06-01-2026 CF Security 2025 fixes and updates
Summary
This security release addresses critical vulnerabilities and strengthens input validation across multiple system endpoints. All identified security issues have been resolved to protect system integrity and user data.
Security Improvements
API Endpoint Security Hardened - Multiple API endpoints have been secured with improved input validation and protection against injection attacks.
Session Management Strengthened - Session ID generation has been upgraded to use cryptographically secure methods, preventing session prediction attacks.
Input Validation Enhanced - Input validation has been strengthened across form submissions and API requests to prevent malicious data from being processed.
Database Query Protection - Database queries have been updated to use parameterised statements, eliminating SQL injection vulnerabilities.
Document Category Endpoints Secured - Global Document Category endpoints now include proper payload validation and security checks.
06-01-2026 Standard AU Date Format
Summary
This release standardises date formats across the entire platform to use the Australian date format (DD/MM/YYYY). All modules in both the Client and Contractor applications now display dates consistently, improving readability and reducing confusion for Australian users.
Dashboard
Overdue Risk Actions Date Format Fixed - The Dashboard now displays overdue risk action dates in the standard Australian format.
Live Access
Sign-In Book Dates Standardised - Induction dates and induction expiry dates in the Sign-In Book now use the Australian date format.
Map View Sign-In Dates Updated - Sign-in dates displayed in the Map View now use the standard Australian format.
Mobile Apps Date Format Updated - The Live Access native mobile apps now display all dates in the Australian format.
Inspections
Action Due Dates Standardised - Action due dates in the Inspection Actions section now display in the Australian format.
Module-Wide Date Standardisation - All date displays throughout the Inspection module have been updated to use the standard format.
Risk Register
Date Formats Standardised - All date displays in the Risk Register module now use the Australian format consistently.
Suppliers Module
Work Order History Dates Fixed - Updated Expected Start and Completion Date logs in Work Order History now display in the Australian format.
Worker Document History Dates Fixed - Document history dates in Worker Details now use the standard format.
Supplier Last Login Date Fixed - The Last Login date on Supplier Details now displays in the Australian format.
Remove File Log Dates Fixed - Dates in Remove File activity logs now use the standard format.
Module-Wide Date Standardisation - All date displays throughout the Suppliers module have been updated.
Staff Management
Expiry Date Format Fixed - Expiry dates in Staff Details now display in the Australian format.
Reports
Competency Matrix Dates Fixed - Expiry dates shown when using the Expire Within filter in the Competency Matrix report now use the Australian format.
Forms Module
Client App Forms Dates Standardised - All date displays in the Client App Forms module now use the Australian format.
Contractor App Forms Dates Standardised - All date displays in the Contractor App Forms module now use the Australian format.
Contractor App - Documents
Date Formats Standardised - All document-related dates in the Contractor App now display in the Australian format.
Contractor App - Plant and Vehicles
Document History Dates Fixed - Dates in Plant Details document history now use the Australian format.
Module-Wide Date Standardisation - All date displays in the Contractor Plant and Vehicles module have been updated.
Contractor App - Training
Date Formats Standardised - All training-related dates in the Contractor App now display in the Australian format.
Contractor App - Workers
Date Formats Standardised - All worker-related dates in the Contractor App now display in the Australian format.
Contractor App - Licences
Date Formats Standardised - All licence-related dates in the Contractor App now display in the Australian format.
06-01-2026 December 2025 System Release V2
Summary
This major system release delivers fixes for licence management, contractor registration, and document handling. Key improvements include proper licence extension calculations, resolved registration errors for restricted admins, and fixes for document upload date displays.
Licence Management
Licence Renewals Now Extend from Current Expiry - When renewing a Standard licence, the new period now correctly extends from the current expiry date.
Worker Admin Premium Upgrade Option Removed - Worker Admins no longer incorrectly see the "Pay the Difference" option to upgrade from Standard to Premium, which was not a valid upgrade path for their permission level.
Multiple Upgrade Clicks No Longer Cause Issues - Clicking the Upgrade Licence button multiple times no longer creates duplicate transactions or errors.
Licence Assignment from Profile Now Works - Assigning licences from the Worker profile page now works correctly without errors.
Contractor Registration
Registration for Restricted Admins Fixed - Contractors registering as restricted admins no longer encounter a fatal error during the registration process.
Phone Numbers Now Saved for All Admin Types - Phone numbers entered during registration now correctly populate to profiles for Restricted Admins and Multi-Identity Admins.
ABN Check Error Messages Improved - When the Australian Business Register (ABR) service is unavailable, users now see clearer error messages explaining the situation.
Client Logo Displayed on Registration Page - When suppliers are invited from the Suppliers module, the inviting organisation logo now appears on the registration page.
Better Messaging for Already Registered Contractors - Contractors who are already registered now see improved error messages when trying to register again.
Inactive Sites Hidden During Registration - Inactive sites and projects no longer appear in site selection during contractor registration.
Domain Approval for Restricted Admins Fixed - System glitches caused by restricted admins with different domain approval settings have been resolved.
Staff Management
Staff Permissions Issues Resolved - Multiple permission-related issues affecting staff users have been addressed, improving access control accuracy.
Super Features Company Name Access Corrected - Users with Super Features permission can now properly change contractor company names as intended.
Document Management
Upload Dates Display Correctly - The Upload Date column in Staff and Supplier document tables now shows the actual upload date instead of the current date.
Document Upload Modal Header Restored - The Upload Document modal header text has been restored to its correct wording.
Duplicate Filename Uploads Now Work - Uploading documents with the same filename to different categories no longer causes database errors.
Site Documents
No-Expiry Documents Show Correct Status - Site Documents added without an expiry date now correctly display "Uploaded" status instead of "Pending Upload".
Inactive Sites Hidden When Editing - When editing a Site Document, inactive sites are no longer shown in the site selection list.
Sites Module
Location Edits No Longer Create Duplicates - Editing and saving a site location now updates the existing LCP record instead of incorrectly creating a new one.
Site Export Includes Additional Column - The site export functionality now includes an additional column for enhanced reporting.
Forms Module
Search Function Restored - The Forms search feature no longer causes a fatal error when searching.
Radio Button Options Stay in Position - Selected options in radio-type questions no longer shift position after editing and saving a form.
Filter Date Inputs Display Correctly - Date range filter inputs in the Forms list now display properly on smaller screens without overflow.
Form Validation Improvements - Form validation has been improved to prevent data issues.
Live Access
Signed-In Profiles Now Display - The List View in Live Access now correctly displays all signed-in profiles.
Inspections
PDF Generation Error Fixed - Inspection PDF generation no longer fails when recommendation fields are null.
Timezone Offset Corrected for Action Dates - The date_of_action field now stores timestamps with the correct timezone offset during inspection sync.
PDF Layout and Formatting Improved - Various layout and formatting issues in inspection PDFs have been corrected.
Risk Register
Action Activity Now Logged - Activities performed on Risk Register actions are now properly logged to the associated risk record.
Workers Management
Account Owner Reactivation Works Correctly - Reactivating a deactivated Account Owner now properly restores their access without side effects.
Category Status Consistency Fixed - Worker category status now displays consistently between the Workers list and detail views.
Add Worker Wizard Feedback Improved - The Client Setup Screen in the Add Worker wizard now displays appropriate feedback.
Plant and Vehicles
Enhanced List View Filters - The Plant and Vehicles list view now includes enhanced filtering options for easier equipment management.
Incident Module
Video File Uploads Supported - File-type questions in incidents now support uploading video files and other media types.
Notification History Responsive Fix - The Notification History view now displays correctly on smaller screens.
System Emails
Company Document Expired Alert Updated - The system email sent for expired company documents has been updated with improved messaging.
System Stability
Multiple Backend Errors Resolved - Various backend errors including null object references have been fixed.
Compliance Daemon Updated - The compliance daemon now records contractor compliance status changes for better audit trails.