ConLite

Adapt i18n class from Con 4.9

Go to administration → system → expert settings.
Create new setting and set value to: <script>alert(”XSS Alert”);</script>
Script will be executed. Same with client settings

see http://legalhackers.com/advisories/PHPMailer-Exploit-Remote-Code-Exec-CVE-2016-10033-Vuln.html

Check if used PHPMailer is affected by this vulnerability and fix it if needed.

Normally pseudo-cron uses a log-file to write down all tasks. But there are no logs written down. Check whole behavior of pseudo-cron

Move .job files from conlite/cronjobs to data/cronlog like con 4.9 does. Also remove check for write permissions for the old folder.

If you try to use floating in tinymce for an image style is not added to img-tag after saving content.

If you sync modules in filesystem to db, used backslashes in input or output will be removed in db-table.
You may test behavior by just setting an html-output with backslashed quotation marks.

While checking updatenotifier there was a wrong display for updates either with right or wrong versionnumber in vendor.xml. This is caused by using an simple_xml object instead of a string.

see forum → http://forum.conlite.org/viewtopic.php?f=9&t=240&p=292

Due to the update of jQuery lib the deprecated function .live() has to replaced with .on(). So we do not have to use jQuery migrate.

see forum → http://forum.conlite.org/viewtopic.php?f=8&t=239

There is a problem with cache files and/or cache path for compressor of editarea.
Contenido uses generated files in editarea path, ConLite has a modified compressor class using backend cache path. There is a report that this files where not generated always, so editarea is not working.
Also in editarea class for ConLite method getProperties all properties are loaded if the editor is deactivated. Change this useless behaviour to ommit unneeded db-queries.

Maybe it’s a good idea to deliever compressed editarea.js always if caching not possible.
Check whole procedure and fix it before release of stable 2.0!

Update jQuery and jQuery-UI used in Backend-areas to newest stable version.

If you add class map file still added before using method addClassmapConfigFile throws error

[06-Jul-2015 14:34:50 Europe/Berlin] PHP Catchable fatal error:  Argument 1 passed to cAutoload::addClassmapConfig() must be of the type array, boolean given, called in /var/www/cl_demo/conlite/classes/class.autoload.php on line 165 and defined in /var/www/cl_demo/conlite/classes/class.autoload.php on line 139

This is caused by using include_once in method which returns 1 as boolean instead of an array if called twice for the same file. Adding a check for array would prevent this message.

While trying to update sequence table under administration→system→purge an error is thrown.

View of the ConLite Login Page is broken (Firefox 37)

Recreate View using HTML5 and CSS3 with standard utf-8 encoding.

see forum - http://forum.contenido.org/viewtopic.php?f=92&t=35247

The file notify.txt still appears in old conlite/logs folder. Move it to conlite/data/logs.

Have to check i18n of Setup. Messages seem to have incorrect encoding. We’ ll use utf8 for whole core localization.

Forenbeitrag

I have investigated this old old bug. It’s a core problem and has to be fixed before releasing next version!!!

GenericDBreturns always false but should return TRUE if an item is successfully deleted.

This is caused by a bug in the editorclass. See contenido forum entry ⇒ http://forum.contenido.org/viewtopic.php?f=92&t=34951

If you install ConLite first time you will see messages for setupfolder and default sysadmin on login page. Move this messages to dashboard so we will see them only after login.

Missing error management for creating client folder using default client. User receives no info neither if copying failed nor if it works. So recode whole stuff.

IE11 gives an error if you choose a frontenduser for edit.

If you click on a category under Content-Article there appears only an empty frame at right side.

if you do not install a client during setup there will be an error in errorlog while trying to check and reread client-array.

Naming and/or translations are missing or wrong in areas, maybe due of moving plugin related stuff to plugin folder. Check and fix missing entries.

Have to check for CL, see contenido forum http://forum.contenido.org/viewtopic.php?t=32494

If you use special characters like äüö!\”§$%&/ within a username, sometimes you can’ t delete them caused bei a bug in js confirm script. You won’ t get a confirm-box.

If you do a migration setup and the client path changes you can’t copy & paste the path under windows, because of the backslashes which are not working in some CMS-Types (QR-Code)
We have to check for backslashes in path while writing to db and
1. escape them or
2. replace them with slashes

Tested in Rev. 264 (2013-04-24).

In Template or Article configuration, it uses the modul input area from the database, even if a file is present.
Try: Create a new module, create an input file for it, put some HTML code in it, and then check the template preconfiguration area.

• check for usefull plugins
• use cache-folder for compression if possible
• exclude from CL css-/js-compressor
• check for lately update of MCE-files in CL 2.0.x

On trying to export a module, an error “headers already sent” occurs because of the modFileEdit notice.
Also, on saving the module into the DB, this notice appears twice.

Christian Holzhausen told me on Skype, that german Umlauts are removed instead of translated in aliases:

[17:45:02] Christian Holzhausen: habe noch einen...
[17:45:29] Christian Holzhausen: wenn die aliase geschrieben werden fallen die unlaute raus, anstatt sie durch ue oder ae zu ersetzen...
[17:45:41] Christian Holzhausen: aus Bürste würd Brste
[17:46:28] Christian Holzhausen: also ist eher ein allgemeines thema denke ich
[17:46:39] René Mansveld (Spider IT Deutschland): Hmmm, dazu schreibe ich mal ein Ticket. Danke!
[17:46:48] Christian Holzhausen: gerne
[17:48:34] René Mansveld (Spider IT Deutschland): Ist das bei Kategorien, Artikel, oder beides?
[17:48:53] Christian Holzhausen: moment
[17:49:03] Christian Holzhausen: beides
[17:49:23] René Mansveld (Spider IT Deutschland): Alles klar, danke, Ticket wird erstellt.

Version is ConLite Trunk of 2013-02-25 (Pre-RC)

Modules depend on client, so maybe it’s better to move the module folder to client folder for usage with ModFileEdit.

The Chain has to check and remove unknown metatags to make a valide html output.

see list of registered metatags on whatwg wiki

On upgrading from Contenido, the URL for the version information box on the backend overview page doesn’t seem to be updated.
In this box it shows “It seems to be that your version string was manipulated. ConLite 2.0.0 RC does not exist!”.

Arbeitet man mit den {if} und {else} Befehlen in einem Modultemplate, kann es passieren, dass im Backend nach einer Aktion (z.B. speichern des Inline-Editors oder einer anderen Speicher- und Reload-Aktion), werden diese IF- und ELSE-Befehle sichtbar und das in vermehrter Form.

Due to recoding and moving template class to it’s own folder, you will receive an error while trying to load the file using PHP-include. So older files, like installer-files of plugins are not working any more.

Put a wrapper file at the old place of class.template.php and mark it as deprecated. Throw a PHP-error (deprecated) in that file to log it.

If you upgrade an older version of contenido there will be no db-connection if u use the old config file. The reason is the missing db-conf-array which normally is used since con 4.8.15. There isn’t a fallback implementent to use old entries in cfg-Array.

Implement a fallback method in db-class to use older cfg-array entries for db-connection.

After syncing all modules in a new installation with one new module (the only one with a file), the news module has an error in line 104.
Line 103+ now are:

              $regEx = "/(src)(=)(['"]?)([^"']*)(['"]?)/i";
              $img = array ();
              preg_match($regEx, $match[0], $img);
              $img_src = preg_split("///", $img[0]);

              $img_name = $img_src[count($img_src) - 1];
              $img_name = preg_replace("/"/", "", $img_name);
              $img_split = preg_split("/./", $img_name);
              $img_type = $img_split[count($img_split) - 1];

              $img_split2 = preg_split("/_/", $img_split[0]);

The page “Was ist Contenido” shows the following error message:
Parse error: syntax error, unexpected ‘]’ in /kunden/92791_33034/rp-hosting/159000014/259000016/ConLite/cms/front_content.php(928) : eval()’d code on line 429

see http://forum.contenido.org/viewtopic.php?f=64&t=32490 Also make filetyps configurable

In the backend under Content - Article in the left column there is an article search box which doesn’t find any articles (works in C.4.8.15).
Bug reported by Steffen Reddig (thanks for that).

Add a check for empty username and password. Also add a jquery pw-strength-check.

Logs etc. moved to data-dir, so change checks according to new directory structure

After installing the demo-client without content but with modules and plugins, I opened “administration/ system/ systemsetup” and the checkbox for xhtml was checked. Then I turned over to “administration/ clients/ client/ properties”. There the xhtml-dropdown still showed “false”.

To optimize HTML-Output in frontend we will add a simple css-compressor which will put all named css-files into only one obfuscated/compressed css-file. This file will also be cached, so it will only be rebuild if one of the used css-files whave changed.

In the feature - next version of compressor - there will also be a possibility in module area of the backend to add custom css-files for modules and to set a priority of the files.

Sometimes you will find the following error in error.log.

[16-Jun-2012 21:28:20]  error: 1139 (Got error 'empty (sub)expression' from regexp) - 
info: /www/cms/front_content.php?idcat=39&idart=134 SELECT keyword, auto FROM con_keywords WHERE idlang=1 AND keyword REGEXP '' 

[16-Jun-2012 21:28:20]  error: 1139 (Got error 'empty (sub)expression' from regexp) - 
info: /www/cms/front_content.php?idcat=39&idart=134 next_record called with no query pending in Module ID 24.

Seems to be an empty temporäry array in class search (about line 870 ff).

Well, in original contenido there is a problem with large picture - e.g. 2mb filesize. You can upload it once successfully, but after that no file will be listed in overview. In conlite a filesize of more than 200kb seems to be critically. I tried to upload different versions of an image - 500kb, 400kb and so on. Nothing worked unless the size dropped below 200kb - which is not enough in my opinion. If you want to create a site for presenting photographies e.g.

Using client-property to replace base-tag and rewrite relative url with client htmlpath + url is not working. Maybe something is wrong with regex in class-method getHTMLMessage of newsletter class.

After installing the sample client (the box for generating xhtml is checked), the wrc validator shows up this error:
Line 4, Column 1: Missing xmlns attribute for element html. The value should be: http://www.w3.org/1999/xhtml

Changing <html> into <html xmlns=”http://www.w3.org/1999/xhtml“> solves that problem.

Normally the compressor to shrink the js-files of editarea uses the editarea folder as cache folder for compressed files. For CL integration we have to write our own compressor file to use cl cache folder.

4.8.17 cl: If you use the funcionality to copy the needed .htaccess into “contenido installationsverzeichnis”, you get the following information:

“Die .htaccess wurde erfolgreich nach /var/www/web244/html/2/ kopiert”

There is one folder missing, because you’ll find the .htacces in /var/www/web244/html/2/contenido/

Installed latest 4.8.17 cl and activated update information. The loaded feed seems to be pointed at original 4fb Contenido. So there is a warning showed up: “Es scheint so als wenn der Contenido Versionsstring manipuliert wurde. Contenido 4.8.17 CL gibt es nicht!”

René send me the latest build of 4.8.17-cl but in setup it is declared as version 4.8.16 cl.

Installed without client, created new client, tried to create lang for client. The text “do you really want to create...” wasn’t translated and on confirming nothing happened, no language was created.

We have to remove or rename the local.config.php for the backend. It will overwrite the one an user may have. Maybe the best is to do the same as with the .htaccess files and rename the file to local.config.sample.php.

If you have an empty in- or output.php file using ModFileEdit, the following error is thrown.

[08-Jun-2012 12:46:25] PHP Warning:  fread() [<a href='function.fread'>function.fread</a>]:
Length parameter must be greater than 0 in 
/srv/www/ConLite/contenido/classes/contenido/class.module.php on line 822

This type will have a configuration option in the Contenido editor to provide a link, which will be shown as QR code.
If no link is supplied, the calling link for the specific page will be used.

If you open edit-area of an article an then switch back to overview the article you have editet is still marked inuse for you (actuell beuser). A cleanup for own inuse entries is missing.

There are some umlauts not replaced with their HTML-pendant. Also some are misspelled. Check whole german po file and also add missing translateble strings in core.

If there is no .htaccess created, there will be an errormessage shown in backend:

Hinweis
Es wurde weder im Contenido Installationsverzeichnis noch im Mandantenverzeichnis eine .htaccess Datei gefunden.
Die .htaccess Datei sollte gegebenenfalls im Bereich Funktionen eingerichtet werden.

When you create that file via label “Funktionen”, this message should not be shown further. But it keeps on beeing shown although you can find the allegedly missing file in the specific directory.

If you use modFileEdit as developer und have to sync the modules saving each module in backend by hand.
A sync-button and related function has to be added to backend in module area to sync all output and input files to related db-fields with only one click.

If you change db-table entries by hand you need to update sequence table of contenido. To give a dev an easy why to do it add a selection to purge area and a method to class purge.

If you try to clean Contenido system related stuff like cache or log in purge area it only works if you also check the all clients radio button.
If you don’t do it, nothing is done if you send the request, and there also isn’t a message to do it.

Maybe it’s better to use client selection only for client related purge actions. Sytem related actions have to do their work always.

In functions.general.php cError is called only with 1 param, 3 needed.

The new rss-reader modul throws an error if server is away or an empty result is given

[08-May-2012 09:28:57] PHP Warning: Invalid argument supplied for foreach() in D:\xampp\htdocs\ConLite\cms\front_content.php(928) : eval()’d code on line 483

After an upgrade from 4.6 to 4.8.16 CL the new added fields valid_from and valid_to are set to NULL instead an empty date ‘0000-00-00’. So no sysadmin info in dashboard is shown. Change field defaults in setup.

Add a new data-directory to CL for all editable or config stuff.
Make subdirectories for cache, logs, config, etc.
Also add a write check to setup.

After timeout of BE access and relogin with same username, last called module is shown as inuse for this user. Change behaviour to remove self inuse-entries for actuell user when user is logging in again.
Also check this for other areas.

When searching for an article (Content - Article - Search) without entering criteria, the result shows a non-existent entry and the following shows in the error log: error: 0 () - info: /contenido/backend_search.php next_record called with no query pending.

There is an error thrown, but i haven’t research which part of backend is the trigger.
Maybe there is a wrong file entry in db. Research needed.

[25-Apr-2012 17:24:07] PHP Warning: include_once(): Failed opening ‘/srv/www/vhosts/xxx/httpdocs/contenido/includes/include.subnav_blank.php’ for inclusion (include_path=’.:/usr/share/php5:/usr/share/php5/PEAR’) in /srv/www/vhosts/xxx/httpdocs/contenido/main.php on line 257

If you hide the left frame by clicking the window-img the editing area does not increase. One hast to increase it by hand.

Due to some postings in forum (see: http://forum.contenido.org/viewtopic.php?f=59&t=32010) we need to test CL install on new PHP- and SQL-Versions using xampp before release.

There are new version of TinyMCE, check if version used is outdated and update to new version.

Also check if Tiny-related bugs are fixed with an update.

For some releases now, TinyMCE does some odd replacement:
When copying an image within Tiny, the path changes from
- upload/header_images/something.png to
- ../../cms/upload/header_images/something.png

Normally this is not a problem, but in my migration it is. I guess it comes from the fact that my migrated version has a longer path like www.domain.de/demo/con4816/cms ... with that the odd path version IS able to jump back 2 steps, whilst on standard systems it is not, and as a result leading back to the correct path (just a guess).
However, after migrating, those odd paths are being changed again to:
- http://www.domain.de/demo/con4816/cms/../../cms/upload/header_images/something.png (!)
and nothing is displayed, images are crashed of course.

Only an issue when moving Contenido to a new hoster, having different internal server names/paths now:

Advanced Article List saves the whole relative path to module templates, instead of just the template name, creating the full internal path on the fly. This way, no article list can be displayed anymore as the template has to be assigned again.

Just a bugger, nothing big.
Perhaps the installer is able to replace those path names whenever they appear within the database.

Media button wasn’t working in older versions either - no flash based media files were shown.
Last working TinyMCE is the 4.8.11 one, which I replaced in all later versions.
Problem described at http://forum.contenido.org/viewtopic.php?f=62&t=22026

HTML source code stays more or less the same after migrating, BUT nothing is displayed, neither in Tiny nor in frontend.

Example code:
<object height=”264” width=”395” data=”../../cms/upload/video/mediaplayer.swf” type=”application/x-shockwave-flash”>
<param name=”flashvars” value=”flashvars=’width=395&amp;height=264&amp;bufferlength=20&amp;image=upload/video/video.jpg&amp;file=trailer_uk.flv” />
<param name=”src” value=”../../cms/upload/video/mediaplayer.swf” />
</object>

Migrated a system as follows :
- moved /cms from old system to new one and updated /cms root files with 4816CL
- copied new /contenido folder, added frontenduser plugins and t2t_backup plugin (both being available in 4.8.15)
- old system had AMR plugin v0.5.4 installed

After migrating with “Install Mod_rewrited” option, the following occured:
- backend: additional “has children” menu item right next to the “AMR” menu item (error log see below)

Resolved it as follows:
- deleted /plugins/mod_rewrite folder, replaced it with old 0.5.4 folder, de-installed plugin with that (lead to error message after de-installation, ignore that).
- deleted /plugins/mod_rewrite folder again, replaced it with 4816CL-version.
- Backend login no problem anymore, additional menu item “has children” was gone.

Error log:
Fatal error: Error: Can’t include /is/htdocs/wp1024832_7YGQ01LQT4/www/demo/con4816/contenido/classes/mp/class.mpdebug.php in /is/htdocs/wp1024832_7YGQ01LQT4/www/demo/con4816/contenido/includes/api/functions.api.general.php on line 174

If you first select a layout in the left frame and it’s content is shown in the right lower frame, and you now delete this layout by clicking on the trash, only the lower right frame is resetted, the upper frame with submenu stays. So if you now klick on the Historybutton you will receive a file i/o error.

There is a modul “xhtml” in modullist, where the name is colored red and if u click on the link nothing happens.

http://forum.contenido.org/viewtopic.php?f=62&t=31793&hilit=class.ExtendedTemplate.php

I’ll get an error while using the modul nivoslider.

[11-Apr-2012 11:56:46] PHP Warning: urlencode() expects parameter 1 to be string, array given in C:\xampp\htdocs\xxx\contenido\classes\class.genericdb.php on line 1936

[11-Apr-2012 11:56:46] PHP Stack trace:

[11-Apr-2012 11:56:46] PHP 1. {main}() C:\xampp\htdocs\xxx\cms\front_content.php:0

[11-Apr-2012 11:56:46] PHP 2. eval() C:\xampp\htdocs\xxx\cms\front_content.php:928

[11-Apr-2012 11:56:46] PHP 3. ModuleMpNivoSliderOutput→generateOutput() C:\xampp\htdocs\xxx\cms\front_content.php(928) : eval()’d code:420

[11-Apr-2012 11:56:46] PHP 4. ModuleMpNivoSliderOutput→_getImages() C:\xampp\htdocs\xxx\cms\includes\class.module.mpnivoslider.output.php:211

[11-Apr-2012 11:56:46] PHP 5. ItemCollection→next() C:\xampp\htdocs\xxx\cms\includes\class.module.mpnivoslider.output.php:435

[11-Apr-2012 11:56:46] PHP 6. UploadMetaCollection→loadItem() C:\xampp\htdocs\xxx\contenido\classes\class.genericdb.php:1310

[11-Apr-2012 11:56:46] PHP 7. Item→loadByPrimaryKey() C:\xampp\htdocs\xxx\cms\includes\class.uploadmeta.php:75

[11-Apr-2012 11:56:46] PHP 8. Item→loadBy() C:\xampp\htdocs\xxx\contenido\classes\class.genericdb.php:1670

[11-Apr-2012 11:56:46] PHP 9. Item→_inFilter() C:\xampp\htdocs\xxx\contenido\classes\class.genericdb.php:1624

[11-Apr-2012 11:56:46] PHP 10. urlencode() C:\xampp\htdocs\xxx\contenido\classes\class.genericdb.php:1936

Used phpmailer version is buggy and to old. For usage also with PHP >= 5.3 update phpmailer in core (prefered) or use plugin in forum.

Der RSS-Reader von Contenido braucht allow_url_fopen und kann nicht gut mit UTF-8 umgehen. Dies ist bei dem erweiterten Modul von Spider IT umgangen und korrigiert. Das Modul braucht/nutzt die class.rss.php (<Mandant>/includes/class.rss.php) von rssphp.net.

Just add a readme file for CL (beta) version.
Content:
Copyright and Links
What,Why,Who - just a little explanation
History of CL version(s)
Ads and enhancements of CL
Licenses, if not the same as in Contenido 4.8.15

if more needed commtent this task

see forum » http://forum.contenido.org/viewtopic.php?f=63&t=31436 InFilter of genericdb will change time when entering 2011-06-16 23:59:59 to 2011-06-16 23:03:00.

Rewrite function replacei18n so we can use php-tags around i18n entry in template. PoEdit needs tags to recognize translationstring. Rewrite whole template class, porting it to PHP5 and extend it with multiple blocks.

Enhance HTML5 feature which is implemented as client property right now. Add new option in client management and rewrite all needed parts of core.

on release generate API-Doc and put it online.

Check all translations and all po-/mo-files, move pluginrelated translations to plugin folder. Remove all languages which are not up to date. Build pot-files for custom translations

There are some fixes todo for the translations of the setup. Check the whole setup procedure.

Caching of genericdb is not working in all cases, for the moment deactiveted in config.misc. Check and fix, then reactivate in config.