Recently, vTiger released version 7.2, related to major security updates. This was a long-standing demand from many users and community members. Thanks to the entire vTiger team and supportive community members.
Following major updates to the vTiger version 7.2, available to source forge here.
1. Data Integrity Support Through Check permission api:
7.2 API Documentation:
- New APIs checkPermission() and requiresPermission() have been added to the product. Core API definition in includes/runtime/Controller. php Privilege will be set for the user to perform any actions via profile and sharing access.
- Requires Permission holds the standard array of permissions to be verified for the user to perform a particular action.
- Check Permission verifies the defined permission against the User Privileges model. Only on thumbs up from check permission will the respective action be performed. This API is supported for all actions and viewing files.
Examples:
- modules/vTiger/actions/Save.php
Click here to see more information on where new code has been added. - modules/vTiger/views/Edit.php
Click here to see more information on where new code has been added.
Previously, this was addressed at the model level, which led to the slipping of many test cases. To make sure there is no compromise on data integrity, the above specified API has been added to all view and action files.
2. File security through obscurity:
3. Barrier for SQL Injections through Prepared Queries:
- SQL injection was a major issue with the earlier release of vTiger, which has been addressed in the latest version 7.2 by adding more layers to MySQL queries as per the screens below.
4. Open security and performance issues have been addressed:
5. Fix for 60+ high priority issues on code.vtiger.com:
There are more than 60+ issues have been addressed and PR has been released with the updates of vTiger 7.2.
You can download vTiger CRM 7.2.0 from here
Let us know if you needs more information on this
Do you need more information?
For any further information / query regarding technology, please email us at info@crmtiger.com
OR call us at +1 630 861 8263. Alternately, you can request information by filling out the Contact Us form.