CapDecisions 1.2.0: consolidated public pages, five new languages

A consolidation release

The public pages introduced with 1.1.0 have been reviewed end-to-end. Every finding has been corrected: this version is primarily the one where you can open a discussion or proposal to visitors without an account, with confidence.

Specifically, on an up-to-date installation:

• public voting works: real fields, timestamped date formats, values restricted to allowed choices, login required to vote;
• public comments work, and their SQL failures are logged instead of being swallowed;
• rate limiting for public forms is actually enforced: counting by address and effective blocking;
• the session anti-forgery token is required on every public form;
• the Dolibarr captcha is verified before sending a login code, and the requester's address is stored with each sent code;
• public page addresses are rebuilt from the token, never from the request URI, and the redirect after login only accepts the module's public pages;
• the visitor's address is only read from X-Forwarded-For for the proxies you declare yourself;
• public cookies are marked "secure" as soon as the instance is served over https;
• public search escapes its LIKE wildcards, and everything displayed is escaped: toasts in plain text, comment authors by first name and last name initial.

On the Dolibarr side, validating a discussion is now restricted to its authors and the group administrators: a regular observer can no longer publish it.

If you're coming from 1.0: 1.1.0 introduced public pages by token and login by email code, automatic update checks, and the creation of missing indexes on new installations.

Five new languages

CapDecisions is now available in Spanish, German, Italian, Dutch, and Brazilian Portuguese, in addition to French and English. Every label in the module is translated into the seven languages, and visitors to public pages choose theirs from the seven.

Installation and compatibility

Dolibarr 18 to 23, PHP 7.4 or later. The archive now only contains packages compatible with PHP 7.4: it installs for all customers, regardless of hosting.

Try it

Try CapDecisions on a Dolibarr instance set up in under 20 seconds, with groups, discussions, and demo proposals already populated: dolitest.fr/capdecisions