Recently three Remote Code Execution vulnerabilities were discovered in in PHPMailer and SwiftMailer.

All three mention Yii among the affected frameworks in the initial release, so Yii team commented on this to clarify who is affected and what action is required.

Tuts+ published fresh Yii 2.0 article about helpers: what they are, built-in ones, building a custom one.

Anton Tuyakhov implemented JSON API specification. An extension has custom data serializer, supports content negotiation, HATEOAS links and JSON input.

An overview of routing and URLs in Yii.

New recipe in the Yii 2.0 community cookbook explains how to dynamically switch application themes.

How to work with Amazon S3 using one of Yii 2.0 extensions from A to Z: installing extension, configuring it, browsing remote file system, reading and writing.

Initiated by @arogachev, significant refactoring was made to Yii's JavaScript code along with code for testing it. With the help of Yii team and community, these tests are now running in Travis which means much better stability and backwards compatibility of JavaScript part of Yii.

PHP team released long awaited 7.1.0 version bringing us:

• Nullable types
• Void return type
• Iterable pseudo-type
• Class constant visiblity modifiers
• Square bracket syntax for list() and the ability to specify keys in list()
• Catching multiple exceptions types

And more features and changes…

As usual, Yii 2.0 is well prepared and works well with PHP 7.1 so feel free to upgrade if needed.

If you wonder about thoughts behing each change, check out RFC wiki.

The final release of LUYA is around the corner! But for now, release candidate 2 has improved several things and fixed many bugs.

• The administration now speaks French and Spanish, too! It is available in the following languages: German, English, Russian, French and Spanish.
• The language of the administration can now be stored for each user individually.
• Relational data can now be opened in new tabs in the NgRest CRUD view.
• In the CMS there is a new page setting "SEO Title" allowing to define a custom title tag for the current page for SEO optimisations.
• The administration module is faster due to asset files removed.
• It is now possible to replace a file in the filemanager without its URL changing (so that links to the file keep working).
• Files can now be dragged & dropped as well as copied & pasted to the filemenager. (Keep in mind that images and files pasted from the clipboard will receive a generic name).
• Scaffolding became much more powerful when creating blocks, modules and executing CRUD commands. Try it out!
• The CRUD view remembers the sorting of lists and the application of filters by storing them in the user settings.
• Reduced memory usage within CMS blocks due to the removal of mass assignement of variables.
• New NgRest plugin for internal and external links.
• The crawler module was enhanced with features like setters for crawl title, groups and others. It now evaluates the description meta tag (see crawler details for more information).
• A new property abstraction ImageProperty is now available out of the box.
• The ngrest plugins for image, imageArray, file and fileArray have now an option in order to directly return the file/image or iterator object.
• Blocks and other forms can now be submitted with the "Enter" key.

These are just a few of the changes with this release. We also put a lot of work into the documentation as well the luya.io website.

We are looking for people who like to translate the administration area to other languages – please drop us a message on Twitter, Gitter or create an issue on github!

Attention: If you want to upgrade to the second release candidate, there are a few breaking changes you have to take care of. With these changes done, we now have a stable and reliable foundation for the upcoming final release.

Please check the full Changelog and the Upgrading Guide where you can see all breaking changes.

If you have any problems or questions regarding the upgrade process, don't hesitate to contact us on Gitter or to create an Issue on GitHub.

29 Novemeber 2016
LUYA developer team
luya.io