- Details
- Written by: Max Milbers
- Category: Latest News
- Hits: 22912
A new XSS was found by 4N_CURZE (https://www.openbugbounty.org/researchers/4N_CURZE/). It took a while to reproduce it, because it was caused by the manufactuer dropdown, which is not always activated. The problem itself was easy to fix, although the value was whitelisted everywhere else, it was missing for the manufacturer drop-down list.
Since the previous release some features got added. The long desired multicart system got implemented. Multicart means for a multi-vendor shop, that there is an extra cart for each vendor. So when a customer buys products from different vendors he needs to do a checkout for every vendor. This system is very interesting for real marketplaces, which offer products of different vendors.
Another nice new feature are payment/shipment restrictions by coupons. This can be used to offer customers other payment methods over the phone, such as bank transfer for example. Or it can be used for marketing campaigns like "use this coupon to get free shipment".
The textinput plugin can now be used for mandatory text, as we have introduced a required characters check. iStraxx contributed the toggleCartButton.js with MIT license for the required characters check.
StAn of RuposTel has provided a useful overhaul of the VirtueMart recaptcha system. It now works according to the new Joomla standards and works with any joomla captcha plugin. Read more about this on docs.virtuemart.net
DOWNLOAD VM3 NOW
VirtueMart 3 component (core and AIO)
Read more: Security Release VirtueMart 3.8.6 Closing an XSS Vulnerability
- Details
- Written by: Max Milbers
- Category: Latest News
- Hits: 24430
Great update of the Skrill Plugin
Trusted by millions across the globe Skrill meets the needs of more than 156,000 businesses worldwide providing a convenient and secure way to send and receive money in nearly 200 countries and 40 currencies.
Our payments platform comes with an exclusive reduced fee offer of 0.9% on Debit Card/Prepaid Card/Credit Card (VISA, Mastercard, Maestro) transactions, and 0.5% fees on Rapid Transfer transactions.*
*Fees apply to new merchants only within restricted industry sectors. Terms and conditions apply.
What this module does for you:
- Free and quick setup
- Access credit cards and 100+ local payment solutions with 1 easy integration
- Take advantage of the Skrill multicurrency account, giving you access to 40+ currencies
- High-security standards and anti-fraud technology
- Seamless payment experience across mobile, tablet and desktop
- Connect with millions of Skrill account holders
Features:
- Additional payment options and control over how they are displayed
- Customizable gateway with embedded page and redirect functionality
- Instant settlement
- Enhanced reporting and transaction status viewing
- Refund capability within VirtueMart
What your customers will like:
- Easy ways to pay safely online – no sign-up required to make payments
- Convenient and immediate payments – pay with a bank account, or debit and credit cards without any hassle
- Multiple local payment options allowing customers to pay how they want
- Internationally recognized and trusted brand
Don’t have an account? Sign up for free today!
- Details
- Written by: Max Milbers
- Category: Latest News
- Hits: 30164
This is a special release in these unusual times. It was planned as simple version with an optimisation boost and bugfixes for VM 3.6.10, but it became a lot more than that. Many people are affected by a corona stasis. One of our members had to go in quarantine (without being infected) where he had a lot of time tor develop and donate smaller enhancements. Personally, I had been preparing for coming restrictions since the end of February since it was clear that Germany will follow the other countries. My wife and I are now taking care of our children's homework and home-education, which are aged from 3 to 11 and my development time is severely impacted. On the other hand this period allowed to really hard-cook this version in the debug process. It is already in use on some live shops for at least the past 2 weeks now.
Some of our developers also joined the COVID Support campaign for the Joomla community https://covid.joomlart.com/. Participating developers offer a 20% discount on extensions.virtuemart.net
Image by Alexas_Fotos from Pixabay
The biggest change under the hood are the new optimizations that avoid massive sql requests and use booleans to decide whether we need to load data from an xref table. The technique has some implications, which are described on docs.virtuemart.net http://docs.virtuemart.net/tutorials/development/241-reduced-database-access-by-using-booleans-for-reference-tables.html. When I worked on that pattern for categories, I noticed that we can enhance the loading of a category tree in a similar way. Rough tests with more than 200 categories (organised as years) indicate a 5 times faster loading time.
Read more: Release of VirtueMart 3.8 and Covid support campaign
- Details
- Written by: Max Milbers
- Category: Latest News
- Hits: 28500
When a release is just around the corner, we stop adding new features and focus on testing and fixing bugs. So it's a normal reaction of our members to push their wishes after the release. So this new core has an above-average number of new features for a subversion. There are mainly two different groups of features. Some are like furniture. It is quite simple to add them and it is very unlikely that they break something. It may happen that the new table stands in the way of the rarely used door to the basement. But it is simple to fix. Most of the time our testers catch these issues, but sometimes the central heating door was not tested. The new features are all of that kind. The worst which can happen is, that they do not work.
- Details
- Written by: Max Milbers
- Category: Latest News
- Hits: 23749
An unexpected error occurred when updating to VirtueMart 3.6.4 using the All-in-One installer. The error was due to the uninitialized language object. First, we discovered that the VirtueMart files were loaded incorrectly when installing with third-party plug-ins present. But then all of a sudden, even with a completely new installation. The previous installation routine only checked whether the VmConfig class existed and executed the load configuration. The new installation routine also checks the existence of the vmLanguage class.
And suddenly we had a problem with the PayPal IPN. If you google for the problem it is easy to see that it has been a periodically recurring problem. Our IPN function used the DNS records of the domains listed in the white list to check the IP. The new method uses a mixed mode and also checks if the requesting IP is resolved to the domains in the white list.
DOWNLOAD VM3 NOW
VirtueMart 3 component (core and AIO)
Update for 3.6.6: Some third-party developers only include our class VmConfig, but do not execute the loadConfig function. In other places, we check whether the VmConfig class already exists, and include AND executed loadConfig only if the class has not already been loaded. The router and the system plugin for updates now specifically check whether loadConfig has actually been executed.
Changed behaviour
- 3.6.6 Invoice download icon is now a button with the invoice number
- 3.6.6 Backend order list search now considers order id and order total now (round by 2 digits)
List of fixes
- 3.6.6.2 Fix for AIO installer, ensuring a correctly initialised vm config
- 3.6.8 Fix for user registration in account view
- 3.6.8 fix for not loaded joomla language if user activation is used (double opt-in)
- 3.6.8 Virtuemart registration email now uses the joomla parameter "sendpassword" correctly
- 3.6.8 checkPaypalIps now works with a mixed mode. Thanks to Studio42 for this idea. http://forum.virtuemart.net/index.php?topic=131735.msg508782#msg508782
