Jump to content

Cody

Blesta Developers
  • Posts

    1,574
  • Joined

  • Last visited

  • Days Won

    74

Posts posted by Cody

  1. This uses the PHP IMAP library, specifically imap_open, which will by default attempt the same credentials 3 times before giving up. Is it possible you entered the wrong password and your mail server temporarily blocked you?

     

    I can't see this being a Blesta issue since Blesta simply passes the password along unmodified to the IMAP library. There have been a number of bug fixes in PHP since 5.4.9 related to IMAP, though I'm not sure if any deal with this directly.

  2. Version 3.0.2 is now available. You can download it at https://account.blest...er/client_main/.

    This is a patch release that corrects issues with 3.0.0.

    Patching Blesta

    See Patching Blesta in the User Manual for instructions.

    Release Notes - Blesta Core - Version 3.0.2

    ## Version 3.0.2
    2013-09-03
    
    ### Bug
    * [CORE-622] - Plesk: Add login link to automatically login to the Plesk account
    * [CORE-692] - Missing payment confirmation page when a client pays through a non-merchant gateway without authenticating
    * [CORE-694] - Undefined index if reset password string fails to decrypt
    * [CORE-696] - Exclusive coupons are not limited to applying to their assigned packages
    * [CORE-698] - The payment_url tag in email templates does not include the path that Blesta is installed under
    * [CORE-699] - The client_url tag in email templates does not include the path that Blesta is installed under
    * [CORE-704] - "Return to Portal" link appears when portal is not installed
    * [CORE-707] - Edit invoice does not convert line item to textarea after hitting enter
    * [CORE-709] - Cannot checkout with an order of $0 in the cart
    * [CORE-713] - Automatic provisioning of pending services fails to call addService() on the module
    * [CORE-714] - Universal Module: Configure label shows a numerical ID instead of the product name during checkout
    * [CORE-715] - Order Plugin: Inactive and Restricted packages appear normally on order pages
    * [CORE-716] - CLI execution can not properly determine installed URI
    * [CORE-719] - Redirect loop when clients try to add payment accounts
    * [CORE-722] - Order: "Allow Coupons" option does not prevent coupons from being accepted on order form
    
    ---
    
  3. CORE-709 fixed in 3.0.2.

     

    To patch yourself, update /plugins/order/views/templates/standard/main_checkout.pdt:

     

    change (line 38):

     

                        $this->Form->create();

     

    to

     

                        $this->Form->create();
                        $this->Form->fieldHidden("checkout", "true");
  4. It's just a default installation. I have Chrome inspector up and there doesnt' appear to be any POST information when clicking submit. 

     

    So, if it's refreshing the page it's making a GET request?

     

    What do you mean by default installation? Surely you must have installed some module which then allowed you to create some package with some form of pricing (currency/term/price) that could then be added to an order form with certain options enabled/disabled (allow coupons, force https, etc.), which in turn allowed you to proceed through the checkout process. This is the kind of information we're looking for. Since we're unable to duplicate, we must be doing something wrong or have something misconfigured.

     

    Can you duplicate on the demo?

  5. It's the same for me as well. Can't order with a free basket. I click submit order and the page just refreshes its self...

     

    If there is money in the cart then it goes to the next page of asking for what payment type you want to use. 

     

    Steps to duplicate would be helpful.

     

    Or, if you use firefox with firebug or Chrome with inspector, submitting data or screenshots of the data being POSTed when you click the submit order button and the response from the server would help as well.

    As it stands, we don't have enough information to duplicate.

  6. Are you clicking the "Submit Order" button as in the screenshot or in the video?

     

    The order isn't placed until after the "Submit Order" button is clicked. I'm unable to duplicate this by following the steps outlined above. Clicking "Submit Order" generates the order.

  7. I'm not able to duplicate this.

     

    1. Find client
    2. Create Invoice with line item amount of 49.6779
    3. Pay invoice with CC payment for 49.68
    4. Invoice is closed, 49.68 is applied to the invoice

    Can anyone you provide steps to duplicate? We need full details including tax rules applied (levels, amounts, country/state), all line items of the invoice (quantity, amount, and whether or not it is taxable), currency format, and any previous applied amounts to the invoice.

  8. Ok, so turns out this is only reproducible if you disable one of the two Accepted Payment Types in [settings] > [Company] > [billing/Payment] > [Accepted Payment Types].

     

    CORE-719 fixed for 3.0.2.

     

    To patch yourself update client_accounts.php (line 192):

     

     

            elseif (count($valid_account_types) == 1)

     

     

    to

     

     

            elseif ($step == 1 && count($valid_account_types) == 1)

     

  9. I think I know the issue but I don't know why or how. The domains made in Blesta physically (though Add services) are there so far that's 1 out the clients I can see.

    The  ones I imported from WHM** to 2.5 to v3 aren't showing. Which is most of my client's domain services. Why I don't know but Blesta is recognizing them as they have Active (A number) on the services.

     

    The imported services won't have the customer-id that logicboxes requires in order to pull domain info. So that's explains why that's not in there. I'm pretty sure we have a task for adding the ability to specify the customer-id in the edit service page to allow services that have already been provisioned outside of Blesta v3 to be properly linked through logicboxes.

     

     

    I haven't got that far but I just tried adding one of my own existing domains to an account I created while I'm testing/famaliarizing myself with Blesta and found this:

     

    Select customer

    Add Services

    Go through the steps (Add domain through LogicBoxes, Don't Invoice, Send Invoice) and I get the following message:

    Check your module log to see why you receive this error. That's the first major step in determining whether this is an issue with your logicboxes (et. al.) account or with the module itself.

  10. We're working on getting an importer working for a certain billing solution, so with the intent of adding data into the system I reluctantly log in. I get about two clicks in when suddenly, my pupils dilate, my palms get sweaty, and I begin to salivate uncontrolably. I've only been logged in for a few brief moments and already I've stumbled upon an exploit.


    I'm thinking, "Okay, that was easy." But I've got work to do. We need to get some test data in there so we can verify the importer. Click, click... vulnerability. Click, vulnerability, click, click, vulnerability, vulnerability, vulnerability. Seriously? :blink:

     

    A few hours of inputing data and I've discovered more than a dozen vulnerabilities, without looking. No doubt there are many more. They range from mildly amuzing, to "OH $*&! Restore backup!".

     

    How do you think we should handle this situation?*

     

     

    *Obviously we'll be disclosing these vulnerabilities to the proper channels... in due time.

  11. Version 3.0.1 is now available. You can download it at https://account.blest...er/client_main/.

     

    This is a patch release that corrects issues with 3.0.0.

    Patching Blesta

    See Patching Blesta in the User Manual for instructions.

     

    Release Notes - Blesta Core - Version 3.0.1

     

    ## Version 3.0.1
    2013-08-21
    
    ### Bug
    * [CORE-658] - The State field is not set correctly when selecting to copy information from an existing contact
    * [CORE-659] - Calendar delete event action not using POST
    * [CORE-660] - Modules delete action not using POST
    * [CORE-661] - Managing service produces undefined property $PackageGroups
    * [CORE-662] - PayPal Payments Standard: Error message "The form token is invalid" is displayed when a client returns to Blesta from processing payment
    * [CORE-663] - Download Plugin: Changing permissions to publicly available reverts to must be logged in
    * [CORE-664] - Legacy nonmerchant gateway subscription incompatibility
    * [CORE-665] - Setting/unsetting encryption key affects private_key for all companies in system
    * [CORE-667] - Username error occurs when attempting to set a client's username back to their email address
    * [CORE-668] - PayPal Payments Standard: Payment validation field, "business", may not always be included in the gateway response, causing the transaction to remain pending
    * [CORE-669] - cPanel Module: Can't add a server when using a reseller user, only root
    * [CORE-671] - Themes do not save the change back to the default theme
    * [CORE-672] - Editing an addon service whose package is unlimited complains of quantity available
    * [CORE-678] - Available service add-ons display all standard package group packages if there are no addon packages
    * [CORE-679] - Import Manager: Imports all module accounts with the same module row
    * [CORE-680] - Enabling GeoIP causes error due to missing mbstring extension
    * [CORE-681] - Invoice padding settings displayed but not supported
    * [CORE-682] - Check if installed by verifying Blesta.database_info config is set
    * [CORE-683] - Missing template parse check when editing email templates
    * [CORE-684] - Invalid tags result in blank email
    * [CORE-685] - Support Plugin: Adding a staff note counts the staff member as the last replier
    * [CORE-687] - Listing gateways may attempt to load files that being with '.'
    * [CORE-689] - Incorrect date format on invoices created from adding a service
    * [CORE-691] - Order Plugin: Invalid custom field ID error
    * [CORE-693] - Editing contact Country/State fails to update view after saving
    
    ---
    

     

  12. CORE-693 fixed in 3.0.1.

     

    To patch yourself remove lines 1558 - 1562 of /app/controllers/admin_clients.php:

     

     

                // Set client settings
                $vars->country = $client->settings['country'];
                $vars->currency = $client->settings['default_currency'];
                $vars->language = $client->settings['language'];

     

    to:

     

     

     
×
×
  • Create New...