Post by OSWorX » Sat Sep 27, 2014 10:27 pm

JNeuhoff wrote:
we shouldn't be using FTP to upload the files for the installation feature on OC2. It's just like placing plain text password easily accessible to others..
It not hard to modify the admin/controller/extension/installer.php so that it doesn't use FTP, but rather, place the files directly to the server. And the session can be made secure by using SSL for the admin backend in general, including the installer.
Not our job.
What for as Daniel here?

Full Stack Web Developer :: Dedicated OpenCart Development & Support DACH Region
Contact for Custom Work / Fast Support.


User avatar
Guru Member

Posts

Joined
Mon Jan 11, 2010 10:52 pm
Location - Austria

Post by OSWorX » Sat Sep 27, 2014 10:36 pm

James wrote:It’s taken some time to get here but we are pleased to announce that we are now in official beta stage. You can download the beta versions here

When is 2.0 going live?
We will be going live with 2.0 within the coming days, following more testing by the OpenCart team and community ..
For such a big move (from 1.5.x branch) do you (or anybody else) really expect to fix all and everything in a few days?
Daniel (and others) needed several months for OC.2

And now we should stop our daily work and test only OC 2 ?

What kind of release management is this??

And what about this:
We will be going live with 2.0 within the coming days, following more testing by the OpenCart team and community
As I read this, you are planning to publish a 'stable' release while knowing that bugs (serious or not) are in??
But .. you have the 'team' and the community ..
What for is there a 'testsuite' embedded when you need us?

Why this hurry now after wasting months over months?

Full Stack Web Developer :: Dedicated OpenCart Development & Support DACH Region
Contact for Custom Work / Fast Support.


User avatar
Guru Member

Posts

Joined
Mon Jan 11, 2010 10:52 pm
Location - Austria

Post by botonakis » Sat Sep 27, 2014 11:20 pm

You should fix the current bug reports before publishing a "stable" release.
There are problems with the default ("responsive") template and with the extension manager.

I think there will be more soon. Please view and review our bug reports.

User avatar
Active Member

Posts

Joined
Tue Jan 24, 2012 7:55 pm
Location - Athens, Greece

Post by discoverytdi » Sat Sep 27, 2014 11:42 pm

All I can see is the Mother and Father of all screw ups. Visions of when Microsoft released Windows Millenium and windows 98 they had more bugs than a tramps overcoat. I'll get my coat as I've probably p*ssed off a few people but I speak as I find always have and was well paid for it too.
Last edited by discoverytdi on Sun Sep 28, 2014 2:14 am, edited 1 time in total.

https://www.rvsolar.co.uk/


User avatar
New member

Posts

Joined
Fri Feb 17, 2012 6:43 am
Location - sunny lancashire UK

Post by rph » Sun Sep 28, 2014 12:08 am

MarketInSG wrote:we shouldn't be using FTP to upload the files for the installation feature on OC2. It's just like placing plain text password easily accessible to others..
But that's the thing: it doesn't use FTP to upload the files. It uses it to move the unzipped *.ocmod.zip files/dirs that are already on the server. I'm not sure what the thinking is behind this. Perhaps an attempt to deal with permissions issues?

The problem is doing this securely is a lot of work. You'd have to set up a directory to serve OpenCart out of, invisibly redirect requests to that dir with htaccess, then set up a dedicated FTP account with access restricted to that OpenCart directory. I have a feeling most users will just put in their host FTP account info instead and be done with it.

-Ryan


rph
Expert Member

Posts

Joined
Fri Jan 08, 2010 5:05 am
Location - Lincoln, Nebraska

Post by rph » Sun Sep 28, 2014 1:43 am

OSWorX wrote:As I read this, you are planning to publish a 'stable' release while knowing that bugs (serious or not) are in??
But .. you have the 'team' and the community ..
What for is there a 'testsuite' embedded when you need us?

Why this hurry now after wasting months over months?
The test suite doesn't have much coverage. Unfortunately OpenCart isn't well suited for unit testing because of the way it's coded (e.g. cyclomatic complexity, large methods, minimal SRP). I wrote about it in the OpenCart code analysis and suggested improvements thread.

I do agree a long extended beta would be useful. We've had beta releases under a week before and there were issues with them.

-Ryan


rph
Expert Member

Posts

Joined
Fri Jan 08, 2010 5:05 am
Location - Lincoln, Nebraska

Post by dmsims » Sun Sep 28, 2014 7:56 am

I find it utterly incredible that OC 2 has persisted with OcMod - why ?

Active Member

Posts

Joined
Sat Apr 13, 2013 6:05 pm

Post by JAY6390 » Sun Sep 28, 2014 8:12 am

rph wrote:
MarketInSG wrote:we shouldn't be using FTP to upload the files for the installation feature on OC2. It's just like placing plain text password easily accessible to others..
But that's the thing: it doesn't use FTP to upload the files. It uses it to move the unzipped *.ocmod.zip files/dirs that are already on the server. I'm not sure what the thinking is behind this. Perhaps an attempt to deal with permissions issues?
Pretty sure you're spot on with this. I remember Wordpress having the same feature a long time ago for auto installs of plugins (assume it's still an option). Having files added via FTP rather than the web server directly means the files will be set with the same permissions they would with the upload originally, including user and group permissions. If the web server runs under it's own user it may not work correctly, or the ftp user may not have access to edit the file as is the case quite often on some of the poorer configured servers for things like log and cache files generated by php

Image


User avatar
Guru Member

Posts

Joined
Wed May 26, 2010 11:47 pm
Location - United Kingdom

Post by bull5-i » Sun Sep 28, 2014 4:06 pm

It's welcoming to see an extension installer being integrated into OC 2.0, however currently it still is pretty raw.

Custom OpenCart extensions are not always modules, shippings, payments, order totals nor feeds, however they still would require (at least benefit a lot from) a proper install/uninstall framework similar to what the modules, shippings, ... and feeds have. Current extension installer only offers install methods but is totally lacking uninstall part (how to remove changes made or files added, removing the vqmod/ocmod script is not a clean uninstall) which is also important as otherwise the OpenCart installation can get pretty ugly with unused files, unnecessary SQL data, tables and columns.

Additionally many custom extensions have configurable options so the extensions may require a separate page where these can be configured (again similar as offered by modules, shippings, .... and feeds). If every custom extension would add its custom settings to the system configuration page using vqmod/ocmod it would quickly make a mess there, which is why it would be important for the custom extensions to have their own page where to adjust the custom extension settings.

For OpenCart 1.5 and 1.4 it was quite common to add the custom extension as a module so you could benefit from the install/uninstall methods and a configuration page for the extension. However in OC 2.0 this will lead to a bit of a mess as every extension under the module folder is always considered and installed as a module (be it a real one or not) and thus the layout page offers to associate it with a layout. In OC 1 the layout bindings were handled on the module settings page of each module so you could implement it differently for extensions that really were not modules.

To sum it up, we (custom extension developers) need a separate page for custom extensions (be them ocmod or not) where the extension can be installed, uninstalled and configured similarly as modules, shippings, ... and feeds are currently handled.

The Extension Installer could be used for uploading the extension files (and maybe calling the install method of the extension). Using FTP in the extension installation process is not the perfect solution, for example Joomla handles extension uploads/installations/upgrades without FTP access and this is much more convenient for the end user.
Last edited by bull5-i on Sun Sep 28, 2014 4:21 pm, edited 2 times in total.

|V|355 \/\/17|-| 7}{3 |3357, ... [you know the rest]

Commercial mods: New! Questions & Answers PRO - Admin Quick Edit PRO - Product Downloads PRO - Custom Product Tab PRO - New! Product Quick Edit Plus

All mods & extensions by me


Active Member

Posts

Joined
Tue Jan 11, 2011 8:49 pm

Post by dunks » Sun Sep 28, 2014 4:10 pm

wow, good news, beta can be use to live store?? any update must be only a bug? ya?

Ingat Gadget, Ingat DroidLime https://www.droidlime.com/


User avatar
Active Member

Posts

Joined
Wed Apr 20, 2011 1:19 pm
Location - Jakarta - Indonesia

Post by Daniel » Sun Sep 28, 2014 4:40 pm

JNeuhoff wrote:
we shouldn't be using FTP to upload the files for the installation feature on OC2. It's just like placing plain text password easily accessible to others..
It not hard to modify the admin/controller/extension/installer.php so that it doesn't use FTP, but rather, place the files directly to the server. And the session can be made secure by using SSL for the admin backend in general, including the installer.
this is dependant on the setup of the servers. most web servers wont allow php scripts to create, update or delete files. you need to chmod all directories to 777 for this to work.

OpenCart®
Project Owner & Developer.


User avatar
Administrator

Posts

Joined
Fri Nov 03, 2006 6:57 pm

Post by OSWorX » Sun Sep 28, 2014 4:47 pm

Daniel wrote:this is dependant on the setup of the servers. most web servers wont allow php scripts to create, update or delete files. you need to chmod all directories to 777 for this to work.
Using 0777 for permissions as always the worst decision (means open to everyoen and all).
Should be 0755 (or at some providers I ahve seen 0750 or 0700).
But never higher!
Or if used, change back immediately back to less than 0777 after operation.

Full Stack Web Developer :: Dedicated OpenCart Development & Support DACH Region
Contact for Custom Work / Fast Support.


User avatar
Guru Member

Posts

Joined
Mon Jan 11, 2010 10:52 pm
Location - Austria

Post by JAY6390 » Sun Sep 28, 2014 6:46 pm

0775 is actually quite common, or 0770 when the web server runs as it's own username but I don't think Daniel was suggesting people should actually use 0777, merely pointing out why the use of ftp details was chosen, for better compatibility with servers without having to use 0777

Image


User avatar
Guru Member

Posts

Joined
Wed May 26, 2010 11:47 pm
Location - United Kingdom

Post by OSWorX » Sun Sep 28, 2014 7:12 pm

JAY6390 wrote:0775 is actually quite common, or 0770 when the web server runs as it's own username but I don't think Daniel was suggesting people should actually use 0777, merely pointing out why the use of ftp details was chosen, for better compatibility with servers without having to use 0777
I think it is in our duty (as developer and such people who deal with things like that on a daily base) to publish such important details in a way also a noob can understand what is ment.
You and I know how he ment it, but does that everybody?

Full Stack Web Developer :: Dedicated OpenCart Development & Support DACH Region
Contact for Custom Work / Fast Support.


User avatar
Guru Member

Posts

Joined
Mon Jan 11, 2010 10:52 pm
Location - Austria

Post by Daniel » Sun Sep 28, 2014 8:03 pm

apart from the complaints about the code, what do you guys think of the new admin design?

OpenCart®
Project Owner & Developer.


User avatar
Administrator

Posts

Joined
Fri Nov 03, 2006 6:57 pm

Post by JAY6390 » Sun Sep 28, 2014 8:07 pm

Looks really nice with the bootstrap integration. My only issue is the menu on the left isn't as accessible as it was on the old one where you just hover to show menu items, but realise this is due to mobile accessibility

Image


User avatar
Guru Member

Posts

Joined
Wed May 26, 2010 11:47 pm
Location - United Kingdom

Post by koku » Sun Sep 28, 2014 8:21 pm

Personally, I like the new admin design.
Also, I find useful the layout edit page with the module inside.
I just found the tooltips have limited space (you cannot have large tooltips).

I agree with bull5-i for the custom extensions uninstall. I think we need something there, so we don't have to make a module for this. For example an uninstall.sql alongside with install.sql.

Easy Multi-Store Extension
ACS Courier Vouchers for OpenCart 2, 3 & 4
Skroutz Smart Cart (Έξυπνο καλάθι) for OpenCart
Έλεγχος Εγκυρότητας Ελληνικού ΑΦΜ για OpenCart
Change the style of your OpenCart admin dashboard for free!


Active Member

Posts

Joined
Thu Feb 14, 2013 2:28 am

Post by Daniel » Sun Sep 28, 2014 8:46 pm

custom extension uninstall is hard to do.

you can delete the ocmod xml from the db but problems arise if you start deleting files and that might have been overwritten. need to think about it a bit more.

OpenCart®
Project Owner & Developer.


User avatar
Administrator

Posts

Joined
Fri Nov 03, 2006 6:57 pm

Post by OSWorX » Sun Sep 28, 2014 8:56 pm

Daniel wrote:apart from the complaints about the code, what do you guys think of the new admin design?
Nice and usefull, easy to understand.
Need only the bug with the z-index be fixed (see atlassian issue tracker)

Full Stack Web Developer :: Dedicated OpenCart Development & Support DACH Region
Contact for Custom Work / Fast Support.


User avatar
Guru Member

Posts

Joined
Mon Jan 11, 2010 10:52 pm
Location - Austria

Post by JNeuhoff » Sun Sep 28, 2014 9:08 pm

Daniel wrote:apart from the complaints about the code, what do you guys think of the new admin design?
The admin backend does its job, its clean and functional.

The only thing I noticed is that it is slower than in previous versions of OpenCart. So I looked at it, and it turns out when loading an admin backend page, it also does calls to external 3rd party servers, e.g. for getting the 'awsome' font. This can be slow in places like the UK (unlike Hongkong ;) ) which has virtually no proper fibre broadband. So my suggestion is to perhaps keep a local copy of the awesome font with the OpenCart server?

Export/Import Tool * SpamBot Buster * Unused Images Manager * Instant Option Price Calculator * Number Option * Google Tag Manager * Survey Plus * OpenTwig


User avatar
Guru Member

Posts

Joined
Wed Dec 05, 2007 3:38 am

Who is online

Users browsing this forum: No registered users and 32 guests