Install

Works with Drupal: 7.x

Using Composer to manage Drupal site dependencies

Downloads

Download twitter-7.x-5.9.tar.gztar.gz 70.1 KB
MD5: 57e8d8068d30dd97f18e61ddcbb3ffca
SHA-1: e1872a3a8b50af5e81fb95d808b6a5cb5f6955c2
SHA-256: fc639e44b984516a2ffc46980df635e6fc7ad1f40e0d98198ce9e656034de26d
Download twitter-7.x-5.9.zipzip 84.92 KB
MD5: fc1f01be6a4289de89ee83b1a3cb95d5
SHA-1: 1b492201952ea3e8ca0cf02a8d1821703b0e28bf
SHA-256: 77738904fa959eb30e2d7045f936a7029054de8d14831679c051534b0b20fa22

Release notes

This has been superseded by v7.x-5.10.

Twitter - Moderately Critical - Access bypass - SA-CONTRIB-2015-146

This includes a wealth of improvements and bug fixes since the last release, totaling almost 100 issues fixed and almost 300 new patches written in the past six months, and is a recommended update for all sites. As always, test the update on a copy of the site to confirm there are no unexpected changes.

Notable changes include:

  • Downloading tweets that contain emoji will no longer break the module.
  • There now exists a notion of a Twitter account being considered "global". When writing tweets via the Twitter Post submodule, a user may select from either global accounts or authenticated ones that they themselves have added to the site. Users may also no longer publish from an account that is not publish which they do not own. There are new options permissions involved in this, it is highly recommended to verify the site's configuration after updating to ensure everything is still working as intended.
  • The tweet.tpl.php template has been renamed to twitter_status.tpl.php; this will require sites to manually update any customizations they had done.
  • Images embedded in tweets will now be displayed.
  • A custom pane was added for Panels integration, for posting to Twitter when building a custom node_edit display.
  • A new text filter was added that allows embedding tweets by simply pasting the full URL of a single tweet.
  • Improved error handling when API calls fail.
  • Many bug fixes.

Full changelog since v7.x-5.8:

  • #2005516 by Elijah Lynn: Fix invalid arg to foreach @ admin/config/services/twitter/post.
  • #2182945 by alexdmccabe, jacobsdan, juampy: Update search to Twitter API v1.1.
  • #2015965 by Jaypan, juampy: Twitter settings page cannot be overridden.
  • By juampy: Improved the error message when a Twitter account is not set for drush tws.
  • #2068649 by VladimirAus, psacc, juampy: Failed status updates triggered by rules actions show a success message.
  • #2068649 by VladimirAus, psacc, juampy: Twitter API exceptions now bubble up.
  • #2135743 by juampy: Fixed logic to avoid PHP warnings when signing in with a Twitter acount.
  • #2135743 by divadu, juampy: User password not encrypted.
  • #1936598 by recrit, hughworm, juampy: Add support for tweet images.
  • #2055951 by leewillis77: BIGINT issues with Twitter data storage.
  • #1637380 by peterpoe: Warning and notices in twitter_signin_oauth_callback_submit().
  • By DamienMcKenna: Initial CHANGELOG.txt file.
  • #2402317 by helmo: A permission was renamed which caused tests to fail.
  • #2369833 by Jorrit: twitter_twitter_accounts() shouldn't return any accounts for the anonymous user.
  • #2337219 by dysproseum: Update 7400 fails if the 'mentions' field already exists.
  • #604530 by DamienMcKenna: Implement hook_field_extra_fields() so the Twitter Post fieldset on node forms can be controlled.
  • #2457169 by DamienMcKenna: Allow Twitter Post option to be controlled via the content type edit form.
  • #1884064 by jgSnell, e0ipso: Link path to configure is wrong in hook_requirements().
  • #2402317 by DamienMcKenna, helmo: (temporarily) Fixed the 7.x-5.x branch tests.
  • #2205277 by AdamPS: Do not convert in_reply_to_user_id field to integer when it must allow larger values.
  • #1996606 by rdtome: [screen_name] token in Views display not available for use with the "name" field.
  • #1929126 by colin_vanarts, leewillis77, AdamPS, DamienMcKenna: Store the entire message for retweets.
  • #1985708 by DamienMcKenna, ingaro: Internal API incorrectly assumed numeric screen names were actually account IDs.
  • #1895320 by Drave Robber, DamienMcKenna: Update API documentation for hook_twitter_account_save().
  • #1943728 by frankdk, plopesc: Some text strings weren't translated.
  • #969454 by caligari, DamienMcKenna: New text-only option for Twitter signin button.
  • #1899594 by Jaypan: Change login element into a render array.
  • #1825680 by lyricnz, DamienMcKenna: Add width/height attributes to the profile images.
  • #2354555 by Owen Barton: Tweets should place alt text on img, not link.
  • #1929126 by DamienMcKenna: Remove redundant RT: bit from retweets.
  • #1929126 by AdamPS, DamienMcKenna: Fix RT text.
  • #2022485 by Elijah Lynn: Improve status message upon posting to Twitter.
  • #2322683 by DamienMcKenna: Add Twitter to node extra fields list.
  • By DamienMcKenna: Misspelling of "Twitter" in twitter.pages.inc.
  • #1642522 by cinnamon, digitalhorde, stimalsina, DamienMcKenna: Protocol-relative URLs for profile images.
  • #2546622 by DamienMcKenna: Undefined index error when adding non-authenticated account.
  • #1970498 by nielsonm, arcovia, DamienMcKenna: Only allow users to tweet using global or their personal accounts.
  • #1970498 by DamienMcKenna: Fixed the post logic.
  • #2546686 by DamienMcKenna: Use FormAPI states logic to hide/show Post fields.
  • #2395609 by DamienMcKenna: Custom Panels pane for submitting tweets.
  • #652680 by steinmb, DamienMcKenna: Don't assume user registration is successful.
  • #2378081 by nicrodgers, DamienMcKenna: users_show() only accepts a screen name.
  • #2042053 by InternetDevels: Allow translation of the "characters remaining" phrase in the Twitter Post module.
  • #2403717 by dysproseum, DamienMcKenna: Catch any Twitter API request errors.
  • #1967798 by DamienMcKenna: Updated README.txt to explain about the OAuth reqs.
  • #1943398 by nwehner, tanc, DamienMcKenna: Truncate !title token to prevent the tweet submission failing.
  • #2548093 by DamienMcKenna: Fixed incorrect variable name in try-catch block.
  • #2169609 by recrit: Moved some theming logic outside of Views handler so the theming works better.
  • #2054761 by pobster: Added a Views user/twitter table relationship.
  • #2040901 by jamiehollern: Allow mentions for unknown users.
  • #2212407 by DamienMcKenna, jonhines: Tie non-auth accounts to the correct user.
  • #2084729 by DamienMcKenna: twitter_connect() shouldn't list non-authed users.
  • #1902780 by DamienMcKenna: Removed the dependency on Views, it's optional.
  • #2032057 by DamienMcKenna, Verban: Check a few values to see if the screen name can be identified for the Follow field.
  • #2484703 by DamienMcKenna, uladzimir.karol: Replace und/LANGUAGE_NONE usage with field_get_items() in all actions.
  • #2353371 by DamienMcKenna, filippo.ledda: Fix tweet formatting so that mentions prefaced by a period will work correctly.
  • #2531874 by DamienMcKenna; Changed {twitter}.in_reply_to_status_id, {twitter}.in_reply_to_user_id and {twitter_account}.twitter_uid to BIGINT.
  • #1365452 by sillygwailo, balleyne, GaxZE, happysnowmantech, jenlampton, DamienMcKenna: Text filter for embedding tweets.
  • #1910376 by lex0r, joelpittet, nicrodgers, IT-Cru, DamienMcKenna, basvredeling: Update {twitter}.text field to use a 'blob' to avoid problems with MySQL's character limitations in the 'utf8' table scheme. See: https://www.drupal.org/node/1910376
  • #2534206 by DamienMcKenna: More verbose comments in hook_schema to explain why the {twitter}.text field is stored as a blob.
  • #1878660 by DamienMcKenna: Don't show the login/registration form options if the API keys haven't been saved yet.
  • #2430229 by DamienMcKenna, sumitmadan: By default don't re-post tweets on nodes that are already published, but give an option to change this.
  • #1886540 by DamienMcKenna: By default don't allow logins when the site is in maintenance mode, but give sites the option to allow it.
  • #2338125 by durum: Fixed permission check for adding non-authenticated accounts.
  • #1895472 by DamienMcKenna, Adirael: Don't allow people to edit each other's Twitter accounts.
  • #1982786 by DamienMcKenna: Fixed signin callback using a D6 function.
  • #1993470 by jamix, DamienMcKenna: Improved _twitter_filter_text().
  • #1514284 by DamienMcKenna, darrylh: Ensure form state is passed to user_login_finalize() to ensure hook_user_login is triggered correctly.
  • #2143605 by kladrian, DamienMcKenna: Reload the user object after logging in to ensure a full user object is passed along to the various hooks.
  • #2214867 by DamienMcKenna: Added index on {twitter}.created_time.
  • #1911494 by DamienMcKenna, Sheldon Rampton: Don't assume twitter_connect() works every time, identify failures.
  • #2553077 by DamienMcKenna: Option to disable loading the bundled views.
  • #2055685 by DamienMcKenna, marthinal: API calls for authenticated users should use that account.
  • #2388479 by DamienMcKenna: Warn that the hashtag text filter causes problems with other HTML.
  • #2222837 by rahulbile, DamienMcKenna: New permission for controlling settings.
  • #2119759 by djac, DamienMcKenna: Add index on {twitter_account}.uid.
  • #2022561 by Elijah Lynn: Return the status message in hook_node_insert/update.
  • #2544672 by gurvan, DamienMcKenna: Add classes to linked inserted by the text filters.
  • #1648970 by DamienMcKenna, HaloFX, wouters_f: Optionally hide the Twitter button on login forms.
  • #1275440 by ultimateboy: Internal API for retweeting a tweet.
  • #1943440 by DamienMcKenna, Sheldon Rampton: Added new hooks around the timeline loading process.
  • #2357921 by mkolar, DamienMcKenna: Allow the OAuth callback URL to be changed.
  • #2403315 by DamienMcKenna: Custom field type for displaying the most recent tweet by a specific user.
  • #2403315 by DamienMcKenna: Follow-up to finish renaming the twitter_account_load_all function to twitter_load_accounts() to match v6.
  • #1890926 by Drave Robber, DamienMcKenna: Drush command for posting tweets.
  • #940060 by Jon Pugh, univate, justondoge, DamienMcKenna: Pass the current domain when authenticating.
  • #1974102 by kerasai, hussainweb, DamienMcKenna: Rename tweet.tpl.php to match theme hook.
  • #1890926 by DamienMcKenna: Fixes to the Drush 'tweet' command.
  • #2556013 by DamienMcKenna: Ensure the 'post' option is respected on new content.
  • #2239041 by DamienMcKenna: Replaced all http:// URLs with https:// ones.
  • #2556611 by DamienMcKenna: New permission for controlling who has access to post using a global account.
  • #2556011 by DamienMcKenna: Updated the README.txt file.
  • #2558457 by DamienMcKenna: Additional logging during cron.
  • #2559153 by DamienMcKenna: Incorrect use of user_load() when posting tweets.
  • #2559239 by DamienMcKenna: Fixed embedded tweets, other functionality after recent changes to twitter_connect().
  • #2163715 by migrad, hideaway, mkolar, DamienMcKenna: Optionally hide the new-user password message.
Created by: DamienMcKenna
Created on: 30 Aug 2015 at 09:52 UTC
Last updated: 9 Sep 2015 at 19:22 UTC
Security update
Bug fixes
New features

Other releases