Jojo CMS - All Forum posts

Jojo CMS Security Vulnerabilities Notification (post by htbridge)

Sat, 04 May 2013 07:02:52 +1200

Hello,

High-Tech Bridge Security Research Lab has discovered multiple security vulnerabilities in Jojo CMS 1.2

Preview available here: https://www.htbridge.com/advisory/HTB23153

Developers can contact us by email for details: advisory (at) htbridge.com

For any questions related to this notification message - please visit our General Information & Disclosure Policy page: https://www.htbridge.com/advisory/disclosure_policy.html

Best regards,
High-Tech Bridge Security Research Lab

Bamboofit Zumba Fitness (post by ayoub)

Thu, 04 Apr 2013 18:37:57 +1300

Hello Jojo People
I've been playing around with this amazing CMS for a couple of years now and I simply love it.
So here is the first real project i did with it. The site has been running for 6 months never had a trouble with it - no spam - good SEO - very stable...Keep up the good work guys and thank you

http://www.bamboofit.com

New release? (post by tom)

Fri, 08 Mar 2013 13:36:47 +1300

1.2 is out and available for download or from git.
Submodules don't get included in git zip files so if you're wanting an archive copy, the download is the better option.

Also, I've updated this site to the current version of Jojo and done a quick hack of the template to turn it into a Bootstrap responsive site because... I could.

New release? (post by Jaijaz)

Tue, 05 Mar 2013 08:09:51 +1300

Hey agree with pretty uncheck everything above. Except with submodules. Read this article recently on git submodules, it points out all the problems you've mentioned. However in the comments is a great response to how they should be used. I think it would be worth switching to that approach.

New release? (post by tom)

Thu, 28 Feb 2013 09:11:16 +1300

Ta - I got there eventually - the issue was confused by Bootstrap 2.3 being incompatible with LessPHP unless you update that too. Have done both and committed them to a new 'Edge' branch (along with jQ 1.9) if you want to play.. seems all good so far.

The submodule thing is very odd but I'm getting there with it. I do like git's branch / merge / tag stuff a lot more than svn.

I've pushed up a bunch of 5.4 fixes to master also and it seems currently pretty error free. Anyone have anything they want to get in before the next tag or can we go for it?

New release? (post by Rick)

Wed, 27 Feb 2013 12:26:29 +1300

Agreed with both Tom and Harvey. Also, Git doesn't let you checkout only a subfolder which bites sometimes. Plus there's the line endings crap and then filemodes too. All work-aroundable, but not seamless by default.

For submodules, browse into that submodule, update it like a normal repo, browse back to the parent repo and commit.

New release? (post by Harvey)

Wed, 27 Feb 2013 11:30:56 +1300

Submodules in Git are an abomination against god. It's like they were specifically designed to do exactly what you don't want them to do.

And they worked so seamlessly in SVN.

New release? (post by tom)

Wed, 27 Feb 2013 09:31:41 +1300

The current master seems pretty stable to me - I haven't seen any showstopping new bugs and it has a lot to offer over 1.15. Ready for 1.2?

Once we have a new tag out I'd like to move the default settings to something more progressive - html5, less-enabled, a minimal version of modernizr (essentially just the shiv and a js test), jquery 1.7 and add in jquery 1.9 as an option.

..and Bootstrap is up to 2.3 now also which adds in a few nice extras (indicators on the carousel) as well as a lot of bug fixes but I can't for the life of me work out how to reset the commit pointer on a submodule..

PHP Upgrade (post by Harvey)

Wed, 06 Feb 2013 11:00:55 +1300

5.3 works solid.

I have been running 50+ Jojo sites on 5.3 for a year or 2 and most of the core team use 5.3 as far as I'm aware. 5.4 also seems to work, but there are a lot of PHP warnings which would need to be addressed in the Jojo core before I could recommend switching to 5.4

Harvey.

PHP Upgrade (post by rhcarter)

Tue, 05 Feb 2013 10:30:56 +1300

Hi,
My websites are all hosted on php v5.2.17 and they are being moved to a server running v5.3.2. Do you see any issues that might occur with this move?

Roger

Shipping Calculations (post by tom)

Thu, 31 Jan 2013 11:51:03 +1300

Oh, right, sorry - read your post through again - I think the number to combine would work if the products were set to use just the large or small models - it should combine all of the products using that model into one price, so you'd end up with a $6 maximum (which is how Sabato works).

It may be the Combined model is adding an extra abstraction which is confusing it.

Hambrook Web Design (post by tom)

Thu, 31 Jan 2013 11:46:11 +1300

yeah, I had that with a site I just did, where home wasn't on the menu and it is odd, but then again I figured on a phone it's odd to not have pages in a select menu anyway so I just set it so that it was only hidden above phone size.
For other oddballs like Sitemap and Search, it would then default to Home, which is probably OK.

It has the option to add a non-linking header like 'Navigation' built-in if you want it behave more like the BS one.

The 3 bar thing is getting traction I agree but I reckon it's still currently with a very particular demographic.

Hambrook Web Design (post by Rick)

Wed, 30 Jan 2013 11:43:37 +1300

Then again, you could do the same thing I did... detect that the current page isn't on the menu and add a default option to the start of the list with no link attribute.

Hambrook Web Design (post by Rick)

Wed, 30 Jan 2013 11:42:40 +1300

Nice. I thought about making the icon a down arrow, but the three bars is quickly becoming more known. It's the menu icon in Chrome as well as in the Facebook Android (not sure about iOS). I'm happy to test with my site and see how it goes.

What does TinyNav do if the page you're on isn't in the menu? At a guess (I haven't tried it) I assume it'd simply show the first menu item. This isn't overly bad if "Home" is your first item, but could be confusing if your homepage isn't in your menu.

Shipping Calculations (post by Rick)

Wed, 30 Jan 2013 11:39:13 +1300

I set "number of items to combine" to 99, but still somehow managed to end up with not only freight costs of $6, but $10 if I added two different large products.

I'll see if I can whip up something custom for them using the hook.

Shipping Calculations (post by tom)

Wed, 30 Jan 2013 11:17:22 +1300

I think it's a matter of setting 'number of items to combine' to something arbitrarily large in the shipping model rather than pack sizes maybe? It will end up with $6 for mixed orders, but no more than that. Pretty sure that's how Mike did it for Sabato

Hambrook Web Design (post by tom)

Wed, 30 Jan 2013 11:12:09 +1300

Nice - I'm not a big fan of bootstrap's nav collapse thing myself. It's kind of cool but I worry that the menu button icon thing is maybe a bit too cool (as in totally mysterious) to anyone outside the tech matrix.
Tinynav though, I love

Hambrook Web Design (post by Rick)

Tue, 29 Jan 2013 15:34:40 +1300

Responsive update with custom menu... I haven't had anyone keen on a responsive website so far so finally found time to do mine.

Instead of just dropping in the Bootstrap responsive menu code I custom wrote one that left the current menu item as the text (or "Menu" if the current page wasn't on the menu).

Not sure on the "hiding all lis except for current" method instead of simple throwing the current page's menu name into the menu button text.

Looking forward to some from-the-ground-up responsive builds.

Shipping Calculations (post by Rick)

Tue, 29 Jan 2013 15:24:29 +1300

Thanks Harvey, I'll look into the hook.

If it worked out to $6 it would be fine, but if someone adds two different large products it comes to $10 etc. Thanks again for your help.

Shipping Calculations (post by Harvey)

Tue, 29 Jan 2013 11:17:37 +1300

Hi Rick,

I'm pretty sure it's not possible to do what you want. You should be fine getting it to charge $5 for unlimited larrge items and $1 for unlimited small, but if you mix the 2 in the same order it will charge $6.

Personally, the answer is to set expectations. Everyone has their own way of doing freight and you can't accommodate everyone. So just charge people $6 if they order a mixed lot of products, no big deal.

Otherwise you can write your own freight calculations, which is easier than it sounds. There's a hook in the jojo_cart class that lets you calculate your own freight using whatever system you like. I do this on a couple of sites where their freight calcs don't fit nicely into the freight system, or I want to protect the customer from having to deal with it. You just give them a field where they can choose small or large for the freight and then use that field in your freight calcs.

Shipping Calculations (post by antony)

Tue, 29 Jan 2013 10:54:50 +1300

Hi Rick,

Harvey will be the expert, I've done some work with shipping lately and what you have described sounds logical and I would think should work.

cheers,
Antony

Shipping Calculations (post by Rick)

Sun, 27 Jan 2013 23:55:28 +1300

Hi guys, I'm looking for a bit of help with shipping calculations.

I'm trying to set them up around two types of products. One cost $1 to ship, some cost $5. Regardless of quantity. Both can be combined for $5.

So any quantity of small products costs $1 to ship. Any quantity of large products costs $5 to ship, even if you also add in small products.

I tried setting this up with three Shared Freight Models.
Small (Normal, $1 min freight)
Large (Normal, $5 min freight)
Combined (Pack Sizes, 99 items in pack = Small, 10000 items in pack = Large)

Then I set all the products to the use Shared Freight Model and use the Combined one I set up. Small products take up 1 unit, large products take up 100.

As far as I see it, this should mean that freight stays at $1 until one or more large items is added and then it should bump up to $5 but no higher.

What does happen though, is that even though large products get added to the cart they don't trigger the larger pack size.

Does anybody have any ideas? I'm starting to look through the code but it's fairly widely used so I assume it's solid and I'm just using it wrong.

Articles plugin not working (post by Rick)

Sat, 19 Jan 2013 11:25:53 +1300

Try manually adjusting the menu type in Configuration > Table Data

Contact Plugin (post by Rick)

Sat, 19 Jan 2013 11:24:50 +1300

Hi Tony,

Did you add any form fields to the contact form? try visiting /admin/edit/formfield/ and add some fields if you haven't.

Articles plugin not working (post by tonydb)

Sat, 19 Jan 2013 01:22:02 +1300

I added the articles plugin to the site and it seemed to install correctly, but if I click content|edit articles I get a message on the left saying "Unknown menu type selected, select a valid menu type in tabledata.". next to that is a new and a save button, but they do nothing.

I want to experiment with creating news articles to show on the homepage, etc.

thanks

Contact Plugin (post by tonydb)

Sat, 19 Jan 2013 01:19:45 +1300

My contact plugin is not adding any input boxes, etc to the page. When I visit the contact page I created it only has a submit button on it.

Under technical the Plugin Link is set to "Contact - Contact Page" and the content is empty.

New release? (post by Jaijaz)

Mon, 07 Jan 2013 21:24:34 +1300

Bootstrap is now merged back into master. I haven't removed the bootstrap branch for now just in case.

New release? (post by tom)

Fri, 04 Jan 2013 09:15:00 +1300

@Rick - I'll have a look at the getNav function - I probably wasn't using it in a context to notice so will check what's happening with selectedpages.

@Jai - yay - merge away!

1.15... (post by t1Peter)

Fri, 28 Dec 2012 14:22:21 +1300

Fantastic - nicely done on rockcamp!
I shall have a look.

New release? (post by Jaijaz)

Fri, 28 Dec 2012 11:55:23 +1300

The area were I notice the style re-arrange the most is with the h1/2/3/4/5 etc styles. For some reason in the process of combining different declarations of the same type the h1, h2, h3, h4, h5, h6 block gets moved to after the individual h settings, thus removing all the top and bottom margins.

1.15... (post by Jaijaz)

Fri, 28 Dec 2012 11:49:39 +1300

Couple of things to add.

The Bootstrap branch is very stable and I currently have it running about 5 sites, though not all live right now. rockcamp.co.nz is a nice example. Based on this thread I'd say there is a good chance it will get merged back into master and be a part of V1.2.

Other thing is (and I apologise for the gratuitous plug) I have built an example theme that makes use of the Bootstrap branch and the LessPHP that we built into it. It is hosted on GitHub so feel free to have a look/play/use.

Hope that helps.

1.15... (post by Rick)

Fri, 28 Dec 2012 11:21:29 +1300

No worries

1.15... (post by t1Peter)

Fri, 28 Dec 2012 10:00:38 +1300

Thanks for the quick reply.

Hard reload does the trick - just had to discover that it's command+shift+R on a Mac.

Great to see the option of more recent JQuery versions.

1.15... (post by Rick)

Fri, 28 Dec 2012 08:57:41 +1300

Hi Peter, welcome to the forums.

Changing themes should work the same as it always did... just requiring a force refresh afterwards (two if you're in Chrome). I changed some caching stuff a bit but it shouldn't have a negative effect.

Jojo now loads two external files on every page for form handling, one of which is from malsup.github.com. I've been thinking of ways to only trigger these when actually needed but want something better than a mere hack.

I'm very keen on replacing Xinha, but am being very careful as I don't want to break compatibility. Xinha is very much hardwired into Jojo. I've got a branch on Github where I made Xinha merely a plugin and managed to plug CKEditor in in its place, but it was clunky.

Yes, Dwoo development stopped a while back and it does indeed have a couple of limitations that Smarty doesn't, but it still out performs Smarty in speed and resource tests. Even Smarty3 is still slower. It may be worth switching back at some point but when we switched to Dwoo (I can't remember who did it) Dwoo had a compatibility layer that meant exisitng Smarty code didn't break. We won't have that luxury of not breaking Dwoo specific code if we switch back.

On Github there are two branches (Bootstrap and Mobile)... Bootstrap utilises Twitter Bootstrap to help make responsive templates quite easy, and Mobile utilises dedicated mobile templates when available. Jaijaz and Harvey respectively are the brains behind those. Personally, I use a merged repository of those two branches and the master.

In general there are many many things that all of us wish to do to Jojo, but with time limitations it often comes down to what clients will pay for or what bugs us enough to set some time aside to do it.

Glad you like Jojo, it's always great to find new people using it.

1.15... (post by t1Peter)

Thu, 27 Dec 2012 21:35:42 +1300

My first post here...

Having worked with various projects using v1.0, I got all keen when saw that v1.15 was uploaded to Git hub.
I decided to install it to see what was new and was generally impressed!

However that's come to grinding halt when I discovered that changing themes is broken. Seems to work only with base install of refresh - not even the other default themes.
I keep seeing a call to 'malsup.github.com' (I think that's it...)

My php isn't good enough to start investigating yet.

I also notice some errors in the error log.

Xhina:
I see in the forums old discussion about alternatives, has there been any further thoughts? I see that active development appears to have stopped a couple of years ago.

Smarty/Dwoo:
Likewise I see that development on Dwoo seemed to have stopped a couple of years ago. Has any thought been given to upgrading to smarty 3 which does seem to under active development.

Responsive template:
Has anyone done any work on one?

I also do some work with WordPress and Joomla and while Jojo does not have the resources of the big names it is far easier to work with in building sites.

Keep up the good work folks

Peter

New release? (post by Rick)

Sun, 23 Dec 2012 16:05:34 +1300

It's easy to add the settings, it'd just be nicer if we didn't need to, but as you said, it's not perfect. Most of the code in CSSTidy I'd beyond the level of what I'm normally working in, but I could take a look if you can show me examples where it failed.

I'll add the settings for CSSTidy next time I'm at my computer, unless someone beats me to it.

New release? (post by Jaijaz)

Sat, 22 Dec 2012 12:24:19 +1300

After thinking a bit more about it and despite my comments I'd actually like to see CssTidy left in but perhaps add settings to control the level of optimising it does. I know the library has that so might not be too hard??

New release? (post by Rick)

Fri, 21 Dec 2012 22:38:15 +1300

We could rip out the CSSTidy stuff if you want, though I recently made that merging an option (in the class, not in Jojo. I haven't had the issues you mention though.

Tom, I see you moved GetNav, just hooked into that the other day to add items from a plugin to the menu, but found that $selecteditems becomes worthless for styling tier menu. I stayed to look at different code for generating $selecteditems but thought I'd check with you first. Did you use another method or simply not need the additional pages to be in $selecteditems when you add the functionality?

New release? (post by Jaijaz)

Fri, 21 Dec 2012 14:36:49 +1300

My Jojo based work has been a lot less recently so haven't done to much with the bootstrap branch. I do have it running on about 5 live sites that are all very stable.

I have had issues with the CssTidy library that Rick forked and included. The reordering of properties has on several occasions broken the cascading of the overall style sheet. Unfortunately I haven't had the opportunity to address this. I was thinking of just turning that combining of declarations off as the size decreases are quite minimal in the scheme of things.

Anyway, very happy for it to merged back as is.

New release? (post by tom)

Fri, 21 Dec 2012 12:29:39 +1300

I've (finally) done a tag of the current master (1.15) to include the form stuff and bug fixes since 1.1.
Seems to have been running pretty cleanly for a while and if there are any current issues with the form stuff they are hopefully edge cases.

I'm thinking this will allow me/gH to move pretty much all of our current/old sites onto one or other of the two current tags reasonably painlessly (and finally get rid of the SVN versions).

All of the new sites I'm building are on the BS branch (which I'm loving and I haven't even touched on the Less side of it yet). I've had no real issues with running it as a production version - are we good to merge that branch back to master now do you reckon?

Hook in jojo_cart_transaction_report.tpl (post by Rick)

Fri, 21 Dec 2012 09:09:22 +1300

I thought I'd already posted this but it looks like I didn't. Smarty and Dwoo handle their scopes differently. The jojo_cart_transaction_report_td worked perfectly with Smarty, but using Dwoo doesn't give you the scope you need and you can't access the required data.

I looked into Smarty3 ages ago and it looked very promising (especially being able to assign objects for use in templates) but it still used way more memory than Dwoo.

mod_rewrite issue? (post by rwhite35)

Sun, 09 Dec 2012 10:00:39 +1300

SOLVED:
I removed the config.php file and started the process over. This time it took. I think it must have had something to do with the file/folder permissions. Mac is very picky about who can do what. Any case, all set.

Regards,
rwhite35

mod_rewrite issue? (post by rwhite35)

Sun, 09 Dec 2012 06:53:46 +1300

Additional notes:
I've changed all the permissions to _www:admin on all the source files and directories.
So I don't think Apache should have any issue creating files now.

It appears that SQL is throwing this response on trying to select the option table:
-- Table 'jojosite.option' doesn't exist

and when I look at the database 'jojosite' (my name for the database) it is empty.

So somewhere in the installation process the tables are not being created. Hope that helps.

Again this is a Mac Xserver running Apache 2, PHP 5.3 and MySQL 5.1
Thanks,

rwhite35

mod_rewrite issue? (post by rwhite35)

Sun, 09 Dec 2012 05:11:41 +1300

Hello,
Going through the installation of 1.0rc2 and got to the point where the installation process was suppose to install everything. However instead of compiling, it returned the setup script in the preview window.

I followed the setup video and everything seems correct, however I noticed that in my installation of PHP 5.3.1, mod_rewrite was not present in the configure command.

So I looked at my httpd.conf file and it DOES have:
LoadModule rewrite_module modules/mod_rewrite.so

I'm assuming then that mod_rewrite.so is in fact installed, but maybe not enabled in PHP. Can I enable this in PHP.INI without having to reconfigure PHP?

ADDITIONAL NOTE:
the .htaccess file isn't throwing any 500 internal error and it contains the directive
"RewriteEngine on". So this may not be a mod_rewrite issue after all. Maybe a file write permission issue?

Any thoughts would be very much appreciated.
rwhite35
Mac OSXserver 10.6.8
BTW, looking forward to trying out Jojo!