? Success

User tests: Successful: Unsuccessful:

avatar nikosdion
nikosdion
28 Nov 2014

Executive summary

This PR updates the FOF version included in Joomla! to FOF 2.4.1. This is required to fix a major bug in com_postinstall (Post Installation Messages) which results in the Joomla! Control Panel displaying a SQL error complaining about invalid SQL. This is a show stopper bug affecting a small but significant number of people (they've started asking me about it directly, that's how I found out).

Technical description

When updating some sites to Joomla! 3.3.6 you get a strange situation where the filter_order user state is set to an empty string and the FOF table cache is broken. This leads to PostinstallModelMessages to generate an invalid SQL query ending in ORDER BY `` ASC (note the empty column name). This happens because FOFModel lacks a safeguard against ordering by an empty column. Moreover, it is possible to set the filter_order_Dir user state to something other than ASC/DESC, also resulting in invalid SQL because there is no check on the validity of its value.

Test instructions

Before installing this PR go to Components, Post-Installation Messages. Edit the URL at the top of the page and append &filter_order_Dir=foobar. You get an immediate error message.

Install this PR. Repeat the steps above. There is no SQL error and the component works correctly.

Also check that after installing the PR you can hide post-installation messages, show them again and that the Two Factor Authentication still works.

Backwards compatibility

This new version of FOF is fully backwards compatible with the one already shipped with Joomla!.

Translation impact

There are no translation strings added

avatar nikosdion nikosdion - open - 28 Nov 2014
avatar jissues-bot jissues-bot - change - 28 Nov 2014
Labels Added: ?
avatar wilsonge
wilsonge - comment - 28 Nov 2014

File permissions again :)

avatar nikosdion
nikosdion - comment - 28 Nov 2014

Dammit. Git hates me! I always file permissions and uppercase/lowercase woes. Let me try again...

avatar wilsonge
wilsonge - comment - 28 Nov 2014

Looks awesome! Thanks man!

avatar brianteeman brianteeman - change - 28 Nov 2014
Category External Library
avatar brianteeman
brianteeman - comment - 28 Nov 2014

@test - issue confirmed and patch resolves it

This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/5236.

avatar brianteeman brianteeman - test_item - 28 Nov 2014 - Tested successfully
avatar infograf768
infograf768 - comment - 28 Nov 2014

OK here. Thanks.

avatar infograf768 infograf768 - close - 28 Nov 2014
avatar infograf768 infograf768 - change - 28 Nov 2014
Status Pending Closed
Closed_Date 0000-00-00 00:00:00 2014-11-28 11:23:13

Add a Comment

Login with GitHub to post a comment