9/
 Fixed a possible XSS (credit to ADLab of Venustech)
 Improved security related to User Management
 	> a manager could potentially act on users not related to him
 Improved security related to Items Management
 	> a user could potentially act on Items he should not have access to
 Securized script.backup.php by adding a security key
 Fixed some other security failures (credit to ​security at Amossys)
 Improved security regarding uploading files
 Fixed issue while restoring DB from administration page
 #1945 Cannot delete items
 #1944 File upload results in error
 #1941 Visualisation problems

 8/
 Delete install folders and files during installation process
 Custom Field value can be masked
 Database password is encrypted in settings.php file
 PHPMailer library updated to 5.2.23
 TwoFactorAuth library was updated
 Configuration variables are not set in SESSION anymore. Now read from tp.config.php file.
 Fix: issue on offline export
 Fix: error on deleting a folder at root
 #1939 Unable to change page (role management)
 #1937 Error while using script.backup.php in standalone
 #1935 Add folder results in Requested JSON parse failed
 #1933 Trying to move folder results in error message
 #1932 Keepass upload fails
 #1927 Changing language is not possible for users
 #1924 Moving items give error: Requested JSON parse failed
 #1923 Red wheel keeps turning, blocks display of new items
 #1919 Upgrade to release 2.1.27.8 converts encrypted database password back to clear-text
 #1915 Cannot Edit or Delete items in the Personal folder
 #1909 Roles Management - Problem with acess rights "Edit" "Delete"
 #1903 SSH Password Change does not work
 #1900 Forgot your password --> Page reload automatic
 #1891 Install error - Uncaught Defuse\\Crypto\\Exception\\BadFormatException: Encoded data is shorter than expected
 #1899 Active Directory authentication not working on fresh installed Cent OS 7
 #1890 access rights in manage roles
 #1888 Export to CVS --> empty file (0 kb)
 #1886 JSON Error when importing with an apostrophe (‘)
 #1885 Undefined index: SSL_SERVER_CERT
 #1884 Cannot delete custom fields - hangs indefinitely after confirm with spinning gear
 #1882 Can't see any entry on any folder, using any account
 #1881 Doesn't auto-delete install/ folder after installation completed
 #1880 Custom Fields, Not encrypted/decrypted when toggled in Custom-Field Settings Screen
 #1872 New Admin User login not working -JSON Parse file failure
 #1870 Logic issue in headers sending
 #1866 CSV import with empty url leads to value 0
 #1862 Import from Keepass.xml to Personalfolder no access to Item
 #1857 API: Folders created at level 0 instead of correct level
 #1856 Robustified tp.config.php creation in case of upgrade
 #1851 Fix ldap suffix
 #1850 Missing iconv in Docker
 #1840 Added the "download" attribute
 #1837 JSON error in Find page when user has no folders to browse
 #1834 Typo in sources/main.functions.php
 #1833 Opening a one time view page give a notice: A session had already been started...
 #1830 Salt key field has already a character filled in.
 #1829 Attachments is broken after upgrade from 2.1.27.0. Fix in progress
 #1828 No error message when duplicate item names at personal keys
 #1826 New dockerfile and docker-compose.yml
 #1820 group vertical scroll bar not work correctly
 #1819 Fix for QR sending from login page

 6-7/
 Fix: upgrade process with encrypted attachments
 Fix for #1806

 5/
 New: Custom Fields are only visible if defined
 Fix issue in tree if subfolder is visible while parent is not
 Fix issues regarding DUOSecurity
 Fix upgrade doesn't start in case that sk.php file has moved
 Fix for Custom Fields not displayed as defined by `order` field
 #1796 Can't add folder from API
 #1787 email notifications are not sent if there are any admins with empty email address
 #1776 Allow restricting items to users and roles - Wrong Item Owner
 #1775 Can not decrypt a created crypted Backup - Improved encryption with Defuse
 #1774 Announce this Item by email
 #1769 Installation issue - no admin account is created
 #1762 Share user rights works backwards
 #1761 Reset of my Personal Saltkey
 #1743 Enable anonymous LDAP queries
 #1690 Unable to set/save personal salt key with LDAP user

 3-4/
 New: Multiselection in Roles vs Folders matrix
 New: LDAP configuration test mode (in progress)
 Fix: Prevent moving a folder to one of its child folder
 Fix: Global saltkey change
 Fix: Copy folder does'nt copy included items
 Fix: Encrypt/Decrypt attachments feature from admin page
 Fix: SQL injection corrected in users.queries.php (author: Pang@ADLab of Venustech)
 #1742 Fix for issue #1539 verifying LDAP groups properly
 #1740 Missing buttons on Users page
 #1737 Cannot import files
 #1735 Dockerfile - PHP extension "curl" is loaded Extension curl is not loaded
 #1733 Copy Item doesn't work if copy from public to public folders
 #1731 Cannot login in after fresh install
 #1729 Protection against bigger data than database field size
 #1727 Cannot edit or delete entry in the Personal folder

 2/
 Secure fixes
 Session increase time feature is now increasing with the expected user session duration
 Default language cannot be changed fix
 Fix for "hide not accessible folders" option
 #1725 Some fixes
 #1723 Fix spin not removed while reseting user saltkey
 #1722 SELinux issue leads to upload impossible
 #1718 Moving a folder to itself
 #1717 After deleting a folder, items are still visible in search page
 #1713 Doubleclick on directory shows items twice
 #1710 Error on psk change
 #1709 Missing field in table on fresh install
 #1707 "Restricted To" not working correctly when creating new items
 #1706 User can edit & delete items without rights
 #1696 Fix for no log for OTV
 #1695 Manager can create folder at root from Items pas
 #1686 Fix for item History dialogbox
 #1685 Fix in Portuguese file
 #1684 Estonian language still missing
 #1679 Sort by don't work in Utilities/logs
 #1676 Pre-auth XSS in index.php
 #1674 name and lastname are changed on other user edit
 #1672 Anonymous settings not stored
 #1670 Incremental upgrade not active
 #1669 Logout - Errors
 #1668 File encryption is not correct in case of upgrade
 #1666 Can`t set avatar
 #1662 Can not delete folders
 #1659 Third level of sub folders in the Personal folder are not seen
 #1654 User management page - no "next" button

 2/
 New   Defuse Encryption implemented in place of phpCrypt
 NEW   AGSES authentication implemented
 NEW   Custom Fields data can be encrytped or not in database
 NEW   Folder copy feature
 NEW   Mass move or delete operation on Items
 NEW   Item change proposal
 IMP   Implemented new session encryption library SecureHandler (getting rid of mcrypt extension)
 IMP   Language selection is now in User Profile (Default language is used on authentication page)
 IMP   User creation dialogbox improved with all user properties
 IMP   New user login availability is checked "live"
 IMP   Filtering counters in datatables
 IMP   Users Management dialogbox improved
 IMP   2FA authentication change to improve security (no call to external QR generator)
 UPD   AES library updated
 FIX   "Find" feature:
       - copy from public to personal folder
       - list of folders is refreshed when copying an Item
 #     Copy folders
 #1635 New folder inheritance of parent specific settings
 #1631 Error could be appear on upgrade when checking folders and files
 #1628 URL link to specific item does not work
 #1627 Improved label preview length
 #1625 Request to add/change password
 #1624 Error 500 while importing item with API (with PHP < 7)
 #1621 New option: OTV can be disabled
 #     New option: create Item without password
 #1620 Direct copy password from seach results and large folders
 #1616 Cannot show password with IE11
 #1614 Generate personal folders sets regular root folders also as personal
 #1608 All folders are deleted
 #1603 Attached files disappears
 #1601 Time zone can't be saved in My Profile
 #1593 Insert duplicate label with API
 #1592 Show Client IP in mail to admin about logged on users
 #1588 Fix for OTV links
 #1587 fix for e-mail to administrator on logon does not work
 #1581 Fix for new folder Custom Fields inheritance
 #1579 Fix for preventing a php fatal error
 #1575 Fix for tree not loaded when user has no access to a folder with children
 #1571 Drag and drop from PF to public folder makes item password corrupted
 #1571 Create an item inside another folder than the one selected
 #1561 Personal folder deletion deletes all
 #1559 API IP Whitelist check does not consider XFF
 #1556 Fix bug for upgrading old passwords
 #1553 LDAP support - Add LDAP port - Add support multi LDAP server
 #1551 Authentication through LDAP posix-search
 #1550 2 Factor enabled but can still log in without code
 #1549 Read Only users can use Personal Folders
 #1543 Wrong Saltkey message after setting
 #1533 The change of the main SALT Key doesn't work
 #1532 Added error message in install.js if db-pw contains double quotes
 #1531 Database otv table originator field should be int instead of tinyint
 #1514 User language selection is done in Profile dialogbox
 #1474 New option: create an item without password
 #1472 "folder access" and "role" settings when adding new user + propage rights from one user
 #1464 CSV files broken, html entities not decoded, newlines not stripped
 #1422 Folders deletion protocol has been securized to prevent unconsistencies in folders tree
 #1412 New option: Manager can move items they can view
 #1408 Display folders visible by a user
 #1299 Export to pdf or csv shows htmlencoded

2.1.26
 #1537 Homepage not loading in French
 #1527 Error Field 'timestamp' doesn't have a default value
 #1526 New .htaccess file in ./includes/config
 #1525 Bad encoding in previous used passwords list
 #1515 Cannot add new users if similar user name exists
 #1512 Long folder names break UI
 #1511 Fix on LDAP due to library upgrade
 #1510 During upgrade, clean personal_folder field in DB
 #1504 Error while creating a new user with API
 #1494 csrfp.config.php not updated on URL change
 #1491 Added check against only numeric folder name
 #1489 JSON error on quick search if no folder access
 #1497 Nothing happens when clicking "Remove orphan items from database"
 #1375 Symbol < breaks password in One Time View page
 #1481 Query error
 #1476 Fix personal folder update script for
 #1463 PDF Export still broken
 #1454 API outputs deleted passwords
 #1453 API should have function "userpw"
 #1452 API should also output the url to each password
 #1457 New email address not used until logoff & logon
 #1450 Purge log feature - purges nothing
 #1449 Delete category hangs UI and crashes PHP
 #1448 admin delete removed password multiple select not working
 #1445 Password label doesn't preserve '\' character
 #1439 Fix for large files upload
 #1438 Sanitize ampersand to URL encoding in csrfp.config
 #1426 Fixes for many critical issues with OTV
 #1421 Item will not be automatically deleted when accessed through otv option enabled
 #1415 Installation Issue and PDF export password field mask
       Fixed problem for user to change self password
       Fixed problem for deleting all directories
 #1414 Subfolders created into personal folders are presented in Folders and Roles management
 #1409 Updated PDF library to fit 7.x PHP
 #1407 Remove Save button in 2FA settings tab
 #1402 User can define his timezone
 #1395 Error with Chrome while upgrading
 #1394 Replace ascii characters in cpliboard copy
 #1392 Corrected sql error while restoring database
 #1389 Requested JSON parse failed when copying item
 #1386 JSON parse failed (history item view)
 #1384 SyntaxError: Invalid Character if Syslog enabled
 #1383 Export to PDF - Incorrect formatting
 #1381 LDAP user have unlimited access on first logon
 #1380 CSV or KeePass Import - Title as "0"
 #1378 JSON parse error when changing user password (with several roles)
 #1369 Cannot save some settings
 #1361 Duo prevents the ability to add/edit items
 #1353 Add ldap_start_tls if set
 #1346 On upgrade settings.php not found
 #1345 Admin, password change and logoff not working
 #1344 Wrap all non-GROUP BY columns in an aggregate function (MIN)
 #1342 Change my password screen loop
 #1340 Upgrade process last step
 #1335 This page doesn't exist
 #1328 Minimum password complexity for folders and items
 #1334 Fix "installation related pages" dead link
 #1333 Fix LDAP search base input
 #1332 API not allowing roles separation of pipe '|'
 #1326 Fixed LDAP functionality
 #1325 updated Dockerfile
 #1310 Addes Estonian language
 #1309 error while loading folders (if simplify tree option enabled)
 #1308 Teampass hangs when a folder is create with option "New sub-folder inherits rights from parent folder" enabled
 #1301 add ldap_search_base record for db init
 #1300 After 3 bad login attempts, user needs to wait 10s before new try
 #1299 Export to pdf or csv shows htmlencoded
 #1298 Backup-filename on 2.1.27 contains /
 #1292 SyntaxError: JSON.parse: unexpected character at line 1 column 1 of the JSON data
 #1284 fix for can_manage_all_users update during upgrade
 #1279 SyntaxError: Unexpected token î in JSON at position 0
 #1278 CSRFProtector protection while restoring a backup file
 #1276 MySQL 5.7 query error
 #1269 Typo error
 #1263 Error at line 75 in suggestion page
 #1251 Improving CSRFP configuration
 #1240 Security fixes on some missed queries and on non-protected text fields
 #1241 OTV visible more than one time
 #1238 Fix for upgrade.php where mysql_result() command were still not replaced
 #1235 Import from Keepass: missing items with the same title
 #1229 CSRFProtector message while DUO is enabled
 #1225 Unable to Access OTV Link
 #1224 Fixed errors in export_to_html_format
 #1211 No FA code sent from home page
 #1210 Fix for main.queries.php
 #1206 Fix for importing files
 #1203 Needed PHP extensions check during install & update process
 #1197 Awesome Font 4.5.0
 #1193 When I login with user admin " loading ... " and it does not finish
 #1192 Cannot save "enable attachments encryption"
 #1188 Implemented proposals for source code improvement
 #1186 open/highlight folder tree of displayed item
 #1183 Syntax Error on personal folders option
 #1181 403 Access Forbidden by CSRFProtector! at config save
 #1178 New user right added for managing all users (super Manager)
 #1174 Adding LDAP groups support to 'posix-search' LDAP auth
 #1172 Complete number of Items displayed in Tree
 #1158 Admin password cannot be changed
 #910  Backslashes in accounts are not copied to clipboard
 #268  Password recovery "Forgot your password?" don't do anything
 NEW: Server user password change through SSH connection
 NEW: Upgrade database handler improved for better upgrades management
 NEW: New user right added for managing all users (super Manager)
 FIX: If expiration engaged and password is changed, the warning is still present.
 FIX: New suggestion folder could remain empty in some specific cases.
 FIX: By creating a role, this new one is directly visible by creator.
 FIX: Security issue with downloadFile.php. Now protected by session and htaccess.
 FIX: QRCode is not visible in Users list
 FIX: Display inconsistancies in User log results
 Fix: Inconsistency in Delete & Restore process
 Fix: Errors in CSV import process
 Fix: Impossible to proceed with 'password lost' process
 Fix: OTV item not reachable
 Analyzed with RIPS (https://www.ripstech.com/) against security bugs

2.1.25
 #1169 sending Google Authenticator code through index page
 #1160 hiding user password change option if DUOSecurity
 #1152 Error while saving settings
 #1149 log failed user authentication
 #1148 Answer from Server cannot be parsed!
 #1147 Mask/Display password not logged
 #1146 Roles on separate pages
 #1144 Login failure gives odd error
 #1143 import csv double quotes issue
 #1141 Syslog
 #1140 Security fix for Multiple vulnerabilities
 #1135 DataTables warning : table id=t_users - Invalid JSON Response
 #1128 Requested Json Parse Failed
 #1123 No Item to show in a folder after upgrading
 #1122 When deleting an item, confirmation modal doesn't show the name of the item to be deleted
 #1120 Not connect.n Verify Network
 #1114 Cannot Delete Favorites Due to "undefined function prefix_table() "
 #1108 Table teampass_keys missing!
 #1103 omplexity Matches new password but still claims otherwise
 #1102 Users cannot create folders
 #1096 One time link view problem
 #1095 Move Personal folder to Group Folder
 #1086 "Error Encryption of the Password" after update
 #1078 Send events to syslog
 Fix for changing SaltKey in admin page
 Fix for complete list of Roles in Admin Roles page
 Fix for Users and Items currently edited list that were not proposing "next" button
 Fix for label “By clicking the save button, you will delete ….” persistent
 Fix for list loaded twice if double click in Tree folder
 Fix for search result not displayed if previous folder was empty
 Fix for possible sql injection via LIMIT parameters
 Fix on profile dialogbox
 Implemented Deletion and Restoration events in item's History
 Implemented better handling of User role selection
 Implemented multi personal folders
 Implemented CSRFP library usage for security purpose
 Implemented new "Yes/No" button in settings page
 Implemented log view for failed authentication
 Implemented Tree sequentially load (via ajax)
 Add new item from API (for teampass-connect) (not yet tested)

2.1.24
 #1090 - Fix for Export to PDF last folder not taken into consideration
 #1088 - #1085 - Password show problem
 #1087 - Managers can edit and delete Items they are allowed to see flag
 #1085 - Fix for copy to clipboard that sometime fails to work correctly
 #1073 - User can create folder on root without permission
 #1074 - Read only user can create folders + wipe out all items on remove folder
 #1069 - Knowledge Base can not change page
 #1068 - personal saltkey not saved
 #1067 - Suggestion feature not working
 #1064 - Record in db are not deleted when you delete in GUI
 #1058 - Fix API issue while adding an item
 #1063 - Fix for Forgot password not working
 #1062 - Warning for hex2bin function usage (PHP>5.4)
 #1061 - for for Can not import password from keepass xml
 #1055 - Personal item cannot be deleted
 #1048 - Encryption error flag is visible for no reason
 #1045 - Missing fields in table (pw_iv and data_iv)
 #1042 - Added pagination in Users page
 #1042 - Pagination on Users Page
 #1060 - Added new logging events (password copied, password shown)
 #1041 - "Forgot your password?" not working
 #1027 - User right more refined with "No deletion" possible right
 #953 - Make sure to rebuild the tree when creating an user with a personal folder
 #1035 - added php-xml install check
 #950 - #1005 - can not create Admin account
 #936 - #937 - Session file_exists not allowed while running through open_basedir restriction
 #970 - API special char fix
 #962 - Error message when using the Find-function
 #955 - Fix LDAP Settings UI
 Fix passwords are empty when importing from Keepass
 Fix empty URL column in off-line html
 A lot of small fixes
 New: implemented 2factor authentication DUOSecurity feature
 New: create User via API
 New: Vietnamese language added
 New: Tree structure is loaded dynamically
 New: Notification to Managers for awaiting suggestions

 2.1.23
 #727 - #729 - Encoding problem
 #799 - Error: Field 'field_1' doesn't have a default value
 #830 - Fix documentation syntax
 #829 - Removing unecessary php closing tags
 #807 - Fix rights based on roles for new folders
 #808 - Add a SMTP security parameter to the email configuration
 #805 - Keepass Import improvements
 #790 - Install fixes
 #835 - Links in items description don't work
 #817 - Wrong number of users online
 #838 - Fix for mysqli encoding
 #839 - Keepass fixes
 #853 - New setting for default session expiration delay
 #851 - Multiple fixes for LDAP integration
 #814 - #857
 #880 - Fix for View logs error redeclared function getBits
 #881 - Fix for "Forgot your password?" not working
 #900 - Fix for New folder incorrect permissions (read-only)
 #890 - Fix for Personal Folder only read permission
 #910 - Fix for Backslashes in accounts are not copied to clipboard
 #913 - Fix for 'Announce this item by email' fails
 #915 - Export to PDF corrected
 #907 - Move folder feature
 #917 - Fix on API
 #941 - Fix for user_not_exists message (LDAP)
 #988 - Error on copy item
 #992 - Added to Log User Created By
 PR : #871 - #887
 API: add FIND feature
 Fix: copy not possible in RO folders
 Fix: If GA activated, Users can ask for a new code from the login page
 Fix: Off-line file url was not correct in download button
 Removal of Keys table
 Implementation of PhpCrypt library as encryption library (AES-128 with CBC mode)
 Implementation of Awesomefont in Items page
 Clean up of old comments
 Added "long press" to show password
 Fix of bug in Offline export
 List of Users is now loaded through Ajax to prevent timeout in case of long list of users
 Personal saltkey change is now performed through Ajax to prevent timeout in case of long list of passwords
 Fix for users with "Allowed folders" that can't write inside them.
 Removed extra files from Yubico folder
 Update process: suggestions passwords are reencrypted
 Suggestion migrated to new encryption

2.1.22
 #700 - Errors related to "includes/js/jstree/themes/default"
 #718 - Two factor authentication: "This user has no email set!"
 #674 - API - User rights
 #697 - Default language setting, not being applied to automatically created ldap users.
 #698 - Default language setting, not being applied to newly created users.
 #707 - httpRequest is missing in upgrade process
 #725 - Disable button after item creation or edition
 #720 - cannot sign up to 2factor
 #690 - limit password export via PDF/CSV to user/group
 #745 - Enable again save_button after error on Add/Edit Item
 #739 - OTV correction
 #731 - Export password to file
 #653 - Passwords preprended during upgrade
 #767 - Backup restore feature fix
 #774 - Call to undefined method DB::queryInsert
 Other: #711 - #699 - #726 - #744 - #684 - #737
 New - Rights "Read / Write / No Access" added to folders for better rights management
 New - quick copy to clipboard for password and login
 New - New option : Prevent against duplicate items in same folder
 New - If folder is read-only for the User then it is striked-through
 Changed - list of restricted users refined by folder selected
 Fix - Not possible to see more than 8 Roles in Roles matrix

2.1.21
 #597 - Rapid click on save button on "Add a folder"
 #599 - SQL:AUTO_INCREMENT id --> language
 #600 - preg_replace(): Unknown modifier '|'
 #598 - Extra fields in home page
 #602 - can't change user password by very heavy complexity
 #603 - password complexity check only in javascript
 #415 - Items are not show when in folder view. Can easy search and open.
 #578 - API generate new key
 #580 - Redirect to login page when accessing directly an item (if not logged)
 #576 - Mismatch email_body tags
 #607 - HMTL export erroneous download link
 #622 - Tooltip on left menu buttons
 #619 - CSV Import does not import passwords
 #617 - CSV Import doesn't handle passwords with quotes well
 #627 - Complete authentication bypass
 #626 - API vulnerable (improvement in progress)
 #633 - favicon correction
 #636 - MySQL on non-standard port
 #632 - Refactor order of index.php
 #629 - A password for admin account is required during installation
 #654 - Tab character breaks json format
 #652 - one-time view not working when interface is in French
 #658 - Rapid Click on Item Copy
 #657 - Rapid Click on Password Creation
 #656 - Can't Create Folder as User
 #643 - email charset in UTF-8
 #641 - Add and save item -> double click on that icon won't work
 #671 - When password is generated, it is added in confirm field too
 #672 - Changing password makes account inaccessible
 #637 - Multi Domain LDAP
 #673 - Changed strategy for quick icon clipboard copy
 #639 - Design fix in admin page
 #681 - Fix for Folder and Users creation as Administrator
 #680 - Set custom expiry for one time view link
 #682 - Fix SMTP authentication which were used regardless of the settings
      - Fix a query used in the "lost password" management.
      - Fix the mysql error message when the session_expired page is accesseded...
 - New option permitting to send or not an email to User when admin changes his password
 - Fix for image viewer when option files encryption is set
 - Fix for password complexity level update

2.1.20
 #492 - Default admin password not working
 #509 - Password complexity
 #493 - Unable to purge logs
 #503 - manual insertions in Items History log not working
 #494 - Logs > Administration JSON error
 #491 - Applying email address to user
 #441 - Attachments encryption
 #459 - Turn off strict mode
 #477-#452 - Fix for upgrade
 #459 - Turn off strict mode
 #472 - Error on line 582 index.php
 #474 - Set default to checked for secure passwords
 #497 - Moved GA QR code creation to administration
 #487 - Off-line mode, link make the page scroll up
 #533 #521 #528 - Installation issue
 #525 - Settings.php should not be commited
 #527 - Potential security bug
 #485 - CVS Import on V 2.1.19 quotes problems
 #544 - DataTables warning: JSON data from server could not be parsed
 #547 - User search
 #520 - API access
 #549 #550 - Server Time in footer
 #539 - New feature: Simplify Items Tree
 #547 - Search in Users page
 #401 - Folder role inheretance on new folder
 #552 - added MBstring check
 #554 - Search-Page "Jump to item"-Button not working correctly
 Fork from slimm609 - Encrypted Sessions and CSRFGuard enabled
 Issues with folder creation in "personal folder"
 #536 - one time view page for anonymous user
 #517 - New feature: Suggest items system
 New feature: Sub-folder inherits of parent folder

2.1.19
 #413 - fix for PHP Parse error: syntax error, unexpected '['
 #447 - fix for PHP Fatal error: Cannot redeclare getBits()
 #442 - problem edit folder
 #399 - Export encrypted passwords (off-line mode)
 #408 - Personal Salt Key changing doesn't work
 #419 - Password complexity not refreshed
 #418 - English translation improvement
 #407 - "Restricted to" feature improvement
 #402 - In item list, description is cut with <br />
 #393 - Password input and confirmation field location
 #388 - Unable to move items between folders
 #400 - Extra fields for Item
 #414 - Maintenance mode during upgrade can be disabled
 #389 - Language dropdown not working
 #392 - Check of absolute path for SK.PHP
 #385 - Email not sent ... check your configuration (to be checked)
 #379 - CSV importing not working (to be checked)
 #134 - Login After Session Expires
 #429 - Changed user.psk field to allow NULLs
 #428 : error: iconv(): Detected an illegal character in input string
 #426/#430 : New option to disable information loading in Admin page
 #142 - Google Authenticator implemented
 * Dialogbox not closed when changing folder name
 * Display Item details through Find page error

2.1.18
 #315 - jstree style.css badly referenced
 #314 - Folder is not being deleted
 #320 - Enabling LDAP prevents local admin login
 #317 - server expected extensions are tested
 #318 - Upgrade process badly creates sk.php file
 #348 - Fix for undefined index "isAdministratedByRole"
 #350 - Fix for Lock and delete user actions don't refresh page
 #354 - Fix for removing folders
 #359 - Fix for initial user password change complexity check
 #371 - Fix for uploaded files corrupted
 #291 - Fix to support openLDAP / posix style LDAP
 #361 - Option to use login password as SALT key
 * Fix - no possibility to update a Role
 * Fix - editing users by clicking on the fields broken
 * Fix - parse error in database errors log
 * New - requested user password complexity shown when changing password
 * New - option for deactivate client-server encryption (usage of SSL)
 * New - in tree, new counters added (subfolders and items in subfolders numbers)
 * New language added - Catalan

2.1.17
 * New exchange encryption protocol. No key is visible. The channel is
 encrypted at start of session.
 * HTTPS connection can be activated (be carefull, you need a certificate)
 * Change Users passwords encryption
 * Corrected - once clicked on not authorized Item, any Item selection was
 no more possible.
 #283 - Rights on a folder created at root are set.
 #285 - New settings: Anyone can modify option can be activated by default
 #287 - newly created personal folders ar propergated to the group
 #289 - Personal folder name badly constructed
 #270 - Restricted items visible in Find results
 #298 - Protection against bad actions on personal folders
 #299 - User can be explicetly administrated by Managers of specific Roles
 #300 - Personal SK is encrypted in COOKIE
 #301 - Corrected query call error
 #302 - Under "Views" users can see items that exist in personal folders
 that have been accessed
 #307 - fclose() statement badly placed

2.1.16
 * #245 - #248 - #249 - #265 - #266 - #267 - #268 - #273
 * #277: Change personal saltkey error

2.1.15
 * list of bugs corrected: #242 - #254 - #244 - #247 - #256 - #250 - #254 - #248
   #243 - #252 - #232 - #240 - #260 - #259 - #262 - #251 - #236
 * MySQL hashing => todo
 * CSV importation

2.1.14
 * list of bugs corrected: #238 - #235 - #239 - #203 - #201 - #233 - #226 - #236
   #228 - #189 - #234 - #225 - #239 - #194 - #86
 * Corrected bug for sending emails
 * Different small corrections

2.1.13
 * Code improvement for PSR compliance
 * jQueryUI updated to v1.9
 * Cleanup unused files
 * #207: Managers can only see the Roles they are allowed to.
 * #190, #192, #199, #202, #196, #204, #191, #214 corrected
 * Correction: taking into account user "can create at root level" setting
 * Added: saltkey is exported in a unique file that should be moved outside
   "www" server scope.
 * Added: 2-factors authentication
 * Added: new check when Role creation
 * Added: new check for database query error
 * Added: Item in edition will lock any other edition
 * Added: New administrator View permitting to view "Users actually connected"
   and "Tokens taken for Items in edition"
 * Added: User account contains now Name and Last Name fields

2.1.12
 * #188
 * #185 Started adjusting codebase to follow PSR 1 and PSR 2 based on ecaron
 		work (thank you)

2.1.11
 * #184 - bug correction

2.1.10
 * #161 - #100 - #175
 * #163 Personal saltkey duration based on cookie (under option)
 * share item -> manage error when email not sent
 * Improved/corrected export CSV and PDF
 * Correction: During upgrade, languages table is wrong
 * Personal Saltkey is stored in cookie (new admin setting)
 * Emails settings are moved to admin settings page (no more in settings.php)
 * Files folder is now a setting (to improve security)
 * Exported PDF is encrypted (contributor: Jay2k1)
 * #168 Add description field in PDF
 * #174 User creation and modification log

2.1.9
 * #126-#132-#130-#131-#139-#129-#141-#146
 * Italian translation
 * Find page - focus in search box (contributor: Jay2k1)

2.1.8
 * SF 206
 * #107-#95-#102-#103-#67-#32-#87-#71-#125-#120-#116-#111-#108-#104-#90-
   #85-#78-#48-#34-#67-#75-#82-#84
 * bug correction cache table
 * view Item details from the Find page
 * CSV export  -> started
 * mail notification when selecting an item
 * share Item by mail
 * add email field in Item form
 * automatic deletion of Item after X opening or after limit date
 * Roles / Folders matrix: Roles passwords complexity shown

2.1.7
 * SF 247 - 248 - 261 - 264 - 265 - 266 - 267
 * 67:	protect uploadify library => different file protection added
 * protect Downloadfile.php
 * SF228: reset personal saltkey (purge personal items)
 * SF262: copy of item is in log
 * old password in log was badly encoded
 * item copy from search page corrected
 * some rights checks added before action
 * email send to new created user

2.1.6
 * #59: settings.php email setting errors
 * #67: Protected upload file
 * added email notification for user requiering an access to a restricted item.
 * 264:	Feature Request: Password History

2.1.5
* #56: Temporary solution for keeping old ADMIN profile rights

2.1.4
* Corrections: SF237, SF240, SF243 , #29, #25,  #32 , #36 , #37 , #39 , #40
	SF257, SF259, SF239, #41, #40, #51
* Improvements:
	SF232
	SF231:	How to Restrict Admin from Viewing items
	#31: new setting option for dynamic list
	#27: new subfolders only associated to the same roles as the parent folder
	#33: folder management in items page
	Changing SALT key from admin pages

2.1.3
* upgrade improvement in case of upgrading from 1.x version.

2.1.2
* improved upgrade connection errors and automatic credentials import
* Corrections: #4, #7, 236

v2.1.1
* 2 bugs correction

v2.1
* Licence has changed to GNU AFFERO GPL 3.0
* 203 - password complexity on Roles
* 121 - Default language can be set + user language stored in DB
* Encrypt old passwords in LOG_ITEMS table
* started CRON activity for emails sending
* new option: send email to Admins when users get connected
* "Restricted to" field not viewable to everyone
* add an icon for hide/show passwords in clear text (toggle button)