Releases: WonderCMS/wondercms
Releases · WonderCMS/wondercms
WonderCMS 2.4.0
What's new
- A clearer definition of public/private functions.
- Corrected code logic in theme/plugin installer with an array check.
- Added hash_equals checks to prevent CSRF timing attacks.
- Added link to WonderCMS homepage in the Settings panel.
- Prettified code fixes.
- Minor text changes to the Settings panel and error messages.
- Removed old version support compatibility (function called updateOtherFiles).
- CSS fix, removed bottom border on the settings panel links. The border was visible only when designing a new theme/template from scratch.
- Functions re-sorted alphabetically for easier overview.
- Added 404 page editing support.
- Added whitelist for allowed file type uploads.
- Restructured function for deleting files, themes and plugins.
- Updated to latest version of taboverride and autosize.
- Minor settings panel design changes.
- Updated Summernote plugin to latest version and added tables to the Summernote editor toolbar.
- Updated autosize.js to latest version.
2 plugins need updating
NOTE 1: If you don't have these plugins, there is no need to update them.
NOTE 2: Update WonderCMS before updating plugins.
1. Update link for Summernote editor plugin
- Copy the link below and paste it in your Settings->Themes & plugins, select "Plugin" and click update.
https://github.com/robiso/wondercms-plugins/releases/download/Summernote/summernote.zip
2. Update for Additonal contents plugin
- Copy the link below and paste it in your Settings->Themes & plugins, select "Plugin" and click update.
https://github.com/robiso/wondercms-plugins/releases/download/additional-contents/addition_contents.zip
- Thanks to Vekien for the corrected code logic in the theme/plugin installer, helping implement hash_equals and restructuring the function for deleting files/themes/plugins.
- Thanks to ayeshrajans for spotting the hash_equals improvement possibility.
How to update
- Login to your WonderCMS website and click Update. Always backup before updating!
Changelog history
How to install WonderCMS for the first time
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
WonderCMS 2.3.2
What's new in WonderCMS 2.3.2
- two additional ISSET checks to prevent PHP notices
- changed HTTP 1.0 headers to HTTP 1.1
- updated links to themes and plugins in the Settings panel (new links are: https://wondercms.com/themes and https://wondercms.com/plugins)
- removed converted case for page titles
- core code in WonderCMS prettified - providing a better level of readability
- minor text changes
Thanks to Samrat Das (https://twitter.com/Samrat_Das93) for sparking up the following debate:
- Should we limit the uploaded file types?
- Share your opinion on this topic to ensure WonderCMS stays the way you, the user, wants to: #45
How to update
- Login to your WonderCMS website and click Update. Always backup before updating!
News history
How to install WonderCMS for the first time
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
WonderCMS 2.3.1
What's new in WonderCMS 2.3.1
- added two additional checks if the request for token is set
- double space removal / converted to tabs
Thanks to Andreas Lenhardt (https://twitter.com/AndiLenhardt) for reporting and testing.
How to update
- Login to your WonderCMS website and click Update.
Installation
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
What's new history
WonderCMS 2.3.0
What's new in WonderCMS 2.3.0
- re-designed settings panel
- theme installer + updater + remover
- plugin installer + updater + remover
- file uploader + remover
- tab/indentation support
- additional security token checks
- "Visit page" link next to each page in menu
- added success message when deleting a page
- logout link moved to top right corner
- fixed title case when creating new pages
- files autosize.js, taboverride.min.js and taboverride.jquery.min.js are now loaded after the admin is logged in - resulting in faster website loading
- additional token verifications
- minor code logic fixes
- minor text fixes
Thanks to:
- Janez Čas from HttpMaster (httpmaster.net)
- Davide Vago for a design inspiration (davidevago.com)
- Robbie Alamantus (robbie.antenesse.net)
How to update
- Login to your WonderCMS website and click Update.
Installation
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
What's new history
WonderCMS 2.2.1
What's new in WonderCMS 2.2.1
- Custom port support. WonderCMS now works on non-standard HTTP ports - thanks to Grzegorz Kowalski.
- JavaScript hook fix - thanks to Grzegorz Kowalski.
- Show admin CSS only when logged in for faster website delivery.
- Minor text/tab fixes.
Installation
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
How to update
- Login to your WonderCMS website and click Update.
What's new history
WonderCMS 2.2.0
What's new in WonderCMS 2.2.0
- Added additional tokens to prevent/fix CSRF vulnerabilities thanks to Luka Mrovlje for the fix (from mobinia.si). Special thanks to Ehsan Hosseini from Zerox Security Lab (from twitter.com/ZeroxSecLab) for reporting this and confirming the issue is resolved.
- Added CSS style (text align left) the settings panel. This is to prevent the admin settings panel text alignment from being overwritten by a custom theme.
- New created pages are now visible in the menu by default.
- Added extra help text on the example page for new WonderCMS installations.
Plugins that need to be updated manually
- Summernote (WYSIWYG editor and file uploader). DOWNLOAD (https://github.com/robiso/wondercms-plugins/releases/download/Summernote/summernote.zip) the new ZIP file, unzip it, and overwrite your existing summernote plugin folder.
Installation
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
How to update
- Login to your WonderCMS website and click Update.
Whats new history
WonderCMS 2.1.0
What's new in WonderCMS 2.1.0
- New page functionality:
1a. Easy page adding and hiding | thanks to Pascal Jordin.
1b. Easy page re-ordering | thanks to Pascal Jordin.
1c. Cleaner URLs | another huge thanks to Pascal Jordin. - Improved URL function | thanks to Luka Mrovlje.
- Minor code improvements.
Additional thanks to turboblack (Dannis Danylenko) for all the testing.
Installation
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
Updating from 1.1.0 or later
- Login to your WonderCMS website and click Update.
What was new in WonderCMS 2.0.6
- Fixing bug $_SERVER[REQUEST_URI] to $_SERVER['REQUEST_URI'] because of errors reported on some sites. Thanks to turboblack for reporting this.
What was new in previous versions
WonderCMS 2.0.6
What's new in WonderCMS 2.0.6
- Fixing bug $_SERVER[REQUEST_URI] to $_SERVER['REQUEST_URI'] because of errors reported on some sites. Thanks to turboblack for reporting this.
Installation
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
Updating from 1.1.0 or later
- Log into your WonderCMS and click Update.
What was new in WonderCMS 2.0.5
- Fixed display login URL in settings panel thanks to @Alamantus
What was new in previous versions:
WonderCMS 2.0.5
What's new in WonderCMS 2.0.5
- Fixed display login URL in settings panel thanks to @Alamantus
Installation
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
Updating from 1.1.0 or later
- Use the one click update button after you login into your WonderCMS
What was new in WonderCMS 2.0.4
- Update system changed from using file_get_contents to cURL - thanks to Robbie Antenesse (@Alamantus) for providing us with a more stable update system
- Fixed absolute URLs to relative, this bug happened on some servers/enviroments and made WonderCMS URLs unusable - another thanks to Robbie Antenesse (@Alamantus) for this awesome fix
What was new in previous version 2.0.3
- Fixed CSRF vulnerability with low severity. We now generate a token, thanks to Ashutosh Singh for the excellent find.
- Fixed 404 header bug which was returned when the user was logged in and visited a non existent page.
- Changed the span wrappers to div wrappers on all editable areas. Thanks to @scsmash3r for pointing out that spans could cause trouble in some cases.
What was new in previous version 2.0.2
- added new hook: page
What was new in previous version 2.0.1
- fixed function name / added static
- added CSS to set default font size to the settings panel
What was new in previous version 2.0.0
- first stable release in 8 years
- removed "Powered by WonderCMS" link
- new default theme
- WonderCMS now updates your default theme and .htaccess
- improved settings panel
- optimized code and code clean up
- database.js versioning, which makes it really easy to update for different WonderCMS versions
WonderCMS 2.0.4
What's new in WonderCMS 2.0.4
- Update system changed from using file_get_contents to cURL - thanks to Robbie Antenesse (@Alamantus) for providing us with a more stable update system
- Fixed absolute URLs to relative, this bug happened on some servers/enviroments and made WonderCMS URLs unusable - another thanks to Robbie Antenesse (@Alamantus) for this awesome fix
Installation
- Unzip and upload the files wherever you wish WonderCMS to be installed at.
Updating from 1.1.0 or later
- Use the one click update button after you login into your WonderCMS
What was new in previous version 2.0.3
- Fixed CSRF vulnerability with low severity. We now generate a token, thanks to Ashutosh Singh for the excellent find.
- Fixed 404 header bug which was returned when the user was logged in and visited a non existent page.
- Changed the span wrappers to div wrappers on all editable areas. Thanks to @scsmash3r for pointing out that spans could cause trouble in some cases.
What was new in previous version 2.0.2
- added new hook: page
What was new in previous version 2.0.1
- fixed function name / added static
- added CSS to set default font size to the settings panel
What was new in previous version 2.0.0
- first stable release in 8 years
- removed "Powered by WonderCMS" link
- new default theme
- WonderCMS now updates your default theme and .htaccess
- improved settings panel
- optimized code and code clean up
- database.js versioning, which makes it really easy to update for different WonderCMS versions