Drupal

Last updated: February 1, 2012 - 22:16View usage statistics for this release Download Size md5 hash drupal-7.12.tar.gz 2.95 MB db2284beb97241c9bdca9c638cd8a4f1 drupal-7.12.zip 3.36 MB 257a77dc373827e8de25d23f23af54bd Official release from tag: 7.12
Last updated: February 1, 2012 - 22:16View usage statistics for this release

Maintenance release of the Drupal 7 series. Only bugfixes have been committed. No new security fixes are included in this release. New features are only being added to the forthcoming Drupal 8.0 release.

This release includes the security fixes from Drupal 7.11 which was released alongside Drupal 7.12. No additional security fixes are included.

All other changes committed since Drupal 7.10 are as follows:

• #336483 by brianV, catch: Fixed Performance: SELECT MAX(comment_count()) FROM node_comment_statistics() does full table scan.
• #289504 by catch, mikeryan, moshe weitzman: Fixed user_delete() performance: index comment uid columns.
• #1326482 by ryanissamson: Clean up minor code style issues in archiver.inc.
• #996236 by fago, sun, pillarsdotnet, xjm: Fixed drupal_flush_all_caches() does not clear entity info cache.
• Rollback of Issue #1280792 by andypost: Key length too long error.
• #569076 by rocket_nova, wamilton, alonpeer: Test that taxonomy term page contains a link to parent terms in the breadcrumbs.
• #1367000 by chris.leversuch, oriol_e9g, David_Rothstein: Clean up API docs for php module.
• #1421330 by heyrocker: Fixed Add @see for cache_set() and cache_get() .
• #1415794 by Zen Master: Fixed node_access_test_form_node_form_alter() has wrong documentation header.
• #1409052 by mkadin: Fixed hook_menu() should state that auto-loaders should return FALSE to indicate nothing found and trigger a 404.
• #1372280 by sven.lauer: Document that field_info_field_by_id() may also be used for deleted fields.
• #1416212 by pontus_nilsson: Fixed _user_mail_notify() -- options for need to be a list.
• #1045786 by D√©sir√©, Albert Volkman, droplet: Fixed Length of Aggregator Trimmed Description.
• #1025286 by Tor Arne Thune, Devin Carlson, swentel: Fixed logo_upload() in form_set_error() instead of favicon_upload() in system.admin.inc.
• #1360416 by droplet, LSU_JBob: Fixed Document that the page_bottom() region is hidden from the blocks UI.
• #1402620 by jeckman, jwlogemann: Fixed node_show() return doc links to nonexistent function.
• #1405260 by skottler: Clarify the language around non-reliable queue examples.
• #984874 by LSU_JBob, dalin, Albert Volkman, sun: Use DrupalUnitTestCase where possible.
• #1280792 by julien, xjm, pingers, Niklas Fiekas: Fixed {trigger_assignments()}.hook has only 32 characters, is too short.
• #1110650 follow-up by sun: Oops. No entity_create() in 7.x. :)
• #1110650 follow-up by grendzy, oriol_e9g, sun: Fixed comment-by-anonymous class never appears.
• #1371484 by catch, langworthy, makara, ArtistConk: Fixed Private properties in abstract class DrupalCacheArray.
• #1411592 by dadikof, Niklas Fiekas: Fixed func_get_args() can't be used as a function parameter before PHP 5.3.
• #1420048 by nod_, droplet: fixed menu* JS indention.
• #1099062 by nod_, droplet: Autocomplete.js micro optimization.
• #1399496 by droplet: JS semicolon to following code standard .
• #1354852 by marvil07, 30equals: hook_node_type_insert() has no sample function body.
• #1394790 by joachim: explain system_admin_compact_mode().
• #1377544 by kotnik: hook_update_N documentation uses dead links.
• #852524 by plach, oriol_e9g: include language provider files only when they are needed.
• #1416218 by scorchio: Improve variable naming in format_interval().
• #736556 by daniels220, jeckman, Albert Volkman: fixed theme_links() doc needs expansion.
• #1346166 by Dave Reid: Improve performance of token_replace() if there are no tokens to replace.
• #1387572 by pbull, tarekdj: Fixed node links are not left aligned in bartik theme on RTL direction.
• #1387098 by LSU_JBob, nburles: bug in ajax.js when minified.
• #1000074 by naxoc: node_permission() uses check_plain() without a purpose.
• #666854 by TR, JacobSingh: fixed E_NOTICE warnings in run_tests().sh .
• #1386514 by pflame, nod_, David_Rothstein: Fixed Dragging and dropping a shortcut from disabled to enabled doesn't switch the status if the dragging happens fast.
• #1330554 by oriol_e9g, fiftyz, richthegeek: Fixed taxonomy_get_tree() incorrect depth on multiple parents.
• #1160928 follow-up by sun: Commit missing file. Oops.
• #987930 by David_Rothstein, Tor Arne Thune: Fixed The obsolete 'site_offline_message' variable is not always deleted during the D6->D7 upgrade.
• #1373582 by jhodgdon, TR: Fixed Trailing whitespace.
• #1386976 by nburles, LSU_JBob: Fixed Bug in drupal.js when minified.
• #1402962 by xjm, marcingy, oriol_e9g, msonnabaum: Fixed Render cache shouldn't treat empty strings as a cache miss.
• #278425 by andypost, droplet, OnkelTem, chx, c960657, drewish, kotnik, realityloop: Change notice for: Using basename() is not locale safe.
• Revert "Issue #1367000 by chris.leversuch, oriol_e9g, David_Rothstein: Clean up API docs for php module."
• #800434 by pillarsdotnet, plach, bart.hanssens: Added drupal_mail(), allow hook_mail_alter() implementation to cancel mail.
• #1367000 by chris.leversuch, oriol_e9g, David_Rothstein: Clean up API docs for php module.
• #1309742 by rocket_nova, Albert Volkman: Add inline comment clarifying use of language_list() in system_date_format_save().
• #1160928 by catch, xjm: Add tests for node type/comment body upgrade path.
• #955848 by anrikun, Kars-T, catch, chx, casey, sun: Fixed When editing an existing node with a link, the link itself is listed in 'Parent item': menu_parent_options() needs some rewriting.
• #1214344 by wiifm, msonnabaum, oriol_e9g: Fixed 'misc/progress.js' is not being included when 'Aggregate JavaScript files' is used.
• #131737 by malc0mn, pillarsdotnet, scor, xjm, nvanhove, oriol_e9g, mrfelton, aspilicious, Pancho, v1nce, dhthwy: Fixed Ensure that the Return-Path is set when sending mail on both Windows and non-Windows systems.
• #1399334 by ArtistConk: Two small grammar fixes.
• #1391426 by yched: Fixed Wrong bundles in EntityFieldQueryTestCase.
• #1371938 by yched, Everett Zufelt, xjm, casey: Fixed hook_field_delete() no longer invoked during field_purge_data().
• #1384224 by philbar, Plazik, oriol_e9g: Fixed Resize Site Logo in Seven Theme Maintenance Pages.
• #1397890 by sun: Fixed DrupalWebTestCase::assertFieldByName() outputs bogus assertion message when no is passed.
• #1397882 by sun: Fixed system_theme_settings_submit() does not properly clean up submitted form values.
• #1181750 by Everett Zufelt, sun: Fixed Removal of 'Hidden' option in comment settings form may break programmatic form submissions.
• #1315886 by xjm, jhodgdon: Clean up API docs for includes directory, files starting with A-C.
• #1407028 by jhodgdon, arianek: Remove arianek from Maintainers.txt. We will miss you. :) Thanks for all of your awesome work! :D
• #1338110 by aaron.r.carlton, oriol_e9g: Fixed remove the protected variable () if it's not used in tracker.test.
• #1399896 by xjm: Fixed testCommentNewCommentsIndicator() is inside CommentHelperCase and therefore gets run repeatedly.
• #1398806 by kiamlaluno: Fixed The purpose of hook_search_page() is explained twice.
• #1336308 by kathyh, pjcdawkins, meshkinsoft: Fixed wrong usage of function t in system_menu().
• #1376164 by sun, oriol_e9g: Fixed Format SimpleTestFunctionalTest description according to standards.
• #1274212 by amateescu, c31ck: Fixed Incorrect order of choices in Poll module.
• #939880 by amateescu, marcingy: Fixed Poll Module throws PDOException when creating poll content.
• #1391384 by yched, oriol_e9g: Fixed Wrong static clear on taxonomy_vocabulary_save().
• #1376502 by TR, vitalsouto: Fixed Code cleanup: Removed empty PHP blocks from templates left over from git migration.
• #1387766 by dereine: Added Use fast drupal static pattern for locale.
• #1295546 by c31ck, marcingy, amateescu, xjm: Fixed Weight and number of votes not getting saved when updating a poll.
• #1344752 by pflame, aspilicious, JacobSingh: Fixed Drag and Drop of shortcuts between Enable and Disable Does not respect the Shortcuts Limit.
• #1367014 by chris.leversuch: Clean up API docs for toolbar module.
• #1227396 by chris.leversuch, jhodgdon: Document that hook_node_access() is not called on node listings.
• #987472 by damien_vancouver, OnkelTem: Fixed search.module doesn't consistently support multibyte characters.
• #1364528 by Everett Zufelt, catch: Add xjm as taxonomy module maintainer.
• Revert "Issue #1371484 by makara: Fixed Private properties in abstract class DrupalCacheArray."
• #1368872 by agentrickard, oriol_e9g: Clean up API docs for syslog.
• #1273104 by TwoD, Rob Loach, nburles, nod_: Remove eval() from field_ui().js.
• #1273722 by bfroehle: Fix FieldAttachTestCase::setUp() signature.
• follow-up #1007830 by Damien Tournoud, basic: Fixed Nested transactions throw exceptions when they got out of scope.
• #1359710 by xjm, pwolanin: Fixed taxonomy_menu() passes invalid arguments into taxonomy_form_term().
• #1380660 by aspilicious, loganfsmyth: Fixed field_available_languages() static cache never cleared.
• #1382144 by Chi: Rename variable in standard profile.
• #1387002 by Rob Loach, nburles: Fixed Bug in overlay-parent.js when minified.
• Revert "Issue #1039666 by Jelle_S: Fixed Placing a block in a region via select dropdown moves it to the top of the region, but it will show at the bottom."
• #1370060 by jvns, chris.leversuch: Add cross-references between taxonomy_vocabulary_load() and taxonomy_vocabulary_machine_name_load().
• #1379206 by c31ck, pingers: Fixed Documentation problem with hook_url_outbound_alter().
• #1386318 by barbi: Fixed hook_field_widget_info() should have a @see to other function.
• #1309278 by basic, Niklas Fiekas: Added Make PDO connection options configurable.
• #1347812 by nanotube, xjm: Fixed Remove/replace documentation references to upload_file_load() and upload_file_delete().
• #381994 by xjm, good_man, elcuco, brianV, yhager: Fixed Machine-name fields are always in Latin characters, and should therefore always be LTR.
• #1359326 by xjm: Fixed t() documentation does not clearly indicate that options are documented in format_string() docs.
• #1015916 by BTMash, jenlampton, theborg, Aron Novak, christefano, realityloop, xjm, Kevin Hankens: Fixed Image field 'title' allows more data than database column size.
• #1025582 by sun: Added Custom db_select() 'conditions' parameter for menu_build_tree().
• #1338428 by jbrown, BTMash, Tor Arne Thune: Fixed image_dimensions_scale() and image_scale_effect() are ungrokable and buggy.
• #629518 by jhodgdon, reglogge, jvns, oriol_e9g: Fixed hook_node_insert() and other node hooks have imprecise/misleading descriptions.
• #1039666 by Jelle_S: Fixed Placing a block in a region via select dropdown moves it to the top of the region, but it will show at the bottom.
• #1332636 by sven.lauer, xjm: Clean up API docs for contact module.
• #1323720 by xenophyle, xjm: Clean up API docs for block module.
• #1325116 by xenophyle, xjm: Clean up API docs for Aggregator module.
• #1326638 by sven.lauer, jhodgdon, xjm: Clean up API docs for field_ui() module.
• #1332580 by sven.lauer, xjm: Clean up API docs for color module.
• #1373634 by oriol_e9g, sun: Fixed Installation profile is not installed and not registered as module, unless identical to parent site.
• #1373194 by chris.leversuch: Fixed Field Attach API topic/group page should link to Field Language API page.
• #1371256 by ayelet_Cr, oriol_e9g: Document that QueryConditionInterface::condition() should not be used to add NULL conditions.
• #942782 by pillarsdotnet, xjm, becw, timhilliard, JohnAlbin, jrchamp, Tor Arne Thune, Damien Tournoud, jn2, James Andres, dstol, melon, colan: Fixed Custom menus never receive an active trail.
• #866292 by marcingy, ygerasimov, quicksketch, attiks, furamag: Fixed '0' not displayed as checkbox / radios options (nor as any element #title).
• #1345480 by chris.leversuch, rbayliss: Fixed node_load() does not document FALSE return value.
• #1362920 by scor, oriol_e9g: Wrong sitename variable in system.api.php.
• #1366232 by sun: Fixed drupalCreateUser() breaks if testing site/profile does not install Comment module.
• #678594 follow-up by mlncn: Add clarifying comment to RDFa markup for file/image formatters.
• #1366740 by patrickd: Fixed theme_progress_bar() should have more information about when to use function.
• #1319904 by rc_100, xjm, jhodgdon: Clean up API docs for help module.
• #1347890 by sven.lauer, xjm, jhogdon: Clean up API docs for file module.
• #1349610 by bartlantz, jhodgdon: Make the subtopics of Field API link back to it.
• #1050466 by xjm, makara, rhayun: Fixed The taxonomy index should be maintained in a node hook, not a field hook.
• #1371484 by makara: Fixed Private properties in abstract class DrupalCacheArray.
• #1375134 by xjm, sun: Fixed Random test failure in TaxonomyTermTestCase::testNodeTermCreationAndDeletion().
• #1240256 by lyricnz, Akaoni, jenspeter: Fixed file_unmanaged_copy() Fails with Drupal 7.7+ and safe_mode() or open_basedir().
• #1373360 by sun: fatal error if optional Block module is not enabled.
• #1258000 by chx, xjm, bfroehle: SelectQuery::countQuery() inappropriately removes SQL expressions.
• #1265946 by klausi, tstoeckler, dereine, aspilicious: DoS against core using a large number of OR search query terms.
• #1366804 by TR: 'End of foo group' on a couple of API pages due to not following standards.
• Merge branch '7.x' of git.drupal.org:project/drupal into 7.x
• #1146088 by lyricnz: label always visible for table formatter.
• Revert "Issue #813540 by jbrown, chx: Fixed Comparisons involving NULL must never return true."
• #1229868 by nicl, DjebbZ: hook_form_BASE_FORM_ID_alter(), hook_form_alter(), and hook_form_FORM_ID_alter() doc inconsistent.
• #479368 by Heine, Roger Saner, xjm, mcarbone, keichee, asimmonds: Fixed Create RFC compliant HTML safe JSON.
• #953336 by sun: Fixed Contributed modules are not able to test theme-related functionality.
• #1346760 by xjm: Fixed Drag and drop needs a scalable weight select element.
• #1212992 by catch, xjm, chx, beejeebus, BTMash, bfroehle: Fixed major bug - Prevent tests from deleting main installation's tables when parent::setUp() is not called.
• #1349610 by bartlantz: Added make the subtopics of Field API link back to it.
• #1356358 by BTMash: Fixed Unknown variable in generate-d7-content.sh causes PDOException.
• #673224 by rocket_nova, jhodgdon: Fixed None of the hooks in field.api.php are grouped as such.
• #1322278 by rocket_nova, jhodgdon: Fixed Documentation problem with theme -- doesn't link to theme functions list.
• #1167996 by rocket_nova, Sheldon Rampton: Fixed UPGRADE.txt needs to say all D6 contrib modules need to be upgraded to their latest D6 versions before the D6->D7 update.
• #813540 by jbrown, chx: Fixed Comparisons involving NULL must never return true.
• #1301522 by xjm, Rob Loach, David_Rothstein: Fixed field_ui_default_value_widget() does not pass along the entity type when it creates the default value form.
• #1366518 by chris.leversuch: 'Columns' is misspelled (()) in theme_field_ui_table().
• #1345152 by Zgear, chris.leversuch: field_create_field() and related functions have incorrect exception throwing docs.
• Back to 7.x-dev

Last updated: February 1, 2012 - 22:11View usage statistics for this release Download Size md5 hash drupal-6.24.tar.gz 1.05 MB a37c6f22b624159fa5e4bc6896cdcf15 drupal-6.24.zip 1.22 MB fd91a08fa7eee70232812910d38b06dd Official release from tag: 6.24
Last updated: February 1, 2012 - 22:11View usage statistics for this release

The twentyfourth maintenance release of the Drupal 6 series. Only bugfixes have been committed. No security fixes are included in this release. New features are only being added to the forthcoming Drupal 8.0 release.

This release includes the security fixes from Drupal 6.23 which was released alongside Drupal 6.24. No additional security fixes are included.

The complete list of changes committed since Drupal 6.22 are as follows:

• #879270 by Ben Coleman: query in taxonomy_node_get_terms() needs the v.weight field added to the SELECT because it was already present in the ORDER BY; improved PostgreSQL compatibility
• #12274 by markoshust, DamienMcKenna, seanbfuller, cburschka, aufumy: do not accept email addresses with dots at the end as valid
• #600836 by tim.cosgrove, dww, naxoc, Dave Reid: prevent batches from going indefinitely if their 'finished' value becomes bigger than 1
• #289504 by mikeryan, catch, moshe weitzman: backport indexes from Drupal 7 on comments and node_comment_statistics to improve performance of mass-user operations such as deleting users en masse
• #1278160 by tim.plunkett: lower the severity level in watchdog() for orphaned actions
• #975754 by jhodgdon, Albert Volkman: fix phpdoc about access callback inheritance for menu items
• #336483 by brianV, catch: add index for comment_count on column in node_comment_statistics to avoid full table scan when search index is updated for example
• #1137848 by pillarsdotnet, BrockBoland, tim.plunkett: hide /filter/tips page from well behaving search engines, it is pointless to be included in search indexes
• #648516 by cafuego, williamestrada: node_build_filter_query() should consider the vid of nodes when joining on term_data to consider only current revisions of nodes
• #767104 by mgriego, EugenMayer, mkalkbrenner: taxonomy_node_save() should refresh the node terms (especially for free tagging vocabularies) when nodes are updated, so they are kept up to date in the same HTTP request
• #720876 by pillarsdotnet: user_register_validate() should invoke user_module_invoke() with an account object rather than an array; improved PHP 5.3 compatibility
• #269877 by neochief, roderik, akaliel, mathieu, jct, Jo Wouters, fago, ufku, fmjrey, nonsie, pfournier: avoid duplicate paths (again) in path_set_alias()
• #147000 by Berdir, Dave Reid, pwolanin, pillarsdotnet, TR, jbrauer, dstol: rework module_rebuild_cache() and system_theme_data() to support locking, so that concurrent requests will not corrupt the data; fixes an issue where themes got disabled occasionally
• #156582 by c960657, drico, pwolanin, townxelliot, Damien Tournoud, kbahey, mikeytown2, jpmckinney, craig_, zyxware: add missing timeout support to drupal_http_request() to avoid Drupal hanging on web service requests
• #556842 by mh86, catch, bangpound, wojtha, deviantintegral: optimize taxonomy_get_tree() by building the tree internally instead of recursively to improve performance; especially good for bigger taxonomies
• #504506 by andypost, pillarsdotnet, podarok: Drupal.formatPlural() did not pass on extra arguments for translations of some plural values
• #1173012 by carlos8f, Fabianx, Gábor Hojtsy: do not remove blocks for disabled modules in _block_rehash() to avoid blocks disappearing for people following the update guide to the letter disabling contrib modules when updating Drupal core
• #883038 by pillarsdotnet, ShutterFreak, anarcat: ereg() and ereg_replace() are deprecated but Drupal 6 will not migrate to preg to avoid breaking APIs, so we need to silence the warnings coming out of the use of ereg on PHP 5.3+
• #1174496 by Eric_A, grendzy, greg.1.anderson, c31ck: drupal_error_handler() should not assume filter_xss() is available. It might be called before that is loaded. Also fixes Drush compatibility.
• #825972 by daniels220, Reidsy, Albert Volkman: add phpdoc documentation to sess_read() and sess_write()
• #1260932 by DjebbZ, pwolanin: hook_nodeapi() optional arguments should not be made required by some core modules either
• #208793 by Damien Tournoud, kbahey, TR: instead of hardcoding the HTTP protocol version in responses, respond with the HTTP protocol version requested (or fall back to HTTP/1.0 if the requested protocol/version is unknown)
• #971812 by mfb, twistor: aggregator ignores Atom id element, which is equivalent to RSS guid element
• #845542 by pounard: db_query_temporary() will fail without CREATE TEMPORARY TABLES permission on MySQL, update install documentation for that
• #1225364 by sivaji, ñull: body field label is configurable but hardcoded in min word count validation error message
• #1103310 by c960657: lock_acquire() does not properly extend expired lock due to misuse of db_query() to check for affected rows
• #909274 by ergonlogic, franz: user/0/delete should not be accessible even for administrators
• #1006938 by dww, westwesterson: avoid PHP warnings in the PHP 4 XML parser caused by the relatively new XML data pieces produced at updates.drupal.org
• #480082 by pp: add previously undocumented variables in system_send_email_action_form()'s message field description
• #1173012 by carlos8f, Fabianx: fix poll_block() to not wrap the block list operation in permission checks which could result in block placement and configuration lost when block rehashing is run with a user lacking permissions to view content
• #1283442 by Ben Coleman, twistor, ggevalt: aggregator_block()'s permission check on the list, configure and save operations could result in loss of aggregator blocks when block rehasing is invoked with a user who has no access to feeds; permissions should only be checked on the view op
• #1169034 by mfb: fix notice in file_create_filename() for cases when the ext variable did not exist previously
• #1196102 by James_Stallings, noisetteprod: improve phpdoc on taxonomy_check_vocabulary_hierarchy()
• #338402 by rocket_nova, jhodgdon: improve documentation on node_get_types()
• #1098556 by barbi, rocket_nova, kiamlaluno: search_box() documentation referred to theme_search_box_form() which is in fact implemented in search-block-form.tpl.php in Drupal 6
• #1192178 by pillarsdotnet, jhodgdon: fix user_module_invoke() argument names to make more sense and phpdoc to document them (no behavioral change of course)
• #1288838 by anrikun: fix bad code indentation in _locale_batch_build()
• #1175614 by barbi, oriol_e9g, CashWilliams, aenw: improve phpdoc on block_list()
• #1100260 by barbi, jhodgdon: fix phpdoc in batch operations example to have a redirect
• #372766 by jhodgdon, jn2: phpdoc improvements to user_save()
• #1222802 by franz, droplet, jhodgdon: cleanup for pager phpdoc blocks; add missing text argument doc to theme_pager_link
• #1190846 by vitalsouto, ninizik: remove one of two copies of repeated phpdoc documentation on actions
• #300714 by j0hn-smith, alexjarvis, lilou, linuxbox: sort node revisions by vid not timestamp.
• #1149628 by Ben Coleman: fix blog module query to include all ORDER BY fields in select for PostgreSQL compatibility
• #201876 by gpk: improve yellow in Garland tabledrag to stand out better for usability
• #356359 by mgifford, Agileware: improve accessibility of the search form
• #925580 by tbenice, rsevero, marcp: dix upload modules's form altering to be clearly compatible with PHP 5.3
• #188947 by lyricnz: date_validate() takes a form element, not a whole form, correct the variable name to clean this up
• #1154722 by mattconnolly, barbi, jhodgdon: link Form API reference to Drupal 6 version in Form API docs
• #1095066 by drewish, barbi: improve node_build_content() return value documentation
• #401266 by pillarsdotnet, jhodgdon: improve documentation on user_mail_tokens() to be more accurate on required account properties
• #1184106 by barbi: improve documentation on db_set_active()
• #1063636 by barbi, Rob Loach, TR: reference drupal_add_css() in drupal_get_css() docs
• #1176524 by andypost, TR, dww: remove leftover CVS ID tags from Drupal core
• #1169080 by barbi, csdco: improve documentation of file_set_status()
• #623276 by jhodgdon: improve documentation on file_scan_directory()
• #1123120 by kiamlaluno, mr.baileys: improve documentation for theme preprocess; hook argument was missing

Last updated: February 1, 2012 - 22:11View usage statistics for this release Download Size md5 hash drupal-7.11.tar.gz 2.66 MB e9857e1749762367d7631d74cc6564a7 drupal-7.11.zip 3.08 MB 687258ef31de9f5827779c33e594c25f Official release from tag: 7.11
Last updated: February 1, 2012 - 22:11View usage statistics for this release

Maintenance and security release of the Drupal 7 series. Only fixes for security vulnerabilities have been committed. New features are only being added to the forthcoming Drupal 8.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2012-001 - Drupal core - Multiple vulnerabilities

No other fixes are included. For additional bugfixes, see Drupal 7.12 released alongside Drupal 7.11.

Last updated: February 1, 2012 - 22:10View usage statistics for this release Download Size md5 hash drupal-6.23.tar.gz 1.05 MB e3e752702d466a1babcb2a827d272424 drupal-6.23.zip 1.21 MB 1d42f25d8336c4afc4f297ef828ddff6 Official release from tag: 6.23
Last updated: February 1, 2012 - 22:10View usage statistics for this release

The twentythird maintenance and security release of the Drupal 6 series. Only fixes for security vulnerabilities have been committed. New features are only being added to the forthcoming Drupal 8.0 release.

This release fixes security vulnerabilities. Sites are urged to upgrade immediately after reading the security announcement:

• SA-CORE-2012-001 - Drupal Core - Multiple vulnerabilities

No other fixes are included. For additional bugfixes, see Drupal 6.24 released alongside Drupal 6.23.

Last updated: December 5, 2011 - 22:50View usage statistics for this release Download Size md5 hash drupal-7.10.tar.gz 2.93 MB 1caafb849bc756e62dd874b90b95ab31 drupal-7.10.zip 3.34 MB 1e11489c780f25672d2a57490b0dae5c Official release from tag: 7.10
Last updated: December 5, 2011 - 22:50View usage statistics for this releaseHighlights

• Fixed Content-Language HTTP header to not cause issues with Drush 5.x.
• Reduce memory usage of theme registry (performance).
• Fixed PECL upload progress bar for FileField
• Fixed running update.php doesn't always clear the cache.
• Fixed PDO exceptions on long titles.
• Fixed Overlay redirect does not include query string.
• Fixed D6 modules satisfy D7 module dependencies.
• Fixed the ordering of module hooks when using module_implements_alter().
• Fixed "floating" submit buttons during AJAX requests.
• Fixed timezone selected on install not propogating to admin account.
• Added msgctx context to JS translation functions, for feature parity with t().
• Profiles' .install files now available during hook_install_tasks().
• Added test coverage of 7.0 -> 7.x upgrade path.
• Numerous notice fixes.
• Numerous documentation improvements.
• Additional automated test coverage.

Update notes

• None at this time.

Known issues

• None at this time.

Full list of changes since 7.9:

• #1318316 by xjm: AssertTaxonomyPage is missing documentation.
• #1329914 by xjm, msonnabaum: Fixed Ensure ['q'] is set before calling drupal_normal_path().
• #1332648 by sven.lauer, jhodgdon, xjm: Clean up API docs for contextual module.
• #1198398 by jm@bellcom.dk, AllRob: Fixed Timezone selected on install not correctly saved to admin user account.
• #1182296 by BTMash, matason, catch, xjm: Add tests for 7.0->7.x upgrade path.
• #1206992 by oriol_e9g: fixed Field UI error message and incorrect type level.
• #1196112 by rocket_nova: taxonomy_get_parents() return value documentation isn't complete.
• #1087940 by drewish, rocket_nova: document that wildcard % doesn't work as first argument in menu paths.
• #1289208 by minorOffense, skottler, rocket_nova: REQUEST_TIME documentation is misleading.
• #1302364 by Chi, realityloop: duplicate status check in forum_field_storage_pre_update().
• #1280674 by TR, DamZ: submit button 'floats' during ajax submission.
• #765860 by effulgentsia, dww, dereine, mikey_p, xjm, sun, sven.lauer: drupal_alter() fails to order modules correctly in some cases.
• #1346772 by xjm: Fixed StatisticsLoggingTestCase->testLogging() is unstable.
• #1337124 by xjm: improve API documentation for taxonomy_autocomplete().
• #1313342 by CrookedNumber, RaulMuroc, Yuri: Fixed Curacao should appear in standard_country_list().
• #655190 by dealancer: Fixed Allow hook_install_tasks() to be called from a profile's .install file (or document that it can't be).
• #1002258 by tstoeckler, xjm: Fixed D6 modules satisfy D7 module dependencies.
• #1002258 by tstoeckler, xjm: Fixed D6 modules satisfy D7 module dependencies.
• #488496 by loganfsmyth, G√°bor Hojtsy: Implement missing msgctx context in JS translation for feature parity with t().
• #1146234 by David_Rothstein, Tor Arne Thune, xjm: Fixed Overlay redirect does not include query string.
• #1326950 by chrispomeroy: Fixed typo in overlay-child-rtl.css.
• #1339292 by xjm: Fixed hook_requirements() documentation references incorrect path for cron in system.api.php.
• #212284 by Damien Tournoud, alexanderpas, dww: Fixed security check in 'configure' stage not compatible with overriding variables: site_name() and site_mail().
• #789484 by Lars Toomre, sven.lauer, jhogdon, pillarsdotnet, michaellenahan: Fixed Confusing documentation for argument in hook_access()/hook_node_access().
• #1333314 by ericduran: Fixed Left over console.log in authorized.js.
• #1333346 by claudiu.cristea: Fixed hook_field_extra_fields_alter() example code.
• #1247982 by kathyh, Aron Novak, xjm: Fixed API doc for hook_aggregator_parse() is incorrect.
• #777168 by Berdir, effulgentsia: Fixed Notice: Undefined property: stdClass:: in profile_user_presave().
• #1326932 by jenlampton, rump: Bunny ears are fuzzy: update search test node content to reflect this.
• #1006714 by Steven Jones, chx, mr.baileys, xjm, carlos8f: Fixed drupal_get_path() doesn't work for profiles.
• #1263644 by jhodgdon, ultimateboy, Tor Arne Thune: Define what being in MAINTAINERS.txt means.
• #1334768 by ls206, Pasqualle: Fixed Syntax error in locale_test().js line 27.
• #935208 by droplet, assert0, adrinux, Tor Arne Thune: Fixed PECL uploadprogress bar doesn't appear.
• #1180642 by franz, catch, xjm, musicnode: Fixed PDOException in statistics_exit() when path longer than 255 characters.
• #1049284 by xjm: Fixed Running update.php to flush caches no longer works unless there are updates pending.
• #999024 by bfroehle, O Govinda: Fixed Status Report page refers to 'update status module' instead of 'update manager module'.
• Missing files.
• #951644 by catch, David_Rothstein, aschiwi, xjm: Fixed Requirement warnings (e.g. for PHP memory limit) are not shown on install or update unless there is a requirement error also.
• #1328378 by Chi: Fixed remove bogus colour value in CSS in Seven theme.
• #1312844 follow-up by David_Rothstein, kathyh: Fixed minor formatting bug.
• #1103590 follow-up by Tor Arne Thune, dcrocks: Add tests for blocks being added to 'hidden' region.
• #1326472 by xjm: Add capitalization and periods to several inline comments in common.inc.
• #561858 follow-up by effulgentsia, sun: Add tests for AJAX framework lazy-load feature.
• #1021064 by montesq, barraponto, cwells73, mejd: Fixed No Main Links causes error message in form description to set Secondary Links.
• #1011614 by catch, pillarsdotnet: Fixed Theme registry can grow too large for MySQL max_allowed_packet() and memcache default slab size.
• #1274406 by marcingy, grndlvl: Fixed PDO exception is thrown when saving a node with a title that is too long.
• #673020 follow-up by attiks: Critical fix to Content-Language HTTP header to not cause issues with Drush.
• Ahem. Back to 7.x-dev.
• Back to 7.x-dev

Last updated: October 26, 2011 - 20:25View usage statistics for this release Download Size md5 hash drupal-7.9.tar.gz 2.66 MB 7f45f109c413ca69ebb6e3140ed47225 drupal-7.9.zip 3.07 MB 670c0cbc07433f553f03d0fd2ea23979 Official release from tag: 7.9
Last updated: October 26, 2011 - 20:25View usage statistics for this releaseHighlights

• Critical fixes to OpenID to spec violations that could allow for impersonation in certain scenarios. Existing OpenID users should see http://drupal.org/node/1323342 for more information on transitioning.
• Fixed files getting lost when adding multiple files to multiple file fields at the same time.
• Improved usability of the clean URL test screens.
• Restored height/width attributes on images run through the theme system.
• Fixed usability bug with first password field being pre-filled by certain browser plugins.
• Fixed file_usage_list() so that it can return more than one result.
• Fixed bug preventing preview of private images on node form.
• Fixed PDO error when inserting an aggregator title longer than 255 characters.
• Spelled out what TRADITIONAL means in MySQL sql_mode.
• Deprecated "!=" operator for DBTNG; should be "<>".
• Added two new API functions (menu_tree_set_path()/menu_tree_get_path()) were added in order to enable setting the active menu trail for dynamically generated menu paths.
• Added new "fast 404" capability in settings.php to bypass Drupal bootstrap when serving 404 pages for certain file types.
• Added format_string() function which can perform string munging ala the t() function without the overhead of the translation system.
• Numerous #states system fixes.
• Numerous EntityFieldQuery, DBTNG, and SQLite fixes.
• Numerous Shortcut module fixes.
• Numerous language system fixes.
• Numerous token fixes.
• Numerous CSS fixes.
• Numerous upgrade path fixes.
• Numerous minor string fixes.
• Numerous notice fixes.

Update notes

- Upon first upgrading to 7.9, there are reports of Panels Pages going missing at #1323162: Panels disappear after updating core to 7.9. Solution is to clear the cache.

Known issues

- Using drush si in Drush 5.x causes error #1314392: drush site-install on Drupal 7.9 fails with a fatal error "Call to undefined function cache_get()". The fix is to apply the patch at http://drupal.org/node/673020#comment-5106306 or update to the latest -dev release of D7.

Full list of changes since 7.8:

• #1320576 by amateescu: Fixed hook_field_purge_field_instance() doesn't exist.
• #570314 follow-up by jhodgdon, Mac_Weber: Fixed form_set_value() documentation needs more detail.
• #1312844 by sven.lauer: Fixed hook_schema() doc should state that database tables are auto-created.
• #1314396 by rocket_nova: Fixed Documentation for theme_links() should say that Attributes class must be an array .
• #1312178 by rocket_nova, jhodgdon, unabacus: Fixed Documentation problem with 'hook_theme_registry_alter()' example code.
• #1129642 follow-up by BTMash: Fixed D7 upgrade path for images.
• #789484 by Lars Toomre, pillarsdotnet, michaellenahan, sven.lauer, Mac_Weber: Fixed Confusing documentation for argument in hook_access()/hook_node_access().
• #766382 by neoglez, pebosi, andypost, sarah_p: Fixed Column 'nid' is ambiguous when using node access modules.
• #1066274 by pcambra, Damien Tournoud, xjm: Added hook_options_list() should allow to pass the instance of a field .
• #1310250 by joelcollinsdc: Fixed Improve reverse proxy ip address handing commenting and documentation.
• #759244 by Mac_Weber, sivaji: Fixed Seven theme pager links needs more spacing.
• #1184830 by linclark, Dipper: Fixed User account group has no #type.
• #1307062 by sven.lauer, jhodgdon: Fixed install file hooks should state whether module code is available.
• #1129642 by jbrown: Fixed Populate HTML image tags with dimension attributes (like D6 imagefield) without re-introducing I/O (followup).
• Reverting accidental commit with last patch.
• Oops. Forgot a file.
• #1310164 by sven.lauer: Documentation missing for #object in Field API.
• #1234848 by mr.baileys, xjm: Fixed language_list() doc is missing return value.
• #1021568 by skottler, sven.lauer, jhodgdon: Fixed hook_theme() variables vs render elements.
• #221712 by Damien Tournoud, G√°bor Hojtsy, iliphil, Bodo Maass, idflood, loganfsmyth: Fixed locale_language_from_browser() doesn't parse language tags correctly, has a broken logic.
• Oops. Correcting spacing error with previous patch.
• #943924 by Merco, lotyrin, eojthebrave: Fixed Allow preview of private image on node add form.
• #1041906 by Monochrome, bobodrone, ELC, ctibor, DamienMcKenna: Fixed Taxonomy term menu link title overrides term page title.
• #1002734 by pillarsdotnet, yched: Fixed Multiple 'Undefined index' notices in modules/field/modules/number/number.module.
• #1281932 by loganfsmyth, bfroehle, G√°bor Hojtsy: Convert Drupal.t and Drupal.formatPlural regular expressions to extended form.
• #1268234 by derjochenmeyer: Move out rendering image from aggregator parser.
• #262498 by EugenMayer, DjebbZ: Fixed Error in content administration using taxonomy filter.
• #1183430 by TR, oriol_e9g: Fixed t function strings should not have whitespaces at beginning or end.
• #1299046 by beltofte: Fixed Secondary tabs order reversed in LTR.
• #1191614 by G√°bor Hojtsy: Added Make t() formatter available as its own function.
• #1311490 by skottler: remove dl.multiselect remnants.
• #1309298 by sven.lauer: document that hook_(en|dis)able implementations should live in .install files.
• #1309750 by kiamlaluno: wrong spelling in the hook_search_execute() documentation.
• #1307332 by pillarsdotnet: improve the docs for DrupalLocalStreamWrapper::getLocalPath() function.
• #1081266 by mfb: avoid re-scanning module directory when multiple modules are missing.
• #1258176 by sven.lauer: API doc for element_children() is only useful for people who already know what 'children' are.
• #1220602 by catch: Fixed Call to undefined function _update_7000_field_read_fields() during Forum update 7003.
• #1308994 by Devin Carlson: certain Field UI messages have the wrong type.
• #341038 by jhodgdon, kathyh, sdboyer: Docblock for DatabaseStatementInterface is a bit off.
• #1115106 by Damien Tournoud: Fixed Failures to update a field are not properly handed in SQL Storage and Field UI.
• #673020 by mgifford, attiks: Added the Content-Language HTTP header to the generated page.
• #1253828 by sven.lauer: Fixed drupal_render() doc should explain what 'child' means.
• #743234 by mr.baileys, twistor, Berdir, mgifford: Fixed /aggregator does not use pagination.
• #1300482 by pillarsdotnet: Fixed Remove cruft function_exists() from _field_filter_items() leftover from the (removed) function registry.
• #1292922 by loganfsmyth, plach: Fixed EntityFieldQuery count query broken for translatable fields.
• #1248940 by yched: Fixed 'Manage fields' screens : broken table layout.
• #1300496 by Dave Reid: Fixed VERSION constant was not updated to '7.9-dev' after 7.8 release.
• #1295502 by pillarsdotnet: Fixed Add missing '$' character to docblock for timer_start(), timer_read(), and timer_stop() functions.
• #1295502 by pillarsdotnet: Fixed Add missing '$' character to docblock for timer_start(), timer_read(), and timer_stop() functions.
• #1079966 by dereine, catch: Fixed Notice when renaming bundles.
• #1167218 by droplet, kathyh: Fixed DatabaseStatementInterface::fetch* - document what empty return value is.
• #1244116 by catch: Fixed Feed items with title longer than 255 characters fail to insert into aggregator_item().
• #1054848 by barraponto: Fixing common typos through codespell.py.
• #1274674 by karschsp, pgrond, mdupont, aroq | Lars Toomre: Added static caching to taxonomy_vocabulary_get_names().
• #859970 by jn2, sun, rfay: Cleanup form_api() () docs - keys in 2 places, missing some.
• #1273206 by droplet: Access global when it essentially needed.
• #1178580 by Dave Reid: Fixed PHP notices with [node:summary], [node:body], or [comment:body] if there is no body field or language mismatch.
• #1252768 by vegantriathlete: Fixed Misnomer in the text supplied for configuring cron.
• #1250800 by attiks, dereine: language domain should work regardless of ports or protocols.
• Oops. Rollback of #951644 which was accidentally committed.
• #1120290 by wojtha: Provide transition for accounts with incompletely stored OpenIDs.
• #1205138 by pwolanin, Dave Reid: Do not blow away non-MD5 password hashes in user_update_7000().
• #1057242 by drunken monkey: Change notice for entity_uri() should not use ->uri (was ->uri doesn't match the contract for uri callbacks).
• #1122584 by 10oclock, Rob Loach: Fixed Use #attached for block_admin_display_form() instead of drupal_add_css().
• #1289364 by swentel: Fixed SchemaCache generates empty cid.
• #76824 by geerlingguy, xjm, droplet, kbahey: Change notice for Drupal should not handle 404 for certain files.
• #1005570 by reglogge: Fixed Document leading dot requirement for () in settings.php.
• #1123092 by michaellenahan: Fixed user-profile.tpl.php doc has confusing/misleading first paragraph.
• #1290512 by droplet: Fixed Seven: remove duplicated css .
• #1290562 by bleen18, droplet: Fixed Contextual: remove duplicated css.
• #1000282 by dixon_, sun: Fixed argument missing for comment_load()[_multiple]().
• #363354 by xjm, aspilicious, casey, Boobaa: Fixed Tableselect should only select enabled checkboxes.
• #1295456 by pillarsdotnet: Fixed Add missing '$' character in docblock for DrupalWebTestCase::drupalGetNodeByTitle() function.
• #1295460 by TR, pillarsdotnet: Fixed Add missing '$' character to docblock for taxonomy_get_term_by_name() function.
• #1295462 by pillarsdotnet: Fixed Add missing '$' character to docblock for _theme_load_registry() function.
• #825972 by daniels220, Reidsy, jhodgdon: Fixed sess_write()/sess_read() documentation should recommend instead.
• #1110650 by oriol_e9g, JohnAlbin, linclark, dixon_: Fixed comment-by-anonymous class never appears.
• #1247626 by sven.lauer: Fixed hook_install()/hook_uninstall() doc does not specify that the implementations must live in the .install file.
• #1177738 by catch: Speed up theme registry rebuilds when multiple themes are enabled.
• #1282956 by rickmanelius, pgrond: Fixed Node revision log of '0' is ignored.
• #1060772 by agentrickard, DeweyOxberger: Fixed Create a view of taxonomy terms (Views UI) and get an error from hook_form_alter().
• #1118404 by Damien Tournoud, keichee, bfroehle: Fixed 'Manual updates required' table broken.
• #1018050 by sun: Provide node type/bundle in comment_entity_info().
• #1278160 by tim.plunkett: Lower the logging severity level of 'orphaned actions'.
• #879580 by arithmetric: Fixed States fail when using integer values for select/radio dependencies.
• #1050606 by jhodgdon, bxtaylor: Fixed menu_tree_data() doc needs more detail.
• #790770 by swentel, jhodgdon, David_Rothstein, naxoc: Fixed 'Add to shortcuts' link should not appear on 403/404 pages.
• #1290486 by arthurf: File.mimetypes needs entry for m4v.
• #1264894 by Devin Carlson, James_Stallings: Fixed The 'Parameters' section shows HTML tags are rendered as plain text.
• #1113702 by franz: Fixed Comment in url_is_external() wrong.
• #1294284 by Chi: Code style fix for field_ui().test.
• #881376 by marcvangend: Fixed 'Run the clean URL test' UX is broken.
• #520106 by JohnAlbin, pillarsdotnet, chx, sun, Nick Lewis, drifter, Mark Trapp: Fixed No way to dynamically set active trail.
• #1040810 by Tor Arne Thune, jhodgdon: Fixed UPGRADE.txt describes erroneous step and should mention release notes.
• #1226796 by sun, catch, Damien Tournoud: Fixed Not equal operator '!=' is not supported by all databases, must be '<>'.
• #848546 by mlncn: Fixed Throbber versus Progress bar help text incorrect?.
• #1242460 by Chi: Code style fix for database_test().test.
• #1201024 by pillarsdotnet: drupal_realpath() should describe when it should be used.
• #955848 by anrikun, Kars-T, catch, chx: when editing an existing node with a link, the link itself is listed in 'Parent item'
• #1282986 by valthebald: password of '0' ignored in drupal_http_request().
• #1286650 by megensel: incorrect API usage in system.admin.inc.
• #1253204 by fietserwin: user_field_extra_fields() does not translate labels.
• #1271026 by swentel: name of shortcut should be required.
• #1263882 by TR, cweagans: removed trailing whitespace
• #706894 by amateescu, sun: poll form uses #description for a button.
• Reverting #1266348. We can't change APIs in a stable release.
• #1008250 by jhodgdon, bxtaylor: clean up hook_init() and hook_boot() doc.
• #1116416 by Kars-T, Coornail: use 'Header set' instead of 'Header append' in .htaccess to avoid double encoding.
• #1283244 by pillarsdotnet, TR: request_uri() documentation did not conform to standards.
• #1266348 by kathyh, webchick: improved consistency of internal APIs
• #1059268 by Berdir: Fixed Files are lost when adding multiple files to multiple file fields at the same time.
• #1116416 by Kars-T, Coornail: use 'Header set' instead of 'Header append' in .htaccess to avoid double encoding.
• #1153122 by Mac_Weber, tim.plunkett: Fixed padding to make Save button in admin page more visible.
• #952772 by oriol_e9g, mdupont, bleen18, idflood: theme_html_tag() optional value not really optional.
• #1078646 by Nneka, droplet, Vincent Giersch, larowlan: incorrect link to the author's profile in topic column if topic has replies.
• #1262064 by michaellenahan: default.settings.php has formatting issue with numbered list.
• #1280718 by theborg: white space in forum code.
• #1281436 by dixon_: double spaces in comment.module.
• #1279888 by 10oclock: missing table prefix on query in node_feed().
• #1263912 by TR: run-tests.sh fails to print out list of tests to be run.
• #1273032 by michaellenahan: conf_path() has formatting issue with numbered list.
• #1275214 by CashWilliams: block_load() should not refer to .
• #1278182 by CashWilliams: user-profile.tpl.php should use not in example.
• #1276746 by jessebeach: the title of the ui.mouse library in system.module is incorrectly set to 'jQuery UI: Droppable' instead of 'jQuery UI: Mouse'.
• #999040 by Niklas Fiekas: corrected alternative control structure syntax in theme templates.
• #1185842 by Dave Reid: the [node:author] token does not use format_username().
• #1024328 by pillarsdotnet, droplet: re-use message-16-error.png icon for dblog severity levels higher than LOG_ERR.
• #1260162 by michaellenahan, B√®s: hook_file_insert() doc has no function body.
• #1257638 by michaellenahan, B√®s: hook_menu() example should be changed to not suggest admin/config/foo as path.
• #897650 by Garrett Albright, Damien Tournoud: DatabaseSchema_sqlite()::findTables() shouldn't find indexes.
• #1164808 by mrfelton: block title field was overlooked.
• #1237290 by e-anima, dereine, xjm: menu path length fix.
• #240828 by sun, xjm, David_Rothstein, yoroy: 'This form is outdated. Reload the page and try again' is incorrect and confuses users.
• #160163 by c960657, Pancho, danillonunes: login with OpenID link has mis-encoding of #.
• #1266694 by Damien Tournoud: Fixed DatabaseStatementPrefetch doesn't implement fetchColumn().
• #1269178 by catch: add catch as cache system co-maintainer.
• #1263882 by cweagans, TR: Code style: authorize.php.
• #1273444 by Xano: Missing operator docs for EntityFieldQuery's propertyCondition() and addFieldCondition().
• #1212018 by Liam Morland: form required marker in field.form.inc should use theme system.
• #565288 by bfroehle, anarcat, p.brouwers, aspilicious: cannot install Drupal when Drupal.org is 503 (at Drupalcon!).
• #1265294 by sven.lauer: Minor improvement of the documentation page for t().
• #1267092 by xjm: some comment cleanup in block.test.
• #1265586 by James_Stallings, edmund.kwok: remove bitter tasting 'bile' in core documentation ;).
• #799932 by David_Rothstein, Stefan Freudenberg: Fixed Simpletest HTTP authentication credentials should use the 'password' form element.
• #1118016 by dereine, pwolanin: Fixed conditional visibility of a managed_file() using #states attribute does not work.
• #575810 by wojtha, Heine, vzima: Fixed OpenID discovery spec violation - follow redirects.
• #1069778 by msonnabaum: Fixed Conflicting messages from user_pass_submit().
• #1136854 by chx: Fixed MySQL 5.5 breaks speedy testing.
• #1222576 by jox: Fixed file_usage_list() is defective (might return incomplete results).
• #1231856 follow-up by marcingy: Fixed menu_update_7001() breaks if block module disabled.
• #937380 by David_Rothstein, swentel: Fixed errors when submitting the shortcut set configuration page after deleting all shortcuts.
• #787876 by zero2one, avior: Fixed Edit 'My Account' fills the first password field.
• #1069080 by Marie Wendel, droplet: Fixed node_comment_statistics().last_comment_timestamp() description.
• #1216758 by tim.plunkett: Add module and hook as formal parameters in module_invoke().