vTiger 7.2 Release Updates for November 2019

Recently, vTiger released version 7.2, related to major security updates. This was a long-standing demand from many users and community members. Thanks to the entire vTiger team and supportive community members.

Following major updates to the vTiger version 7.2, available to source forge here.

1. Data Integrity Support Through Check permission api:

7.2 API Documentation:

• New APIs checkPermission() and requiresPermission() have been added to the product. Core API definition in includes/runtime/Controller. php Privilege will be set for the user to perform any actions via profile and sharing access.
• Requires Permission holds the standard array of permissions to be verified for the user to perform a particular action.
• Check Permission verifies the defined permission against the User Privileges model. Only on thumbs up from check permission will the respective action be performed. This API is supported for all actions and viewing files.

Examples:

• modules/vTiger/actions/Save.php
  Click here to see more information on where new code has been added.
• modules/vTiger/views/Edit.php
  Click here to see more information on where new code has been added.

Previously, this was addressed at the model level, which led to the slipping of many test cases. To make sure there is no compromise on data integrity, the above specified API has been added to all view and action files.

2. File security through obscurity:

3. Barrier for SQL Injections through Prepared Queries:

• SQL injection was a major issue with the earlier release of vTiger, which has been addressed in the latest version 7.2 by adding more layers to MySQL queries as per the screens below.

4. Open security and performance issues have been addressed:

5. Fix for 60+ high priority issues on code.vtiger.com:

There are more than 60+ issues have been addressed and PR has been released with the updates of vTiger 7.2.

You can download vTiger CRM 7.2.0 from here

Let us know if you needs more information on this

How to trigger workflow on PBX Manager for vTiger
September 17, 2020

Fix of vTiger Default Issue Email Attachment for vTiger 7.2
January 29, 2020

Migration from vTiger 6.x, 7.x, and 7.2 with Free Consultation
November 7, 2019