DataFlex 2014 - 18.0.20.15

Release Notes - Please Read Carefully

Update Notes

Build 18.0.20.15

Resource Manager Security Issue

There are security issues involving the encryption password used for file streaming in the Web Application Framework. These issues were reported by Raphael Theiler, an active member of the DataFlex development community. The following changes (involving the JavaScript engine, package, Studio and WebOrder example) fix these issues.

JavaScript Engine 18.0.11.50

•	cWebResourceManager now uses AES encryption with a SHA-256 hash (instead of RC4 with a SHA-1 hash).
•	cWebResourceManager only allows file streaming to and from registered locations. Register folders using the new RegisterDownloadFolder and RegisterUploadFolder procedures. Two properties are added for registering standard upload and download folders.
•	pbRegisterReportsCacheFolder property on cWebResourceManager controls if the default report cache folder (see GetReportsCache of cWebApp) is registered. This property defaults to true.
•	pbRegisterUploadFolder property on cWebResourceManager controls if the default report cache folder (see UploadFolder of cWebApp) is registered. This property defaults to true.
•	The new UploadFolder function of cWebApp returns the path of (and is able to create) the default upload folder inside the data folder.
•	pbAllowNonSessionDowloads property on cWebResourceManager controls if download URLs that are not bound to a session are allowed. This property defaults to false.
•	The file uploads sample (DemoFileUpload.wo) in the WebOrder example now uses the new standardized UploadFolder function.
•	Default value for cWebApp – psEncryptPassword is now “” (empty string)
WebOrder 18.0.3.0
•	Changed the WebOrder sample to generate a 40 character encrypt password and store it in OrderSys. This is then used by the web application.
Studio 18.0.47.0
•	The Studio generates a random 40 character psEncryptPassword value for each new webapp project.
Server Installation
•	The installation still installs the WebOrder example, but sets it to Disabled by default. This allows it to easily be used as a diagnostic tool but keeps it out of the way if not needed.

DataFlex WebApp Check 1.0.0.30

•	Fixed GDI+ problem on Windows Server 2008.
•	Fixed intermittent GDI+ problem on Windows Vista 
•	Updated the Helpfile text and images.  (All windows 8.1 glory)
•	Removed all references to Visual DataFlex and updated the graphics.

Build 18.0.20.11

JavaScript Engine 18.0.10.49

•	Fixed: 6757 - Losing Focus causes Password to be displayed on Mobile Devices
•	Fixed: 6758 - Menu gets clipped when Menu Bar is inside a Panel on Mobile Devices

Critical Information

You must have Microsoft Internet Explorer 8 (or higher) and the Microsoft Internet Information Services (IIS) installed on your machine to enable all the capabilities of DataFlex 2014.

Important Information for Existing DataFlex Users:

1	DataFlex 2014 - 18.0 uses different DLL component naming and/or a completely separate registry branch from DataFlex 17.1 (and earlier).  You may install and use DataFlex 2014 - 18.0 on the same machine as DataFlex 17.1 (and earlier) without interference. 
2	The WebApp Server components of DataFlex 2014 - 18.0 can coexist with previous revisions of the WebApp Server on the same machine without interference.
3	Some of the changes that you have made in your DataFlex 17.1 (or earlier) development environment (registry settings that control utilities, editor customizations, etc.) will be automatically detected or used by DataFlex 2014 - 18.0. For those that are not imported, you will need to duplicate those changes manually.  There are utilities that can assist you in migrating existing workspaces.

The on-line Knowledge Base http://www.dataaccess.com/kbase and our Web Forums http://support.dataaccess.com/forums are updated daily - they are excellent resources for the latest information about DataFlex.

We also strongly recommend that you take a moment to read through the Installation and Environment Guide and the "What's New" section of the Help System.

Check our website regularly at http://www.dataaccess.com for the latest product releases, documentation updates, and other information.

Contacting Data Access

Installation Assistance and Developer Support:
Data Access offers a range of support services for DataFlex and other products.

Technical support phone: 	1 (305) 232-3142
Technical Support e-mail: 	support@dataaccess.com

Sales and Marketing Information:
Sales phone numbers:	1 (800) 451-3539
1 (305) 238-0012 (for International customers)
Sales e-mail: 		sales@dataaccess.com

For assistance outside of North America, contact your local DataFlex distributor. For a list of distributors worldwide, see
http://www.dataaccess.com