Follow us on Twitter X-Cart on Facebook Wiki
Shopping cart software Solutions for online shops and malls

X-Cart 5.4.0 Public Beta is out
 
Reply
   X-Cart forums > News and Announcements
 
Thread Tools
  #21  
Old 05-16-2019, 04:40 AM
 
Triple A Racing Triple A Racing is offline
 

X-Adept
  
Join Date: Jul 2008
Location: Manchester UK
Posts: 701
 

Default Re: X-Cart 5.4.0 Public Beta is out

Quote:
Originally Posted by mvs
Currently, this is not a prior task. Unfortunately, this tutorial will not be included in 5.4.0.x Stable release
Being polite, somebody at XC is NOT doing their job correctly. How has 'aesthetics' suddenly jumped ahead of security over at Upgradesville?

This IS a priority task. The now infamous tutorial is only being provided in lieu of the fact that XC promised to deliver an effective CSP as part of ~/xcart/etc/config.php in XC 5.4.*.* a long time ago. Now and quite suddenly, this has NOT can NOT be delivered, purely because "...cannot add rules for 3-d party modules" (sic)

That's a very questionable excuse anyway and one that isn't given anywhere else. It's often the exact reverse in fact c/w many binding rules. The convenient, module dependency issue should have been known (if indeed it actually does exist...) back at the time the above promise was made.

A logical, albeit speculative, conclusion based on the preceding and other historical examples, is that nobody at XC has actually thought about this properly, at all. AKA "...we might get away with it..." This despite CSP being the "elephant in the room" for all paying XC5 license holders (but in fairness, some may still be unaware at this point).

People do seem to like avoiding reality on here sometimes, but where we're from, a spade is a spade, regardless of any happy, vague, PR style, PC official response that's given.
Quote:
Originally Posted by mvs
Thank you for testing!
Obviously this will now be limited testing because this ^^ and several other things are not actually ready.
There's beta testing & then there's latest overnight compiled output testing. The two are vastly different.
Quote:
Originally Posted by mvs
Please let me know if you find anything else
We won't be providing any feedback on colour shades or image border hues & saturation content just so we're 100% clear
__________________
Business XC 5.3.6.0 Live & XC 5.4.0.3 Dev Store
Ubuntu 18.04.2 (HWE) / Plesk 17.8.11
Nginx 1.14.2 / Apache 2.4.29 (Backported)
MariaDB 10.2.24 / PHP 7.2.18 Live / PHP 7.3.5 Dev Store
Reply With Quote
  #22  
Old Yesterday, 01:04 AM
 
Triple A Racing Triple A Racing is offline
 

X-Adept
  
Join Date: Jul 2008
Location: Manchester UK
Posts: 701
 

Default Re: X-Cart 5.4.0 Public Beta is out

Quote:
Originally Posted by mvs
Please welcome X-Cart 5.4.0 Public Beta ~~ You’ll love the revised email notifications builder, brand-new upgrade system with one-click rollbacks, the updated webmaster mode and template editor, and many more improvements...
Our experience (so far) with the XC 5.4.0.3 public beta release:

@mvs The irksome "Trial Has Expired" notice / graphic reminder etc has arrived today, despite the previous advisory note advising that the trial period was 28 days Why this is even present in a Public Beta release anyway, is still a mystery to us, but that fact that it doesn't work properly, relates to item b) below.

a) All the items mentioned above are welcome, particularly in our case, the e-mail notification editing, and the upgrade / rollback back processes. Well done XC. Looking forward to XC 5.4.0.* becoming stable and becoming a public release.

b) There are still, minor system glitches all of which, need to be fixed before a public release. We've already PM'd you @mvs relating to a few of them but there's others too.

c) The XC approach to CSP is very poor. We summarized that in #post21 on this thread. This will not prevent the forthcoming public release of XC 5.4.0.* but, it's a security oversight / avoidance, so it does need to be fixed. Properly and quickly please, not just put in the "too hard" tray and left to fester.

d) XC 5.4.0.* was supposed to provide an Nginx only version. It didn't. This too, has no effect on the forthcoming public release of the normal Apache based) XC 5.4.0.* but it's a big opportunity wasted. The Nginx 'solution' that's been provided in this beta release doesn't work properly, well not for us anyway. We'll add a separate post on this.

Finally, an item for debate; One big XC 5.4.0.* irritation is the incessant and every increasing up-selling attempts (text / icons / graphics / prompts with links etc) that now reside within XC5. If somebody at XC doesn't quickly deal with this, there's a real danger of XC5 becoming "Bloatware". Any links to services provided by 3rd parties and/or other XC5 chargeable services / news or blog items etc could ALL very easily be changed to very short, small text notes only c/w appropriate links but presented in a much more controlled and focused manner. XC keep trying to emulate Apple in many ways, well this is a very good example of how to do it (Apple) / how not to do it (XC).

In our opinion this beta release of XC 5.4.0.3 includes up-selling items that are too big / too intrusive / unnecessary and over sold. It's like a throwback to Windows Vista but distilled down further, so that it's suitable for primary school kids. Your own opinion / experience / feedback may vary
__________________
Business XC 5.3.6.0 Live & XC 5.4.0.3 Dev Store
Ubuntu 18.04.2 (HWE) / Plesk 17.8.11
Nginx 1.14.2 / Apache 2.4.29 (Backported)
MariaDB 10.2.24 / PHP 7.2.18 Live / PHP 7.3.5 Dev Store
Reply With Quote
  #23  
Old Yesterday, 02:02 AM
 
Triple A Racing Triple A Racing is offline
 

X-Adept
  
Join Date: Jul 2008
Location: Manchester UK
Posts: 701
 

Default Re: X-Cart 5.4.0 Public Beta is out

Nginx - Please read these previous posts in this thread first: Post#5 & Post#6 & Post#7

After trying the XC 5.4.0.3 Apache based release first, we changed the domain that the dev store is running on, to be pure Nginx 1.14.2 OS, with no Apache OS at all and then applied the Nginx coding (the with web directory version) that's provided by XC within the supplied "nginx.conf.sample" config file. Observations / issues:

a) Initially, this would not run at all. In our case, this section was the reason:
Code:
location ~ \.php$ { try_files $uri = 404; fastcgi_pass fastcgi_xcart; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; fastcgi_read_timeout 300s; fastcgi_connect_timeout 300s; }
specifically, the fastcgi_pass fastcgi_xcart; line.
We amended this to: fastcgi_pass unix:/run/php/php-fpm.sock; and then it did run and things improved.
For reference, we're using PHP 7.3.5 and running this via 'FPM application served by Nginx'.

The results so far are as follows:

a) We can display and login to the admin back ('admin.php' within the url) & it and works well.
b) Until... items which have 'service.php' within the url are called, in which case nothing happens at all and nothing works. Nothing.
c) This may / may not be related to the irksome "Trial Has Expired" mentioned in the previous post. Please advise XC? If it is, then....

d) We can display the store's home page c/w all graphics / menus / link etc but...
e) No other pages can be displayed. A 404 Nginx error page is provided as a result of utilizing any menu or product links.
f) This time, this is definitely not related to any irksome "Trial Has Expired" coding.
g) This is the XC provided Nginx coding being mis-configued, either, by XC by default, or, as part of the applied setup on our sever.

Our previous comment in Post#19 "...we still think this is just a stick-on Nginx 'plaster' as opposed to being a pure, well designed Nginx only version of XC5 ..." still applies.
__________________
Business XC 5.3.6.0 Live & XC 5.4.0.3 Dev Store
Ubuntu 18.04.2 (HWE) / Plesk 17.8.11
Nginx 1.14.2 / Apache 2.4.29 (Backported)
MariaDB 10.2.24 / PHP 7.2.18 Live / PHP 7.3.5 Dev Store
Reply With Quote
Reply
   X-Cart forums > News and Announcements


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -8. The time now is 01:25 PM.

   

 
X-Cart forums © 2001-2018