Magento

The Version 1.1 Alpha release is now available through SVN.

The list of Magento Version 1.1 upcoming features that we discussed earlier is detailed here with the specifics of what is now in the Alpha branch:

1. Admin UI improvements

2. Web Services API: The Catalog API and Customers API are available now. The Orders API and documentation on the API’s is coming soon.

3. Virtual Products

4. Custom Defined Product Options: At this time the checkout changes to support these products is not complete.

5. Bundled Products: At this time the shopping cart and checkout changes to support these products is not complete.

6. Improved support for EU and Canadian taxes

7. New customer attributes such as prefix and suffix, D.O.B etc...

8. Magento system messages bar added to admin

Please note that these features are still in development and are not for use in a production environment.

There are also additional smaller features and bug fixes available in the 1.1 trunk, please keep an eye on the list in STATUS.txt in the 1.1 branch root folder.

We greatly appreciate your feedback and suggestions in this forum topic.

IMPORTANT NOTICE: Priorities can change and features may be moved to later releases. We know how important these features are to merchants, but we advise you to not make any serious business decisions based on an unreleased feature. Varien does reserve the right to change this list, and cannot assume responsibility for any loss that might come from a late or unreleased feature.

It has come to our attention that under very specific conditions there is a security issue in Magento 1.0 through 1.0.19870 that may cause invalid links to be entered into your block cache.

Installations with correct SSL configuration are NOT affected. 

To prevent any possibility for this problem affecting your installation or to make sure if your copy is not affected, please follow these instructions:

- Login into your Magento admin

- Navigate to: System-> Configurations and select the ‘Web’ tab.

- For every Website and Store view in the ‘Current Configuration Scope’ drop-down (assuming you do not have them set to ‘use default’ or ‘ use website)
Open both Unsecure and Secure sections.

Look for the value of ‘Base URL’. if this field does not contain {{base_url}}, you are not affected, and there is no need to do anything else. If you see {{base_url}} you need to replace this value with full base URL of your store (e.g. http://www.somedomain.com) which includes your full domain you wish to use with Magento.

You DO NOT need to change any other configuration values that contain {{unsecure_base_url}} and {{secure_base_url}}, such as Base Link URL, Base Skin URL, Base Media URL and Base JavaScript URL.

Vulnerable configuration:

Correct configuration:

If you had to update your configuration as described above, please go to System > Cache management and refresh all caches.

We are currently working on a patch that will validate that {{base_url}} is not used and will warn the admin user if it still exists. We are also updating the install process of Magento to solve this issue for new installations.

A new wiki page has been created listing Magento live stores. If you’ve launched a Magento store, please feel free to update

Thanks!

We are happy to announce that a new version of the osCommerce Migration Tool is now available through MagentoConnect.

The new version includes:

- Support for customer accounts with multiple addresses
- Conversion of different encodings to default utf8
- Support for products’ special prices
- Support for products’ images
- Conversion for timezones
- Fixes for known issues of previous release

We hope you find this useful.

The latest Magento release included a bug that was found today.

The bug will cause products to be deleted completely from the system when a frontend customer adds items to compare products and then clears all selections.

This bug was found in the latest Magento release, Version 1.0.19700, and is not known to affect version 1.0.

It is high priority for all people using Magento 1.0.19700, or who have upgraded to Magento 1.0.19700, to install this Patch.

Installing the patch:

1. Download either the zip file: patch1_1.0.19700.zip or the tar.gz file patch1_1.0.19700.tar.gz

2. Extract and upload the file CompareController.php or extract directly the archives to app/code/core/Mage/Catalog/controllers/Product/

We are pleased to announce the availability for download of Magento Version 1.0 with Revision 19700. This revision includes many small fixes, small modifications and some slight performance enhancements, which are detailed in the release notes.

*Please Note: Instructions for Upgrading Magento with a full package, via SVN, via the MagentoConnect Manager and using SSH shell access are available in this wiki post.

Please read the wiki before upgrading.

If you are using the Magento Connect (PEAR Packages) we also recommend upgrading the Magento Connect Manager here

We have now opened our Alpha Branch so that the community can see our work in progress.

The SVN checkout command can be found here.

Please note that this version is not recommended in any way to be used in a production environment and that we do not guarantee that any of the functionality or code will be made available in future stable releases of Magento.

We hope you find this useful.

We experienced heavy load this morning which caused about an hour of downtime. Everything is back online and should be back to normal.

As always, updates can be seen on twitter.