This section contains the Bug fixes description of Aptify 6.2 3 release with the different categories as given below:
- Security Fixes
- Application Server Fixes
- Viewing System Fixes
- Accounting System Fixes
- Order Entry Fixes
- Report System Fixes
- Messaging System Fixes
- Framework Fixes
- Setup Fixes
- Product Management Fixes
- Customer Management Fixes
- Classic e-Business Fixes
- Fundraising Fixes
- e-Business 6 Fixes
- Integration Fixes
| Anchor | ||||
|---|---|---|---|---|
|
SQL Injection Vulnerability in LinkboxData Endpoint
As a part of PCI compliance, a security threat found in LinkBoxData Endpoint has been fixed in Aptify 6.2. The problem found during SQL injection testing on Aptify APIs under ‘’/AptifyServicesAPI/services/LinkBoxData’’ has been addressed.
(Issue 4846 & 4844)
SQL Injection Vulnerability in Views service
As a part of PCI compliance, a security threat found in Views services has been fixed in Aptify 6.2. The problem found during SQL injection testing on Aptify APIs under ‘’/AptifyServicesAPI/services/AptifyViews’’ has been addressed.
(Issue 4841)
SQL Injection Vulnerability in DataObjects
As a part of PCI compliance, a security threat found in DataObjects has been fixed in 6.2. It was found that there are few exec incorrectly used within a stored procedure. All such stored procedures with exec or dynamic SQL calls were updated to correctly parameterize their inputs.
(issue 4842)
SQL Injection Vulnerability in FormTemplatePartDynamicData
As a part of PCI compliance, a security threat found in FormTemplatePartDynamicData has been fixed in 6.2. The problem found during SQL injection testing on Aptify APIs under ‘’/AptifyServicesAPI/services/ FormTemplatePartDynamicData’’ has been addressed.
(Issue 4841)
HTTP Security Headers Missing
As a part of Security testing, analyst identified the lack of HTTP security header, which can be a potential for client-side attacks. Fixes have been done in the identified headers via web.config and confirmed that they are present in both service requests and static resource requests.
The following security headers have been added in frontend web config file:
...
...
| Info |
|---|
In the above mentioned config file, replace "YOURSERVER" word with your Server Name. For example: https://YOURSERVER.com ----> https://test-server.Aptify.com |
| Note |
|---|
Please Note
|
Below key has been updated in SOA Web config file:
( …\inetpub\wwwroot\AptifyServicesAPI\web.config)
<add key=”Aptify.Services.CORS.AllowedDomains” value = ”https://example.aptify.com”/>
(Issue 4887)
Wildcard setting for CORS.AllowedDomains header
As a part of Security testing, it was identified that the CORS policy with wildcardsenabled is not a good choice. Though the use of the wildcard(*)is restricted in the CORS specification and the wildcard cannot be combined with the cross-origin transfer of credentials (authentication, cookies or client-side certificates), it is still a potential security risk. Hence with Aptify 6.2 release, the ‘’ Access-Control-Allow-Origin’’ in frontend web.config file has been updated to explicitly specify the security header details instead of *. Example: Access-Control-Allow-Origin: https://example.aptify.com.
<add key=”Aptify.Services.CORS.AllowedHeaders” value = ”https://example.aptify.com”/>
(Issue 4839)
| Anchor | ||||
|---|---|---|---|---|
|
Version 10.0.3 of Newtonsoft.json Prevents Windows Task From Being Created
...
For more information on troubleshooting the app server issues, please refer Upgrading the App Server with 6.2
(Issue 4850)
Application Server Issues - Need EnableCaptureViewStatistics Attribute
Aptify 6.1 introduced a dependency on a config file attribute named EnableCaptureViewStatistics. This config file attribute, however, is not automatically added to AptifyAsyncProcessor.exe.config or AptifyCreateProcessFlowRun.exe.config as part of the service pack installer. Without this attribute, the Application Server also fails to process jobs. Please set a new key in AptifyAsyncProcessor.exe.config and AptifyCreateProcessFlowRun.exe.config to set the value of EnableCaptureViewStatistics Attribute to True.
(Issue 4900)
| Anchor | ||||
|---|---|---|---|---|
|
...
With Aptify 6.2, Fixes has been done to correct the ELV sizing logic to display the ELV records correctly at different Zoom levels.
(Issue 2263)
Go Button on Prompted Pivot Grid Remains Inactive
With earlier versions of Aptify, the Go button on the Prompted Pivot Grid view only worked the first time and then remained inactive. The user had to open another view and return to the Pivot Grid to “refresh” the Go button and allow another search. This behaviour has been corrected in 6.2 release.
(Issue 4712)
Viewing System List View with Prompt and Grouping Does Not Load
Aptify 6.2 corrected behaviour in the viewing system wherein List view with Prompt and Grouping was not loading in 6.1 version.
(Issue )
Auto-Resize Columns Broken in Web 6.1
Aptify 6.2 corrected the column auto-resizing behaviour on list views of the web application.
(Issue 4901)
| Anchor | ||||
|---|---|---|---|---|
|
Currency Flow down fixes in Aptify 6.2
This issue fixes a problem in the Aptify Desktop application where the order currency was not flowing down correctly when the associated person and company preferred currency was different.
(Issue 2731)
GL Batch Wizard fails when batching Large Number of Records from a Prompt View
With Aptify 6.2, fixes have been done to correct a GL batching scenario where the GL Batch wizard was failing when batching a large number of records from a prompt view.
(Issue 3267)
Does not allow to save Cash batch record for the un-match file with Resolved status
After importing a lockbox file with at least one unmatched records and then matching the record and setting the status to Resolved, the Cash Control batch record was not getting saved. Fixes have been done in Aptify 6.2 release to fix the behaviour.
(Issue 3275)
GL Batch Wizard Broken in 6.1 Desktop and Web for non-numeric characters in GL Account Number.
GL Batch Wizard (Orders, Payments) stopped working correctly in Aptify 6.1 (Desktop or Web) when GL Account numbers contained non-numeric characters. The failure occurred as the wizard attempted to calculate/generate BatchAccountEntries on the Create Batch Entries step. This behaviour has been corrected in Aptify 6.2.
(Issue 4633)
...
In Aptify 6.2, a conversion error was fixed which populated during GL flow down on the product. This happened only for specific GL accounts like ‘13000-1100’ which had a hyphen.
(Issue 4634)
| Anchor | ||||
|---|---|---|---|---|
|
...
With Aptify 6.2, fixes have been done in the Order load scenario, due to which an Order having multiple 'Orderlines' using one kit product will load correctly now in Aptify.
(Issue 3278)
Orders Entity RelatedProductsEnabled Attribute Does Not Function in Web
With earlier versions of Aptify, even if the ‘RelatedProductsEnabled’ attribute in the Orders entity is set to 0 , the Related Products still appear when placing orders in Aptify Web. This behaviour has been corrected in the 6.2 version of Aptify Web.
(Issue 4742)
New Payment DLLs Missing from Script Types
In Aptify 6.1, there were specific scenarios when compilations errors were produced for existing scripts that call Orders/Payments functionality. Related fixes have been done in Aptify 6.2 release to add the RemotePayments and RemotePaymentService objects as Repository References to the Process Pipeline and Pricing Rule Script Types to avoid the compilation errors.
(Issue 4808)
Prevent New Orders from Saving with Non-Taken Status
In previous versions of Aptify, if you save a new Order as Back-Ordered, it initially shows an error. But if you then try to save it again, it saves successfully but clears the Shipping/Handling fields. This behaviour has been corrected in Aptify 6.2 release.
(Issue 4851)
Order Line Price Selector Shows Expired Prices in Web
Aptify 6.2 release fixed a scenario in web where Price drop down menu on Order was showing expired price records. It currently shows only current active price options.
(Issue 4859)
Aptify Web Order Cancellation Wizard Can Generate Two Cancellation Orders If Finish Is Clicked Multiple Times
Aptify 6.2 fixes a problem where multiple cancellation order was generated if user clicked the Finish button on Cancellation wizard multiple times.
(Issue 4904)
Saved Payment Method Still Used After Changing Order Payment Information
In Aptify 6.0 desktop application, if a user selects a Saved Payment Method on an order, and then change the payment to a different credit card, the SPM was still used instead of the new payment information. This behaviour has been corrected in Aptify 6.2 release.
(Issue 5025)
| Anchor | ||||
|---|---|---|---|---|
|
...
With Aptify 6.1, when we run an SSRS report from the report wizard in the Aptify web and click the print button in the upper left of the page, it only printed the first and last page regardless of how many pages it was. This problem has been fixed in Aptify 6.2 release version.
(Issue 3476)
Aptify Web: Apostrophes In ELV New Record Params Cause Input Parameter Text to be Truncated
Suppose if there is an apostrophe in the Data Combobox control of an Entity Value field or if the ELV New Record Parameter has an apostrophe, then the ELV was not loading correctly. This issue has been fixed in Aptify 6.2 to correct this behaviour.
(Issue 3971)
| Anchor | ||||
|---|---|---|---|---|
|
Unable to View HTML or Plain Text on Message Templates
In Web, the HTML and Plain Text tabs on Message Templates were not displaying their contents or allowing the user to edit the information. This has been corrected in 6.2 version of Aptify Web.
(Issue 4228)
| Anchor | ||||
|---|---|---|---|---|
|
"Cannot find table 29" Event Viewer Error After Logging into Web
With Aptify 6.1, when logging in Aptify Web, the event viewer was reporting an error “Cannot find table 29”. This error has been fixed and will no more appear in version 6.2 of Aptify.
(Issue 4236)
Deleting List from Persons List Tab Deletes Entire List Record and Not List Item
In the desktop application of Aptify 6.0, when a new list was added and then deleted from the Persons List tab, the entire List record was deleted instead of the new list record itself for specific scenarios. This behaviour has been corrected in 6.2 version of the desktop application.
(Issue 4254)
Silent Error 'No AptifyTypeResolver has been found in the GlobalContext.' when the user logged in to Desktop
In Aptify 6.1 Desktop, loading a view (not a Find results view or view on the dashboard) or opening any record, causes Aptify to log the following error: “No AptifyTypeResolver has been found in the GlobalContext. IGEObjectDataCacheCoordinator will be given an empty implementation.”
With Aptify 6.2, the silent error is disabled with the below new appSettings key in the configuration file.
<add key="Aptify.Framework.GenericEntity.AptifyTypeResolver.DisableWarning" value="true" />
(Issue 4468)
Can't Add Field to Products Entity After e-Business Upgrade
On Aptify 6.1, adding a new field to the Products entity caused an index error. This problem has been corrected in Aptify 6.2.
(Issue 4513)
Aptify Web: Aptify 6.1 Event Log Errors for Csrf protection is disabled
On Aptify Web for 6.1, there are many entries added to the Event Log. These are Warnings from AptifyServicesMessage that state: Csrf protection is disabled. The site works correctly but it just fills the event log which makes it difficult to troubleshoot the actual problems. Improvements were done in Aptify 6.2 Web installer to control the Event log errors for CSRF protection.
To avoid multiple CSRF warning messages, the following web config file attribute has been added :
<add key="Aptify.Services.Csrf.DisableWarning" value="false"/>
This attribute allows users to Switch off the Event viewer warnings when CSRF protection is disabled.
(Issue 4607)
Secondary installers and secondary startup routines executed twice
In Aptify eBusiness 6, we added two new constructs to services: Installers are used for Dependency Injection. Startup Routines are used to execute arbitrary code during SOA startup.
Both of these concepts have a primary and secondary interface. Primary interfaces are implemented by Aptify. Secondary interfaces are implemented by customers. Fixes have been made in Aptify 6.2 release as there was a bug where instances of ISecondaryStartupRoutine and ISecondaryUnityInstaller are executed twice. The goal is to have all Aptify code executes first, then all customer code executes.
(Issue 4731)
Test Removing AppCache (Chrome Subsetting Feature)
Lately, Browsers are deprecating the functionality of the applicationCache feature. This is a breaking change for all applications still using the applicationCache API. This browser feature was leveraged in older versions of Aptify Web to provide a path towards working offline in the product. The feature was never fully completed and customers did not leverage it. Support for offline mode was removed but the applicationCache references remained. In Web console, following message logged: [Deprecation] Application Cache API use is deprecated and will be removed in M82, around April 2020.
Now that Chrome browsers have removed the feature entirely, Aptify Web 6.2 has been updated to remove the Appcache features. AppCache warning should no more be displayed from Chrome console
| Info |
|---|
Who is affected? Any customer running Aptify Web on 5.5.4.4000 or newer. |
...
| Anchor | ||||
|---|---|---|---|---|
|
Aptify 6.1 Installer Changes Default Country Fields on Addresses Entity
...
(Issue 4685)
| Anchor | ||||
|---|---|---|---|---|
|
Product Prerequisite Function Fails if Product Type Differs from Previously Purchased Product
Aptify 6.2 has corrected the Product pre-requisites failure scenarios reported with earlier versions of Aptify. The scenarios reported are as follows:
- When using Product Prerequisites, if the Product requires two prerequisite Products, using two filter statements joined by an AND operator, the Product cannot be added to the Order and the user receives the Prerequisites Failure Message.
- When using Product Prerequisites, if the required Product’s Type differs from that of the Product being purchased, the Order will not allow the Product to be added and displays the Prerequisites Failure Message. For example, if the required Product’s Type is General and the Product being purchased has a Type of Meeting, the Meeting cannot be added to the Order.
(Issue 4708 & 4740)
Prices Record Filter Rule Does Not Respect Registrant Service Filters
Aptify 6.2 corrected the scenario where the pricing rule was not working correctly, if the "registrant" service is selected.
(Issue 4709)
Search results only showing one item per page
Aptify 6.2 fixed a problem in which doing a find on a Category within a Product record, the results were displayed as one per page.
(Issue 4894)
| Anchor | ||||
|---|---|---|---|---|
|
Contact Log - Blank Value Error
With previous versions of Aptify, users faced errors while creating a contact log record in Aptify web when adding two attachments to the contact log (one before first save and one before second save). This behaviour was corrected in Aptify 6.2 release.
...
Save Times Out After Adding Topic Code to Contact Log with Attachment
Aptify 6.2 fixed a problem found in earlier versions of Aptify, where adding Topic Code to Contact Log with an attachment was not working.
(Issue 4898)
Companies Form's All Persons Tab Shows No Data on Aptify Web 6.1
In 6.1 Aptify Web, no records appeared in the grid for the All Persons tab in Companies form. This has been corrected in Aptify 6.2 Web version.
(Issue 4899)
| Anchor | ||||
|---|---|---|---|---|
|
e-Business session state set to StateServer and got an error when view shopping cart
With these fixes, Aptify 6.2 corrects a behaviour found in classic e-Business wherein the Session State set to StateServer option was not working well when viewing the shopping cart.
(Issue 4907)
| Anchor | ||||
|---|---|---|---|---|
|
Cannot Take a Credit Card Payment in the Contribution Payment Wizard with Aptify 6.1
Aptify 6.2 corrected the Credit Card Payment processing problem found in the Contribution Payment Wizard on the Fundraising application.
(Issue 4931)
| Anchor | ||||
|---|---|---|---|---|
|
Aptify 6.0 with e-Business 6.0: Credit Card Payments Fail For CVVs Starting with 0
...
(Issue 5027)
| Anchor | ||||
|---|---|---|---|---|
|
Hosted Payment Page - Limit Cards Used and No Saving Cards
As a part of the Hosted payment page for Bluepay, the following fixes were done in Aptify 6.2 release:
- Limiting the display of supported card types using the Web config attributes.
Examples:
<add key="Aptify.FrameWork.Payment.showAcceptAmex" value="false" />
<add key="Aptify.FrameWork.Payment.showAcceptDiscover" value="false" /> - In Aptify 6.1, even though the Credit Card Hosted Payment Reference Transaction payment type has the Allow “Save for Future Use” box unchecked, the Save for Future option showed up on the hosted payment page at Checkout page. This problem has been fixes in Aptify 6.2 release.
(Issue 4875)
Hosted Payment Page Should Allow Transactions over $1,000
In Aptify 6.2 release, we updated the Hosted Payment form to remove the comma from amounts greater than $999.99. So, a $1,000.00 charge is now displayed as $1000.00. This fix was done as the amount with commas was not processing correctly on the Hosted payment page.
...