Beware: Joomla! 1.0.13 available. [UPDATE!]

Written by Soeren Eberhardt-Biermann

Monday, 23 July 2007 16:13

Today the Joomla! team has announced the availability of Joomla! 1.5 RC1. In a small paragraph at the end of this article you can read that Joomla! 1.0.13 has been released surprisingly. Joomla! 1.0.13 is an "incremental bug fixing and security update for Joomla! 1.0 series software".

This maintenance release will again break VirtueMart login functionality - as Joomla! 1.0.8, 1.0.10 and 1.0.11 have done before. It's sad to see that the maintenance team has again introduced feature changes that break backward compatibility:

J! 1.0.13 uses a different method to encrypt passwords that the Joomla! version before

the core login function parameter declaration/types were changed

Once you have updated to Joomla! 1.0.13, you can't just revert back to Joomla! 1.0.12: the user passwords will have been converted (for those users, who visited the site) and the new password format is not accepted by older Joomla! versions. That's why you should make a full database backup before you update your Joomla! version, so you can go back at any time.

For all VirtueMart users we have created a HotFix that patches VirtueMart for Joomla! 1.0.13. It can be downloaded from joomlacode.org.

HotFix for VirtueMart to use Joomla! 1.0.13

UPDATE: When testing the VirtueMart Hotfix I was running a "fixed" installation of an internal Joomla! 1.0.13 RC3 release. This way I couldn't see that VirtueMart users suffer under another bug in the admin session handling of Joomla! 1.0.13. This file allows you to fix your joomla! 1.0.13: Joomla! 1.0.13 Admin Session Fix (2.41 Kb)

Please note that Community Builder and probably also the SMF Bridge are also affected by the changes introduced with this version. My recommendation is not to update your Joomla! site to version 1.0.13 until you haven't fully tested the update in testing environment.

P.S.: As I'm part of the Joomla! Quality and Testing Workgroup, I tried to prevent these changes, but the developers of the maintenance team saw higher priority in making password storage more secure. That's ok, but why the change of the login function? According to them it was "necessary". In my eyes it wasn't.

Set as favorite

Bookmark

Email this

Comments (64) add comment

Subscribe to this comment's feed

Martijn de Jong: Thanks

I am verry, verry pleased with this hotfix... thank you so much smilies/cheesy.gif

July 23, 2007
Votes: +0

Pisu: I won't update... http://www.thepisu.tk

Hearing these problems, I don't think I will update to Joomla 1.0.13! My sites are just working great... No fear for my passwords! I'd prefer to wait the final release of Joomla 1.5, and then making hard work for converting sites...

July 23, 2007
Votes: +0

ruudjonk: ... http://www.guarley.com

Hey.. I installed 1.0.13 when it came out. I had te problemes indeed. Only this hotfix didn't do the trick.

I have restored the VM files and only joomla.php from 1.0.12 and now it's working again.

July 24, 2007
Votes: +0

fidel: ...

That's why I'm still on Joomla 1.0.11. Virtuemart remains the best e-commerce software. Thanks!!!

July 24, 2007
Votes: +0

banshee_z71: Thanks! http://www.ballewsawandtool.com

I usually put off updates until the bugs are worked out. Its nice to see the Virtuemart team are so quick to fix problems that they didn't even create. Great job guys smilies/grin.gif

July 25, 2007
Votes: +0

DRACULINOS: ...

I think enough with the upgrades from 1.0.x series of Joomla , I will stay on the 1.0.12 and I will work hard to convert it to 1.5 !

July 25, 2007
Votes: +0

suave123: same here http://www.batteryking.eu

same here...i will wait until we have a 1.5 stable...

July 26, 2007
Votes: +0

ThomasM.: Thank you!

The Backend / Admin Fix fixed also the same issue with Joom!Fish.
No more kick-out of the Backend when saving a product (Virtuemart) or a translation (Joom!Fish).

July 26, 2007
Votes: +0

aQue: ...

I did the website update to 1.0.13 from .12 after I updated My VirtueMart 1.0.12 Cart. It all seams to work. I can Login from Front and back.
NOTE My shop is not a Live shop...

July 26, 2007
Votes: +0

webtanium: Flaming Gypsy Novelties http://www.flaminggypsy.com

Everything works in 1.0.13 except virtuemart. Even with the two fixes am logged out as soon as we do anything in the component. Have to close the browser window/tab and open a new one to get back in. Can use any item in the admin backend on 1.0.13 until I again try VM componenet. Guess we'll wait to use this till VM fixes itself.

July 27, 2007
Votes: +1

webtanium: ... http://www.flaminggypsy.com

Further Testing shows your fix works on Firefox, but not IE7. Am setting up the VM using FF, but crossbrowser compatibility is a must on front and back end.

July 27, 2007
Votes: +0

Makis77: upgrade to 1.0.13? NO THANX http://www.eshop247.gr

Why to upgrade to 1.0.13?
Only if all bugs are fixed i ll do it.
1.0.12 is doing well so i m happy with this,
dont have enough time and clients to debug the
latest version.

July 27, 2007
Votes: +0

Wil: ...

Applyed the hot fixes, thanks for being so fast.
Only linke mentioned above, the fixes don't work for IE6 and IE7 :-

July 29, 2007
Votes: +0

merv: ... http://www.unchienandalusia.com

I installed both patched and they did not work for me. The only fix was to revert to 1.0.12

July 29, 2007
Votes: +0

valtech: ... http://www.valtechcomputers.com

I think I'll wait till 1.5 is out and then try and convert the whole lot in one go. On dev server first though!
Thanks for excellent work to all at VM! Your support has been amasing!

July 30, 2007
Votes: +0

MiCh@: Just in time http://www.babyandmore.nl

Let's see what this site say about the upgrade.... whow Just in time.
I'll just wait to the stable 1.5 Joom and VM ;-)

August 01, 2007
Votes: +0

madscotsman: Still Got Problems with Virtuemart http://www.nav-e-gate4less.co.uk

I still keep getting logged out any time I do anything with Virtuemart. I tried uninstalling Joomla Xplorer as I say that there were some issues with that component on the Joomla Forum, but this made no difference!! Is there a patch for going back to 1.0.12??

August 01, 2007
Votes: +0

Lance: Whats really sad is..... http://www.calibratedsps.com

P.S.: As I'm part of the Joomla! Quality and Testing Workgroup, I tried to prevent these changes

Its sad that as part of that team, You were not given a chance to work a built in fix into the solution to prevent this from happening in the first place. While I know that the team consider all components for compatability, it would seem to me that the big ones like VirtuMart, Community Builder and a few others would be given the chance to test it and provide patches so this does not happen.

August 01, 2007
Votes: +0

Steve Stanzione: Mambots/Plugins in Product Descriptions http://www.greyboymusic.com

I have installed both fixes; however, ever since upgrading to 1.0.13, my MP3 player in the description of products doesn't work. Any ideas?

Thanks.

August 02, 2007
Votes: +0

James: ...

same here. I keep getting logged out any time I do anything with Virtuemart. Any idea how to fix it?

August 02, 2007
Votes: +0

James: Ignore my prior message

the problem is fixed with the above update Joomla! 1.0.13 Admin Session Fix (2.41 Kb)

August 02, 2007
Votes: +0

Levien: Tested http://www.talkfusion.tv

I have just updated Joomla to 1.13 and Virtue Mart with the patch.

Works perfectly!
Showcase:
http://www.lunaindia.es

August 06, 2007
Votes: +0

passarododo: Not work for me :s

I run the 2 patches.. and nothing smilies/sad.gif

ERROR: A product ID is missing.
Info: Product was successfully added.

ERROR: A product ID is missing.
Info: Product was successfully added.

This 2 messages are shown after add a product.. but the product do not added :s.

August 06, 2007
Votes: +0

Fran Rhea: Little Guy Teardrop Trailers http://www.golittleguy.com/cms

Often the problem with getting kicked off Joomla! is in the site configuration file. The live site needs 'www' added to the domain name. When Joomla! installs, it defaults to the domainname.com, but does not work with www.domainname.com. If you add the 'www' to the live site url the problems getting kicked out of admin should disappear.

August 08, 2007
Votes: +0

Gabriel Master: good a+++++==

good mem thank

a+++++++++++ smilies/grin.gif

August 10, 2007
Votes: +0

Old Stick: ... http://borneowildlife.info

I am developing a joomla site on localhost with joomla 1.0.13. I have installed virtuemart. This was all done using downloads from Joomla and virtuemart from the 1st of August. It seems as though virtuemart is working ok (with the sample data). Do I need to install the hotfix and the admin session fix?

August 11, 2007
Votes: +0

rbuelund: ... http://www.uwepetersen.dk

I've installed VirtueMart 1.0.12 on a new Joomla 1.0.13 site. I have applied the hotfixes, but i cannot get it to work. I can add something to the basket, but when i wan't to checkout an error occours !!??

August 12, 2007
Votes: +0

Spela: Session Fix

Thank you, guys for this fix. Works like a charm

August 19, 2007
Votes: +0

pdunkley: Much appreciated! http://www.3denterprises.com

Thanks a ton for fixing this.. was a major problem and an easy fix. you guys rock.

August 22, 2007
Votes: +0

czhteck: Re Hot Fix

Hi All,
Can I copy the hot fix folders into the main VirtueMart 1.0.12 replacing the existing ones before I upload to new site installation.
Will this work so I do not have to do a hot after installing VirtueMart 1.0.12 to the hosting site

August 23, 2007
Votes: +0

jordi: Awesome! http://www.aqualine-shop.net

I'm new to Virtuemart, just starting to build the shop. But everyhing is running smooth, and the fast relased hotfixes help a lot.

Thanks a lot!!!!

August 23, 2007
Votes: +0

Black: Great!!! http://www.goblenci.com

Both worked for me smilies/cheesy.gif

thank you for your help...

August 23, 2007
Votes: +0

Desmond: Thanks! http://www.new-brand.nl

Perfecto!! works great thanks for the HotFix.

Cheers
Des-

August 24, 2007
Votes: +0

Bjorn A. Solstad: Thanks! http://www.biogimestore.com/

Works like a charm

August 31, 2007
Votes: +0

basicus: ... http://www.devenia.com/

Yup. Thumbs up! Fast fixes like this are awesome

August 31, 2007
Votes: +0

Marcos: Do i have to play hotfix??

Hello, i dont understand why do is needed this hotfix??
Can explain a litle more?

September 02, 2007
Votes: +0

Marcos: ...

Ok i already know what is this, i still have the problem after doing the hot fix and analising on joomla forum another fix, whith robs fix i cant log in... smilies/sad.gif

Soeren any new?

September 02, 2007
Votes: +0

Marcos: Fixed so far

Tanks soeren, i finally made itwork with your fix. tanks

September 02, 2007
Votes: +0

Mark Clulow: Thank You! http://www.cooscreations.com

Thanks again for your continued efforts - these two latest Hotfixes saved me a HUGE amount of stress! smilies/grin.gif

September 03, 2007
Votes: +0

Craig-Soul: Patch doesn't work http://apartmani-istrapuntizela.com

After fresh installation and after applying the both patches (Admin Session fix and the Hot patch) on the J. version 1.0.13 I have lost the menu in Administrator. I suppose it is probably because of the different administrator language than English. Left stuck.

September 12, 2007
Votes: +0

Craig-Soul: Sorted out, works out http://www.europroduct.hr

If you use administrator language other then English just in Admin Session fix file /administrtor/index2.php add this code after line 33 (require_once( $mosConfig_absolute_path . '/administrator/includes/admin.php' ) smilies/wink.gif

global $mosConfig_alang;
// adminLanguage Language
if (file_exists ($mosConfig_absolute_path."/language/alang/admin_".$mosConfig_alang.".php")) {
include_once ($mosConfig_absolute_path."/language/alang/admin_".$mosConfig_alang.".php");
} else {
include_once ($mosConfig_absolute_path."/language/alang/admin_english.php");
}

$adminLanguage =& new adminLanguage();

September 12, 2007
Votes: +0

Alejandro Fresno: Thank you !!!!! http://www.albumds.com

Great, thank you so much for this fix

September 19, 2007
Votes: +0

nisiwi: updates didn't ifx it http://www.small-business-growth.com

after applying both patches I get slightl different problem in IE than in FF, both in Virtuemart.

FF will log me out when acccessing certain menu functions
IE will display the following error message

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/content/q/t/a/qtabler/html/includes/joomla.php:4145) in /home/content/q/t/a/qtabler/html/includes/joomla.php on line 800

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /mysite/includes/joomla.php:4145) in /mysite/includes/joomla.php on line 800

any ideas ?

September 28, 2007
Votes: +0

Vincent: Same problem

I just installed from scratch a brand new Joomla 1.0.13 and the component Virtuemart. I also replaced the files of the hotfix, all seemed good...
Though when I add a category, I have the same problem :

Warning: session_start(): Cannot send session cookie - headers already sent by (output started at /var/www/test3/includes/joomla.php:4145) in /var/www/test3/includes/joomla.php on line 800

Warning: session_start(): Cannot send session cache limiter - headers already sent (output started at /var/www/test3/includes/joomla.php:4145) in /var/www/test3/includes/joomla.php on line 800

smilies/cry.gif

September 30, 2007
Votes: +0

Houston: Same problem also

I have the same problem as Vincent. I've applied and re-applied the hotfixes with no change. I am also using Joomla 1.0.13.
Anyone have suggestions?

October 01, 2007
Votes: +0

Paul100: Joomla 1.5 & VM 1.1 Issues

Hi there,

I have recently installed Joomla 1.5 (very nice system), I have also installed VM 1.1 after failing to get 1.0x to work. I am still having no luck with VM on J1.5. Is it at all possible to have both systems working? I saw a demo that looks good. I have the following errors... Would be grateful if someone could post any advice. Many thanks Paul

Warning: include(/administrator/components/com_virtuemart/install.virtuemart.php) [function.include]: failed to open stream: No such file or directory in /var/www/web34/web/administrator/components/com_virtuemart/admin.virtuemart.php on line 27

Warning: include() [function.include]: Failed opening '/administrator/components/com_virtuemart/install.virtuemart.php' for inclusion (include_path='.:/usr/share/php') in /var/www/web34/web/administrator/components/com_virtuemart/admin.virtuemart.php on line 27

Warning: require_once(/components/com_virtuemart/virtuemart_parser.php) [function.require-once]: failed to open stream: No such file or directory in /var/www/web34/web/administrator/components/com_virtuemart/admin.virtuemart.php on line 59

Fatal error: require_once() [function.require]: Failed opening required '/components/com_virtuemart/virtuemart_parser.php' (include_path='.:/usr/share/php') in /var/www/web34/web/administrator/components/com_virtuemart/admin.virtuemart.php on line 59

October 02, 2007
Votes: +0

Teodor Andrei: Still have problem after applying patch http://www.socio.ro

This patch doesn't solve my problem, i still receive error messages in admin and I'm logged out both FF, IE7 and Opera9. I have Joomla 1.0.13, VM 1.0.12. It is very annoying, have to log in every time after i modify a product

October 07, 2007
Votes: +0

Garrett: ...

So good.. both of these patches fixed issue for me

October 09, 2007
Votes: +0

bret1000: ...

is this patch still necessary to use if we are using the current (10-9-2007) Virtuemart 1.0.13 upgrade and Joomla 1.0.13? Or is this patch included in the latest Virtuemart upgrade?

October 11, 2007
Votes: +0

danny H: also interested in this http://onetomany

Any feed back on this yet ? Does 1.0.13 version fix all these problems I'm reading about. I really would like to get it set up and going.

October 12, 2007
Votes: +0

idearob: Need a better fix as well

No new info to add to this other than
- we're running Joomla 1.0.13 (we installed it before we discovered this page).
- We've installed all the above patches/fixes
- We still get booted out whenever we try to "add image/file" in the file manager

October 12, 2007
Votes: +0

krazeguy: "includes/joomla.php on line 800" http://www.malesupplements.co.nz

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/xxxxxx/public_html/xxxxxx/clients/supplements/includes/joomla.php:4145) in /home/xxxxxx/public_html/xxxxxx/clients/supplements/includes/joomla.php on line 800

Please advise on this error. Happens when modifying anything in Admin > Components > Virtuemart

Very annoying as it logs me out every time and I must log in again.

October 24, 2007
Votes: +0

Chris Merriam: still getting >> ERROR: A product ID is missing http://www.haveamission.com

We have applied this hot fix to vm 1.0.13a and admin session fix to joomla! v 1.0.13 but still are unable to add products. Any clue as to why? Is there something I am missing?

November 06, 2007
Votes: +0

Late664: For those who are still having a problem...

Please be aware that the index.php file needs to be replaced in your 'administrator' folder, and not your root.

November 15, 2007
Votes: +1

Late664: Ooops..

I meant to say the index2.php file.

November 15, 2007
Votes: +0

Jelte: Solved (at least for me) http://www.dutch-store.com

Hi,

Just want to tell you that I solved this getting-kicked-out issue by removing the doGzip(); line from the /administration/index2.php file.
The earlier fix didn't work out and it placed this particular line later on the page.

HTH,
Jelte

November 24, 2007
Votes: +0

Shyam: CIO http://mdsfabrics.com

Hey,

Its working by comenting doGzip(); line from the /administration/index2.php file.
Now this problem is being fixed.

Thanx a lot.

November 30, 2007
Votes: +0

Daniel H: loggin out http://www.gardencitymedia.com.au

OH MY GOD.. Thanks God for whoever wrote this Hotfix... Your a legend !

January 04, 2008
Votes: +0

Bryan Powell: logging out http://www.partings.org

I tried all the patches, ensuring I had www in the livesite, but nothing worked. Everytime, on 4 of my sites, I got logged out. Then I tried commenting out the doGzip(); on line 106 of the index2.php file in the administrator folder. Worked like a dream. Every site up and running and no more logging back in after every change. Fantastic job whoever found that.

January 19, 2008
Votes: +1

mglamorgan: Thanks a lot

Having the same problem...comenting doGzip(); on /administrator/index2 solved the problem. Thanks for sharing this solution...I´m happy.

January 28, 2008
Votes: +0

Dimauskas: Another error on installation

Here we go - fresh installed Joomla 1.5 , and 1.1 beta 3 VituaMart. Gives an error upon autofill information after installation :

Update Log

Fatal error: require() [function.require]: Failed opening required '/var/www/vhosts/mysite.com/httpdocs/joomla/administrator/components/com_virtuemart//classes/ps_database.php' (include_path='.:') in /var/www/vhosts/mysite.com/httpdocs/joomla/administrator/components/com_virtuemart/install.php on line 105

January 31, 2008
Votes: +1

Ian Wright: Installation error http://www.newworlddesigns.co.uk

Update Log

Warning: installvirtuemart(/home/joomlama/public_html/administrator/components/com_virtuemart/classes/ps_database.php) [function.installvirtuemart]: failed to open stream: No such file or directory in /home/joomlama/public_html/administrator/components/com_virtuemart/install.php on line 105

Warning: installvirtuemart(/home/joomlama/public_html/administrator/components/com_virtuemart/classes/ps_database.php) [function.installvirtuemart]: failed to open stream: No such file or directory in /home/joomlama/public_html/administrator/components/com_virtuemart/install.php on line 105

Thats the error i get when i try to install sample content with J1.5 and VM 1.1 beta 3

February 06, 2008
Votes: +0

Johan_Eriksson: IT WORKS! http://www.hondaracing.se

Tried the patch, checked configuration.php etc (had the

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by

problem), fiddled with Artio JoomSEF but nothing. However, commenting out the doGzip line, THAT did the trick. Excellent, thanks!

February 13, 2008
Votes: +0

Subikar: Logging out and Warning: session_start(): Cannot send session cookie - headers already sent by /includes/joomla.php on line 800 http://www.itcslive.com

After removing administrator/index2.php line number 103 of joomla 1.0
doGzip();

The problem is solved really thanks to shyam. Otherwise today my client may fire me out from the work.

Thanks a lot,
Subikar

VirtueMart - Open Source eCommerce Software

Subscribe to our News

Quick Jump