Page 1 of 2
1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Thu May 29, 2025 10:34 am
by burt
Welcome to v1.1.0.3
1.1.0.3 is a bug fix and security update release.
It is a small but important release.
General Updates
- updates bootstrap to 5.3.6
- soft bumps minimum PHP to 7.3
Bug Fixes
- remove unnecessary HTML in Product Description Content Module
- fixes HTML in Index Nested Cards Module
- updates Star Rating solve PHP division by zero error
- updates Manufacturers and Importers to NULL values when required
- solves an accessibility error in the Navbar area
- minor update to account page
Security Updates
- adds Password to Nuke Account page
- updates Testimonial Write module to sanitize malicious input from bad actors
Thank You's for the help and advice in 1.1.0.3
@heatherbell
@ecartz
@burt
@raiwa
@MyGamesShop
Aditya Saxena
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Thu May 29, 2025 10:36 am
by burt
Updated Files (structure), in code tags to retain format for easy reading.
Code: Select all
│ README.md
│
├───admin
│ └───includes
│ └───actions
│ ├───catalog
│ │ insert_product.php
│ │ update_product.php
│ │
│ ├───importers
│ │ delete_confirm.php
│ │
│ └───manufacturers
│ delete_confirm.php
│
├───ext
│ └───modules
│ └───content
│ └───account
│ nuke_account.php
│
├───includes
│ │ version.php
│ │
│ ├───actions
│ │ testimonial_write.php
│ │
│ ├───hooks
│ │ └───admin
│ │ └───siteWide
│ │ bootStrap.php
│ │
│ ├───languages
│ │ └───english
│ │ └───modules
│ │ └───content
│ │ ├───account
│ │ │ cm_account_gdpr_nuke.php
│ │ │
│ │ └───footer_suffix
│ │ cm_footer_extra_icons.php
│ │
│ ├───modules
│ │ ├───content
│ │ │ ├───index_nested
│ │ │ │ └───templates
│ │ │ │ tpl_cm_in_card_products.php
│ │ │ │
│ │ │ ├───navigation
│ │ │ │ └───templates
│ │ │ │ tpl_cm_navbar.php
│ │ │ │
│ │ │ └───product_info
│ │ │ │ cm_pi_price.php
│ │ │ │
│ │ │ └───templates
│ │ │ tpl_cm_pi_description.php
│ │ │ tpl_cm_pi_price.php
│ │ │
│ │ └───pages
│ │ tp_account.php
│ │
│ └───system
│ └───versioned
│ └───1.0.8.1
│ star_rating.php
│
├───install
│ │ phoenix.sql
│ │
│ └───templates
│ main_page.php
│
└───templates
└───default
└───includes
├───ext
│ └───modules
│ └───content
│ └───account
│ nuke_account.php
│
└───hooks
└───shop
└───siteWide
bootStrap.php
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Thu May 29, 2025 10:38 am
by burt
Updating from 1.1.0.2 to 1.1.0.3 is simple.
PRE STEP. REQUIRED
Make a backup copy of your current Phoenix (as it stands) and current Database (as it stands) so that you can easily rollback if things do not go as planned.
If you are certain you wish to move to 1.1.0.3;
1. REQUIRED
Run this SQL to update the necessary parts of the 1.1.0.2 Database to 1.1.0.3 Spec
Code: Select all
UPDATE products SET manufacturers_id = NULL where manufacturers_id = 0;
UPDATE products SET importers_id = NULL where importers_id = 0;
Upload these files.
Note that your /admin/ folder is hopefully not called "admin".
1.1.0.3.zip
3. REQUIRED
Delete this File
- /includes/system/versioned/1.01.00.00/tp_account.php
4. REQUIRED
Visit Security Checks page in Admin and solve any issues
Admin > Tools > Security Checks
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Thu May 29, 2025 10:39 am
by burt
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Thu May 29, 2025 11:07 am
by burt
Security CVE's have been published
- adds Password to Nuke Account page
https://github.com/CE-PhoenixCart/Phoen ... -pvwm-h8cv
- updates Testimonial Write module to sanitize malicious input
https://github.com/CE-PhoenixCart/Phoen ... -m8qj-vvgj
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Mon Jun 02, 2025 6:53 am
by Fiber
Testing local and online update from 1.1.0.2 created an account and immediately tried to delete it, expressly entered the wrong password and I would expect to get the message that your password is incorrect, but that does not happen I have changed in /ext/modules/content/account/nuke_account.php at nuke add_session to add and that works, now I get the message that the password is incorrect
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Mon Jun 02, 2025 7:12 am
by Fiber
I see also this in the error.log and ofcourse updated according the instructions:
[02-Jun-2025 08:20:52 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:20:57 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:21:03 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:21:12 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:21:17 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:21:24 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:25:03 Europe/Amsterdam] No unique importer for [:2]
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Sun Jun 08, 2025 6:44 pm
by tessthepup
@burt
Hi Gary,
Not sure if I have missed something over the last few months with being inactive on the forum but has the store logo module been removed? And if so what is the reason for this?
I see I can upload a main logo and mini logo but the mini logo only displays shop side when the brand module is enabled but no main logo module that I can see.
Thanks
Mark
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Sun Jun 08, 2025 8:53 pm
by burt
Some unused (in the new layout of Phoenix) modules were removed to make way for new modules.
Any removed modules are converted to addons;
app.php/addons/author/admin/contributions
Re: 1.1.0.3 Questions / Comments / Concerns / Feedback
Posted: Sun Jun 08, 2025 9:20 pm
by tessthepup
Thanks Gary, I guess I have a lot of ground to cover to catch up lol