Skip to main content
Version: 1.x

Changelog

Every release and every change a site might notice, newest first. What's still known not to work is under Known limitations. Autograph follows semantic versioning:

  • Patch releases (1.0.x) fix things.
  • Minor releases (1.x.0) add things without breaking anything.
  • Nothing breaking ships before 2.0.0, so any 1.x update is a matter of replacing the two folders and running ExpressionEngine's update. See the upgrade guide.

1.0.1​

A fix release. No template, stylesheet or entry needs to change.

Security​

  • Signatures are checked on the server. A submitted value must be an intact PNG image, or the entry is refused with "The signature could not be read." What's saved is re-encoded from the checked image, never the text that was posted.
  • Stored values are checked before they're printed. {field}, {field:url} and the control panel print a saved value only if it's a PNG data URL, so a value saved before 1.0.1 can't break out of the image's src attribute.

Fixed​

  • Undo now updates the saved signature. Before, the undone stroke was still submitted. See The pad.
  • Undo over a saved signature no longer wipes it. When an entry is edited, undoing a new stroke keeps the signature that was already there.
  • Scripts load from your themes URL (theme_folder_url) instead of always from /themes/user/autograph/, so subfolder installs and moved themes folders work. The file names haven't changed. See The themes folder.
  • Labels: the buttons read Undo and Clear, and an unsigned field in the control panel reads Not signed yet., instead of the raw keys undo, clear and no_autograph. The field settings' labels no longer depend on another part of ExpressionEngine having loaded its language file.
  • Control panel: the saved signature's image has alt text.
  • Member fields work. Autograph was offered as a member field type, but signatures never saved there. They now save from a member's profile in the control panel, from {exp:member:registration_form} and from {exp:member:edit_profile}, where Autograph prints the pad's scripts itself. See Member fields.

Changed​

  • Markup: in Channel Forms, the canvas's second class attribute is merged into the first, so autograph-manager-canvas now applies alongside ft-autograph. See Markup.
  • Add-on icon redrawn to match Nerdgency's other add-ons.
  • Removed unused code that could have written a stray test2.png to an upload directory.

1.0.0​

The first release of Autograph, a signature fieldtype for ExpressionEngine.

Requirements​

ExpressionEngine 6.0 or later and PHP 8.1 or later. See Installation.

Added​

  • An Autograph fieldtype for channel fields, with a signing pad built on Signature Pad.
  • Channel Form support with no extra template work. See Channel Forms.
  • Per-field settings for canvas width, canvas height and pen colour. See Field settings.
  • A control panel switch: let editors sign on the publish form, or show the signature read-only. See Control panel.
  • Template tags for the signature as an <img>, its data URL, and the canvas dimensions. See Template tags.
  • Undo and Clear buttons beside every pad.