<h2>Editing File: /var/softaculous/rosariosis/changelog.txt</h2><form method='post'><textarea name='content' class='file-edit'>Changes in 12.9.4
-----------------
- Fix regression since 12.9 remove CSRF token from files containing &amp;modfunc= in Exceptions.php &amp; Profiles.php

Changes in 12.9.3
-----------------
- Security fix #397 Unauthenticated stored XSS: remove HTML tags in SaveReport.php, thanks to @Bradsen
- Only return 403 Forbidden code if not AJAX request in Warehouse.php
- Logout if no Staff or Student session ID when modfunc=first-login in Warehouse.php

Changes in 12.9.2
-----------------
- Fix SQL syntax error &quot;AND STUDENT_ID IN()&quot; when nothing to save in InputFinalGrades.php &amp; EnterEligibility.php
- SQL fix &quot;Enroll student for next school year&quot; when student is inactive in Enrollment.fnc.php
- Fix saving new user when current Staff ID set (in other browser tab) &amp; user has no permission to edit User Profile in User.php
- CSP Do not save violations triggered by VisualSPHost in SaveReport.php
- No user in session yet, send 403 Forbidden (99% chances its a bot) in Warehouse.php
- Fix SQL error retro-compatibility with old Grade Level inputs in GetStuList.fnc.php
- Corrections to the Spanish help texts translation in help.mo
- Security fix #390 Reflected XSS - unescaped reflection into `&lt;form action&gt;` in MenuReports.php, thanks to @MDnyn

Changes in 12.9.1
-----------------
- Fix double escaping Course Period Short Name in Courses.php &amp; Courses.fnc.php
- Fix SQL error unknown column 'ssm.STUDENT_ID' in 'on clause', use explicit JOIN in Export.php
- Security fix #377 IDOR: Unauthorized Cross-Roster Data Assignment in TakeAttendance.php, MakeReferral.php, EnterEligibility.php &amp; InputFinalGrades.php
- Security fix #378 BOLA: Students and parents can read other students' transcripts and schedules via `st_arr[]` bypass in Transcripts.fnc.php &amp; PrintSchedules.php, thanks to @weilai-8
- Security fix #379 BOLA: Any authenticated user can read assignment details outside their enrolled courses via `assignment_id` parameter in Calendar.php, thanks to @weilai-8
- SQL use actual null value in DBUpdate() $columns param in AttendanceCodes.php, Menus.php, Accounts.php, ReportCardCommentCodes.php &amp; Address.inc.php
- CSP Do not save violations triggered by AdBlock360 in SaveReport.php
- Add Italian help translation in locale/it_IT.utf8/, thanks to Stefania Binda

Changes in 12.9
---------------
- Fix PHP warning undefined index when school was deleted in School.php &amp; Schools.php
- Security fix Request Forgery: remove modfunc= in links in MarkDownHTML.fnc.php
- Performance: do not sort `functions/*.php` files in Warehouse.php
- SQL performance: replace subqueries with LEFT JOINs in StaffBalances.php, StudentSummary.php, StudentBalances.php &amp; Export.php
- Use Select2 input when more than 12 Grade Levels in GetStuList.fnc.php &amp; Search.fnc.php
- Fix Format Credit Earned, display 0.33 instead of 0.333333333333333 in Transcripts.fnc.php
- Security fix GitHub issue 301 IDOR in save/delete operations, program wide, thanks to @lighthousekeeper1212
- Change &quot;only 1 grading period open at any given time&quot; check from error to warning in MarkingPeriods.php
- CSP Do not save violations triggered by &quot;sandbox eval code&quot; in SaveReport.php
- First login, prefill form inputs with default &quot;admin&quot; username &amp; password in index.php
- HTML use number type for Days Absent and Course Period Absences widgets inputs in Absences.php &amp; CpAbsences.php
- HTML use number type for custom Number field inputs in Search.fnc.php
- Fix show &quot;Use Grade Scale Comments&quot; checkbox for every tab in InputFinalGrades.php
- Use button() with &quot;+&quot; icon instead of text link in MassDrops.php, MassRequests.php &amp; MassSchedule.php
- Fix skip begin / end dates / number if &quot;No Value&quot; checked in CustomFields.fnc.php
- Security fix #372 forbid path traversal sequences in FileUpload.fnc.php, thanks to @kazisabu
- Security fix #371 Request Forgery add CSRF token to links/forms containing `modfunc=` in PreparePHP_SELF.fnc.php, Warehouse.php, index.php, warehouse.js &amp; Requests.js, thanks to @kazisabu
- Remove `modfunc=` from Find a Student/User form URL if no modfunc set in Search.inc.php
- Fix PHP8.5 deprecated using null as an array offset in Config.fnc.php
- Multilingual course title: SQL fix search Course Title add wildcard in Requests.php
- Remove `&amp;modfunc=` from link, never actually used in Assignments.php, MassCreateAssignments.php, Courses.php &amp; MarkingPeriods.php
- Skip CSP violation triggered by domain: overbridgenet.com, .goguardian, tl.ytlogs.ru, mainf.global-cache.online &amp; wallet.binance.com in SaveReport.php
- Remove duplicate GET params from form URL (start &amp; end date, others) in Percent.php, CategoryBreakdown.php, CategoryBreakdownTime.php, StudentFieldBreakdown.php, TransactionsReport.php, AddDrop.php, Calendar.php, StudentBreakdown.php &amp; AddDropBreakdownTime.php
- Security fix #375 Authenticated Time-based SQL Injection (non-student roles) in StudentSumary.php, thanks to @Cresp0
- Security fix #376 IDOR: Unauthorized Cross-School Data Assignment in AddAbsences.php, AddActivity.php, Requests.php, MassAssignFees.php, MassAssignPayments.php, AssignOtherInfo.php &amp; AddStudents.php, thanks to @Cresp0
- HTML display checkbox before its label in MailingLabels.php, ProgressReports.php &amp; PrintStudentInfo.php
- Fix SQL error when &quot;Search All Schools&quot; checked: update UserMP() in Search.fnc.php
- Default School Year: 2026 (2026-2027) in config.inc.sample.php, rosariosis.sql &amp; rosariosis_mysql.sql
- Add Italian translation in locale/it_IT.utf8/, thanks to Stefania Binda

Changes in 12.8.1
-----------------
- Fix Advanced Search &quot;No Value&quot; for custom date and number fields in CustomFields.fnc.php
- Fix SQL error escape CSP string in Content_Security_Policy/includes/common.fnc.php
- Multilingual course title: use ParseMLField() in StudentList.php
- Fix valid domain check: remove FILTER_VALIDATE_DOMAIN, too permissive in Content_Security_Policy/includes/common.fnc.php
- Fix save various domains in Content_Security_Policy/config.inc.php
- CSS theme FlatSIS fix &quot;Prevent body from scrolling when submenu open&quot; in stylesheet.css

Changes in 12.8
---------------
- Fix PHP warning undefined array key when Meal Item Short Name was edited in MenuReports.php
- Fix PHP8.5 deprecated using null as an array offset, use an empty string instead in program wide
- Fix PHP warning undefined array key when switching Meals in ServeMenus.php
- Fix SQL error when no Quarters found (Course widget) in Course.php
- Fix PHP8.5 deprecated trim() Passing null to parameter 1 of type string in StudentFieldBreakdown.php &amp; StudentBreakdown.php
- Display Enrollment Calendar to Student in Calendar.php
- CSS add .calendar-block class in CalendarDay.inc.php &amp; stylesheet.css
- CSS themes transition slide menu &amp; help in rtl.css, stylesheet.css &amp; zresponsive.css
- JS slide menu &amp; help, use CSS class .slide in warehouse.js
- JS fix rt2colorBox if content is InputDivOnclick in warehouse.js
- JS Prevent focusing input when opening tooltip on mobile devices in csp/functions.js
- CSS themes search form adjustments &amp; increase number input width in stylesheet.css &amp; zresponsive.css
- CSS FlatSIS theme adjust stackable list margin &amp; colorBox padding in stylesheet.css &amp; zresponsive.css
- Sanitize redirect_to: remove &amp;delete_ok=1 in index.php
- Add $html parameter &amp; pass $pdf object by reference to the functions/PDF.php|pdf_stop_pdf action hook in PDF.php &amp; Actions.php
- CSS FlatSIS theme style checkbox &amp; radio inputs in checkbox-radio.css &amp; Gruntfile.js
- List Courses to Secondary Teacher in StudentGrades.php
- Add Secondary Teacher to Tip Message in StudentGrades.php &amp; StudentAssignments.fnc.php
- Add RosarioSIS URL to Installation Poll in FirstLogin.fnc.php
- SQL add comment to Student/User Field columns in rosariosis.sql &amp; rosariosis_mysql.sql
- SQL add comment to Field column in Fields.fnc.php, StudentFields.php, PeopleFields.php, AddressFields.php, SchoolFields.php &amp; UserFields.php
- Remove Database Backup program (secure by default) in DatabaseBackup.php, School_Setup/Menu.php, rosariosis.sql, rosariosis_mysql.sql
- Remove $DatabaseDumpPath global variable in diagnostic.php, config.inc.sample.php, INSTALL.md, INSTALL_es.md &amp; INSTALL_fr.md
- Remove check for passthru function in Portal.php
- Use SQLLimitForList() function in AddDrop.php &amp; ClassSearchWidget.fnc.php
- Use DBUpdate() function, program wide
- Allow save unchecked state when checkbox field is required in AssignOtherInfo.php
- Security fix arbitrary Table Row Deletion via `$_REQUEST['table']` in Medical.inc.php, thanks to @lighthousekeeper1212
- SQL performance: use explicit JOINs &amp; remove School column in Portal.php
- SQL performance + harmonize SQL logic for Block Periods in AddAbsences.phph, Administration.php, TakeAttendance.php, TeacherCompletion.php, UpdateAttendanceDaily.fnc.php &amp; Courses.fnc.php
- Skip CSP violation triggered by Facebook Click Identifier in SaveReport.php
- Fix SQL error when staff is manually created in next school year in Rollover.php
- Fix SQL error when school was created after Rollover and not rolling schools in Rollover.php
- SQL add &quot;Review RosarioSIS&quot; link to Resources in rosariosis.sql &amp; rosariosis_mysql.sql
- Spanish translation: do not capitalize words &amp; use &quot;tú&quot; instead of &quot;usted&quot; in rosariosis.po, help.po &amp; rosariosis.sql

Changes in 12.7.5
-----------------
- Fix SQL showing all assignment types when &quot;Hide previous quarters assignment types&quot; is checked in Assignments.php
- Fix SQL error when Marking Period ID is Progress Period in GetMP.php

Changes in 12.7.4
-----------------
- CSP Skip CSP violation triggered by domain: connect.facebook.net, safesearchinc.com, infird.com in SaveReport.php
- Fix #367 SQL do not use GetStuList() so we get all students in class in Grades.fnc.php, thanks to @Macadoshis
- JS Fix regression since 12.5 trigger change event when selecting date from calendar in calendar-setup.js

Changes in 12.7.3
-----------------
- Fix Help button not showing help, compile error in plugins.min.js

Changes in 12.7.2
-----------------
- Fix Checkbox input, use `_makeCheckboxInput()` function in Schools.php
- Fix CSS responsive header, use .rseparator class in Grades.php, AnomalousGrades.php &amp; Statements.php
- Fix SQL error invalid input syntax for type date: &quot;&quot; in AssignOtherInfo.php
- Fix Final Grade when assignments are weighted in StudentGrades.php
- Fix Multilingual course title: use ParseMLField() in ProgressReports.php, thanks to @Macadoshis
- Fix CSS responsive List width: do NOT use the .fixed-col class, use pure CSS in Schedule.inc.php
- Fix regression since 12.5 JS update body on mobile: menu button adds #! to URL, remove hash in warehouse.js
- Fix regression since 12.5 JS do not setInnerHTML if no target in warehouse.js
- Fix CSS theme WPadmin menu loading icon height in stylesheet.css &amp; zresponsive.css

Changes 12.7.1
--------------
- Fix reassign existing Barcode to student Food Service account in Food_Service/Students/Accounts.php
- Add `_skipDie()` function, used when skipping CSP report in SaveReport.php
- Multilingual course title: use ParseMLField() in Schedule.inc.php
- CSS responsive fix Schedule table, use .rbr class in Schedule.inc.php
- Skip CSP violation triggered by safari-web-extension &amp; sandbox eval code in SaveReport.php
- Fix Chrome user logged out after CSP violation in SaveReport.php

Changes in 12.7
---------------
- SQL allow array in $where_columns: WHERE COLUMN IN(val1,val2) in DBUpsert.php
- Fix #363 Pull-Down field: add &quot;No Value&quot; option in AssignOtherInfo.php
- Fix #363 Checkbox Field: save unchecked state in AssignOtherInfo.php
- Fix #363 Auto Pull-Down field: add &quot;-Edit-&quot; option in AssignOtherInfo.php
- Rework save logic &amp; use DBUpdate() function in AssignOtherInfo.php
- Move PhpMyAdmin\MoTranslator classes to match their namespace in classes/PhpMyAdmin/MoTranslator/
- Move Symfony\Polyfill classes to match their namespace in classes/Symfony/Polyfill/
- Remove XML-RPC compatibility classes in classes/PHPCompatibility/Xmlrpc/
- Remove XML-RPC compatibility functions in ProgramFunctions/PHPCompatibility/xmlrpc.php &amp; plugins/Moodle/client.php
- Move Services_JSON class to match its namespace (none) in classes/
- Move PHPMailer\PHPMailer classes to match their namespace in classes/PHPMailer/PHPMailer/
- Move mikehaertl classes to match their namespace in classes/mikehaertl/
- Move Shuchkin classes to match their namespace in classes/Shuchkin/
- Move StaffWidgets &amp; Widgets classes to match their namespace in classes/RosarioSIS/
- Move StaffWidget classes to match their namespace in classes/RosarioSIS/StaffWidget/
- Move Widget classes to match their namespace in classes/RosarioSIS/Widget/
- Autoload classes (PSR-4): classes/[Namespace]/[Class].php in Warehouse.php
- Autoload classes (PSR-4): remove require_once, program wide
- Custom widget classes should now use \Addon_Name\StaffWidget\ or \Addon_Name\Widget\ namespace
- Fix &quot;Last Year Course&quot; widget responsive: add .st class in modules/Scheduling/functions.inc.php
- Deprecate PhpDebugBar() &amp; Kint() functions in Debug.fnc.php
- Minor corrections to the Russian and Ukrainian translations in rosariosis.po &amp; rosariosis.sql
- Simplify PHP logic of HackingLog(): 17 lines gain in HackingLog.fnc.php
- Use MultipleCheckboxInput() function in `_makeMultipleInput()` in StudentsUsersInfo.fnc.php
- Fix PHP8.5 deprecated curl_close() function in curl.php
- Double (free) Comment input size when MP does not do Comments in InputFinalGrades.php
- Misconfiguration hint: Scale Value different from max GPA Value in ReportCardGrades.php
- Misconfiguration hint: Minimum Passing Grade &gt; Scale Value in ReportCardGrades.php
- CSS themes enlarge custom Numeric field in stylesheet.css
- HTML increase &quot;Course&quot; input maxlength to 100 in EditReportCardGrades.php
- HTML use number type for Grade and Credit inputs in EditReportCardGrades.php
- Do not save CSP violations triggered by browser extensions, some domains &amp; custom ones in SaveReport.php
- Add Czech (Czech Republic) translation in locale/cz_CZ.utf8/
- Fix regression since 12.5 Calendar select input was erasing calendar days in Calendar.php
- Fix PHP8.5 deprecated imagedestroy() function in ImageResizeGD.php

Changes in 12.6
---------------
- HTML responsive stackable tables in Export.php
- Export list: add Total row in ListOutput.fnc.php
- Add rounded flag icons in locale/[locale_code]/flag.png
- Fix #362 Order by Points as Letter Grade is alphabetically sorted (may be inaccurate) in Grades.php
- Add Activity field is required + &quot;Remove&quot; activity (instead of &quot;Delete&quot;) in Eligibility/Student.php
- Fix responsive image height, rename $width param to $height in FS_Icons.inc.php &amp; MenuItems.php
- HTML add fieldset &amp; padding to PopTable in MassRequests.php
- CSS add .class-picture class in PrintClassPictures.php
- CSS fix #365 pictures width, height &amp; name overflow in PrintClassPictures.php
- Remove `_saveRosarioModules()` local function, use Config() in Modules.inc.php
- Remove `_saveRosarioPlugins()` local function, use Config() in Plugins.inc.php
- CSS Fix first column (list, table) in DailySummary.php, Grades.php, Search.inc.php, rtl.css, stylesheet.css &amp; zresponsive.css
- CSS FlatSIS theme reduce bottom buttons height in stylesheet.css &amp; zresponsive.css
- Display short month and year labels instead of short month only in CategoryBreakdownTime.php
- SQL order Transcript Grades by Course Title in Transcripts.fnc.php
- Add Administrator option to Visible To User Profiles in Resources.fnc.php, rosariosis.sql &amp; rosariosis_mysql.sql
- Create Student Account: Force Default School in index.php, Configuration.php, Student.php, General_Info.inc.php, rosariosis.sql &amp; rosariosis_mysql.sql
- SQL add csp_reports table in rosariosis.sql &amp; rosariosis_mysql.sql
- Add Content Security Policy plugin in plugins/Content_Security_Policy/, rosariosis.sql &amp; rosariosis_mysql.sql
- Update to version 12.6 in Update.fnc.php
- Add Content-Security-Policy-Report-Only HTTP header in Warehouse.php
- Fix SQL error foreign keys: force roll Schools in Rollover.php
- Update French &amp; Spanish translations in rosariosis.po
- Add Russian &amp; Ukrainian translations in InstallDatabase.php, locale/ru_RU.utf8/ &amp; locale/uk_UA.utf8/

Changes in 12.5
---------------
- Add '&amp;modfunc=save' to form URL in Expenses.php, Incomes.php, Salaries.php, StaffPayments.php, DisciplineForm.php, Referrals.php, EnterEligibility.php, InputFinalGrades.php, StudentFees.php, StudentPayments.php &amp; Preferences.php
- SQL case-insensitive username uniqueness check in ImportUsers.fnc.php
- Fix HTML error label's for attribute doesn't match any element id in General_Info.php
- Fix add .tinymce CSS class when class already set in $extra param in Inputs.php
- JS add CSP root, functions &amp; programFunctions (global, always loaded) in Gruntfile.js, assets/js/csp/
- JS add setInnerHTML() function in warehouse.js
- JS add submenuOnTouch() function in warehouse.js
- JS Prevent submitting form if no checkboxes are checked in warehouse.js &amp; Inputs.php
- JS add bottomButtonClick() Bottom.php buttons click related events in warehouse.js &amp; Bottom.php
- JS deprecate switchMenu() function: use `&lt;details&gt;&lt;summary&gt;` instead in warehouse.js, General_Info.inc.php, Search.fnc.php &amp; Widgets.php
- JS ajaxPrepare(): handle #ajax_update_body, #menu_user_session &amp; #warehouse_user_session in warehouse.js, Side.php &amp; Warehouse.php
- JS use #x_redirect_url value instead of XRedirectUrl global var in warehouse.js &amp; PreparePHP_SELF.fnc.php
- JS Trigger custom ajaxPrepare event in warehouse.js
- Deprecate `_printPageHead()` function &amp; rework display logic in PasswordHelp.php
- JS add backPrompt() function in BackPrompt.js &amp; Prompts.php
- JS remove inline code from CaptchaInput() in Inputs.php &amp; CaptchaInput.js
- JS remove inline code from FileInput() in Inputs.php &amp; FileInput.js
- JS remove inline code from MLTextInput() in Inputs.php &amp; MLTextInput.js
- JS remove inline code from MarkDownInputPreview() in Inputs.php &amp; MarkDownInputPreview.js
- JS required group of checkboxes in Inputs.php &amp; MultipleCheckboxInput.js
- JS remove inline code from PasswordInput() in Inputs.php &amp; PasswordInput.js
- JS remove inline code from DeletePrompt() &amp; Prompt() + add .button-prompt-cancel CSS class in Prompts.php &amp; Prompt.js
- JS remove inline code from Search() in Search.fnc.php &amp; Search.js
- JS remove inline code from Select2Input() in Inputs.php &amp; Select2Input.js
- JS remove inline code from TinyMCEInput() in Inputs.php &amp; TinyMCEInput.js
- JS remove inline code from Widget_course in Widget.php &amp; Course.js
- JS remove inline AJAX call in ClassRank.inc.php, FinalGrades.inc.php, Addon.fnc.php, Modules.inc.php, Plugins.inc.php &amp; AjaxUrl.js
- JS remove inline code from MoodleImportFormSubmitJS() in Moodles/config.inc.php, ImportUsers.fnc.php &amp; ImportFormSubmit.js
- JS remove inline reload menu code in MarkingPeriods.php, Rollover.php, Modules.inc.php, Profiles.php &amp; ReloadMenu.js
- JS remove inline code from `_makePaymentsCommentsInput()` in Accounting/functions.inc.php &amp; MakePaymentsCommentsInput.js
- JS remove inline code from program in Administration.php &amp; Administration.js
- JS remove inline code from program in FixDailyAttendance.php &amp; FixDailyAttendance.js
- JS remove inline code from RegistrationAdminContactEnable() in RegistrationAdmin.fnc.php &amp; RegistrationAdminContactEnable.js
- JS remove inline code from RegistrationSiblingUseContactsAddress() in Registration.fnc.php &amp; RegistrationSiblingUseContactsAddress.js
- JS remove inline code from program in MassCreateAssignments.php &amp; MassCreateAssignments.js
- JS remove inline code from StudentAssignmentSubmissionOutput() in StudentAssignments.fnc.php &amp; StudentAssignmentSubmissionOutput.js
- JS remove inline code from program in ChooseCourse.php &amp; ChooseCourse.js
- JS remove inline code from program in ChooseRequest.php &amp; ChooseRequest.js
- JS remove inline code from program in Export.php &amp; Export.js
- JS remove inline code from program in Courses.php &amp; Courses.js
- JS remove inline code from program in MassDrops.php &amp; MassDrops.js
- JS remove inline code from program in MassRequests.php &amp; MassRequests.js
- JS remove inline code from program in MassSchedule.php &amp; MassSchedule.js
- JS remove inline code from program in Requests.php &amp; Requests.js
- JS remove inline code from program in Schedule.php &amp; Schedule.js
- JS remove inline code from program in Scheduler.php &amp; Scheduler.js
- JS remove inline code from program in AccessLog.php &amp; AccessLog.js
- JS remove inline code from program in Configuration.php &amp; Configuration.js
- JS remove inline code from program in MarkingPeriods.php &amp; MarkingPeriods.js
- JS remove inline code from program in PortalPolls.php &amp; PortalPolls.js
- JS remove inline code from program in Rollover.php &amp; Rollover.js
- JS remove inline code from `_makePaymentsCommentsInput()` in Student_Billing/functions.inc.php &amp; MakePaymentsCommentsInput.js
- JS remove inline code from Addresses &amp; Contacts tab in Address.inc.php &amp; Address.js
- JS remove inline code from General Info tab in General_Info.inc.php &amp; CreateStudentAccount.js
- JS remove inline code from program in StudentLabels.fnc.php &amp; StudentLabels.js
- JS remove inline code from BottomButtonBackUpdate() in Bottom.fnc.php &amp; BottomButtonBackUpdate.js
- JS remove inline code from ChartjsChart() in Charts.fnc.php &amp; ChartjsChart.js
- JS remove inline code from GetFieldsForm() in Fields.fnc.php &amp; FieldsGetForm.js
- JS remove inline code from SubstitutionsInput() in Substitutions.fnc.php &amp; SubstitutionsInput.js
- JS fix CSP error: use setInnerHTML() instead of jQuery .append() function in jquery.colorbox.js &amp; jquery.colorbox-min.js
- JS not available, reload page (eg. when reopening closed tab) in Warehouse.php, noJsReload.js &amp; warehouse.js
- Module is addon, set custom module icon &amp; remove $icon param in DashboardModule.fnc.php
- CSP Redirection is done in HTML in HackingLog.fnc.php, Theme.fnc.php, Student.php &amp; User.php
- Fix reload theme when &quot;Force&quot; checked in Theme.fnc.php
- CSP add .onmouseover-tipmsg CSS class, use `data-title` &amp; `data-msg` attributes in TipMessage.fnc.php
- Redirection is done in HTML in case current request is AJAX in Warehouse.php
- Add `_gradeScaleInputHtml()` &amp; `_search()` private methods to Widget_letter_grade object in Widget.php
- Use Select2 input + AJAX search when scale has more than 1003 grades in Widget.php
- Change User-Agent to &quot;RosarioSIS/1.0; +https://www.rosariosis.org/&quot; in curl.php
- Cache config values, avoid calling Config() function X times in Currency.fnc.php &amp; User.fnc.php
- Submit selected date: use `onchange-date-submit` CSS class &amp; `data-name` attribute in Date.php
- Add CSS classes to .list element in ListOutput.fnc.php
- CSP use the 'vertical-tab-navigation' class option for ListOutput() in Grades.php &amp; InputFinalGrades.php
- CSP remove unsafe-inline Javascript: use `data-url` attribute in ListOutput.fnc.php
- Use MultipleCheckboxInput() function in AddAbsences.php
- CSP add .onclick-checkall CSS class &amp; use `data-name-like` attribute in AddAbsences.php, DuplicateAttendance.php, Exceptions.php &amp; Profiles.php
- CSP add .onclick-toggle CSS class &amp; use `data-id` attribute in CreateParents.php, ReportCards.fnc.php &amp; Transcripts.fnc.php
- FinalGradeSave() can save COMMENT column in FinalGrades.inc.php
- Include Students active as of Timeframe end date in DailyTransactions.php
- CSP add .onchange-maybe-edit-select CSS class in StudentsUsersInfo.fnc.php &amp; Address.inc.php
- Prevent using username, or email in the password in General_Info.inc.php
- CSP add .onclick-ajax-link &amp; .onchange-ajax-link CSS classes, use `data-link` attribute, program wide
- CSP add .onchange-ajax-post-form CSS class, program wide
- CSP use curl POST instead of AJAX to send data to external domain in FirstLogin.fnc.php
- HTML space gain: remove minus between letter &amp; percent grades in Grades.php
- SQL remove unused columns in GradebookBreakdown.php
- CSP use `&lt;template&gt;` for InputDivOnclick() in Inputs.php
- CSS IE fix hide `&lt;template&gt;` in stylesheet.css
- JS Fix for Internet Explorer in warehouse.js &amp; csp/functions.js
- Simplify isAJAX() function code in Warehouse.php
- CSS add .tinymce-document class: double default height in HonorRoll.php, Letters.php &amp; stylesheets.css
- CSP: use `&lt;details&gt;&lt;summary&gt;` CSS deprecate .switchMenu in stylesheet.css
- CSS add `&lt;pre&gt;` styling in colors.css &amp; stylesheet.css
- CSS FlatSIS theme Prevent body from scrolling when submenu open + scroll submenu in stylesheet.css
- CSP use PHP instead of JS for salute header in Portal.php
- Fix database partly installed due to user abort in InstallDatabase.php
- Fix SQL error null value in column &quot;student_id&quot; in Schedule.php
- Fix PHP warning when (Current) User not found / was just deleted in Current.php
- Include Reporter &amp; Incident Date widgets on the Find a Student form in ReferralLog.php
- Fix PHP notice undefined index: elements in ReferralLog.php
- HTML responsive adjust Contact form name inputs on small desktop screen in Registration.fnc.php
- Update French &amp; Spanish translations in rosariosis.po
- Fail if no curl installed in FirstLogin.fnc.php &amp; Addon.fnc.php
- Fix regression since 12.1 wkhtmltopdf error segmentation fault when CSS quotes property defined in wkhtmltopdf.css
- Fix PHP fatal error unsupported operand types: string - int in database.inc.php
- Fix HACKING ATTEMPT in SetUserStudentID() when &quot;Search All Schools&quot; checked in Search.fnc.php, Statements.php, PrintStudentInfo.php &amp; Students/Search.inc.php

Changes in 12.4.3
-----------------
- SQL fix #359 duplicate entries when school is renamed after Rollover in AddDrop.php, thanks to @HubertQuiquet
- Fix regression since 12.4.1 search discipline numeric field in Widget.php
- Fix PHP fatal error division by zero: Percent Total is 0%, N/A final grade in FinalGrades.inc.php
- Fix check requested enrollment date for conflict (instead of today) in Schedule.php
- Fix exact search for MySQL: double quotes are escaped in Search.fnc.php

Changes in 12.4.2
-----------------
- Fix PHP fatal error failed opening required add-on file in Student.php &amp; User.php
- Fix remove '&amp;bottomfunc=print' from redirect_to URL param in index.php
- Fix include students active as of requested MP's end date in Grades.fnc.php
- CSS fix image height inside responsive table to colorBox in zresponsive.css

Changes in 12.4.1
-----------------
- Fix PHP warning: fatal error when end date &lt; start date in AddDropBreakdownTime.php &amp; CategoryBreakdownTime.php
- Fix search discipline numeric field for &quot;0&quot; value in Widget.php
- SQL case-insensitive username uniqueness check in Student.php, User.php &amp; ImportUsers.fnc.php
- Deprecate `$extra['second_col']` &amp; `$extra['extra_search']`, use `$extra['search']` instead in ReferralLog.php, ClassSearchWidget.fnc.php, Search.inc.php &amp; Export.php
- Fix MySQL error fsti.TRANSACTION_ID isn't in GROUP BY in MenuReports.php
- Fix &amp; simplify form &amp; tabs URL, use GET method &amp; `PreparePHP_SELF()` in MenuReports.php
- Fix SQL syntax error in Food_Service/Users/ActivityReport.php
- Remove useless Find a Student/User search in ActivityReport.php
- Allow list export in ActivityReport.php
- SQL INSERT STUDENT_ID INTO food_service_transactions in Food_Service/Students/Transactions.php
- Fix display value text when associative $options array in Inputs.php
- CSS add .valign-middle class to ≥ &amp; ≤ signs for date fields in Widget.php &amp; Search.fnc.php
- Security #358 Add full timestamp to file name in StudentAssignments.fnc.php

Changes in 12.4
---------------
- HTML use header4 instead of nested fieldset in Registration.fnc.php
- New &quot;Add / Drop Breakdown over Time&quot; program in AddDropBreakdownTime.php
- Hide &quot;Include Parents of Inactive Students&quot; checkbox if profile is not parent in Users/Search.inc.php
- Add AllowEditTemporary() &amp; AllowEditTeacher() functions in AllowEdit.fnc.php
- Use AllowEditTemporary() &amp; AllowEditTeacher() functions, program wide
- Security: Security: allow everyone to use Portal, allow admin only to use popups in AllowEdit.fnc.php
- Remove unused `$extra['staff_fields']['view']` &amp; `$extra['student_fields']['view']` vars in GetStaffList.fnc.php, GetStuList.fnc.php &amp; Search.inc.php
- Use vertically align list data option 'valign-middle' in StudentSummary.php
- Fix PHP warning Undefined array key 1 in CategoryBreakdown.php, CategoryBreakdownTime.php, StudentFieldBreakdown.php &amp; StudentBreakdown.php
- Select Incomplete code when N/A grade in EnterEligibility.php
- Security fix: default to none when selected profile does not exist in User.php
- Fix PHP warning undefined variable $date_select when no calendars in Eligibility/TeacherCompletion.php
- Update French &amp; Spanish translations in rosariosis.po
- Security: add `.htaccess` file to block direct access to potentially sensitive files in .htaccess
- CSS WPadmin theme fix password strength bars in stylesheet.css
- Move the &quot;Use Grade Scale Comments&quot; checkbox down to the next header in InputFinalGrades.php
- Hide totals if user has no access to the Daily Transactions program in Accounting/includes/Dashboard.fnc.php &amp; Student_Billing/includes/Dashboard.fnc.php

Changes in 12.3.2
-----------------
- Multilingual course title: use ParseMLField() in TeacherCompletion.php, Grades/Configuration.php, FinalGrades.php, MassCreateAssignments.php, ReportCardComments.php, StudentAssignments.fnc.php, StudentGrades.php, Portal.php, Scheduling/functions.inc.php &amp; Calendar.php

Changes in 12.3.1
-----------------
- CSS fix themes for RTL (Arabic): submenu on mouseover, arrows, password input, calendar days in rtl.css
- CSS themes remove deprecated .toggle class &amp; small adjustments in stylesheet.css &amp; zresponsive.css
- Default School Year: 2025 (2025-2026) in config.inc.sample.php, rosariosis.sql &amp; rosariosis_mysql.sql

Changes in 12.3
---------------
- Multilingual course title: use ParseMLField(), program wide
- Multilingual course title: SQL change title column type from varchar(100) to text in Update.fnc.php, rosariosis.sql &amp; rosariosis_mysql.sql
- Multilingual course title: use MLTextInput() in Courses.php
- MLTextInput() fix use of 'required' in $extra in Fields.fnc.php, Inputs.php &amp; Courses.php
- Fix PHP8.4 Constant CURLOPT_BINARYTRANSFER is deprecated in curl.php
- Fix PHP8.4 deprecated passing E_USER_ERROR to trigger_error() in curl.php &amp; Markdownify/Converter.php
- Fix PHP8.4 Implicitly marking parameter as nullable is deprecated in Parsedown.php
- Security: Cache killer: use file last modified time hash instead of RosarioSIS version in Warehouse.php
- Include PHP ctype extension emulation by Symfony in Ctype.php, PHPCompatibility.php &amp; ctype.php
- Themes: Remove unused font files, 427KB gain in FlatSIS/fonts/Lato/ &amp; WPadmin/fonts/opensans/
- WPadmin theme: convert ttf to woff2 font files, 105KB gain in WPadmin/fonts/opensans/
- CSS WPadmin: Fix Dashboard tip message row too tall in stylesheet.css
- Move SQL translation file to locale/[locale_code]/ folder
- Fix Rollover order: move Grading Scales before Courses in Rollover.php
- Allow object methods (callable) in $functions param in DBGet.fnc.php
- Use DBInsert() &amp; DBUpdate() functions, program wide
- Fix potential SQL error SELECT DISTINCT, ORDER BY expressions must appear in select list in ReportCards.fnc.php
- CSS use .legend-gray.size-1 for details label in StudentAssignments.fnc.php
- Fix regression since 12.2.3 Save null percent: N/A final grade in FinalGrades.inc.php
- Save null percent: N/A for all children Marking Periods case in FinalGrades.inc.php

Changes in 12.2.3

Fix return empty array when no &quot;Course-specific Comments&quot; in ReportCards.fnc.php
Fix PHP fatal error Unknown format specifier &quot;,&quot; in Greek translation in locale/el_GR.utf8/rosariosis.po
Fix SQL error when percent grade &gt; 999.9 in FinalGrades.inc.php
Revert CSS FlatSIS theme adjust tooltip position in stylesheet.css

Changes in 12.2.2

Fix PHP warning undefined offset: 7 when day is Sunday in EnterEligibility.php
CSS WPadmin theme fix .underline-dots wrapping in stylesheet.css
Fix regression since 12.2 PostgreSQL error function sum(text) does not exist in StudentGrades.php
Fix anonymous statistics bar graph for individual assignments: average &amp; Excused * in StudentGrades.php</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fvar%2Fsoftaculous%2Frosariosis'>Back to Directory</a>