twitter 7.x-6.0

This has been superseded by v7.x-6.1.

Twitter - Moderately Critical - Access bypass - SA-CONTRIB-2015-146

This includes a wealth of improvements and bug fixes since the last release, totaling almost 100 issues fixed and almost 300 new patches written in the past six months, and is a recommended update for all sites currently using the v7.x-6.x branch. As always, test the update on a copy of the site to confirm there are no unexpected changes.

Note: No update process is included for sites currently using 7.x-5.x releases, that will hopefully be included in the forthcoming 7.x-6.1 release.

Notable changes include:

• Downloading tweets that contain emoji will no longer break the module.
• There now exists a notion of a Twitter account being considered "global". When writing tweets via the Twitter Post submodule, a user may select from either global accounts or authenticated ones that they themselves have added to the site. Users may also no longer publish from an account that is not publish which they do not own. There are new options permissions involved in this, it is highly recommended to verify the site's configuration after updating to ensure everything is still working as intended.
• The tweet.tpl.php template has been renamed to twitter_status.tpl.php; this will require sites to manually update any customizations they had done.
• Images embedded in tweets will now be displayed.
• A new text filter was added that allows embedding tweets by simply pasting the full URL of a single tweet.
• Improved error handling when API calls fail.
• Many bug fixes.

Full changelog since v7.x-6.0-alpha2:

• #1963524 by Sheldon Rampton: Fixed search_tweets() method not working in Twitter API library.
• #2015965 by Jaypan, juampy: Twitter settings page cannot be overridden.
• #2142177 by kevinchampion: Fixed API function not invoked: hook_twitter_status_save.
• By DamienMcKenna: Initial CHANGELOG.txt file.
• #2402317 by helmo: A permission was renamed which caused tests to fail.
• #2369833 by Jorrit, baldwinlouie: twitter_twitter_accounts() shouldn't return any accounts for the anonymous user.
• #2337219 by dysproseum: Update 7400 fails if the 'mentions' field already exists.
• #1884064 by jgSnell, e0ipso: Link path to configure is wrong in hook_requirements().
• #2402321 by DamienMcKenna, helmo: (temporarily) Fixed the 7.x-6.x branch tests.
• #2205277 by AdamPS: Do not convert in_reply_to_user_id field to integer when it must allow larger values.
• #1996606 by rdtome: [screen_name] token in Views display not available for use with the "name" field.
• #2139117 by maximpodorov: Don't assume all entity forms have fields.
• #1895320 by DamienMcKenna: Remove mention of hook_twitter_account_save() from the API docs as the hook was removed.
• #2055951 by xurizaemon, leewillis77, drupal_jon, DamienMcKenna: Change the twitter_id field to a BIGINT field, to allow room for Twitter's larger-than- 32bit unique IDs.
• #1943728 by frankdk, plopesc: Some text strings weren't translated.
• #969454 by caligari, DamienMcKenna: New text-only option for Twitter signin button.
• #1899594 by Jaypan: Change login element into a render array.
• #1825680 by lyricnz, DamienMcKenna: Add width/height attributes to the profile images.
• #2354555 by Owen Barton: Tweets should place alt text on img, not link.
• #2022485 by DamienMcKenna, Elijah Lynn: Improve status message upon posting to Twitter.
• #2485211 by crazydrake: Misspelling of "Twitter" in twitter_post.field.inc.
• #1642522 by cinnamon, digitalhorde, stimalsina, DamienMcKenna: Protocol-relative URLs for profile images."
• #1970498 by nielsonm, arcovia, DamienMcKenna: Only allow users to tweet using global or their personal accounts.
• #1970498 by DamienMcKenna: Fixed the post logic.
• #652680 by steinmb, DamienMcKenna: Don't assume user registration is successful.
• #2546686 by DamienMcKenna: Use FormAPI states logic to hide/show Post fields.
• #2378081 by nicrodgers, DamienMcKenna: users_show() only accepts a screen name.
• #1971744 by DamienMcKenna: Use popup dialog for token browser.
• #2042053 by InternetDevels: Allow translation of the "characters remaining" phrase in the Twitter Post module.
• #2403717 by dysproseum, DamienMcKenna: Catch any Twitter API request errors.
• #1967798 by DamienMcKenna: Updated README.txt to explain about the OAuth reqs.
• #2548093 by DamienMcKenna: Fixed incorrect variable name in try-catch block.
• #2548093 by DamienMcKenna: Note in the post field description that the maximum length for at tweet is 117 chars when a URL is included.
• #2169609 by recrit, DamienMcKenna: Moved some theming logic outside of Views handler so the theming works better.
• #2054761 by pobster: Added a Views user/twitter table relationship.
• #2040901 by jamiehollern: Allow mentions for unknown users.
• #2212407 by DamienMcKenna, jonhines: Tie non-auth accounts to the correct user.
• #1902780 by DamienMcKenna: Removed the dependency on Views, it's optional.
• #2032057 by DamienMcKenna, Verban: Check a few values to see if the screen name can be identified for the Follow field.
• #2484703 by DamienMcKenna, uladzimir.karol: Replace und/LANGUAGE_NONE usage with field_get_items() in all actions.
• #2353371 by DamienMcKenna, filippo.ledda: Fix tweet formatting so that mentions prefaced by a period will work correctly.
• #2531874 by DamienMcKenna; Changed {twitter}.in_reply_to_status_id, {twitter}.in_reply_to_user_id and {twitter_account}.twitter_uid to BIGINT.
• #1365452 by sillygwailo, balleyne, GaxZE, happysnowmantech, jenlampton, DamienMcKenna: Text filter for embedding tweets.
• #1910376 by lex0r, joelpittet, nicrodgers, IT-Cru, DamienMcKenna, basvredeling: Update {twitter}.text field to use a 'blob' to avoid problems with MySQL's character limitations in the 'utf8' table scheme. See: https://www.drupal.org/node/1910376
• #2534206 by DamienMcKenna: More verbose comments in hook_schema to explain why the {twitter}.text field is stored as a blob.
• #1878660 by DamienMcKenna: Don't show the login/registration form options if the API keys haven't been saved yet.
• #1886540 by DamienMcKenna: By default don't allow logins when the site is in maintenance mode, but give sites the option to allow it.
• #2338125 by durum: Fixed permission check for adding non-authenticated accounts.
• #1895472 by DamienMcKenna, Adirael: Don't allow people to edit each other's Twitter accounts.
• #1982786 by DamienMcKenna: Fixed signin callback using a D6 function.
• #1993470 by jamix, DamienMcKenna: Improved _twitter_filter_text().
• #1514284 by DamienMcKenna, darrylh: Ensure form state is passed to user_login_finalize() to ensure hook_user_login is triggered correctly.
• #2143605 by kladrian, DamienMcKenna: Reload the user object after logging in to ensure a full user object is passed along to the various hooks.
• #1929126 by colin_vanarts, leewillis77, AdamPS, DamienMcKenna: Store the entire message for retweets.
• #2553107 by DamienMcKenna: Ported Drush improvements from 7.x-5.x.
• #2214867 by DamienMcKenna: Added index on {twitter}.created_time.
• #1911494 by DamienMcKenna, Sheldon Rampton: Don't assume twitter_connect() works every time, identify failures.
• #2553077 by DamienMcKenna: Option to disable loading the bundled views.
• #2055685 by DamienMcKenna, marthinal: API calls for authenticated users should use that account.
• #2388479 by DamienMcKenna: Warn that the hashtag text filter causes problems with other HTML.
• #2222837 by rahulbile, DamienMcKenna: New permission for controlling settings.
• #2119759 by djac, DamienMcKenna: Add index on {twitter_account}.uid.
• #2544672 by gurvan, DamienMcKenna: Add classes to linked inserted by the text filters.
• #1648970 by DamienMcKenna, HaloFX, wouters_f: Optionally hide the Twitter button on login forms.
• #1275440 by ultimateboy: Internal API for retweeting a tweet.
• #1943440 by DamienMcKenna, Sheldon Rampton: Added new hooks around the timeline loading process.
• #2357921 by mkolar, DamienMcKenna: Allow the OAuth callback URL to be changed.
• #2403315 by DamienMcKenna: Custom field type for displaying the most recent tweet by a specific user.
• #1890926 by Drave Robber, DamienMcKenna: Drush command for posting tweets.
• #940060 by Jon Pugh, univate, justondoge, DamienMcKenna: Pass the current domain when authenticating.
• #1974102 by kerasai, hussainweb, DamienMcKenna: Rename tweet.tpl.php to match theme hook.
• #1890926 by DamienMcKenna: Fixes to the Drush 'tweet' command.
• #2239041 by DamienMcKenna: Replaced all http:// URLs with https:// ones.
• #2556611 by DamienMcKenna: New permission for controlling who has access to post using a global account.
• #2556011 by DamienMcKenna: Updated the README.txt file.
• #2557757 by DamienMcKenna: Hide fields if the 'announce' checkbox is unchecked.
• #2557783 by DamienMcKenna: Field schema was broken, wasn't saving anything.
• #2557773 by DamienMcKenna: Posting didn't work when using EntityTranslation.
• #2461937 by DamienMcKenna: Field widget improvements, don't post when editing content that's already published.
• #2559129 by DamienMcKenna: Fixed error when only one account to post from.
• #2558457 by DamienMcKenna: Additional logging during cron.
• #2559153 by DamienMcKenna: Incorrect use of user_load() when posting tweets.
• #2559239 by DamienMcKenna: Fixed embedded tweets, other functionality after recent changes to twitter_connect().
• #2163715 by migrad, hideaway, mkolar, DamienMcKenna: Optionally hide the new-user password message.