Recent Posts and Articles
-
Creating A Theme From A WrapBootstrap Template - Part 3
In our previous post, we completed the header and navigation containers in our Layout.cshtml. In this post, we're going to work on the main content container and the footer. I decided to break up the Layout.cshtml file into multiple blog posts because there is so much going on in this file to define the site structure that a single blog post would have been too long. The bulk of the coding in this file is going to be in the main content container that we're working on today. Let's get started.
-
Creating A Theme From A WrapBootstrap Template - Part 2
In our previous post, we setup the bulk of the file structure for our theme including scripts and styles and created the document.cshtml file that determines when and where they all get loaded. This post is going to concentrate on the layout.cshtml file which is going to create the basic HTML structure for the website. This time, we're going to copy the layout.cshtml file from the TheThemeMachine theme which is the default built-in theme that comes with Orchard. The file can be located in the Orchard.Web project under Themes/Themes/TheThemeMachine/Views. Copy the layout.cshtml file and paste it in to the Views folder of your theme.
-
Creating A Theme From A WrapBootstrap Template - Part 1
If you're a Twitter Bootstrap fan like myself, then you're already familiar with how easy it is to work with the styles and scripts included with Bootstrap. If you haven't discovered WrapBootstrap yet, you're in for a treat. WrapBootstrap is another website that sells templates, however, all of the templates on WrapBootstrap are built using Twitter Bootstrap. They also include some of the most useful tools for designing your website including things like Font Awesome and jQuery scripts for just about anything you can imagine... all optimized to work with Twitter Bootstrap.
-
Version 1.7 Previewed
.NET based CMS Orchard has reached the 4,000,000 module and theme download mark, and is now readying its next release, version 1.7, for a June 2013 launch. It's a major release, and it will debut features like drag and drop multiple image imports, image processing and integrated slideshows.
-
An Open Source CMS That Is Ready To Harvest
It may not be top of mind for most people yet, but Orchard has rapidly become a robust option for a CMS on the .NET platform. It’s free, open source and already powering online stores for major brands. Now, the Orchard project team is on the verge of launching major new media management features that will rival the best-known CMSs.
-
Weekly Podcast 04/30/2013
Meeting notes:
- A security vulnerability has been found in all versions of Orchard. See http://docs.orchardproject.net/Documentation/Patch-4-30-2013 for details.
- IRC: The #orchard channel is very active these days. It's a fun place to hang out and chat with other Orchard users. http://webchat.freenode.net/ is a web interface to IRC if you don't want to install a client.
- Bug fix week: pull requests integrated, ~20 bug fixes.
Brought to you by: http://english.orchardproject.hu
-
Security patch recommended for all versions of Orchard
Background
A non-persistent XSS vulnerability has been discovered in the Orchard.Comments module that is distributed with the core distribution of the CMS. The module could in some circumstances let an external website render custom scripts on an Orchard website. This vulnerability might ultimately be used to gather your credentials if you further authenticate on the targeted Orchard website.
All released versions of Orchard are vulnerable and need to be patched immediately.
We are releasing today (April 30, 2013) a new version 1.6.1 of Orchard 1.6 that has the patch in place. This new version is replacing the previously available download. If you are downloading Orchard 1.6.1 today, you do not need to take any additional steps. The latest 1.x development branch is already patched as well. We are also releasing patch files for each version of Orchard from 1.0 to 1.6 that can be applied to existing web sites.
Mitigation
- If you don't use the Comments module in Orchard, you can simply disable it in the Modules section of the Dashboard.
- If your theme doesn't render the Messages zone, you are also safe, even if the Comments module is activated.
Action Required
Apply the patch for your version, update to Orchard 1.6.1, or update to the latest 1.x.
Orchard 1.6.1: https://orchard.codeplex.com/releases/view/90325
For older versions of Orchard, we are releasing patch files that can be applied on top of a running instance of Orchard. The archive for each of these patches contains a Modules folder that has the right structure to be copied into the root directory of an Orchard site. If you are using a source version, you need to copy the contents of the zip file into src/Orchard.Web.
- 1.6 patch: https://orchard.codeplex.com/downloads/get/671068
- 1.5 patch: https://orchard.codeplex.com/downloads/get/671066
- 1.4 patch: https://orchard.codeplex.com/downloads/get/671070
- 1.3 patch: https://orchard.codeplex.com/downloads/get/671074
- 1.2 patch: https://orchard.codeplex.com/downloads/get/671075
- 1.1 patch: https://orchard.codeplex.com/downloads/get/671076
- 1.0 patch: https://orchard.codeplex.com/downloads/get/671077
-
Weekly Podcast 04/23/2013
Meeting notes:
- Bug fixes (home page bug, etc.)
- Quick demo of using(Capture(Layout.ZoneName)) {...} to send razor rendering to a different zone. It's a lightweight way to do the same thing as creating a shape and adding it to a zone.
- Media update: now available on 1.x branch, lots of polishing has been done, drag and drop of image in folders, responsive view of folders, delete.
- Demo by Nick on inline editing: inline editing is a setting of parts. But overall, FAIL :) Needs to be refactored around shapes, with a way to explicitly map a display shape to an editor shape.
- Zoltán has looked at integrating Glimpse as an Orchard module. Not quite working because of reliance on http modules.
- Should we remove the URL field in the comments form? Bertrand to provide new setting to implement it.
- 48 proposed before triage, 15 after. 227 active for 1.7.
Brought to you by: http://english.orchardproject.hu