Revive Adserver 5.4.1
28 September 2022
Revive Adserver version 5.4.1 is now available (major release).
What's New in Revive Adserver 5.4.1
Security
- Bcrypt is now used to store password hashes. The password of the admin user executing the upgrade is automatically re-hashed. All other users users will be sent an email and asked to reset their password upon login.
- Minimum password length is now set to 12 characters. The default can be changed in the configuration file.
- Added password strength indicator, based on MIT licensed Dropbox's zxcvbn library.
- For more info: https://www.revive-adserver.com/faq/passwords-in-v5-4-0/
Bug Fixes
- Added support for PHP 8.1.
- Added support for WEBP format in image and HTML5 banners.
- Fixed issue causing permission denied errors in some statistics screens,e.g. banner / zone history.
- Restored Export Statistics to Excel functionality, mistakenly removed in version 5.4.0.
- Fixed incompatibility between the {clickurl} macro and other magic macros,e.g. {random}, when used together in a destination URL.
- Fixed SQL errors on Postgres when displaying some cross entity historystats screens, e.g. campaign / website.
- Fixed an issue detecting campagin start/end date overlap when linkingbanners to newsletter zones under some circumstances.
- Website invocation code generation now uses async tags.
- Asynchronous tag now sends a custom "revive-<ID>-loaded" JS event when loading each banner and a "revive-<ID>-completed" event when all the positions on the page have been filled. This allows interaction and customisation, e.g. dynamically adding a class to all image banners.
- Added welcome email for new users to prompt them to set up their own password.
- Added password strength indicator during installation and password set up / recovery.
- Added autocomplete attributes for username and password fields.
- Tags are now generated using https by default, with the possibility to use plain http instead in the invocation code screens.
- Added banner delivery setting to configure the "rel" HTML attribute for the click tracking links of image and text banners, defaulting to "noopener nofollow". The setting is also exposed in the newly added "{rel}" magic macro.
- Added new maintenance screen to resend invitation emails to new users and password reset emails to users requiring the update to the new bcrypt password hash system.
- Added missing linkUserToAdvertiserAccount, linkUserToTraffickerAccount and linkUserToManagerAccount methods to the v2 XML-RPC Api client library and fixed bugs related to (re)setting permissions through them.