Stefan Gabos web developer extraordinaire

Zebra_Form, version 2.7.5 now available

In this version, a bug was fixed where using multiple forms on a single page would disable client-side validation for all forms but the first one; thanks to Pedro Abreu for reporting; fixed a bug where if there were selection groups in a select, it would never pass validation; fixed a bug where placeholders (labels as hints inside textboxes and textareas) were not working on textareas; thanks to Chris for reporting it a long time ago and to Andrei Bodeanschi for recently reminding me about it; elements that have display:none or visibility:hidden are no longer checked in the client-side validation process; the Zebra_Transform plugin is not included anymore in the library; it can be downloaded and used separately from here if needed; as a result, the form’s fancy_form() method is also gone; some additions to documentation;

read more »

Zebra_Form, version 2.7.3 now available

• fixed a bug where dates having the day < 10 would not pass validation; thanks to Dev for reporting;
• fixed a bug where Zebra_TransForm was incorrectly initialized and was transforming controls on the entire page rather than just the current form’s controls;
• fixed a bug that made impossible to set custom classes for the actual <form> tag, through the form’s constructor method; thanks to Sebi Popa for reporting;
• fixed a bug that would cause the script to trigger a warning when a select control would have [] (square brackets) in its name but the multiple attribute was not also set;
• fixed an issue that allowed malicious users to submit arbitrary values instead of the ones defined at the form’s creation, for select controls, checkboxes and radio buttons; the severity of the issue was low as the submitted values were still filtered for cross-site scripting (XSS) attempts, so no real harm could be done; thanks for PunKeel for reporting;
• previously, the library would rely on information available in the $_FILES super-global for determining an uploaded file’s mime type, which, as it turns out, is determined by the file’s extension, representing a potential security risk; now, for PHP versions 5.3.0+ compiled with the “php_fileinfo” extension, the uploaded file’s mime type is determined using PHP’s finfo_file function; thanks to DaveK for reporting;
• now the script throws a JavaScript error if the JavaScript function required by a custom validation doesn’t exists; previously, it would silently ignore the fact;
• updated the Zebra_DatePicker to version 1.1.2
• updated documentation to reflect the recent changes in the Zebra_Image library

read more »