Release Notes October 2023

Details: Fundraisers occasionally upload the same photos multiple times on different days. To address this, a new refusal reason, "Old Photo Uploaded," has been introduced to help track and manage duplicate photo submissions.

Impact: This addition enhances the system's capability to handle duplicate photo uploads, providing clearer communication between fundraisers and administrators.

Details: Dataflow users now have the capability to automatically set payment to "cancel" when workflow or dataflow conditions dictate setting the donation status to "cancel" or "failed."

Impact: This improvement ensures a more streamlined and accurate representation of payment status within the dataflow, aligning with specific workflow conditions and enhancing overall transaction management.

Details: In instances where a payment attempt of type "cancellation" is generated, additional information about the origin of the cancellation is now displayed.

Impact: This improvement enhances transparency by providing clear insights into why a payment attempt was cancelled. Users can now easily track and understand the reasons behind cancellation, improving overall payment management.

Details: The Reports section introduces a Training Center Report page, offering detailed fundraiser training results for users like customer-admin, campaign managers, coaches, and team leaders. Users can now easily filter and view training outcomes based on status and individual fundraisers.

Impact: This enhancement streamlines data analysis within the cockpit, providing a more user-friendly experience for accessing and understanding training results.

Details: The Tamaro payment method has been upgraded from version 2.4 to 2.6, incorporating minor improvements in its presentation and utilization within the donation form.

Impact: This update enhances the usability and stability of the Tamaro payment method, resulting in a more user-friendly experience for donors and a robust implementation for seamless transactions.

Details: We have removed the differentiation between existing and non-existing users in the forgot password functionality to avoid potential misuse and prevent user enumeration.

Impact: This release addresses a potential security loophole, preventing attackers from gaining insights into existing user accounts through the forgotten password functionality. The removal of user existence differentiation in the response enhances the overall security posture, making unauthorized access less likely.

Details: In this release, we have fortified the security of our system by implementing measures to prevent clickjacking across our sites.

Impact: This enhancement significantly bolsters the overall security of our system, providing an additional layer of protection against clickjacking threats.