Court Booking System current version: CBS 3.32

Release notes

v3.32 - June 2023
• Minor bug-fixes to deal with some pathological cases.
• Minor adjustment to improve widget display accuracy.

v3.31 - February 2023
• Several technical changes to tighten security:
  - All inline javascript removed in order to enable a stricter Content Security Policy.
  - Removed all remaining use of the javascript 'eval' function (was only relevant for old style interface).
  - Added a Web Application Framework to filter out suspected attacks as a supplement to the existing filters.
  - Added some additional security-related header directives.
  There should be no visible changes to the normal use of the booking system.
• All support for Internet Explorer v7 and older is dropped.
• Fixed a bug for old versions of Safari browsers using the new style interface.

v3.30 - December 2022
• Server upgrade to PHP 8.2

v3.29 - August 2022
• Adjusted the system to allow longer email addresses.

v3.28 - February 2022
• Improved the use of some non-English date strings.
• Adjusted the default report for ordinary users to report on their own bookings only, and improved the optional filtering on types of booking (default: any type).
• Update to allow and check validity of international telephone numbers in a user's profile.
• Some technical changes and a server upgrade to PHP8.1.

v3.27 - January 2022
• Fixed a bug arising from the MySQL upgrade that could affect the addition of new users.

v3.26 - November 2021
• MySQL and PHP server software upgrades and some related technical changes. No changes to booking operations.
• Minor bug fix to prevent attempted return to a booking entry that has just been deleted.

v3.25 - July 2021
• Adjusted security filters to allow the use of certain extra characters such as quotes in some circumstances when editing booking names and descriptions (previously these characters were always treated as suspicious and blocked). Any blocked text is also now echoed back unchanged with a warning to allow the user to edit and resubmit it.
• Made a technical change which should reduce the chance of a browser automatically pre-filling certain form fields with inappropriate default values.
• Added a new option in club settings to choose the method for sorting names in lists of users.

v3.24 - June 2021
• Added first and last names as optional extra user information, to distinguish from the username.
• Added an option for admins to add named non-user 'guests' at a club (distinguished from former club members). Admins can then add these guests to Participant Lists.
• Adjusted the handling of minor changes to existing booking series to allow exceptions to be respected and skipped without all the changes being rejected because of clashes with those exceptions.
• Expanded the Report and Search operations to include names which appear in Participant Lists.
• Added 'Return to bookings' buttons to the Report and Search pages.
• Added some information to the 'Edit user' page explaining the different types of user and the use of names.
• Modified the 'Edit user' page for admins to prevent attempted deletion of a user with any existing booking or Participant List entries (they must be downgraded to a 'Past user' instead).
• Some minor display adjustments.
• Fixed a bug for admins for 'confirm & review' of a series.
• Fixed a bug which allowed duplication of usernames at a club in certain circumstances.
• Fixed a bug which could lead to wrong entries when changing the repeat type of an existing series of bookings.

v3.23 - May 2021
• Some minor display adjustments.
• An adjustment to the default club shown if the club id isn't included in the URL: the browser will now default to the public bookings at the club of the last logged-in user instead of the Demonstration club.
• Some technical changes to facilitate system management (no effect on users or club admins).

v3.22 - March 2021
• Court capacities can now be set for Participant Lists on a per-booking basis instead of a per-court basis. The court capacity is the default value if the capacity is left blank for a particular Participant List.
• As a corollary, the default court capacity, if set, is no longer shown as part of the court heading when showing bookings, but instead is now shown only to Admins next to the court name when editing a booking.
• The Participant List option and capacity setting are now only visible to Admins when editing a booking.
• Added an option, for Admins only, to immediately review all the details of a booking after creating or editing it.
• Some additional explanatory notes added in a few places.
• Improvements to the way abbreviated court labels are used in the week, month and 'widget' summary views.
• Addition of optional Short Croquet ('SC') handicap data for users.
• Title added to 'view entry' page.
• Some minor display adjustments.
• More consistency of fonts used by different devices.
• Minor bug fixes.

v3.21 - February 2021
• Added a check to force anyone still using a weaker old password to upgrade it to the current minimum standard password strength.
• Server email handling modified to improve deliverability and reduce the chances of password reset emails being wrongly identified as spam by certain ISPs and rejected.

v3.20 - August 2020
• Added an email facility for users for forgotten passwords.
• Added an option for admins to generate temporary passwords automatically and email them to new users.
• Added an optional telephone number field in the user database.
• Added notes for users on the purposes of data fields in their user profiles.
• Added an option for admins to restore users who have previously been downgraded to non-member status.
• Added optional capacity constraints for booking entry participant lists, and changed the sort order of entries in the participant list to be based on their timestamp.

v3.11 - July 2020
• Added club management features for national and regional administrators.
• Added an option for regional/national admins to backup and restore all data for an individual club. (Note: all data for all clubs is already also backed up automatically every day to a remote store.)
• Some minor bug-fixes

v3.10 - June 2020
• Added an 'All courts' option for both the 'week' and 'month' views. This provides an overview of all booking activity on all courts at the club for a week or a month, but without any text details. Details of individual bookings in the period can then be inspected directly with a single click.
• Added a club settings option to enable administrators to select which court, or the 'all courts' overview, should be the default court presented to users if no court has yet been specified.
• Added an optional calendar 'widget' that can be embedded in a club's own website page.
• Adjusted the 'view_entry' and 'edit_entry' pages to highlight the type of activity with the relevant background colour.
• Backup procedures have now been improved so that a full copy of the database is now taken automatically every day and stored in a secure off-site location.

v3.03 - June 2020
• Added the ability for club administrators to add and remove other club members in participant lists, as well as themselves. Regular users can still only add or remove themselves.

v3.02 - June 2020
• Added a club-level option to set the default style for new users.
• Users can now log in with their registered email address as an alternative to the username.

v3.01 - June 2020
• Fixed a problem affecting date navigation on some newer versions of the Safari browser.

v3.0 - May 2020
• Multi-country and multi-language support added for World Croquet Federation member clubs:
  • Automatic detection of the default language for each user.
  • Selectable language over-ride for each user.
  • Automatic detection of the user's country, with user-selectable override.
  • Demonstration club now available in all countries and languages.
• A new, modernised user interface introduced, with the option for each user of reverting to the old-style interface:
  • Selection of dates using buttons and pop-up calendars instead of text links and fixed calendars.
  • Navigation between views using buttons instead of text links.
  • Simplified top banner, with some menu options moved to pop-up sub-menus.
  • URL dates compacted to the format date=YYYY-MM-DD
• Improvements to the usability on mobile phones and tablets.
• A few bug fixes.

v2.3.1 - April 2020
• Support for old versions of the Internet Explorer browser (IE10 and earlier) has now been dropped. Some features of the CBS might not work correctly on older browsers that are now also unsupported by the browser supplier.

v2.2.3 - February 2019
• Minor bug fixes.

v2.2.2 - January 2019
• Migrated from a shared hosting service to a virtual private server. Standard https security is now used throughout the CBS and the rest of the EACF website. The migration has also improved performance and eliminated the server time-outs that were occasionally interfering with operations.

v2.2.1 - April 2018
• Code added for RSA encryption of user passwords in transit between client and server if still using the http protocol. But using proper https if available would still be better.

v2.2.0 - December 2017
• Various technical changes to some database tables, and some minor bug fixes.
• Personal data held in the database is now encrypted.
• Data entry errors during Admin page updates are now highlighted and shown inline.
• Summary data about the numbers of users and bookings added to the Admin page.
• CBS pages are now also accessible via the main EACF site-map page.

v2.1.0 - March 2016
• This page added.
• Password protection security improved.
• Passwords must now contain at least 8 characters including a mixture of both letters and numbers.
• Users whose passwords were initially set or reset by an administrator are now required to change that password when they next log in.
• Access restrictions have been tightened so that anonymous users can now only see the calendar view summaries of existing bookings, and not the details of each booking. Anonymous users can now not use the 'search' or 'report' facilities, and logged-in users can only search or report on bookings at their own club.
• The default club on a particular device is changed so that it takes into account the club of the last logged-in user.
• The system now caters better for users who are members of more than one club and use the same userid and password for both. (Basically, they are required to choose just one of these clubs when they log in, and that will then be the only club they can make bookings at until they log out again.)
• There is a new option for club administrators to specify that the current device is a shared (public) club device. If implemented then the "keep me logged in" option on that device is disabled, and the default club on that device remains unchanged as the administrator's club even if a (non-admin) user from another club logs in.
• Logged-in users now see an on-screen count-down showing how much time remains before their login expires.
• Most error messages for the add/copy/edit entry form are now displayed inline on that form.
• The add/copy/edit entry form now includes a 'cancel' button.
• When viewing details of an existing booking, the options to try and edit or delete that booking are now automatically disabled if the user does not have permission to change it (e.g. if it was created by a different user at their club), though they ARE still allowed to copy and then edit it in order to create a new booking. (Club administrators can still edit or delete any booking at their own club, regardless of who made it.)
• Clicking on a day in the mini-calendars (near the top of the bookings summary pages) now always invokes the 'day' view for that day, even if the previous view was 'week' or 'month'.
• The list of months in the page footer now includes 3 previous months instead of 2.
• The 'Admin' section (for administrators only) has been reorganised to separate the general 'club' settings from the 'court' settings and make it easier to find them both.
• A new feature has been added to the 'club' settings so that administrators may choose to prevent general members from creating or editing a whole series of repeat bookings at once, i.e. restricting them to making single bookings only. In addition, any attempt to edit or copy a whole series of bookings now triggers an extra alert first.
• Various minor bug-fixes.

v2.0
• The CBS as a whole now requires the use of Javascript to view or edit any bookings, rather than having a non-Javascript fallback.
• Javascript is now used to view details of any booking OR to make a new booking from the 'day', 'week' or 'month' view summary pages. This measure is introduced to stop badly-behaved robot web crawlers from trying to access details of every booking, and from trying to make new bookings in every possible empty time-slot on every day. Although they were unable to succeed in doing this since they were not logged in, it was causing an unnecessary load on the website servers, and possible delays for legitimate users.
• Interface adjustments to make it possible to use the CBS on a tablet or mobile (touch interface). However, the user interface is still designed primarily for laptop and desktop users with a mouse and keyboard.