Club Drupal

Drupal 7.30, 2014-07-24

-----------------------

- Fixed a regression introduced in Drupal 7.29 that caused files or images

  attached to taxonomy terms to be deleted when the taxonomy term was edited

  and resaved (and other related bugs with contributed and custom modules).

- Added a warning on the permissions page to recommend restricting access to

  the "View site reports" permission to trusted administrators. See

  DRUPAL-PSA-2014-002.

- Numerous API documentation improvements.

- Additional automated test coverage.

Security team

-----------------

To report a security issue, see: https://drupal.org/security-team/report-issue

The Drupal security team provides Security Advisories for vulnerabilities,

assists developers in resolving security issues, and provides security

documentation. See http://drupal.org/security-team for more information. The

security team lead is:

- Michael Hess 'mlhess' https://drupal.org/user/102818

define('VERSION', '7.30');

 * Parses a URL string into its path, query, and fragment components.

 * This function splits both internal paths like @code node?b=c#d @endcode and

 * external URLs like @code https://example.com/a?b=c#d @endcode into their

 * component parts. See

 * @link http://tools.ietf.org/html/rfc3986#section-3 RFC 3986 @endlink for an

 * explanation of what the component parts are.

 * Note that, unlike the RFC, when passed an external URL, this function

 * groups the scheme, authority, and path together into the path component.

 * @param string $url

 *   The internal path or external URL string to parse.

 * @return array

 *   An associative array containing:

 *   - path: The path component of $url. If $url is an external URL, this

 *     includes the scheme, authority, and path.

 *   - query: An array of query parameters from $url, if they exist.

 *   - fragment: The fragment component from $url, if it exists.

 * @see l()

 * @see url()

 * @see http://tools.ietf.org/html/rfc3986

 *

 *   (optional) Keys and indexes specification to be created on the table along

 *   (optional) Keys and indexes specification to be created on the table along

   *   (optional) Keys and indexes specification to be created on the

   *   (optional) Keys and indexes specification to be created on the

   * Static cache of entities, keyed by entity ID.

 *   Either an associative array of external XML-RPC method names as keys with

 *   the callbacks they map to as values, or a more complex structure

 *   describing XML-RPC callbacks as returned from hook_xmlrpc().

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

 *   $instance_info['required'] = TRUE;

 *   field_update_instance($instance_info);

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

 * This function does not determine whether access is granted to the entity

 * itself, only the specific field. Callers are responsible for ensuring that

 * entity access is also respected. For example, when checking field access for

 * nodes, check node_access() before checking field_access(), and when checking

 * field access for entities using the Entity API contributed module,

 * check entity_access() before checking field_access().

 *

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

 * This hook is only invoked if hook_field_formatter_settings_summary()

 * returns a non-empty value.

 *

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

  $force_default = FALSE;

      // If a FID was submitted, load the file (and check access if it's not a

      // public file) to confirm it exists and that the current user has access

      // to it.

      if (isset($input['fid']) && ($file = file_load($input['fid']))) {

        if (file_uri_scheme($file->uri) == 'public' || file_download_access($file->uri)) {

          $fid = $file->fid;

        }

        // If the current user doesn't have access, don't let the file be

        // changed.

        else {

          $force_default = TRUE;

        }

  // If there is no input or if the default value was requested above, use the

  // default value.

  if ($input === FALSE || $force_default) {

/**

 * Tests adding a file to a non-node entity.

 */

class FileTaxonomyTermTestCase extends DrupalWebTestCase {

  protected $admin_user;

  public static function getInfo() {

    return array(

      'name' => 'Taxonomy term file test',

      'description' => 'Tests adding a file to a non-node entity.',

      'group' => 'File',

    );

  }

  public function setUp() {

    $modules[] = 'file';

    $modules[] = 'taxonomy';

    parent::setUp($modules);

    $this->admin_user = $this->drupalCreateUser(array('access content', 'access administration pages', 'administer site configuration', 'administer taxonomy'));

    $this->drupalLogin($this->admin_user);

  }

  /**

   * Creates a file field and attaches it to the "Tags" taxonomy vocabulary.

   *

   * @param $name

   *   The field name of the file field to create.

   * @param $uri_scheme

   *   The URI scheme to use for the file field (for example, "private" to

   *   create a field that stores private files or "public" to create a field

   *   that stores public files).

   */

  protected function createAttachFileField($name, $uri_scheme) {

    $field = array(

      'field_name' => $name,

      'type' => 'file',

      'settings' => array(

        'uri_scheme' => $uri_scheme,

      ),

      'cardinality' => 1,

    );

    field_create_field($field);

    // Attach an instance of it.

    $instance = array(

      'field_name' => $name,

      'label' => 'File',

      'entity_type' => 'taxonomy_term',

      'bundle' => 'tags',

      'required' => FALSE,

      'settings' => array(),

      'widget' => array(

        'type' => 'file_generic',

        'settings' => array(),

      ),

    );

    field_create_instance($instance);

  }

  /**

   * Tests that a public file can be attached to a taxonomy term.

   *

   * This is a regression test for https://www.drupal.org/node/2305017.

   */

  public function testTermFilePublic() {

    $this->_testTermFile('public');

  }

  /**

   * Tests that a private file can be attached to a taxonomy term.

   *

   * This is a regression test for https://www.drupal.org/node/2305017.

   */

  public function testTermFilePrivate() {

    $this->_testTermFile('private');

  }

  /**

   * Runs tests for attaching a file field to a taxonomy term.

   *

   * @param $uri_scheme

   *   The URI scheme to use for the file field, either "public" or "private".

   */

  protected function _testTermFile($uri_scheme) {

    $field_name = strtolower($this->randomName());

    $this->createAttachFileField($field_name, $uri_scheme);

    // Get a file to upload.

    $file = current($this->drupalGetTestFiles('text'));

    // Add a filesize property to files as would be read by file_load().

    $file->filesize = filesize($file->uri);

    $langcode = LANGUAGE_NONE;

    $edit = array(

      "name" => $this->randomName(),

    );

    // Attach a file to the term.

    $edit['files[' . $field_name . '_' . $langcode . '_0]'] = drupal_realpath($file->uri);

    $this->drupalPost("admin/structure/taxonomy/tags/add", $edit, t('Save'));

    // Find the term ID we just created.

    $tid = db_query_range('SELECT tid FROM {taxonomy_term_data} ORDER BY tid DESC', 0, 1)->fetchField();

    $terms = entity_load('taxonomy_term', array($tid));

    $term = $terms[$tid];

    $fid = $term->{$field_name}[LANGUAGE_NONE][0]['fid'];

    // Check that the uploaded file is present on the edit form.

    $this->drupalGet("taxonomy/term/$tid/edit");

    $file_input_name = $field_name . '[' . LANGUAGE_NONE . '][0][fid]';

    $this->assertFieldByXpath('//input[@type="hidden" and @name="' . $file_input_name . '"]', $fid, 'File is attached on edit form.');

    // Edit the term and change name without changing the file.

    $edit = array(

      "name" => $this->randomName(),

    );

    $this->drupalPost("taxonomy/term/$tid/edit", $edit, t('Save'));

    // Check that the uploaded file is still present on the edit form.

    $this->drupalGet("taxonomy/term/$tid/edit");

    $file_input_name = $field_name . '[' . LANGUAGE_NONE . '][0][fid]';

    $this->assertFieldByXpath('//input[@type="hidden" and @name="' . $file_input_name . '"]', $fid, 'File is attached on edit form.');

    // Load term while resetting the cache.

    $terms = entity_load('taxonomy_term', array($tid), array(), TRUE);

    $term = $terms[$tid];

    $this->assertTrue(!empty($term->{$field_name}[LANGUAGE_NONE]), 'Term has attached files.');

    $this->assertEqual($term->{$field_name}[LANGUAGE_NONE][0]['fid'], $fid, 'Same File ID is attached to the term.');

  }

}

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

; Information added by Drupal.org packaging script on 2014-07-24

version = "7.30"

datestamp = "1406239730"

   *   (optional) An array of variables to pass to the theme function.

   *   (optional) Value of the field to assert. You may pass in NULL (default)

   *   to skip checking the actual value, while still checking that the field

   *   exists.

   * Asserts that a field doesn't exist or its value doesn't match, by XPath.

   *   (optional) Value for the field, to assert that the field's value on the

   *   page doesn't match it. You may pass in NULL to skip checking the

   *   value, while still checking that the field doesn't exist.

   *   (optional) Value of the field to assert. You may pass in NULL (default)

   *   to skip checking the actual value, while still checking that the field

   *   exists.

   *   (optional) Value for the field, to assert that the field's value on the

   *   page doesn't match it. You may pass in NULL to skip checking the

   *   value, while still checking that the field doesn't exist. However, the

   *   default value ('') asserts that the field value is not an empty string.

   *   (optional) Message to display.

   * Asserts that a field exists in the current page with the given ID and value.

   *   ID of field to assert.

   *   (optional) Value for the field to assert. You may pass in NULL to skip

   *   checking the value, while still checking that the field exists.

   *   However, the default value ('') asserts that the field value is an empty

   *   string.

   *   (optional) Message to display.

   * Asserts that a field does not exist with the given ID and value.

   *   ID of field to assert.

   *   (optional) Value for the field, to assert that the field's value on the

   *   page doesn't match it. You may pass in NULL to skip checking the value,

   *   while still checking that the field doesn't exist. However, the default

   *   value ('') asserts that the field value is not an empty string.

   *   (optional) Message to display.

   *   ID of field to assert.

   *   (optional) Message to display.

   *   ID of field to assert.

   *   (optional) Message to display.

   *   ID of select field to assert.

   *   (optional) Message to display.

   *   ID of select field to assert.

   *   (optional) Message to display.

   * Asserts that a field exists with the given name or ID.

   *   Name or ID of field to assert.

   *   (optional) Message to display.

   * Asserts that a field does not exist with the given name or ID.

   *   Name or ID of field to assert.

   *   (optional) Message to display.

; Information added by Drupal.org packaging script on 2014-07-24