2.4.2
Progress
% Complete
Tickets Left
Replace default 'yui' interface with NEW bootstrap/jquery, leaving yui as optional
- integrate Twitter Bootstrap v4 support (it's supposedly v3 compatible, but there are some quirks)
- 'yui' would become a 'hard' framework type like bootstrap & boostrap3
- 'yui' must be specifically declared in the theme template to receive the 'yui' styling, otherwise it'll default to the NEW style
- basically all the current controls, etc...would be moved into a 'yui' subfolder and the NEW style (probably bootstrap3/4) would be moved into the root folder like controls/plugins, etc...)
- update events module
- remove ancient browser polyfill support? This would only/mostly affect forms which would still be functional. 'Ancient' browser use is strongly discouraged due to the many security failings
Expected Dec 29th, 2017
dleffler
5 open tickets
Closed tickets 2
Monday, January 01 2018
Thursday, November 02 2017
Tuesday, September 12 2017
-
- State changed from new to resolved
(from [4016e9bf50bcc166a575b916746baf233025f982]) implement php v7.2 compatibility (remove create_function use) [#1416 state:resolved] https://github.com/expon...
Friday, May 19 2017
-
BJ Kline commented at 6:54 PMIt happens when creating an order. As an admin I can add address in Exponent, save it, but it doesn't allow me to then choose if I want to use it as billing, sh...
Thursday, May 11 2017
-
peters@slx-online.biz commented at 8:28 PMTonight I worked through permissions directly on the server - all of framework, themes, files, tmp. I have done external down as far as ckeditor, and need to co...
-
peters@slx-online.biz commented at 4:27 PMI'm not available tomorrow until mid afternoon, so I really need to get this up and running tonight. If running your alternative security script caused it to cr...
-
peters@slx-online.biz commented at 4:08 PMDave. How long can you work on this today please? I have been browsing around but am rather in the dark. Thanks. Peter.
-
peters@slx-online.biz commented at 3:46 PMI can access text files on the root folder, but cannot do anything else. From the server error log ( not the control panel log which I previously sent), typical...
-
peters@slx-online.biz commented at 3:21 PMI have recursed 775 through all Exponent folders plus files / themes. I still have the 500 internal server error.
[Thu May 11 11:18:47.492017 2017] [:error] [pi...
-
-
peters@slx-online.biz commented at 2:06 PMThu May 11 10:05:35.006044 2017] [:error] [pid 129229:tid 139763587708672] [client 82.22.148.130:55109] SoftException in Application.cpp:262: File "/home/sandto...
-
peters@slx-online.biz commented at 2:04 PMRan the alternate, said OK. Clicked to go to a page - internal server error. Can't access anything now. Site broken.
-
peters@slx-online.biz commented at 9:22 AMDon't know if this is relevant, just been checking server error logs and found this:
[Wed May 10 20:33:44.725832 2017] [autoindex:error] [pid 1004754:tid 139763...
Wednesday, May 10 2017
-
-
peters@slx-online.biz commented at 4:07 PMOops sorry. Not working. Was on the dev site and hadn't switched back. Any idea when you can get to this please, I do need to get the huge number of updates don...
-
Tuesday, May 09 2017
-
peters@slx-online.biz commented at 2:20 PMAlso, this site is not hosted on one of my Fasthosts servers.It's with Hostrocket.
-
peters@slx-online.biz commented at 12:39 PMJust looking, I see we're on 5.6. There's an option to change to 7. Would that cause me any different problems?
-
peters@slx-online.biz commented at 12:37 PMNot sure if I can do anything about PHP problems, I'll need to contact the site owner.
If it's not associated with the issue, I guess it's not so urgent? I'm ab...
-
peters@slx-online.biz commented at 12:06 PMI have noticed sometimes a text edit saves first time but then not. I am working on the page "http://www.sandtoft.org/events".
Edit the calendar, switch to...
-
peters@slx-online.biz commented at 8:37 AMIt is already ticked ON. Your dleffma1nt login is still there if you need a look. Peter.
Monday, May 08 2017
-
peters@slx-online.biz commented at 3:19 PMJust a straightforward text module edit then save with my super admin account I was using before the update. Also tried another super user login with same resul...
-
peters@slx-online.biz commented at 8:22 AMI just wish the browser developers would stop delivering big bags of worms... The ultimate challenge became Chrome vs. Safari. Both use the same engine so a fix...
Sunday, May 07 2017
-
peters@slx-online.biz commented at 3:08 PMIn a drastic move I deleted all htaccess files in all folders under tmp and now I have thumbnails!
-
peters@slx-online.biz commented at 8:17 AMHi Dave. Yes, but my understanding was that <!--[if IE 10]> is ignored by IE10+ so the statement doesn't do anything.
The specific problem that I have is the po...
Saturday, May 06 2017
-
peters@slx-online.biz commented at 3:04 PMThanks Dave. That seems to work (editor).
I did rename the htaccess file in that folder but it made no difference. I still get the panda bear icon. There are th...
-
peters@slx-online.biz commented at 2:01 PMPlease could you let me know when you might be able to fix this problem? I am now having real time issues being unable to add my custom css reliably. I do have ...
Monday, May 01 2017
-
peters@slx-online.biz commented at 11:52 AMAttached is the code, together with the css which is in base-styles.
-
peters@slx-online.biz commented at 11:02 AMI also have an ongoing problem with ckeditor. When I edit the source and save my changes are there. Next time I go into the editor they are stripped out. On the...
Friday, April 28 2017
-
peters@slx-online.biz commented at 2:49 PM2.4.1 January 26th 2017, no patch number shown.
Now updated to patch 5.Image icons still don't display correctly. Drag / drop upload now works, but upload / se...
Thursday, March 02 2017
Monday, February 27 2017
-
- State changed from new to resolved
- Assigned user changed from expNinja to dleffler
- Milestone set to 2.4.2
(from [85c1b9f3e0650e3b970dfd35584c419c06910594]) security fix exploits using source_selector.php reported by Belladona-c0re and croxy [#1407 state:resolved mil...
Tuesday, January 17 2017
-
mm commented at 5:00 AMThe class.upload library suffers from the same vulnerability:
curl "[exponent]/framework/modules/file/connector/uploader_tinymce.php" -F "file=@/path/to/malicio...
Monday, January 16 2017
-
mm commented at 5:56 AMcurl "[exponent]/framework/modules/file/connector/elfinder.php" -F "cmd=upload" -F "target=l1_" -F "upload[]=@/path/to/malicious.php2"
Apache/2.4.18 (Ubuntu) on...
Sunday, January 15 2017
-
mm commented at 3:52 PMMatching against mimetypes via finfo provides no safety against uploading malicious files, see e.g. http://php.net/manual/en/function.finfo-file.php#75275
Examp...
Saturday, January 07 2017
Saturday, October 29 2016
No messages in this milestone.