1.1.0.3 Questions / Comments / Concerns / Feedback

[burt]

Welcome to v1.1.0.3

1.1.0.3 is a bug fix and security update release.
It is a small but important release.

General Updates

- updates bootstrap to 5.3.6
- soft bumps minimum PHP to 7.3

Bug Fixes

- remove unnecessary HTML in Product Description Content Module
- fixes HTML in Index Nested Cards Module
- updates Star Rating solve PHP division by zero error
- updates Manufacturers and Importers to NULL values when required
- solves an accessibility error in the Navbar area
- minor update to account page

Security Updates

- adds Password to Nuke Account page
- updates Testimonial Write module to sanitize malicious input from bad actors

Thank You's for the help and advice in 1.1.0.3

@heatherbell
@ecartz
@burt
@raiwa
@MyGamesShop
Aditya Saxena

[burt]

Updated Files (structure), in code tags to retain format for easy reading.

Code: Select all

│   README.md
│
├───admin
│   └───includes
│       └───actions
│           ├───catalog
│           │       insert_product.php
│           │       update_product.php
│           │
│           ├───importers
│           │       delete_confirm.php
│           │
│           └───manufacturers
│                   delete_confirm.php
│
├───ext
│   └───modules
│       └───content
│           └───account
│                   nuke_account.php
│
├───includes
│   │   version.php
│   │
│   ├───actions
│   │       testimonial_write.php
│   │
│   ├───hooks
│   │   └───admin
│   │       └───siteWide
│   │               bootStrap.php
│   │
│   ├───languages
│   │   └───english
│   │       └───modules
│   │           └───content
│   │               ├───account
│   │               │       cm_account_gdpr_nuke.php
│   │               │
│   │               └───footer_suffix
│   │                       cm_footer_extra_icons.php
│   │
│   ├───modules
│   │   ├───content
│   │   │   ├───index_nested
│   │   │   │   └───templates
│   │   │   │           tpl_cm_in_card_products.php
│   │   │   │
│   │   │   ├───navigation
│   │   │   │   └───templates
│   │   │   │           tpl_cm_navbar.php
│   │   │   │
│   │   │   └───product_info
│   │   │       │   cm_pi_price.php
│   │   │       │
│   │   │       └───templates
│   │   │               tpl_cm_pi_description.php
│   │   │               tpl_cm_pi_price.php
│   │   │
│   │   └───pages
│   │           tp_account.php
│   │
│   └───system
│       └───versioned
│           └───1.0.8.1
│                   star_rating.php
│
├───install
│   │   phoenix.sql
│   │
│   └───templates
│           main_page.php
│
└───templates
    └───default
        └───includes
            ├───ext
            │   └───modules
            │       └───content
            │           └───account
            │                   nuke_account.php
            │
            └───hooks
                └───shop
                    └───siteWide
                            bootStrap.php
                            

[burt]

Updating from 1.1.0.2 to 1.1.0.3 is simple.

PRE STEP. REQUIRED
Make a backup copy of your current Phoenix (as it stands) and current Database (as it stands) so that you can easily rollback if things do not go as planned.

If you are certain you wish to move to 1.1.0.3;

1. REQUIRED
Run this SQL to update the necessary parts of the 1.1.0.2 Database to 1.1.0.3 Spec

Code: Select all

UPDATE products SET manufacturers_id = NULL where manufacturers_id = 0;
UPDATE products SET importers_id = NULL where importers_id = 0;

2. REQUIRED
Upload these files.
Note that your /admin/ folder is hopefully not called "admin".

1.1.0.3.zip

3. REQUIRED
Delete this File

• /includes/system/versioned/1.01.00.00/tp_account.php

4. REQUIRED
Visit Security Checks page in Admin and solve any issues
Admin > Tools > Security Checks

[burt]

Development Branch is now 1.1.0.4

https://github.com/CE-PhoenixCart/Phoen ... ee/1.1.0.4

[burt]

Security CVE's have been published

- adds Password to Nuke Account page
https://github.com/CE-PhoenixCart/Phoen ... -pvwm-h8cv

- updates Testimonial Write module to sanitize malicious input
https://github.com/CE-PhoenixCart/Phoen ... -m8qj-vvgj

[Fiber]

Testing local and online update from 1.1.0.2 created an account and immediately tried to delete it, expressly entered the wrong password and I would expect to get the message that your password is incorrect, but that does not happen I have changed in /ext/modules/content/account/nuke_account.php at nuke add_session to add and that works, now I get the message that the password is incorrect

[Fiber]

I see also this in the error.log and ofcourse updated according the instructions:

[02-Jun-2025 08:20:52 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:20:57 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:21:03 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:21:12 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:21:17 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:21:24 Europe/Amsterdam] No unique importer for [:2]
[02-Jun-2025 08:25:03 Europe/Amsterdam] No unique importer for [:2]

[tessthepup]

@burt
Hi Gary,

Not sure if I have missed something over the last few months with being inactive on the forum but has the store logo module been removed? And if so what is the reason for this?

I see I can upload a main logo and mini logo but the mini logo only displays shop side when the brand module is enabled but no main logo module that I can see.

Thanks

Mark

[burt]

Some unused (in the new layout of Phoenix) modules were removed to make way for new modules.

Any removed modules are converted to addons;
app.php/addons/author/admin/contributions

[tessthepup]

Some unused (in the new layout of Phoenix) modules were removed to make way for new modules.

Any removed modules are converted to addons;
app.php/addons/author/admin/contributions

Thanks Gary, I guess I have a lot of ground to cover to catch up lol