Hello

 

I make an update about the composer who can create automatically an htaccess in shop directory and  when you install application and the site is not accessible.

I change the json configuration to resolve that.

 

About chmod if your hoster do not allow to include new file or create new directory. You must do that manually.

 

For you the most important directory and sub directory are :

 

Includes/clicshopping/work in 777 and sub

Sources/images in 777 and image

 

The chmod can be changed with your ftp

 

Check also is your hoster accept composer (commande). Now, if you want install a payment for example, composer is required in your server.

 

If the automatic install do not work you have no choice to download the apps you make an install manually in your case

You have some tutorials on the website to do that how to install in manual an apps

 

The best is to have a local website, to install local and after to export in your server.

 

I hope it can help you to resolve your problem.

Hello,

 

Just for information, An update has been made, now, it's possible to :

update all the library

update one library

clear the cache

compare the version installed with the latest version.

 

Just a warning, you must be careful when you make an update because it can create an error inside your apps.

Make for the expert.

hello,

@SuperThinI:

fixed the problem, you can find the files modified there : https://github.com/ClicShopping/ClicShopping_V3/commit/8d21913e9fb17242b57fe202a2a94c62e10d89f4

Thank you for this report.

@Drack, Thank you for this great help

This fix will be included for 3.2107 version

If you hoster  use MyISAM for their SGBD

 

You can not install ClicShopping because it Use Innodb

If you see a  message like this when you try to install ClicShopping :

 

SQLSTATE[42000]: Syntax error or access violation: 1286 Unknown storage engine 'innodb'

 

You can try to resolve the problem with this process :

1 - Install manually the Database called  : clicshopping_en_MyIsam.sql located inside install directory via your phpMyAdmin import Db (no data included inside)

3 - Continue the installation process without to install the Db.

 

Hello,

Happy to present you the ne release 3.21. All information is available there :

https://www.clicshopping.org/forum/topic/398-version-321-release/

 

I hope you will be happy and the work continue !!!

Have a good day

Llltle released are out. Just little bug discover and adjustment because the end of this month about the fix released.

Hello Everybody,

 

Follow the announcement, we will happy to present you the pre release 3.20. if you comment do not hesitate.

During this month we will update the apps and look your comments.

Enjoy

Thank you for all your work @Maxime.

I am sure the members will appreciate all what you have done.

Hello @Patrick,

Are you actualised you group, I think this approach can resolve your problem.

@Patrick,
Yes and no,  some elements have been updated but with jquery fix, it was better to make an update.

Like you can see, the 3.12 is out.
Some files have been updated or improved. the 3.12 has been out because they have a security fix on jquery. We have updated also some script.

 

To update ClicShopping :

If you have modified the template default directory, it's better to use a beyond compare

If you use another template directory, you nothing to do except to compare you have modified files to see if there is an update or not.

 

Have a good day

@Drack,

yes it's correct

An example :

$CLICSHOPPING_ProductsLength->convert($products_dimension_depth, $products_length_class_id, 2)

In this case, all the products_dimension_depth will be converted in cm. You can also use the default unit (can be defined in configuration store)

Hello @Patrick,

The product length has been introduced because some shipping module takes the length (ups, postcanada, boxtal, fedex ..)
You can define different length in function your need.

When you create  a new shipping app, you can convert the length in function of  characteristics of the service. For example, in France, we use the cm but in USA, this is the inch. If you have your length in cm, you can convert automatically in inch .

Some others updates resolve bug fix.

@Laela

Welcome, ClicShopping is not made to be used under Windows,  I have not the time to make all verification inside the environment.

I think your computer is too slow to execute the process. You can update the execution time and increase the number.

Go to php.ini, edit and search this line :

 

;;;;;;;;;;;;;;;;;;;
; Resource Limits ;
;;;;;;;;;;;;;;;;;;;

; Maximum execution time of each script, in seconds
; http://php.net/max-execution-time
; Note: This directive is hardcoded to 0 for the CLI SAPI
max_execution_time = 30

for example, change by this

max_execution_time = 3000

I looked more deeply on this problem: escapeshellcmd(). If your hoster lock the default Sendmail function, you must use the SMTP inside configuration / Mail

I will make other test and make an update about as soon as possible. But you can use the application without problem. Just in case in your hoster block this function, use the other.

 

That's why you hoster create protection on that. https://exploitbox.io/paper/Pwning-PHP-Mail-Function-For-Fun-And-RCE.html

 

Quote

The attacker can however inject additional command parameters to the sendmail command itself as the escapeshellcmd() function called by mail() does not quote the $additional_parameters parameter by default. It gives a programmer freedom to pass multiple arguments to sendmail, but may introduce a vulnerability to unaware programmers. A successful injection of additional parameters to sendmail, might trigger additional functionality of the sendmail program itself. For example, if the attacker managed to set $return variable to: attackere@remote -LogFile /tmp/output_file The sendmail program would be called as a shell command: /usr/sbin/sendmail -t -i -f attackere@remote -LogFile /tmp/output_file If the -LogFile was a valid argument for the sendmail interface installed on the target machine, this could cause the program to write out a log file into /tmp/output_file. As it turns out Sendmail MTA has such a logging function in its implementation of /usr/sbin/sendmail interface, which can be enabled by -X parameter and could be used to save malicious code provided by the attacker.

 

@Fantomas

You hoster include a restriction. That's why you have this problem.

Try to switch  SMTP transports in Configuration/Email

 

@Patrick,

Thank you for your deep test. You have right, but if a category is on Off, it's supposedly all his other must be on OFF. In this case, there is no problem.

But you have reason if inside an Off category there is a category on On, in this case, the product is displayed.

 

About the products attributes, the system must be rewritten in the future, no delay on that. it could be an on next release, now, like always, the focus is to discover the  bugs.

 

@Patrick,
Thank you, like the development is to continue, if a problem is identified, it will be rectified.

@Drack

The products inside in the category are not displayed, That's why there some SQL update to make that.

 Hi everybody

 

You will find inside the zip a folder called update in the root. Open it and include the DB modification. Before to make that, look inside your DB if you have not these fields.

Else, if you have installed modules use the products table, you must make an update .
The most impact is inside ClicShopping, I recommend you to make before your update, a copy of your version and make the upgrade. If you have o problem, it's cool, else you can make a comment here.

About the modules (free and paid)

 

header_menu :slimmenu, upcomming products
header_tag : grdp, analytics, facebook pixel, twitter_card,
apps : antispam, frontpage_specials, favorites, featured, image, manufacturer
modules_products_info : also_purchased,  products_related,  reviews, download

 

This is the most of apps and modules impacted by the update.
Note : the paid modules will be updated today

 

 

@David

 

The bug has been identified and updated on the latest version.
Just download the latest version and update your files. If you have not changed some element inside the template, just push else use a compare files tools like beyond compare.
(I recommend you to create another template and put inside all the files if you want to modify and all the CSS).  All the files can be overridden .
Don't forget to update the design configuration.
In your case, just go in design / header / activate the menu.
look :https://www.clicshopping.org/forum/topic/62-find-the-good-css-file/

https://www.clicshopping.org/forum/topic/7-how-to-change-theme/

@Julie, yes exact, if there is a problem inside the Default template, you will have no problem in the future when you must update your website.

@FrediKa,

There an example.

 

the process:

edit

fp_new_products.php

rename in

fp_my_file.php

 

Inside
replace

 fp_new_product

by

fp_my_file

replace :

front_page_new_products 

by

front_page_my_file

replace :

FRONT_PAGE_NEW_PRODUCTS

by

FRONT_PAGE_MY_FILE

 

eventually you can change the template directory :

'/template_html/' . MODULE_FRONT_PAGE_NEW_PRODUCTS_TEMPLATE 

by

 '/template_html/' . MODULE_FRONT_PAGE_MY_TEMPLATE_DIRECTORY

 

Do not forget to change the language
Do not forget to change the css

Now you are ready to implement your code.

 

This is a short cut to help you how to make a new template_html with a template directory but you can use also the default template_html

 

Now do not forget to include your new contribution inside the Default template and also in your new template directory. Like that you can change everything without to change anything inside the default template directory.

Why you must include your new contribution in the Default directory and not only the new template directory ?
It's the DB initialization is made by default inside the  Default directory.
Like all the module are overridden in function the Default Directory, you have no choice to include the new element inside the Default directory.

It's the limitation.
I hope it's not little too complex, but after one or to test, you will understand the process.