---

The RSGallery2 team is pleased to announce the release of RSGallery2 3.2.0 for Joomla 2.5.x and RSGallery2 2.3.0 for Joomla 1.5.x. These are security releases, users are advised to upgrade immediately.

A special thank you goes to Stergios Kolios (ster [dot] kolios [at] gmail [dot] com) who reported the security issues and was so kind to offer his help and expertise.

Download
Downloads of RSGallery2 can be found here: http://joomlacode.org/gf/project/rsgallery2/frs/?action=FrsReleaseBrowse&frs_package_id=4863

There is a download for Joomla 2.5.x which is marked with J25 and a download for Joomla 1.5.x which is marked with J15.

All previous versions are no longer available as they are affected by the security issues.

Upgrade instructions
Create a full backup of your files and database, as always before making changes to your site.
Note: upgrade will automatically overwrite all RSGallery2 system files, but it will leave your images untouched. So if you made any changes to the templates that are shipped with RSGallery2 they will be overwritten! You either have to backup the template or redo any custom changes after upgrading. Also, the comments in the database will be converted from BBCode format to HTML format.

On Joomla 2.5
Go to the Backend > Extensions > Install/Uninstall > Browse… (find the downloaded file) > Click Upload File & Install

On Joomla 1.5
Go to Joomla's Backend > Extensions > Install/Uninstall > Browse to package file... > Upload File & Install

Instructions for new installation of RSGallery2
Create a full backup of your files and database, as always before making changes to your site.

On Joomla 2.5
Go to Joomla's Backend > Extensions > Extension Manager > Browse... (find the downloaded file) > Upload File & Install

On Joomla 1.5
Go to Joomla's Backend > Extensions > Install/Uninstall > Browse to package file... > Upload File & Install

Additions and (bug) fixes in 3.2.0 for Joomla 2.5.x
* Fixed security issues: blind SQL injection and stored XSS vulnerability (CVE-2012-3554)
^ Comment form allows only bold/italic/underline and saves accordingly, it no longer uses BBCode, all comments (old and new) are in HTML
+ Updated de-DE language files and menu items thanks to user Chfrey
+ New finnish (fi-FI) language file thanks to user Ripley
! All available languages now have all language strings (new ones in English). Cleaned up list of unused and duplicate strings of before version 3. Intention is to add new language strings not only to en-GB file, but also to the other language files at the bottom of those files (although they will be in english then). Goal is to make it easier for translators to keep up with the languages files and its changes and to show users an english string if one in their own language isn't available.
+ Added more permissions for the Site Administrator to set to allow frontend users in My Galleries to delete images/galleries they own, edit the state of images/galleries they own and create images/galleries in galleries they own. Descriptions of these new permissions:
   Create Own: set at component and gallery level. This allows the user to upload images to galleries that he owns and create galleries in parent galleries that he owns.
   Delete Own: set at component, gallery and item level. This allows the user to delete images or galleries that he owns.
   Edit State Own: set at component, gallery and item level. This allows the user to edit the state (published or not) of images or galleries that he owns.
Note that these permissions are not implemented in the backend, users logged in via the backend need Create permission, Delete permission or Edit State permission.
+ Automatically add index.html to directories used by RSGallery2 for its images
+ Added the option to include or not include the number of items in child galleries when displaying the number of items in a gallery (Configuration > tab: Display > Slider: Front Page, default: yes, for backwards compatibility).
+ Added two options so that user can choose to have a link to the slideshow when single items are displayed (item view) and in the gallery view where a number of items are displayed per gallery. See Backend > Components > RSGallery2 > Control Panel > Configuration > Tab: Display
    - Slider: Image Display > Setting: Display Slideshow in item view (default: no)
    - Slider: Gallery View > Setting: Display Slideshow in gallery view (default: no)
+ Two new options in RSGallery2's Configuration: Show only items owned by the logged in user in My Galleries (default no) and Show only galleries owned by the logged in user in My Galleries (default no).
+ Added (empty) index.html to each directory
+ When user is logged in, the blue/red/green icons showing that the user is owner/gallery is unpublished/user can upload are now showing for the list of subgalleries as well.
^ Mouse pointer will be a "hand" for an item showing when Joomla Modal is used as popup option.
^ Increased the length of fields ‘name’ and ‘title’ in the database for items to 255 characters
^ Small changes for duplicate language strings in all language files
^ Superadministrators (they have core.admin) can see the unpublished items/galleries in the frontend. Their styling has class system-unpublished with style inherited from the Joomla template.
^ Now using JHtmlTabs instead of JPane for My Galleries tabs (resolves issue in combination with Googlemaps plugin by Mike Reumer (extensions.joomla.org/extensions/maps-a-weather/maps-a-locations/maps/1147)
^ For metadata: only get gid from menu item URL when one is set to avoid Notice.
^ Help screen for permissions (options.rsgallery2.html) is updated)
! Added Control Panel note for those with "Configure" permission about Create Own/Delete Own/Edit State Own being limited to frontend for now
# Error reporting in step one of ftp upload is more user friendly
# Fixed uploads where the Graphics Library Netpbm is used.
# Fixed apply/save in Configuration Raw Edit screen
# Fixed a "Class 'JFormFieldList' not found" fatal error when translating an RSGallery2 menu item with JoomFish 2.5 alpha.
# Fixed the COM_RSGALLERY2_ALL that didn't show any galleries for the menu link that shows the Root gallery.
# Fixed "Notice: Undefined property: JSimpleXMLElement::$params" for Slideshow One
# Frontend My Galleries now checks number of images allowed per user correctly upon upload.
# Fixed "Notice: Undefined property: stdClass::$editor in ...\libraries\joomla\html\html\grid.php on line 327": Checked out images in My Galleries now show username of the 'editor' who checked it out
# Moved pageNav object for galleries in My Galleries out of "Display gallery limitbox"-if-statement. Fixes Notice.
# Gallery thumbnail can no longer be a thumbnail of a published item in a unpublished subgallery.
# (Published) Items in unpublished subgalleries no longer count for the number of images in their parent gallery (with setting "Include items in child galleries when displaying number of items in a gallery" = Yes).
# Metadata: only item title/description when item is showing (new condition: not limitstart but page=inline).
# The number of indicated galleries shown between parentheses for subgalleries of a gallery (gallery view) can now include the items in their subgalleries (with setting "Include items in child galleries when displaying number of items in a gallery" = Yes).
# Fixed Fatal error when deleting item via Consolidate Database
# Regenerate display images can be used on images with spaces in their filenames.
# Corrected item pagination for galleries with unpublished items

Fixed in 2.3.0 for Joomla 1.5.x
* Security issues: blind SQL injection and stored XSS vulnerability (CVE-2012-3554)
^ Comment form allows only bold/italic/underline and saves accordingly, it no longer uses BBCode, all comments (old and new) are in HTML
+ Added (empty) index.html to each directory
# List limits were "All" by default, now takes the Global Configuration List Length
# Frontend My Galleries showed only two levels deep: now up to 20 levels.

Bug and problems?
Post your questions/bugs/problems in the appropriate boards on www.rsgallery2.nl/forum (please read their Posting Rules first, thank you).

---

The RSGallery2 Single Image Display plugin is now available for Joomla 2.5! And the plugin has two additions: the ability to use Joomla Modal popup and the option to clear floats after the image.

Download version 3.0 for Joomla 2.5 in the Files section at JoomlaCode (look for plg_rsg2_singledisplay) and Enjoy!


Notes RSGallery2 Single Image Display plugin
This plugin will replace {rsg2_singledisplay: imageid, size, caption, format, clearfloat} in
articles with the corresponding RSGallery2 image.

• imageid: Backend > Components > RSGallery2 > Items: use the number from the ID column (required).
• size: thumb, display or original (optional, default is display).
• caption: true (use the item desciption as a caption) or false (no caption) (optional, default is false).
• format: text-align style property (optional)
• clearfloat: both, left, right or false: when not set to false this inserts a div CSS element after the image with clear property both, left or right (optional, default is false)

Examples:
{rsg2_singledisplay:9999,thumb,true,left;float:left, left}
{rsg2_singledisplay:2,display,false,right, float:right, both}
{rsg2_singledisplay:42}.

Plugin Options
Different 'popup' options are available: no popup, use of Link and Link Text (which are parameters of the item), normal popup, Joomla modal and Highslide.

Important note on the Highslide effect:
Highslide JS is an image, media and gallery viewer written in JavaScript (see http://highslide.com). The Highslide JS for Joomla plugin (available at http://joomlanook.com) eposes all of the flexibility of Highslide JS through a clear and concise configuration screen. To use the Highslide effect with this RSGallery2 Single Image Display plugin you need to have the Highslide JS for Joomla plugin installed and enabled!
NOTE: If you intend to use Highslide JS on a commercial website you MUST purchase a license from the author of Highslide JS. Please go to http://highslide.com/ for more details.

Links
http://www.rsgallery2.nl for information on RSGallery2 and this RSGallery2 Single Image Display Plugin.
http://highslide.com/ for information on Highslide JS and how to obtain a license for use on commercial websites.
http://joomlanook.com/ for information on the Highslide JS for Joomla plugin.