Skip to content

WonderCMS 3.6.0

Latest
Latest

Choose a tag to compare

View all tags
@robiso robiso released this 31 Dec 23:27
· 1 commit to main since this release
3.6.0
db65631
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Features and fixes

Security + stability update to WonderCMS core (index.php) with no intended breaking changes. It hardens module installs/updates, fixes a few long-standing bugs, improves PHP 8.4+ compatibility, and adds an ultra-simple plugin enable/disable mechanism (no file deletion needed) with conflict-prevention for editor/translation plugins.

Changes

  • Safer theme/plugin installs & updates
    • Stronger sanitization for module name/type
    • Basic ZIP entry validation to prevent zip-slip (bad ZIPs writing outside the module folder)
    • Thanks to Ramon Dunker (his GitHub and LinkedIn)
  • Login hooks now work
    • Plugins load before loginAction() so login_success / login_failed listeners can run reliably
  • Search fixes
    • Fixed broken internal search helper methods
    • Improved Simple Blog post search compatibility
  • More accurate update checks
    • Replaced string compares with version_compare() for modules + core update checks
  • PHP compatibility / deprecation cleanup
    • Explicit nullable params for PHP 8.4+
    • Fixed str_ireplace(..., null, ...) deprecation triggered during plugin deletion on newer PHP
  • Plugin enable/disable (new)
    • New config.disabledPlugins list in the DB
    • loadPlugins() skips disabled plugins but still lists them as installed
    • Settings → Plugins now shows Enable/Disable for installed plugins
    • Editor/translation conflict prevention: enabling/installing one editor/translation plugin auto-disables other enabled plugins from the same group (with confirmation prompt)

Backwards compatibility

  • No plugin API changes (existing plugins do not need changes).
  • config.disabledPlugins is optional; if missing, behavior is unchanged.
  • Note: if a user disables plugins on this version and later downgrades to an older WonderCMS, the older core will ignore disabledPlugins and those plugins will load again (expected).

How to update

  • Log into your WonderCMS website and create a backup of your website through WonderCMS -> Security.
  • Click "Update".
    • If update isn't visible, open Settings -> Themes and click "Check for updates".

Installation

  • Unzip and upload the files wherever you want WonderCMS installed and visit that URL.
  • SHA-256 signature: 14985f23f6a0766d251b48cda54579a1188ea56226c340059efd6c552ade9382
Assets 3
Loading