With this page we want to help plugin developers to stay compatible with the changes that were made in the Admidio core and that could affect plugins. During the development of Admidio we try to not change our existing methods and functions but sometimes it's necessary and could break your working plugin. Here you will find a list of methods and functions that we changed in a specific Admidio version with a notice how you could fix this in your plugin if you have used that method or function.
To prevend CSRF attacks as described in Issue 612 we have introduce the UUID for the user and role objects. To call Admidio scripts that use the an id or as parameter you must now use the UUID. Therefore tables like adm_users and adm_roles got new columns usr_uuid and rol_uuid where you can get the uuid of the object instead of the usr_id or rol_id. So if you want to call the profile of a user you do it until now with the following url:
ADMIDIO_URL. FOLDER_MODULES. '/profile/profile.php?usr_id=4711'
Now you must use the url with the following parameter
ADMIDIO_URL. FOLDER_MODULES. '/profile/profile.php?user_uuid=bfa4db69-1722-4704-801f-e8b4bfe2f081'
We add a new method to the TableAccess class to read a record with the UUID.
$user = new User($gDb); $user->readDataByUuid($userUuid);
This Method could be used with all tables that have a uuid column. If you save a new record the uuid column will be filled automatically. You must do nothing and got a record with a uuid.
The following methods are removed:
Session::renewMenuObject()
Session::renewOrganizationObject
Session::renewUserObject(int $userId = 0)
New methods that could be used instead of them:
Session::reloadAllSessions()
Session::reloadSession(int $userId)
Simplified the bootstrapping (initialization of the common Admidio stuff). Most stuff got extracted in separate bootstrap.php. Autoload is in it's own autoload.php. Now it could be enough to require only the bootstrap.php if you don't need a database connection.
To improve the security move from Database→query() to the new Database→queryPrepared() method. You have to adapt the SQL queries and add the necessary parameters
Every usage of a deprecated function/class/property now gets logged. So it is easy to see if you still use a deprecated feature.
Class TableUsers has been marked as deprecated. You should use the existing class Users. All methods of TableUsers have been moved to Users. The class TableUsers will be removed in future versions.
Method isWebmaster() of the class User is marked as deprecated and will be removed in future versions. Use method isAdministrator() instead.
The functions admFuncGetFilenameExtension and admFuncGetFilenameWithoutExtension were marked as deprecated in version 3.1 and are now removed in this version.
The config property $g_root_path is deprecated and replaced with new constant ADMIDIO_URL. There are some more new helpful constants defined:
Within Admidio 3.1 we changed the database class. This was necessary because PHP7 knocks at the door and in this PHP version our used database functions were no longer supported. So we have rewritten the whole class and now use the PHP class PDO for database access. This is a powerful class that will also allow us to integrate some more database engines in the future much easier. Admidio has a new well documented implementation of the his Database class. The Admidio database object $gDb is still available now with the new class. We also try to implement some compatibility methods for often used methods so there should be not much problems for existing code.
Some methods must be removed because they are no longer necessary or there is another (better) way to find a solution. Please check if you use some of them and find a way to replace them with the new methods.
Some methods are marked as deprecated. You can still use them but should switch to the new methods if there is time. Within our class documentation you will find hints how to implement the new methods:
Within this version we use a new format for our translation files. Before it was an Admidio specific xml format. Now its the Android String Resource. Version 3.1 will be still compatible to the old Admidio format but we encourage you to use the new format. There is also a small How to for plugin developers. We also changed the style of the placeholders within the strings. Please have a look at Multilingualism for a detailed description of the new syntax.
Since our requirements for PHP are changed to 5.3 we could use a lot of methods of the PHP class DateTime. Therefore we have removed methods from DatetimeExtended that were redundant. There are only 4 methods left:
If you have used other methods please change your script to use the official DateTime methods.
The functions admFuncGetFilenameExtension and admFuncGetFilenameWithoutExtension are marked as deprecated and will be removed in future versions.