We are pleased to announce that the most recent stable build of our product line, 3.30.01 is now available from the Members' Area: https://members.kayako.net.

3.30.01 STABLE marks a significant milestone in the version 3 product line. With over 150 bug fixes and several security patches, we are recommending that all users upgrade to this version. Several noteworthy changes have been made which everyone should be made aware of, so please read the following upgrade notes carefully before upgrading:

Upgrade notes:

• PHP version 5.1.0 is now the minimum system requirement (5.2.6 recommended).
• The PHP extension 'mcrypt' is now required: PHP: Mcrypt - Manual
• Modifications to timezone-related functionality will require resetting of both the application's global timezone setting (Admin CP >> Settings >> Date & Time >> Time Zone) and per-user timezone settings after installation. Timezones now directly mirror PHP timezones: PHP: List of Supported Timezones - Manual

What's new?

• This release addresses several XSS and SQL injection vulnurabilities.
• As usual, significant progress has been made towards support for international languages.
• Tickets can now be created by KayakoMobile on your PDA.
• Comments (on KB articles, etc.) left by users can now be verified by CAPTCHA.
• Improved database backup functionality
• It is now possible to always conduct chats over HTTPS, even if the help desk is normally accessed through standard HTTP.
• The 'flood protection' functionality and settings have been replaced with a more configurable, robust system: Basics of the new loop cutter

UPDATE: 3.30.01 addresses bugs #742, 761-764 that were present in the 3.30.00 release. Customers running 3.30.00 are encouraged to upgrade.

Change log:

• #40: Calendar duration truncated
• #83: Plain Text Links - Limited To One
• #103: UserID is not updated when ticket owner is changed
• #161: SyncWorks : Task Status
• #108: Total Available Downloads Not Shown On Parent Categories
• #122: Staff without permissions to see a ticket can still see them
• #123: Prefix - Spaces no longer allowed
• #188: <script> Stripped even if stripping disabled
• #178: Invalid username/password message not shown
• #183: " in SLA's names
• #184: Unable to access old tickets
• #189: esupport tagging staff replies to alerts as "recipient" replies if case of email address is different
• #205: IE6: Menus show incorrectly
• #212: Tags not stripped in mouse-over preview
• #243: All news goes out in auto-responder despite being templategroup assigned
• #218: problem with breakline parsing
• #220: Generate visitor tracking code - scp problems
• #222: Followup reply doesn't include signature
• #341: filter for custom fields doesn't work
• #229: attachment names charset problem (related to #130)
• #240: Replies from KM don't use the default "from" e-mail address
• #258: Strip Tags -> Tag match error
• #259: Ad Tracking Report url target
• #260: SLA Menu Items display "A" instead of name
• #276: Do Not Process Ticket Alert Rules
• #280: FSRevolution LoginShare
• #284: Security Bug in SupportSuite
• #292: Timestamp for Billable time entries doesn't match Time Zone time
• #293: Autoclose is not sent in the chosen language
• #308: JavaScript error when using Release function
• #320: Admin CP >> Mail Parser
• #366: Live Chat Plain Text Link's One Per Page
• #334: Push URL
• #342: Wrong HTML buttons displayed
• #344: Message wrong when deleting download category
• #345: Registration Mail in wrong and unknown language
• #346: Billing Entry, blank billing amount, use 0 DON'T JUST DISAPPEAR
• #357: Full SSL support inc. for chat icon/loader
• #361: Quick Insert NOT Updating
• #367: Ticket ID in subject doesn't take precidence over mentioned ticket ID in the body
• #369: Searching changed content
• #371: Text on Export/Import Template Pack button too big for button
• #372: News Articles in Autoresponder don't have a header
• #374: Using original, not modified templates
• #376: Article preview disappears after turning on and using the WYSIWYG/rich text editor on an existing KB article
• #378: Deleting Staff Removes Name from Ticket/Note
• #382: Ticket notification
• #385: 3.11.01 CVS release does not backup properly - swkbarticledata needs a length statement
• #392: AJAX data not in correct charset
• #398: Back-Link missing on KB article view
• #400: Problems Editing and saving ticket views
• #401: Edit Name Does NOT Update
• #409: Wrong message displayed in demo mode
• #410: Can't send priv. msg in demo mode
• #415: Cannot change 'Canned' category to Private
• #417: A red asterix not shown for default required fields on ticket submit
• #418: Regular expressions for breaklines (regex)
• #419: UTF-8 character truncation with dots problem
• #420: Better description for "Registration Required?"
• #433: ModernBill 4 and SMTP does not work.
• #435: Admin CP> Staff> Manage Groups permissions not working.
• #438: LDAP user login issues "remember me"
• #463: parser.lock file should automatically expire
• #464: Custom field text truncated
• #466: New ticket menu shows departments to which staff do not belong
• #470: Knowledgebase search not working in WHMCS integration
• #471: LoginShare modules: must update user e-mail addresses
• #476: 'Staff' replies not identified when Message-ID checking enabled.
• #481: eSupport stops processing new emails via IMAP when the email subject is 150 characters or more.
• #484: SETUP Warning Message
• #489: Changing staff does not refresh the department list
• #490: Client support center should only load the statuses that are available to that department
• #491: Staff assignment cleared on dept. change even when staff is a member of that department
• #492: Chat history page shows lots of chats, not the desired amount
• #494: Drop down order inconsistent
• #495: Request Chat - Always Wrong Department
• #497: RSS news feeds always sent with UTF-8 header
• #500: RSS feed for root Knowledgebase category doesn't have a title
• #506: Staff can ban and delete does not prevent the option from appearing
• #502: If I set an article to expire, the headline remains visible in the RSS feed
• #504: E-mail bans not regex-verified
• #505: Can View Submit Ticket Widget Doesn't Work
• #507: Text descriptions for HTML Button, E-mail Signature, Text Link and Visitor Tracking
• #511: Emailing knowledgebase articles do not send the correct format of links.
• #512: Timezone Settings / Daylight Savings
• #513: Allow HTML tags doesn't work
• #515: External download files not verified
• #517: Date for Live Support Messages
• #518: Parsing of e-mails is slow
• #521: CAPTCHA Authentication for comments
• #522: When an e-mail queue is deleted, From address is null
• #523: Send Password in Auto Responder (Ticket Receipt) setting has disappeared
• #531: Billing entry display doesn't use date/time display setting
• #537: "User is typing" is no longer showing
• #542: internationalization in some files
• #546: Headers of outgoing e-mail not RFC2047 compliant
• #547: Numbers formatted as Gigabytes always show as "0.0 GB"
• #548: Numbers are incorrectly reported as "KB, MB, GB" when they are actually in "KiB, MiB, GiB"
• #549: Fatal Errors thrown in error_log need to be resolved
• #551: Ticket Reply tab doesn't show current due time in the associated field
• #552: Knowledgebase >> Reports >> "Comment" and "Ratings" Reports missing breadcrumb
• #557: Follow-up / set due date does not function
• #558: Due date selector in staff mass reply form does not have hour-granularity
• #559: Time till due for tasks listed under "manage tasks" is incorrect
• #560: Dashboard uses the wrong time span to determine if tickets are due "today"
• #561: Dashboard doesn't show private tasks
• #562: Start and due dates for tasks are not properly rounded down and up, respectively
• #563: Dashboard > New Tickets shows an incorrect value
• #564: Dashboard only shows private news articles
• #568: Due dates from KayakoMobile not processed
• #569: If no e-mail queues are present, KayakoMobile produces an error
• #572: Date ranges for ticket filters
• #573: Date ranges for client news items
• #575: Knowledgebase Reports don't have breadcrumb
• #576: Troubleshooter "popular steps" breadcrumb is wrong
• #577: Tickets >> Reports >> "Department," "SLA," "Response Time" reports breadcrumbs are wrong
• #581: Public appointments with an owner other than the current staff user don't synchronize to Outlook
• #582: Public tasks with an owner other than the current staff user don't synchronize to Outlook
• #584: The setting Admin CP >> Live Support >> Enable Forwarding does not work
• #586: Ticket not visible in views; but can find while searching
• #589: multipart/voice-message
• #590: Tickets mass action staff assignment drop down has the wrong default value
• #593: Template "email_noregistration" links
• #594: Spammers can bypass "registration required" for an e-mail queue
• #597: Staff preference 'Default Ticket Status When Replying' could cause lost tickets
• #600: Modified time for download items that were never edited
• #609: Invalid string value SQL error when replying to a ticket
• #610: Banned random ticket tokens
• #611: Ticket notes not HTML entity encoded
• #612: mysql_escape_string -> mysql_real_escape_string
• #613: IRS
• #614: Ticket creation user/contact lookup fails when search term is not ISO-8859-1
• #615: locale/en-us/staff_tickets.php: 'ticketslist' => 'Tickets List (%s)',
• #616: Need "View All" from ticket view
• #618: KayakoMobile new ticket marks ticket as overdue
• #619: KayakoMobile new ticket autoresponder
• #620: KayakoMobile new ticket contents email
• #622: Category listing for Knowledgebase, Troubleshooter, Downloads mangles multibyte category names longer than 15 characters
• #626: E-mails with a subject longer than 150 chars will fail to be retrieved by the parser if MySQL strict mode is enabled.
• #627: E-mail parser ignores message size limit when mail is received by pipe
• #629: E-mail parser doesn't correctly verify size of incoming messages
• #632: When unable to create a CAPTCHA image, suite fails silently
• #663: Convert to UTF8 can fail with oversized key on swtickets
• #664: Ticket ID letter triplets
• #686: EncodeURI -> EncodeURIComponent defect causes "not registered" errors in error logs
• #697: Default SLA schedule
• #707: Security defect (Javascript injection)
• #708: Security defect (SQL injection)
• #709: Security defect (XSS injection)
• #729: Mass action bar / "Use Group Departments"
• #731: View Ticket / AJAX staff filtering
• #742: Defect in HTML stripping regexp determines match by prefix
• #761: Debug statements in parser removed
• #762: Echoing in loop cutter triggered EXIM bounce notice
• #763: Missing files in 3.30.00 IonCube closed build
• #764: Unchecked module registration causes cache rebuild error in LiveResponse