Zebra_Form

Many bugfixes and new features.

This release fixes a bug which caused the attach_tip() JavaScript method not to work properly (now the placeholders are injected in the DOM right next to the parent element) and a bug which, because of the fact that JavaScript and PHP treat newlines, accented characters, and special characters differently (one byte in JavaScript and two or three bytes in PHP), caused server-side validation of a maximum allowed length to sometimes fail if a textarea’s value would contain newlines (although client-side validation was ok).

In this version, a bug was fixed where using multiple forms on a single page would disable client-side validation for all forms but the first one. A bug was fixed where if there were selection groups in a select, it would never pass validation. A bug was fixed where placeholders (labels as hints inside textboxes and textareas) were not working on textareas. Elements that have display:none or visibility:hidden are no longer checked in the client-side validation process. The Zebra_Transform plugin is no longer included in the library; it can be downloaded and used separately if needed.

Another bug that would make date validation impossible in certain scenarios was fixed. Some minor updates were made to the JavaScript code.

A bug was fixed where dates having the day < 10 would not pass validation. An issue was fixed that allowed malicious users to submit arbitrary values instead of the ones defined at the form’s creation for select controls, checkboxes, and radio buttons. The severity of the issue was low, as the submitted values were still filtered for cross-site scripting (XSS) attempts, so no real harm could be done.