Latest video in Yii 2.0 series by Luke Briner is about rapidly building REST APIs.

Yii team tagged new version of Yii 1.1 that accumulates security and PHP 7 compatibiltiy fixes made for a year.

Another issue of Yii development notes by Alexander Makarov. Have a good read.

The extension is for creating email templates and managing them in a website dashboard. You can create email templates with CRUD module in your backend or Gii generator.

Version 4.1.0 chages are:

• Added default value for "hint" field in Gii generator
• Added batch insert command for each language in migration file that Gii generator creates
• Other minor improvements and fixes

All changes are avaliable in changelog file.

Yii team released minor version of Queue extension. It adds Amazon SQS queue support and a handy cli\Queue:EVENT_WORKER_LOOP event.

LUYA Admin module release 1.2 and CMS module release 1.0.4

Admin Security Improvements

Security is a top priority for any web framework and web application, therefore it was also a very important aspect in the development of LUYA from day one. The Yii framework provides a good foundation with its security features, but every line of code built on top of it has to be as bulletproof as its foundation. When there was an opportunity to have LUYA tested with a security audit executed by a Swiss security company, we gladly took the chance. This resulted in a list of security improvements included in this update:

• Unparsable JSON Cruft: all JSON responses are now prepended with an unparsable cruft )]}', in order to prevent "JSON hijacking".
• The Angular source code is now uglified and minified. Therefore Angular strict-di mode is enabled by default.
• If a user changes the account's email in the admin, we now provide the option to send a security code to the old email address which has to be entered to authorize the change.
• The admin login security token now has an expiration time that can be configured.
• Login attempts are now tracked by the session (session based attemption limit). If the user email is correct, another limit for user identifed login is available. After five attempts, a lockout for one hour is enabled by default. The max number of attempts can be configured.
• The maximum idle time of admin users can now be configured.

There is also a new LUYA security best practice guide.

Admin General Improvments

• NgRest attributes can now be displayed based on conditions. Assuming you have a select with categories, this allows you to display a certain field only when a specific category is selected. Read more
• The filemanager provides the option to switch between inline or download for file delivery. The renaming of files is now possible, too. We also made some improvements with the display of file details, including a fullscreen preview.
• The storage system is now completely swapable: this makes using Amazon S3 possible and available as a feature LUYA aws extension
• The speed of the storage system was improved: we have significantly reduced the time it takes the admin to load the list of all files and images.
• The general PHP docs were improved and deprecated methods were removed, see upgrade.md
• The Roboto font used in the admin now supports (+Extended), Cyrillic (+Extended), Greek (+Extended), Vietnamese.

You can download and install LUYA admin version 1.2 (~1.2.0 in composer). Make sure to run the migrate command afterwards as the update includes database migrations. See the full changelog und upgrade document.

CMS

Along with the Admin module we also released CMS module version 1.0.4, which includes:

• Minification and uglification of Angular code.
• New command to cleanup the cms, remove deleted pages, blocks and log files: cms/page/cleanup.
• New property to provide import paths for blocks: luya\cms\frontend\Module::$blocks.
• New commands to list blocks and migrate them from the console: cms/block/find and cms/block/migrate. The migrate command is helpful when you want to delete an old block but assign its contents to a new block.

22 May 2018, LUYA developer team

Another issue of Yii development notes was posted giving overview of what happened last months.

Yii team tagged two releases:

• Smarty 2.0.7
• Swiftmailer 2.1.1

Both are fixing bugs. Smarty has an enhancement on board as well. Both are safe to upgrade via Composer.

The extension is for creating email templates and managing them in a website dashboard. You can create email templates with CRUD module in your backend or Gii generator. Version 4.0.0 chages are:

• Improved extension architecture
• Changed minimum Yii version from ^2.0.0 to ^2.0.13
• Fixed a bug with yii\base\Object on PHP 7.2
• Removed unused composer packages from dependencies
• Other minor improvements and fixes

All changes are avaliable in changelog file.

Paul Klimov from Yii team released new versions for extensions he maintains:

• Admin 1.1.0 - provides controllers, actions, widgets and other tools for administration panel creation in Yii2 project.
• Config 1.0.6 - provides support for application runtime configuration, loading config from database.
• AR search 1.0.0 - provides unified search model for Yii ActiveRecord.
• AR role 1.0.3 - provides support for ActiveRecord relation role (table inheritance) composition.
• AR variation 1.0.4 - provides support for ActiveRecord variation via related models. In particular it allows implementing i18n feature for ActiveRecord.
• HTML2PDF 1.0.3 - provides basic support for HTML to PDF and PHP to PDF conversion.
• Spreadsheet 1.0.1 - provides ability to export data to spreadsheet, e.g. Excel, LibreOffice etc.
• FileDB 1.0.6 - provides ActiveRecord interface for the data declared in static files. Such solution allows declaration of static entities like groups, statuses and so on via files, which are stored under version control instead of database.