Installation or Update

Installation or update can be done using the ZIP files linked on wbce.org in the installation guide or the update guide, by uploading the ZIP file together with the corresponding unzip script (rename the latter back to *.php after upload).

What’s new?

CAPTCHA for login screen
The CMS login is now protected with a CAPTCHA (using the one configured under Admin-Tools > CAPTCHA and Advanced Spam Protection). This strengthens protection against brute-force attacks.

• If the Loginbox Droplet is used, it must be updated manually. The updated version can be downloaded in the AOR.   

• The Fraggy Backend Theme also needs updating. If it doesn’t update automatically, the new download is available on GitHub.

It’s possible to disable this extra protection, for example if your instance is already secured by other means or if entering a CAPTCHA would be unreasonable for users. In this case, add the following new entry in config.php:   

define('NO_LOGIN_CAPTCHA', true);  

The CAPTCHA protection is also inactive if the session cookie usage has been disabled in config.php. See the documentation notes for details.

Changes in user-to-group assignment

Under certain conditions—and with sufficient malicious intent—it was previously possible for existing users to add themselves unlawfully to the system group “Administrators” and/or send manipulated requests to the server. This should now (hopefully) no longer be possible. 

To implement this protection mechanism, it was necessary to restrict permissions:
If users have permission to create/edit user accounts but are not members of the “Administrators” group, they can now only assign other users (and thus implicitly themselves) to groups they already belong to. 

For example, if “Alfred” is a member of the “Red” group but not “Blue”, he can only assign “Berta” to “Red”; “Blue” won’t be displayed as an option.

Minimum password length

The minimum password length has been increased to 12 characters.

Updates to included modules and libraries

• News with Images updated to version 5.0.29 – this fixes a potential security issue when using tags.

• wbstats updated to version 0.2.5.8 – fixes an error occurring when certain characters appeared in host names.

• jQuery updated to version 3.7.1.

• PHPMailer updated to version 7.0.1.

System requirements

Supported versions: PHP 8.1.x – PHP 8.4.x
PHP 7.4.x is no longer supported, and PHP 8.5.x is not yet supported.

Although updates can be bothersome, upgrading is strongly recommended.
Anyone still running version 1.5.x or older should first read the release notes for 1.6.0.

Many thanks to everyone who contributed ideas and work to this version.

Installation or update

The installation/update can be done using the zip files linked on wbce.org in the installation or update instructions (german, but Google Translate is your friend :-P)  and calling the corresponding unzip script (upload the latter together with the zip and rename it back to *.php).

What's new?

• Most important: Supported PHP versions start with PHP 8.1, lower PHP versions are no longer supported and WBCE CMS 1.6.4. won't run with them. But! WBCE CMS now works with PHP 8.4.

• This release is a maintenance and security release in which some bugs have been fixed, the included third-party scripts and libraries have been updated (PHPMailer, Twig) and minor security holes have been eliminated here and there.

It is recommended to perform an update. If you haven't done so for a while and are still using 1.5.x or older, you should read the release notes for 1.6.0 first.

Many thanks to everyone who contributed ideas and contributions to this version.

Installation or update

The installation/update can be done using the zip files linked on wbce.org in the installation or update instructions (german, but Google Translate is your friend :-P)  and calling the corresponding unzip script (upload the latter together with the zip and rename it back to *.php).

What's new?

• This release is a maintenance release in which some bugs have been fixed, the included third-party scripts and libraries have been updated (PHPMailer, Twig) and minor security holes have been eliminated here and there.

• The way languages are installed has changed for reasons™. If necessary (which is rarely the case), the language file must be uploaded via FTP and then made known to the system using the "Reload" button.

• NWI and the Addon Monitor have undergone detailed improvements. Inconsistencies when updating templates and modules have also been eliminated (thanks to gchriz).

• The SimplePageHead module has been adapted; it now first outputs the page title and then the website title. In order not to torpedo SEO efforts, it is not included in the update package below, but can/must be updated manually - download in the AOR.

The version is released for PHP 7.4.14 - PHP 8.3.x. PHP versions above or below this are no longer/not yet supported. It is recommended to use at least PHP 8.0.

It is recommended to perform an update. If you haven't done so for a while and are still using 1.5.x or older, you should read the release notes for 1.6.0 first.

Many thanks to everyone who contributed ideas and contributions to this version.

What's new?

• This release is "only" a maintenance release in which some bugs have been fixed and included third-party scripts and libraries have been updated.

• The version is released for PHP 7.4.14 - PHP 8.2.x. PHP versions above or below are no longer/not yet supported. It is recommended to use at least PHP 8.0 - this is the last version that still runs PHP 7.4.x.

• If you already have WBCE CMS 1.6.1 running, you don't necessarily need to update now, but everyone else should probably bring themselves to update now. See also the release notes for 1.6.0.

Many thanks to everyone who contributed to this version with ideas and contributions.

P.S.: Donations are welcome and will definitely contribute to the continued existence of the project and the motivation of everyone involved. At this point, a very, very big thank you to everyone who paid into the donation pot.

installation or update

The installation/update can be carried out as usual, i.e. either "classically" by individually uploading the files from the "wbce" directory in the package or using the zip files linked on wbce.org in the installation or update instructions (german, but Google Translate is your friend :-P) and calling the corresponding unzip script ( upload the latter together with the zip and rename it back to *.php).

What's new?

• Unfortunately, there is a security issue with the customized variant of Miniform included in the WBCE core. This release (logically) includes a patched version. An update, at least of the Miniform module, is therefore absolutely necessary and must be carried out as soon as possible.

• The CKEditor has been updated, also for security reasons (yes, the world is bad). Another reason to update.

• Although the last release was admittedly not that long ago, there was a need for various smaller bug fixes, e.g. in the "News with Images" module.

Many thanks to "young pope" for reporting the issues, Ruud (dev4me.com) for providing a fix at record speed, and colinax for updating CKEditor.

P.S.: Donations are welcome and definitely contribute to the continuation of the project and the motivation of everyone involved.

installation or update

The installation/update can be carried out as usual, i.e. either "classically" by individually uploading the files from the "wbce" directory in the package or using the zip files linked on wbce.org in the installation or update instructions (german, but Google Translate is your friend :-P) and calling the corresponding unzip script ( upload the latter together with the zip and rename it back to *.php).

As usual, it can be updated directly from all previous versions to 1.6.1 without intermediate steps.

When updating from versions prior to 1.5.0, please also note the information in the release notes for version 1.5.0 (but this does not mean that you have to update to 1.5.0 first and then to 1.6.1).

Was ist neu in 1.5.4?

Dies ist ein Wartungs- und Sicherheitsrelease.
Mit Version 1.5.4 wird die Kompatibilität zu PHP 8.1 verbessert und es werden Fehler behoben, die sich mit Version 1.5.3 eingeschlichen hatten. Weiterhin wird die Sicherheit des Brute-Force-Schutzes verbessert und die Möglichkeit eingeführt, die Einstellungen des Moduls News with Images auf vertrauenswürdige Nutzer:innen zu begrenzen.
Ein Update wird empfohlen.

Die Minimalanforderung ist wie schon bei Version 1.5.3 PHP 7.4.. Bitte VOR dem Updaten prüfen, ob mindestens diese PHP-Version aktiv ist oder eingestellt werden kann!

• Neuinstallation ausführlich erklärt

• Updaten ganz einfach erklärt**

**Zur Vorgehensweise beim Update von Versionen VOR 1.5.x bitte zusätzlich die Releasenotes zu 1.5.0 beachten.

Systemvoraussetzungen: WBCE CMS 1.5.4 ist freigegeben für PHP 7.4.14 bis PHP 8.1.x. Darunter oder darüber liegende PHP-Versionen werden nicht unterstützt.

Zu beachten: Sofern in Verwendung, muss das Modul "Colorbox Snippet" aktualisiert werden (oder deinstalliert und durch den Colorbox-Outputfilter ersetzt) werden. Ist noch das "alte" Cookie-Consent-Snippet (im Ggs. zum Cooki-Consent-Admintools) installiert, so muss dieses deinstalliert und durch das Cookie-Consent-Admintool (oder jegliche bessere zeitgemäße Lösung) ersetzt werden.

Es können wie üblich alle vorherigen Versionen direkt ohne Zwischenschritte auf 1.5.4 aktualisiert werden.
Bei Problemen helfen wir gern weiter.

--
EN

WBCE 1.5.4 is now available as installation/update package on GitHub.

What's new in 1.5.4?

This is a maintenance and security release.
Version 1.5.4 improves compatibility with PHP 8.1 and fixes bugs introduced in version 1.5.3. Furthermore, the security of brute force protection will be improved and the possibility to limit the settings of the News with Images module to trusted users will be introduced.
An update is recommended.

For more information about updating see the release notes to 1.5.0 (updating from 1.x.x to 1.5.4) and 1.5.1 (updating from 1.5.x to 1.5.3).

System requirements: Supported PHP versions 7.4.14 to 8.1.x. Lower or higher PHP versions are not supported.
If you have any problems when updating, feel free to ask for help.

Note: If in use, the "Colorbox Snippet" module must be updated (or uninstalled and replaced with the Colorbox output filter). If the "old" cookie content snippet (in comparison to the cookie content admin tool) is still installed, it must be uninstalled and replaced with the cookie content admin tool (or any better contemporary solution).

Version 1.5.4 greift Probleme bei der Generierung des Captchas und des Brute-Force-Attackenschutzes auf, führt die neue Option ein, die NWI-Einstellungen nur noch Admins zugänglich zu machen, eliminiert störende und überflüssige Zufallsgeneratoreninitialisierungen und beseitigt verschiedene Probleme mit dem Zugriffsstatistikmodul.

Damit ich nicht in zwei Monaten mit dem nächsten Update nerven muss, wäre es schnucklig, wenn sich ein paar Tester*innen fürs Update finden würden und ihre Erfahrungen mit mir bzw. der Community teilen täten. Den (aus meiner Sicht, aber das hat ja nur bedingt was zu sagen) durchaus brauchbaren Bearbeitungsstand der 1.5.4 als Installer und Update hänge ich hier mal an.

Ergänzung: wbce_unzip.txt und wbce_update_unzip.txt angefügt. Bitte jeweils in *.php umbenennen und zusammen mit dem zugehörigen Zip (Neuinstallation = wbce.zip, Update = wbceup.zip) ins Wurzelverzeichnis des Webspaces bzw. der zu aktualisierenden WBCE-Instanz kopieren (siehe auch: 1, 2).

Systemvoraussetzungen PHP 7.4 - PHP 8.1. Update ohne Zwischenschritte von jeder beliebigen WBCE-Vorversion möglich (sollte jedenfalls so sein...).

Abhilfe: in besagter Datei die Zeile 40

mt_srand((int)microtime() * 1000000);

löschen.

Oder per FTP die korrigierte Version hochladen:
Download patch_captcha.zip
Kein Modulinstaller - bitte lokal entpacken und Datei per FTP ins besagte Verzeichnis kopieren

--

Due to a unnecessary line of code in /include/captcha/captchas/calc_text.php the captcha "calculation as text" is not properly initialized (it generates every time the same task).

Fix: Delete in the calc_text.php line 40:

mt_srand((int)microtime() * 1000000);

Or upload the fixed version via FTP:
Download patch_captcha.zip
Not an installation zip - please unzip local and upload the file into the corresponding directory on your server.

Was ist neu in 1.5.2?

Dies ist ein Sicherheits-/Wartungsrelease.
Alle Versionen bis einschließlich 1.5.1 sollten unbedingt und so schnell wie möglich auf Version 1.5.2 aktualisiert werden.

Zur Vorgehensweise bei der Installation / beim Update siehe die Releasenotes zu 1.5.0 (für 1.x.x => 1.5.2) bzw. 1.5.1 (für 1.5.x => 1.5.2).

Systemvoraussetzungen: WBCE CMS 1.5.2 ist freigegeben für PHP 7.2.5 bis PHP 8.0.x. Darunter oder darüber liegende PHP-Versionen werden nicht unterstützt, d.h. WBCE CMS ist nicht kompatibel mit PHP 8.1.x !

Es können wie üblich alle vorherigen Versionen direkt ohne Zwischenschritte auf 1.5.2 aktualisiert werden.
Bei Problemen helfen wir gern weiter. Bitte das Update nicht aufschieben!

--
EN

WBCE 1.5.2 is now available as installation/update package on GitHub.

What's new in 1.5.2?

This is an maintenance / security release.
All prior versions, including 1.5.1, should be updated to 1.5.2 as soon as possible.

For more information about updating see the release notes to 1.5.0 (updating from 1.x.x to 1.5.2) and 1.5.1 (updating from 1.5.x to 1.5.2).

System requirements: Supported PHP versions 7.2.5 to 8.0.x. WBCE CMS will not work with PHP 8.1.x!

If you have any problems when updating, feel free to ask for help. Please do not postpone the update!

What's new in 1.5.1?

Unlike the prior release, the 1.5.1 release is a maintenance/bugfix release with only small changes:

• Several php 8 fixes and module updates

• elFinder, phpMailer and CKEditor updated to current versions

• Material Theme for elFinder as default (special thanks to mastermind)

• show_breadcrumbs in SM2 works again

• Removed doctrine

• Several bugfixes for the OPF-Dashboard (special thanks to altasfreak)

• Several optimizations for News with Images (special thanks to losttrip)

If you are already using 1.5.0, you don't need to pay attention to anything other than the usual information (see below) during the update.
But when updating from versions <1.5.0, attention is required, please refer to the release notes of that version.

Compatibility / system requirements

WBCE CMS 1.5.1 is compatible to PHP 7.2.5 to PHP 8.0.x. PHP versions below or above are not supported.

New installations

• Download the installation package and proceed as described here

• Sign up and get started

Updates from prior Versions of WBCE CMS

• Create a data backup (e.g. with the backup tool or manual backup of the server files) - IMPORTANT

• Create a database backup (dump / export, e.g. with the backup tool or PhpMyAdmin etc.) - IMPORTANT

• Download the installation package and unzip it locally

• Proceed as described here. Note: if the / admin directory on the server was renamed, adjust the renaming accordingly in the installation package before uploading!

• Please note that all existing core files will be overwritten during the update. So if adjustments have been made to the standard templates WBCEZon / WBCETik, it is essential to remove these from the installation package before uploading, otherwise the adjusted versions on the server will be overwritten.

• Point your browser to the update script, read and confirm the note and click on

• If necessary, restore overwritten adjustments to modules (-> frontend.js / css) and templates by copying back the files that were previously saved locally

• Log in to the backend

• If necessary, uninstall modules and templates that are not required via Add-Ons > Modules or Add-Ons > Templates

• Install the Admintool Module Update Check (if not already done) and check the versions of all modules used and update them if necessary

With the update script, all previous versions of WBCE (and possibly older WB versions up to 2.8.3 SPxx) can be updated to WBCE CMS 1.5.1 without any intermediate steps.

Many thanks to everyone involved in this release.

What's new in 1.5.0?

As you can see from the version number, this time the release contains major changes. These were necessary to ensure compatibility with the current PHP versions 7.4 / 8.0. Furthermore, security-relevant optimizations were made and a large number of libraries and modules were updated. An update is strongly recommended.

Important: After updating the WBCE CMS core, various modules[1] MUST also be updated! The module update check admin tool is very helpful for checking the need for updates. Updates for all supported modules[2] are available for download in the add-on repository.

Additional information, 21/05/24:
[1] this does not mean that every module has to be updated.
[2] if no update is available, the module can still be used nevertheless. Just in case there appear any issues, manual fixing is necessary. The changes which have to be apllied are described at the end of this post, see "Instructions for manual fixing of modules that are no longer supported".

Security-relevant changes:

• Fixed bug with Simple Template Switcher

• Updated PHPMailer to 6.4.1

Changes and Updates:

• (Feature) Session cookie designation has been adjusted so that it is recognized as a permitted / consent-free cookie

• (Feature with Breaking Change) elFinder has been integrated and replaces the old media management

• (Feature with Breaking Change) PHP 8 compatibility established (modules that still use MYSQL_ASSOC no longer work!)

• (Feature with Breaking Change) Update to Twig 3.3.0

• (BugFix) Authorization problem for subpages fixed

• (BugFix) redirect for multilingual pages improved

• (BugFix with Breaking Change) ShowMenu2 bug fixed (BC is fixed in WBCE 1.5.1)

• Various module and theme updates

• General code improvements and MySQL 8 / strict support

-

Compatibility / system requirements

WBCE CMS 1.5.0 is compatible to PHP 7.2.5 to PHP 8.0.x. PHP versions below or above are not supported.

-

Many thanks to everyone involved in this release, especially to colinax for the huge work on updating the WBCE core and to bernd for the numerous module updates. And also thanks to everyone who in the meantime has contributed to the further development of WBCE CMS with suggestions and last but not least financial support.

-

New installations

• Download the installation package and proceed as described here

• Sign up and get started

Updates from prior Versions of WBCE CMS

• Create a data backup (e.g. with the backup tool or manual backup of the server files) - IMPORTANT

• Create a database backup (dump / export, e.g. with the backup tool or PhpMyAdmin etc.) - IMPORTANT

• Download the installation package and unzip it locally

• Proceed as described here. Note: if the / admin directory on the server was renamed, adjust the renaming accordingly in the installation package before uploading!

• Please note that all existing core files will be overwritten during the update. So if adjustments have been made to the standard templates WBCEZon / WBCETik, it is essential to remove these from the installation package before uploading, otherwise the adjusted versions on the server will be overwritten.

• Point your browser to the update script, read and confirm the note and click on

• If necessary, restore overwritten adjustments to modules (-> frontend.js / css) and templates by copying back the files that were previously saved locally

• Log in to the backend

• If necessary, uninstall modules and templates that are not required via Add-Ons > Modules or Add-Ons > Templates

• Install the Admintool Module Update Check (if not already done) and check the versions of all modules used and update them if necessary

With the update script, all previous versions of WBCE (and possibly older WB versions up to 2.8.3 SPxx - please contact us for migrations from newer versions) can be updated to WBCE CMS 1.5.0 without any intermediate steps.

Module updates

IMPORTANT! After a successful update, various modules MUST be updated, otherwise they will no longer work properly. We did not do this out of malice, but because of strict PHP requirements. Current versions for most modules are available in the add-on repository. If this is not the case, the corresponding adjustments must be made manually.[3]

Additional information, 21/05/24:
[3] a module has to be fixed, if it generates incorrect output, the output is missing and/or entries in the error log are caused by that module. If everything still works as expected, you can just keep using the module!

Instructions for manual fixing of modules that are no longer supported
Most problems can be solved by a simple search and replace, so that at least the basic functionality is given again.

• Change $twig->loadTemplate to $twig->load

• Change Twig_SimpleFilter to \Twig\TwigFilter

• Change Twig_SimpleFunction to \Twig\TwigFunction

• Change Twig_Environment to \Twig\Environment

• Change Twig_Loader_Filesystem to \Twig\Loader\FilesystemLoader

• Change MYSQL_ASSOC to MYSQLI_ASSOC

Please notice, this only applies to the WBCE-CMS-specific adaptations! To work properly with PHP > = 7.4, further changes on the modules are usually necessary.

Changed options in config.php

• In order to use the template switcher, the line define ('TEMPLATE_SWITCHER', true); is now required. The template switcher is inactive by default.

• The line  define ('OLD_REDIRECT', true); can be added to restore the "old" behavior of multilingual websites, e.g. when changing the language the parameter ?lang = XY to the URL is added and used to identify the language. (See forum thread (german)).

• USE_MYSQL_STRICT is true by default, the line define ('USE_MYSQL_STRICT', true); can therefore be omitted.

On any issues about the update you will surely get support from us here in the forum.

WBCE 1.4.5 is now available as an installation / upgrade package on GitHub.

What's new in 1.4.5?

In this version, a security issue and several small bugs are fixed. This time, there will be no new features. Nevertheless it's strongly recommended to update to 1.4.5 at least for WBCE sites with multi user environments.

Security:

• Update for media management

Updates:

• News with Images 5.0.7

• CKEditor 4.15.0

• Errorlogger 1.2

• PHPMailer 6.1.7

Bug fixes:

• SM2_DEBUG-Switch working again (menu call "errors" are not longer logged by default)

• Fix for display issues in droplets overview when using the Fraggy Backend Theme

• When pages are deleted, the corresponding subdirectory is removed as well

• Thumbnail preview in media management by default (also the preview images are a bit larger)

• Allow underscore for session ID

• Unnecessary, not used directories removed from root

-

Compatibility / system requirements

• WBCE CMS 1.4.5 is released for PHP 7.1 to PHP 7.4. PHP versions below or above are not supported.

-

Many thanks to all contributors of this version, specially to colinax.

-

New installation (as usual)

1. Download Installer* and unzip it locally

2. Proceed this way

3. Log in and start working

Updating

1. Backup your files on the server - IMPORTANT

2. Create a database backup (dump / export, f. ex. using mit PhpMyAdmin or Adminer) - IMPORTANT

3. Download installation package and unzip it locally

4. Proceed this way. Please note: If you have renamed the admin directory on the server, you have to change the directory name in the upload package accordingly before copying the files onto the server
   *Please keep in mind that during the update all core files will be overwritten. So do not forget to remove the directories templates/WBCEZon or templates/WBCETik from the local installation package before uploading it, if you have applied individual changes to one of these templates on your server, otherwise these changes will be lost.

5. Call the update script. Read the advices, check the checkbox and start the update script.

6. If necessary, rollback unwanted changes on templates or modules by backcopying the corresponding single files from the local backup (->frontend.js/css)

7. Log-In to the Backend

8. If necessary, remove not used modules and templates via Add-Ons > Modules / add-Ons > Templates

The update script can be used to update all prior versions of WBCE (and possibly WB up to 2.8.3 SPxx - for migratins from newer WB versions please contact us) directly to WBCE CMS 1.4.5.

WBCE 1.4.5 RC-1  is now available as an installation / upgrade package on GitHub.

What's new in 1.4.5?

In this version, a security issue and several small bugs are fixed. This time, there will be no new features. Nevertheless it's strongly recommended to update to 1.4.5 (when the stable release is available) at least for WBCE sites with multi user environments.

Security:

• Update for media management

Updates:

• News with Images 5.0.7

• CKEditor 4.15.0

• Errorlogger 1.2

• PHPMailer 6.1.7

Bug fixes:

• SM2_DEBUG-Switch working again (menu call "errors" are not longer logged by default)

• Fix for display issues in droplets overview when using the Fraggy Backend Theme

• When pages are deleted, the corresponding subdirectory is removed as well

• Thumbnail preview in media management by default (also the preview images are a bit larger)

• Allow underscore for session ID

• Unnecessary, not used directories removed from root

-

Compatibility / system requirements

• WBCE CMS 1.4.5 is released for PHP 7.1 to PHP 7.4. PHP versions below or above are not supported.

-

Many thanks to all contributors of this version, specially to colinax.

-

New installation (as usual)

1. Download Installer* and unzip it locally

2. Proceed this way

3. Log in and start working

Updating

1. Backup your files on the server - IMPORTANT

2. Create a database backup (dump / export, f. ex. using mit PhpMyAdmin or Adminer) - IMPORTANT

3. Download installation package and unzip it locally

4. Proceed this way. Please note: If you have renamed the admin directory on the server, you have to change the directory name in the upload package accordingly before copying the files onto the server
   *Please keep in mind that during the update all core files will be overwritten. So do not forget to remove the directories templates/WBCEZon or templates/WBCETik from the local installation package before uploading it, if you have applied individual changes to one of these templates on your server, otherwise these changes will be lost.

5. Call the update script. Read the advices, check the checkbox and start the update script.

6. If necessary, rollback unwanted changes on templates or modules by backcopying the corresponding single files from the local backup (->frontend.js/css)

7. Log-In to the Backend

8. If necessary, remove not used modules and templates via Add-Ons > Modules / add-Ons > Templates

The update script can be used to update all prior versions of WBCE (and possibly WB up to 2.8.3 SPxx - for migratins from newer WB versions please contact us) directly to WBCE CMS 1.4.5 RC-1.