Fixed

• The URL for the comments report was hardcoded instead of being retrieved from the application's settings. This has now
  been resolved (PR #100)

Added

• Justification comments from students about why they gave scores can now be viewed by students after being moderated by academic staff (PR #97, #99)

Fixed

• Split 100 forms can now be imported into WebPA. Previously, only likert scale forms could be imported (PR #98)
• XML Validation errors now display when uploading an invalid form (PR #98)

Fixed

• The environment variable for the database port number now applies to all database connections in WebPA (PR #91)

Added

• You can now specify the MySQL port number in the environment variables (PR #88)

Fixed

• Fixed bug where students were told they had not submitted to a closed assessment when they had (PR #89)

Changed

• Emails are now triggered via a single script, jobs/Email.php instead of callingtutors/asessments/email/ClosingReminder.php and tutors/assessments/email/TriggerReminder.php directly.

Removed

• Removed LDAP functionality and options as the implementation did not work.

Security

• Fixed a large amount of SQL injection attacks
• Change password hashing to use the native password_hash() function in PHP instead of MD5 hashing which is insecure

Fixed

• Remove LTIAuthenticator class as it is a duplicate of DBAuthenticator as should not be used (PR #77)
• Fix bugs found using static analysis (PR #78)

Changed

• Removed most include and require statements and replaced with PSR-4 autoloading (PR #69)
• Remove all global variables from the application to make it easier to maintain the code (PR #70)

Fixed

• Change default authenticator to be database instead of SAML (PR #64)

Fixed

• Remove a blank line at the top of a PHP class that was causing a fatal error
• Fixed the display academic drop down which was not displaying past years (PR #62)

Fixed

• Fixed a PHP syntax issue in the class_engcis.php file where a missing closing bracket was causing a fatal error to be thrown. (PR #60)