ABCD 4.0.1 - last update

ABCD 4.0.1

This is a maintenance release that fixes a problem affecting everyday work in ABCD Central: users being signed out unexpectedly after viewing a report preview. It is recommended for all 4.0.0 installations.

What you may have noticed

After generating a report (Reports, then a search, then Preview), the result opened correctly in a new window. But when you then clicked Home in the main window, ABCD showed "Session expired or you are not logged in" and sent you back to the sign-in page. Anything not yet saved at that moment was at risk. Your databases and records were not affected.

What was wrong

Pages such as the report preview did not declare a site icon, so the browser asked the server for /favicon.ico on its own. That file did not exist, and the request ended up at the sign-in page, which clears the current session. The user was signed out without any warning.

What changed

Pages such as the report preview now declare the ABCD icon (central/common/header_display.php), so the browser no longer asks for /favicon.ico.
A favicon.ico file is now included in the web root and served directly.
Requests for missing images, styles and scripts now return a normal "not found" (404) response instead of falling through to a PHP page (.htaccess).
Opening the sign-in page while already signed in now takes you straight to the system instead of showing the form again (login.php).

Upgrading

Update as usual, or replace the files listed below. No database or configuration changes are required, and your own config.php is not touched.

Files changed:

central/common/header_display.php
login.php
.htaccess
favicon.ico (new)

If you cannot update right away, create a favicon.ico in the web root (the folder that contains login.php). This alone prevents the sign-out. For example, from that folder:

cp assets/images/favicons/favicon-32x32.png favicon.ico

Notes

The Windows installer has been rebuilt with these fixes.
Details: #765 (issue) and #766 (pull request).

What's Changed

Fix session loss caused by browser /favicon.ico request by @rogercgui in #766
Harden login and logout session handling by @rogercgui in #767
Simplify login session regeneration by @rogercgui in #768

Full Changelog: v4.0.0...v4.0.1

Thank you to everyone who reported and helped reproduce this problem.

ABCD 4.0.1 – last update