News from ExponentCMS.org

Plans for an Upcoming Release?

dleffler@hughes.net (David Leffler) — Thu, 27 Nov 2025 17:05:48 -0500

There will be at least one more release around the beginning of 2026 (or maybe in time for Christmas 2025). Though we're leaving obsolete versions of PHP behind and you may not see anymore formal patches to the v2.x code, there will be at least a v3.02patch3 or v3.0.3 soon!

It will include a couple of bug fixes, some updated 34d party libraries and a (somewhat) new Database Manager...we're replacing Adminer with AdminNeo, which is another fork of Adminer. This provides a smother entry into the manager and some tweaked visuals. We may try to tweak out PHP v8.5 support, and possibly leave in PHP v7.4 and v8.0 deprecated support

Version 3.0.2patch2 and Version 2.7.2patch2 Released

dleffler@hughes.net (David Leffler) — Tue, 16 Sep 2025 20:33:12 -0500

Patch #2 to v3.0.2 and v2.7.2 fix a long-standing issue where non-admin users could not edit their own profile. The patch also allows non-admin users to send eAlerts. We've also fixed some Bootstrap 5 control issues.

Patch #1 to v3.0.2 and v2.7.2 was released earlier this year with many fixes and a few new features.

Version 3.0.2 Released

dleffler@hughes.net (David Leffler) — Thu, 26 Dec 2024 17:06:25 -0500

Version 3.0.2 or 'Relentless Retreat' is now available! The 3.x version requires PHP v7.4 or later. . This version is functionally equivalent to v2.7.2! We strongly encourage all Exponent installations be upgraded to v3.0.2 as soon as practical!

As with all previous upgrades, we highly recommend you test your system and custom theme before upgrading a production server, especially if jumping over minor version numbers. An article about updating a custom theme can be found here. Several articles about upgrading can be found here.

The v3.0.2 download is found here.

Version 2.7.2 Released

dleffler@hughes.net (David Leffler) — Thu, 26 Dec 2024 17:00:00 -0500

Version 2.7.2 or 'Relentless Retreat' is now available! We/ve added support for PHP v8.1 and v8.2. We also fixed quite a number of issues since the last patch one year ago. There are also many other things have been tweaked or fixed. If your server PHP version supports it (v5.6.0 or later), we strongly encourage all Exponent installations be upgraded to v2.7.2 as soon as practical! Though if you are running PHP v7.4 or later, we encourage you to switch to version 3.0.2 with the same features as v2.7.2 but requires PHP v7.4 or later.

The v2.7.2 download is found here.

Patch #3 Released for V3.0.1

dleffler@hughes.net (David Leffler) — Tue, 02 Jan 2024 00:15:00 -0500

This patch adds some features to v3.0.0rc1/v3.0.1, it also fixes a number of anomalies in v3.0.1patch2. It updates many 3rd party libraries.

NOTE: DO NOT INSTALL THIS PATCH ON A SERVER RUNNING PHP v7.3 or earlier!!! Your web site will no longer run! PHP versions older than v7.4 are very obsolete and we do not support them. The next version may also remove support for PHP v5.6, v7.0, v7.1, v7.2, v7.4 and v8.0 since they are now considered obsolete.

All Exponent CMS users running at least PHP version 7.4 are encouraged to consider moving their installations to v3.0.1 and to install this patch!! Patch #3 to v3.0.1 is found at https://sourceforge.net/projects/exponentcms/files/exponent-3.0.1-patch-3.zip/download

v301patch3 adds these features to v300rc1/v301 and previous patches:

add multi-column form controls for BS 4/5
add meta_fb to events so they offer the attached event image when pasted to Facebook
better date sorting forms showall view
add mutlti-select option for dropdown controls in form design

v301patch3 fixes these issues in v300rc1/v301 and previous patches:

regression fix (v271p2) site crash on older php versions due to forms coding error
regression fix (v271p2) upgrade could sometimes automatically be triggered
fix fatal error forms view with order dropdown all
regression fix old file manager image editor

v301patch3 updates these 3rd party libraries in v300rc1/v301 and previous patches:

easypost sdk to v7.0.0
less.php to v 4.1.1
ace editor cdn to v1.32.3
codemirror cdn to v5.65.16
deprecations to v1.1.2
EmailValidator to v3.2.6
elFinder to v2.1.64
Bootstrap to v5.3.2
Bootswatch to v5.3.1
Bootstrap Icons to v1.11.2
Tempus Dominus v6.9.4
Datatables to v1.13.8
datables checkboxes to 1.2.14
CKEditor to v4.22.1
smarty to v4.3.2
yadcf to v0.9.4b46
phpThumb to v1.7.22
fontawesome to v6.5.1
mediaelement to v7.0.2
mediaelement plugins to v2.6.7
jquery to v3.7.1
class.upload to v2.1.6
Smarty to v4.3.4
scssphp to v1.11.1
jquery.validation to v1.20.0
jstree to v 3.3.16
getid3 to v1.9.23
sortable.js to v1.15.1

Patch #3 Released for V2.7.1

dleffler@hughes.net (David Leffler) — Tue, 02 Jan 2024 00:15:00 -0500

This patch adds some features to v2.7.1 and fixes a number of anomalies in v2.7.1patch2. It updates many 3rd party libraries.

NOTE: DO NOT INSTALL THIS PATCH ON A SERVER RUNNING PHP v5.5.x!!! Your web site will no longer run! PHP versions older than v5.6 are very obsolete and we do not support them. Version 3.0 removes support for PHP v5.6 and v7.0, v7.2, and v7.2 since they are now considered obsolete.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.7.1 and to install this patch!! Patch #3 to v2.7.1 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.7.1-patch-3.zip/download

v271patch3 adds these features to v271 and previous patches:

add multi-column form controls for BS 4/5
add meta_fb to events so they offer the attached event image when pasted to Facebook
better date sorting forms showall view
add mutlti-select option for dropdown controls in form design

v271patch3 fixes these issues in v271 and previous patches:

regression fix (v271p2) site crash on older php versions due to forms coding error
regression fix (v271p2) upgrade could sometimes automatically be triggered
fatal error forms view with order dropdown all
regression fix old file manager image editor

v271patch3 updates these 3rd party libraries in v271 and previous patches:

ace editor cdn to v1.32.3
codemirror cdn to v5.65.16
deprecations to v1.1.2
EmailValidator to v3.2.6
elFinder to v2.1.64
Bootstrap to v5.3.2
Bootswatch to v5.3.1
Bootstrap Icons to v1.11.2
Tempus Dominus v6.9.4
Datatables to v1.13.8
datables checkboxes to 1.2.14
CKEditor to v4.22.1
smarty to v4.3.2
yadcf to v0.9.4b46
phpThumb to v1.7.22
fontawesome to v6.5.1
mediaelement to v7.0.2
mediaelement plugins to v2.6.7
jquery to v3.7.1
class.upload to v2.1.6
Smarty to v4.3.4
scssphp to v1.11.1
jquery.validation to v1.20.0
jstree to v 3.3.16
getid3 to v1.9.23
sortable.js to v1.15.1

Patch #2 Released for V3.0.1 (aka v3.0.0rc1)

dleffler@hughes.net (David Leffler) — Thu, 01 Jun 2023 01:45:00 -0500

This patch adds some features to v3.0.0rc1 and converts it to v3.0.1, it also fixes a number of anomalies in v3.0.1patch1. It updates many 3rd party libraries.

All Exponent CMS users running at least PHP version 7.4 are encouraged to consider moving their installations to v3.0.1 and to install this patch!! Patch #2 to v3.0.1 is found at https://sourceforge.net/projects/exponentcms/files/exponent-3.0.1-patch-2.zip/download

v301patch2 adds these features to v300rc1/v301 and previous patches:

add forms report title to editor insert-field dropdown in custom report template
form submit now goes back with message instead displaying simple page
add Invisible reCaptcha anti-spam option
implement full-width static wysiwyg text form control option
make outbound emails more friendly by adding organization name to email address when using default smtp address
add better child help doc support and help doc search using datatables
(re)add auto-launch installer for new installation
add time only option to yuicalendarcontrol
make pop button color match type

v301patch2 fixes these issues in v300rc1/v301 and previous patches:

fix the broken bs2 form designer which was never intended to be included, but was
fix yui/bootstrap3 theme framework file upload widget broken, unable to load cross-domain script (https/http)
attempt to fix some cross-domain loading issues behind proxies
fix UPS shipping calculator issues (now allows either a HTTP 1.1 or 2 response)
regression fix some bs/bs3 ajax actions might crash if they attempt to compile an scss instead of less file
fix crash bs3 forms showall view
regression fix bs5 rss/ical pull module configuration tab broken
regression fix blog item date display and tweet ref
regression fix bs4 calendarcontrol wouldn't update input
regression fix form design change control type isn't saved
regression fix form design control ranks mangled during design session
regression fix facebook/twitter buttons not rebuilt on ajax page load for blog/news
fix page reordering anomaly

v301patch2 updates these 3rd party libraries in v300rc1/v301 and previous patches:

easypost sdk to v6.6.0
less.php to v4.1.0
mediaelement to v6.0.3
mediaelement plugins to v2.6.6
jquery to v3.7.0
jquery-migrate to v3.4.1
jquery-confirm v3.3.4
reCaptcha lib v1.3.0 (php 8+)
tempus-dominux to v6.7.7
ckeditor to v4.21.0
datatables to v1.13.4
codemirror cdn to v5.65.13
ace editor cdn to v1.22.0
font-awesome to v6.4.0
bootstrap-icons to v1.10.5
smarty to v4.3.1

Patch #2 Released for V2.7.1

dleffler@hughes.net (David Leffler) — Thu, 01 Jun 2023 01:45:00 -0500

This patch adds some features to v2.7.1 and fixes a number of anomalies in v2.7.1patch1. It updates many 3rd party libraries.

NOTE: DO NOT INSTALL THIS PATCH ON A SERVER RUNNING PHP v5.5.x!!! Your web site will no longer run! PHP versions older than v5.6 are very obsolete and we do not support them. The next version may also remove support for PHP v5.6 and v7.0, v7.2, and v7.2 since they are now considered obsolete.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.7.1 and to install this patch!! Patch #2 to v2.7.1 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.7.1-patch-2.zip/download

v271patch2 adds these features to v271 and previous patches:

add forms report title to editor insert-field dropdown in custom report template
form submit now goes back with message instead displaying simple page
add Invisible reCaptcha anti-spam option
implement full-width static wysiwyg text form control option
make outbound emails more friendly by adding organization name to email address when using default smtp address
add better child help doc support and help doc search using datatables
(re)add auto-launch installer for new installation
add time only option to yuicalendarcontrol
make pop button color match type

v271patch2 fixes these issues in v271 and previous patches:

fix the broken bs2 form designer which was never intended to be included, but was
fix yui/bootstrap3 theme framework file upload widget broken, unable to load cross-domain script (https/http)
attempt to fix some cross-domain loading issues behind proxies
fix UPS shipping calculator issues (now allows either a HTTP 1.1 or 2 response)
regression fix some bs/bs3 ajax actions might crash if they attempt to compile an scss instead of less file
fix crash bs3 forms showall view
regression fix bs5 rss/ical pull module configuration tab broken
regression fix blog item date display and tweet ref
regression fix bs4 calendarcontrol wouldn't update input
regression fix form design change control type isn't saved
regression fix form design control ranks mangled during design session
regression fix facebook/twitter buttons not rebuilt on ajax page load for blog/news
fix page reordering anomaly

v271patch2 updates these 3rd party libraries in v271 and previous patches:

mediaelement to v6.0.3
mediaelement plugins to v2.6.6
jquery to v3.7.0
jquery-migrate to v3.4.1
jquery-confirm v3.3.4
reCaptcha lib v1.3.0 (php 8+)
tempus-dominux to v6.7.7
ckeditor to v4.21.0
datatables to v1.13.4
codemirror cdn to v5.65.13
ace editor cdn to v1.22.0
font-awesome to v6.4.0
bootstrap-icons to v1.10.5
smarty to v4.3.1

Patch #1 Released for V3.0.1 (aka v3.0.0rc1)

dleffler@hughes.net (David Leffler) — Wed, 08 Mar 2023 01:30:00 -0500

This patch adds some features to v3.0.0rc1 and converts it to v3.0.1, it also fixes a number of anomalies. It updates many 3rd party libraries.

All Exponent CMS users running at least PHP version 7.4 are encouraged to consider moving their installations to v3.0.1 and to install this patch!! Patch #1 to v3.0.1 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.7.1-patch-1.zip/download

v301patch1 adds these features to v300rc1:

Converts from v3.0.0rc1 to v3.0.1
better metainfo for forms and their records
add blog dates calendar view
greatly speed up authors and categories views (~3x)
don't offer to import/export ecommerce data if ECOM is not active
allow/advertise xmlrpc editing page break to OpenLiveWriter(WP more)
moved EAAS data processing to individual modules, allows custom module integration
add form/global level unrestrict view to existing module level setting
add feature to add dates to an existing event while editing an existing event

v301patch1 fixes these issues in v300rc1:

fix xmlrpc issues w/ php v8 (errors/warnings crash output parsing)
regression fix page redirect code logic
regression fix (v220) unable to save activate module changes
fix event/show/id/x to pull the 'next' event date instead of the 1st event date
several php v8 fixes to eaas module
fix scssphp ALWAYS setting timezone to UTC which created upcoming events issue
regression fix (v300rc1) mpdf7/mpdf8/mpdf81 crash on PHP < 7>
fix possible error in forms portfolio view, add 'item' div to forms/show view
regression fix default events search results limit not enforced

v301patch1 updates these 3rd party libraries in v300rc1:

mediaelement.js to v6.0.1
codemirror cdn to v5.65.12
ace editor cdn to v1.15.3
jstree to v3.3.15
phpxmlrpc to v4.10.1
ckeditor to v4.20.2
datatables to v1.13.3
easypost to v6.3.0
simplepie to v1.8.0

Patch #1 Released for V2.7.1

dleffler@hughes.net (David Leffler) — Wed, 08 Mar 2023 01:15:00 -0500

This patch adds some features to v2.7.1 and fixes a number of anomalies. It updates many 3rd party libraries.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.7.1 and to install this patch!! Patch #1 to v2.7.1 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.7.1-patch-1.zip/download

v271patch1 adds these features to v271:

better metainfo for forms and their records
add blog dates calendar view
greatly speed up authors and categories views (~3x)
don't offer to import/export ecommerce data if ECOM is not active
allow/advertise xmlrpc editing page break to OpenLiveWriter(WP more)
moved EAAS data processing to individual modules, allows custom module integration
add form/global level unrestrict view to existing module level setting
add feature to add dates to an existing event while editing an existing event

v271patch1 fixes these issues in v271:

fix xmlrpc issues w/ php v8 (errors/warnings crash output parsing)
regression fix page redirect code logic
regression fix (v220) unable to save activate module changes
fix event/show/id/x to pull the 'next' event date instead of the 1st event date
several php v8 fixes to eaas module
fix scssphp ALWAYS setting timezone to UTC which created upcoming events issue
regression fix (v271) mpdf7/mpdf8/mpdf81 crash on PHP < 7>
fix possible error in forms portfolio view, add 'item' div to forms/show view
regression fix default events search results limit not enforced

v271patch1 updates these 3rd party libraries in v271:

mediaelement.js to v6.0.1
codemirror cdn to v5.65.12
ace editor cdn to v1.15.3
jstree to v3.3.15
phpxmlrpc to v4.10.1
ckeditor to v4.20.2
datatables to v1.13.3

Version 3.0.0 Release Candidate #1 Released - internally becomes version 3.0.1

dleffler@hughes.net (David Leffler) — Mon, 13 Feb 2023 19:15:00 -0500

(Updated 3/4/23) Though initially released as v3.0.0rc1, the version was changed internally to v3.0.1 so the two versions (v2.7.x & v3.0.x) would mimic each other in minor version. This better identifies similarity in features between both branches. This will become apparent with the imminent release of a patch #1 to both v2.7.1 and (now) v3.0.1. There have been no issues noted with the v3 initial release.

Version 3.0.0rc1 or 'Obsolete Orangutans' is now available! We/ve removed support for obsolete PHP versions prior to v7.4. This version is functionally equivalent to v2.7.1! We strongly encourage all Exponent installations be upgraded to v2.7.1 as soon as practical! Once you upgrade and test your site against v2.7.1, you can then upgrade to this version.

The v3.0.0rc1 download is found here.

Version 2.7.1 Released

dleffler@hughes.net (David Leffler) — Mon, 13 Feb 2023 17:45:00 -0500

Version 2.7.1 or 'Bully Balloons' is now available! We/ve added support for PHP v8.1 and v8.2. We also fixed quite a number of issues with those PHP versions and Twitter Bootstrap v5 support. There are also many other things have been tweaked or fixed. If your server PHP version supports it (v5.6.0 or later), we strongly encourage all Exponent installations be upgraded to v2.7.1 as soon as practical!

Patch #2 Released for V2.7.0

dleffler@hughes.net (David Leffler) — Sat, 24 Dec 2022 02:30:00 -0500

This patch fixes several anomalies with v2.7.0 and Patch #1, and adds a few new features such as file manager trash and TinyMCE v5 editor. It updates many 3rd party libraries. It also provides initial support for the recently released PHP v8.2.0.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.7.0 and to install this patch!! Patch #2 to v2.7.0 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.7.0-patch-2.zip/download

v270patch2 adds these features to v270 and previous patches:

adds better support for php 8.2 deprecations
activate file manager trash feature
allow file manager theme selection from file manager preferences
add tinymce v5 editor (functional with new tinymce v4/v5 file manager implementation)
add optional selection of store home page, or page after adding item to cart
update non-bs datatables views to use standard styling instead of jqueryui
add object type name to db manager unserialized info
update control types for better styling, includes upgrade script
add/fix maintenance view countdown clock (never worked), use proper theme framework view
add asc/desc to sort forms records after grouping
add forms portfolio view user dropdown filter option
add option to export all form columns in CSV instead of only those selected for display
add smtp option to only use from smtp username for very strict smtp servers

v270patch2 fixes these issues in v270 and previous patches:

regression fix (v270p1) calendar month selector popup
fix tinymce5 support in bs4/5 broken & had no file manager support
fix multiple issues with tinymce/tinymce5 custom configurations
fix editing existing blog, filedownload, or news item (view) may crash on php v8
clean form control styling and processing, esp. bs5
update expUnserialize function to include 'message' in countdownController
fix multiple errors in countdownController default view and with newer smarty/php versions
fix file manger root files and folders were locked for super-admins and coundn't be removed
remove links from Workflow Revisions list to prevent issues
(v270) regression fix Forms search cumulating records issue
fix bootstrap.js v5 cdn wrong version
fix extraneous datatables styles were being loaded
fix turning off antispam causes views with antipam to crash (reset password, etc...)
fix stepy form wizard to not require 'title' attribute for form pages
fix bs5 accordion view in photo & filedownload has group title missing
fix bs5 news configure module view broken
fix bs5 pagination ribbon broken
fix bs5 manage orders datetimepicker icons

v270patch2 updates these 3rd party libraries in v270 and previous patches:

tinymce5 to v5.10.9
ckeditor to v4.20.1
bootstrap-icons to v1.10.2
font-awesome to v6.2.1
tempus-dominus to v6.2.10
phpxmlrpc to v4.9.3
datatables.js to v1.13.1
jquery.datetimepicker to v2.5.21
jquery.countdown to v1.1
less.php minor updates, no version change
bootstrap/bootswatch to v5.2.3
ace editor cdn to v1.14.0
codemirror cdn to v5.65.11
phpthumb to v1.7.19
smarty to v4.3.0
bootbox to v6.0.0
jquery to v3.6.3

Patch #1 Released for V2.7.0

dleffler@hughes.net (David Leffler) — Wed, 02 Nov 2022 14:00:00 -0500

This patch adds some missing files from v2.7.0 and fixes a number of anomalies. It updates many 3rd party libraries.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.7.0 and to install this patch!! Patch #1 to v2.7.0 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.7.0-patch-1.zip/download

v270patch1 adds these features to v270:

updated datetimepicker widget to newer tempus-dominus for bootstrap 3/4/5

v270patch1 fixes these issues in v270:

removed several php v8.1 warnings
fix recyclebin to only display items within orphan module instead of all aggregated content
fix issues where hard-coded modules would be marked as being in the recycle bin after running a repair
regression fix some bs5 hidden elements were being shown (sr-only deprecation)
regression fix (270) failed to include smarty lexer files
update/fix select2 bootstrap themes for bs 4 & 5 (edit pages & manage orders)
regression fix current file manager theme setting not displayed in site configuration
regression fix unable to turn off several site configuration display options (ajax paging, old browser support, bootstrap icons)

v270patch1 updates these 3rd party libraries in v270:

bootstrap-duallistbox to v3.0.9/4.0.2
jquery to v3.6.1
jquery-migrate to v3.4.0
jquery-ui to 1.13.2
font-awesome to v6.2.0
class.upload.php to v2.1.3
scssphp to v1.11.0
mediaelement.js to v5.1.0
ace editor cdn to v1.12.5
codemirror cdn to v5.65.9
ckeditor to v4.20.0
bootstrap-datetimepicker to tempusdominus for bs3/bs4/bs5 - v4.17.49, v5.39.0, v6.2.6
getID3 to v1.9.22
phpThumb to v1.7.18
simplepie to v1.7.0
smarty to v4.2.1
bootstrap/bootswatch to v5.2.2

Version 2.7.0 Released

dleffler@hughes.net (David Leffler) — Wed, 17 Aug 2022 16:45:00 -0500

Version 2.7.0 or 'Belated Benefits' is finally available! We/ve added support for PHP v8.0 and initial support for PHP v8.1 and Twitter Bootstrap v5 (now integrated). We also fixed quite a number of issues with MySQL v8.0, especially v8.0.19+, and many other things have been tweaked or fixed. If your server PHP version supports it (v5.6.0 or later), we strongly encourage all Exponent installations be upgraded to v2.7.0 as soon as practical!

New Icons for New Theme Framework!

dleffler@hughes.net (David Leffler) — Sat, 12 Feb 2022 21:14:07 -0500

Along with the integration of Twitter Bootstrap v5 as a theme framework, we've updated the standard icon set to Font Awesome v6 over Font Awesome v5. We also offer the option of using Twitter Bootstrap Icons which provide a cleaner, thinner icon set.

We provide a sample theme for Twitter Bootstrap v5 as a separate addon to ExponentCMS v2.6.0patch3. You can find this in the Downloads area of this site, in the Themes area. Bootstrap v5 will be included with the next full version release of ExponentCMS.

Patch #3 Released for V2.6.0

dleffler@hughes.net (David Leffler) — Sat, 12 Feb 2022 21:00:00 -0500

This patch fixes an anomaly which prevents saving new or updated items to the MySQL database. In addition to several other fixes and tweaks, it updates many 3rd party libraries.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.6.0 and to install this patch!! Patch #3 to v2.6.0 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.6.0-patch-3.zip/download

v260patch3 adds these features to v260 and previous patches:

adds Font Awesome v6 support for Twitter Bootstrap v5 (requires BS5 addon)
adds bs4 specific responsive maintenance view
adds new store category option to display description instead of subcategories

v260patch3 fixes these issues in v260 and previous patches:

fixes some bs5 support for non-CDN
regression fix (v260) created_at date not set for new blog, filedownload, or news items
regression fix (v251patch2) scssphp server doesn't include called .scss file into cached info
regression fix (v260p2) mysqli `rank` keyword fix obscures order by `rank` configuration
fix to update order addresses when they change
regression fix (v243) font-awesome v5 file names were changed
regression fix (v260p2) unable to save new/updated objects
regression fix configure store category doesn't display saved 'show products' setting

v260patch3 updates these 3rd party libraries in v260 and previous patches:

scssphp to v1.10.0
smarty to v4.0.4
datatables to v1.11.4
lexer to v1.2.2
ckeditor to v4.17.2
tinymce to v5.10.3
mediaelement.js to v5.0.5

Patch #2 Released for V2.6.0

Anonymous User — Fri, 31 Dec 2021 21:45:00 -0500

This patch fixes support for PHP v8.0 and provides initial support for PHP v8.1. It compensates for MySQL v8 which uses a new '`rank`' keyword and prevents some database interaction on tables using the '`rank`' field. In addition to many other fixes and tweaks, it updates many 3rd party libraries.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.6.0 and to install this patch!! Patch #2 to v2.6.0 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.6.0-patch-2.zip/download

v260patch2 adds these features to v260 and previous patches:

updates support for Twitter Bootstrap v5.0 final (requires BS5 addon)
add Bootstrap Icons option for Bootstrap5 framework (requires BS5 addon)
add responsive bootstrap framework maintenance view
allow custom (theme) administration views (_maintenance, _msg_queue, etc...)
allow custom (theme) billing and shipping calculators (ecommerce)
change db definition processing to prioritize custom (theme) definitions
allow for optional loading of jquery migrate v3 (default is to load)
add json data preview to adminer db manager
add bootstrap styles to ckeditor in sample bootstrap themes
add location based upcharges to flatrate, peritem, perweight, & tablebased shipping calculators
activate parser caching in less & scss stylesheet compilers
initial support for php v8.1
update ecommerce dashboard to add 'last month' as new default period
add optional support for Kint v4.0 enhance debugger output

v260patch2 fixes these issues in v260 and previous patches:

regression fix shipping option price list mislisted prices over $1,000
regression fix bootstrap message queue views (allows responsive maintenance views)
regression fix some passwords too long to store in db table
regression fix several Bootstrap 5 issues (requires BS5 addon)
regression fix forms not saving/viewing selected report columns
fix possible sql injection vulnerability reported by pang0lin
regression fix edit discounts date zeroization
autoprefixer support was not fully implemented/coded
regression fix radiogroups to select the first radio (0 value) when set
regression fix attempting to edit/configure category within product edit fails
fix possible Host Header Injection vulnerability reported by dumpling-soup CVE-2021-38751
fix mysqli driver to work with MySQL v8 '`rank`' keyword
regression fix file upload control and edit form image display issues

v260patch2 updates these 3rd party libraries in v260 and previous patches:

jQuery to v3.6.0
jquery-migrate to v3.3.2
fontawesome to v5.15.4
Swiftmailer to v6.3.0
Emailvalidator to v3.1.2
elfinder to v2.1.60
tinymce5 to v5.10.2
ckeditor to v4.17.1
plupload to v2.3.9
EasyPost v4.0.2
adminer db manager to v4.8.1
code snippet codemirror editor cdn to v5.65.0
code snippet ace editor cdn to v1.4.13
scssphp to v1.9.0
sortable.js to v1.14.0
jquery datatables to v1.11.3
jquery datatables.checkboxes.js to v 1.2.13
jstree to v3.3.12
getid3 to v1.9.21
jqueryui to v1.13.0
mediaelement to v5.0.4 & mediaelement-plugins to v2.6.2
smarty to v4.0.0
class.upload.php to v2.1.0
bootstrap/bootswatch to v4.6.1
simplepie to v1.5.8
php xmlrpc to v4.6.0

Upcoming Patch #2 for V2.6.0

Anonymous User — Sat, 02 Oct 2021 13:45:00 -0500

A final patch for Exponent CMS v2.6.0 is being prepared for release before the end of 2021. This patch fixes support for MySQL v8.0.x for the new '`rank`' keyword which may have prevented content from displaying and increases PHP v8 compatibility, in addition to many other fixes and tweaks, and some security fixes. It also allows running (instead of crashing) under PHP v8.1 though full support will not be final. It also updates several 3rd party libraries.

A version 2.6.1 release is also being planned for early 2022 which will integrate the Bootstrap v5 and Bootstrap Icons support and the sample theme. It will also provide greater support for PHP v8.1. This release may be changed into version 2.7.0 and completely remove PHP v5.x, v7.0, v7.1 & v7.2 support since more 3rd party libraries will NOT operate under those obsolete PHP versions.

Patch #1 Released for V2.6.0

Anonymous User — Tue, 23 Feb 2021 19:15:00 -0500

This patch fixes support for MySQL v5.7.x 'strict' mode which may have prevented new customers from logging in to checkout and increases PHP v8 compatibility, in addition to many other fixes and tweaks. It updates several 3rd party libraries.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.6.0 and to install this patch!! Patch #1 to v2.6.0 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.6.0-patch-1.zip/download

v260patch1 adds these features to v260:

add help doc grandchildren display
add Access Point Economy and Sure Post methods to available UPS shipping, also allow Negotiated Shipping

v260patch1 fixes these issues in v260:

regression fix sqlsvr/odbc warning
php 8 regression mass mailing group listing
regression fix (v251p2) adding/editing help doc deletes all search index items except new one
regression fix paginator not formatting output of dates (order report, etc...)
regression fix display shipping options if only one option
fix fedex shipping calculator fails to return option if only one available
regression fix manager users large db edit user link broken
regression fix print buttons didn't display
regression fix (v251p3) - mysqli db insertObject broke when first 'true' value hit - e.g. unable to login to store

v260patch1 updates these 3rd party libraries in v260:

adminer to v4.8.0 for php 8 fix
swiftmailer to v6.2.5
EmailValidator to v3.0.0
phpxmlrpc to v4.5.2
scssphp to v1.4.1
jstree to v3.3.11
FedEx WSDL to v28.0.0
bootstrap/bootswatch to v4.6.0
font-awesome to v5.15.2
smarty to v3.1.39
codemirror cdn to v5.59.3
jquery validate to v1.19.3
sortable.js to v1.13.0
ckeditor to v4.16.0
phpThumb t v1.7.16

Version 2.6.0 Released

dleffler@hughes.net (David Leffler) — Fri, 18 Dec 2020 17:45:00 -0500

Version 2.6.0 or 'Quarantined Quandary' is now under the tree in time for Christmas! We added support for PHP v7.4 and initial support for PHP v8.0 and Twitter Bootstrap v5 (optional download required). We also fixed quite a number of issues since the last patch especially with MySQL v5.7 'strict' mode., and some other things have been tweaked. We've also added an optional simplified permissions system and optional support for CDN links to our major libraries. If your server PHP version supports it (v5.6.0 or later), we strongly encourage all Exponent installations be upgraded to v2.6.0 as soon as practical!

Merry Christmas 2020 from Exponent CMS!

dleffler@hughes.net (David Leffler) — Sun, 06 Dec 2020 02:00:00 -0500

Though 2020 has left most of us longing for something better, the majority of us have made it through the year. To celebrate, we'll be releasing a new version of Exponent CMS shortly.. Version 2.6.0 will add support for PHP v7.4 and MySql 'strict' mode. It will also add initial support for PHP v8.0 and Twitter Bootstrap v5. Additionally it adds a new optional Simplified Permissions system to help speed up large (eCommerce) sites by reducing every user to either an Admin or a User...you either have permissions or you don't! We've also added optional support for loading most of our main libraries (jQuery, Bootstrap, YUI, and Font-Awesome) by CDN link to help speed up some sites. Several of those features had crept out in patches to v2.5.1, but have been robusted quite a bit since the last patch was released back in the spring. While PHP v8 support has been tested, there may still be some unidentified quirks, but it will allow your site to run under PHP v8 which Exponent v2.5.1 will not allow. Additionally, the Twitter Bootstrap v5 support requires an additional, optional package which will include a sample theme. This will initially be an 'beta' level release since Bootstrap v5 is still beta and there may be some breaking changes before it reaches 'stable' in the next months.

Bootstrap 5 Integration Coming...

dleffler@hughes.net (David Leffler) — Fri, 19 Jun 2020 19:45:00 -0500

Now that Twitter Bootstrap v5.0.0 alpha 1 has been released we have begun integrating support into Exponent CMS. The next release (v2.6.0) will include optional support for the new framework. Though it will initially be shipped as an optional addon, the basic support will be included in the main package. Just as with the initial integration of Bootstrap 4 there will be a separate 'beta' package to add the additional files including a sample theme. Please bear in mind that until Bootstrap 5 reaches a release stage there may be breaking changes with their implementation.

Patch #3 Released for V2.5.1

dleffler@hughes.net (David Leffler) — Wed, 20 May 2020 15:45:00 -0500

While a patch, this is another large one (8 MBytes) and adds some new features such as dismissable News Announcements with persistence in the session. This patch fixes support for MySQL v5.7.x 'strict' mode, in addition to many other fixes and tweaks. It updates several 3rd party libraries.

All Exponent CMS users running at least PHP version 5.6 are encouraged to move their installations to v2.5.1 and to install this patch!! Patch #3 to v2.5.1 is found at https://sourceforge.net/projects/exponentcms/files/exponent-2.5.1-patch-3.zip/download

v251patch3 adds these features to v251 and previous patches:

adds persistence (within session) to dismissed news alert items
add facebook og:site_name & og:locale meta tags to pages
add module configuration border styles for left/right/left-right border (however styles must style be defined like in sample themes)

v251patch3 fixes these issues in v251 and previous patches:

regression fix (v2.5.1p2) file download rss feed fails
fix bootstrap 4 sample theme to properly move side column to left
fix sorting by column for some store reports
fix bs4 module configuration visibility styles options not displayed
regression fix (v2.5.1p1) changes in jstree page hierarchy change page alias type to null
regression fix broken less/scss source maps

v251patch3 updates these 3rd party libraries in v251 and previous patches:

jquery to v3.5.1
jquery-migrate to v3.3.0
easypost library to v3.4.5
bootstrap/bootswatch to v4.5.0
scssphp to v1.1.0 (not actually updated in last patch)