Archive For September, 2007

CinVin vBulletin Forum Feed Listing 2.1.0 has been released!

The new release adds a new option, added by request, to exclude specified forums from showing in the listing.

The downloads for the Diamond and Emotional vBulletin styles has been refreshed. There were some sporadic reports of the XML files in the download packages not matching to the correct version so they have been refreshed.

Emotional is a free style and can be freely download. Diamond is a…

CinVin Inline Media Hack for PhotoPost vBGallery is now publicly available!

The CinVin Inline Media Hack will play your media files (audio, video) inline when viewed in PhotoPost vBGallery (http://www.photopostgallery.com/) instead of your gallery user first having to download the file and then…

IP.Nexus Video Preview Now Available

Invision Power Services, Inc. is pleased to announce the first video preview of IP.Nexus our new complete business management application.

For those of you who have been with IPS for some time, please see our company blog for a history and explanation of the previously announced development of Nexus and Dynamic.

IP.Nexus is a complete business management system with an extensible framework to expand its functionality as your business needs change. The first version of IP.Nexus, when available, will be capable of:

• Customer database management
• Ecommerce Capabilities
• Invoicing
  • Credit card processing
  • Reporting
  • Sell physical products or services
  • Sell hosting services
  • Recurring or one time billing
  • Custom package definition per-customer
  • Custom events on package order, payment, or expiration
• Hosting Management
  • Integration with popular hosting control panels
  • Domain management
  • Support for multiple servers
  • Ability to distribute accounts among all servers
  • Reporting on server capacity
• Support Desk
  • Ticket based support via Client Area submission or email routing
  • Multiple departments and categories
  • Assign task to departments
  • Multiple ticket statuses to help prioritize responses
  • Ticket weighting by rules
  • Emailed tickets automatically attached to customer account if it exists
  • Knowledge base system shown in client area and inserted into ticket replies
• Client Area
  • Customer login to private client area
  • Ability to view, print, and pay invoices
  • Order new products and services
  • Integration with other IPS products
  • File downloads based on purchases
  • Submit support tickets to the IP.Nexus support desk
• Content Management
  • Simple page publishing for a front end web site
  • Advanced content management option with articles, file attachments, and more
  • Ability to restrict access to pages based on permissions of visitor
• Global Features
  • Calendar, task lists, projects, and other organizational management
  • Customizable dashboard per staff person to manage their interface with movable widgets
  • Unique tab-based interface to increase productivity
  • Search, bookmark, and note pages in IP.Nexus without leaving your page

This is just a short list of current capabilities and because IP.Nexus is a modular application there are many more features currently in production. Through this module interface, we can release new features and capabilities at regular intervals without always having to release a completely new version of the software. You will be able to pick and choose which modules you have installed to customize the system to your needs.

We welcome you to have a look at the first IP.Nexus preview. Over the next few weeks, we will be posting more detailed preview videos on our company blog going into individual features of the system.

We welcome your feedback and first impressions. Once we have completed this preview phase we will open IP.Nexus for the first public beta download for everyone to try on their own site.

Information on pricing, final availability, and service offerings will follow the upcoming beta release series.

Everyone here at IPS is extremely excited about launching our new business product line. When launched it will introduce an entire new business services division.

Thank you for your interest!

Video Preview: http://www.invisionpower.com/nexusdemo

Please use this topic to discuss this announcement.

IP.Nexus Video Preview Now Available

Invision Power Services, Inc. is pleased to announce the first video preview of IP.Nexus our new complete business management application.

For those of you who have been with IPS for some time, please see our company blog for a history and explanation of the previously announced development of Nexus and Dynamic.

IP.Nexus is a complete business management system with an extensible framework to expand its functionality as your business needs change. The first version of IP.Nexus, when available, will be capable of:

• Customer database management
• Ecommerce Capabilities
• Invoicing
  • Credit card processing
  • Reporting
  • Sell physical products or services
  • Sell hosting services
  • Recurring or one time billing
  • Custom package definition per-customer
  • Custom events on package order, payment, or expiration
• Hosting Management
  • Integration with popular hosting control panels
  • Domain management
  • Support for multiple servers
  • Ability to distribute accounts among all servers
  • Reporting on server capacity
• Support Desk
  • Ticket based support via Client Area submission or email routing
  • Multiple departments and categories
  • Assign task to departments
  • Multiple ticket statuses to help prioritize responses
  • Ticket weighting by rules
  • Emailed tickets automatically attached to customer account if it exists
  • Knowledge base system shown in client area and inserted into ticket replies
• Client Area
  • Customer login to private client area
  • Ability to view, print, and pay invoices
  • Order new products and services
  • Integration with other IPS products
  • File downloads based on purchases
  • Submit support tickets to the IP.Nexus support desk
• Content Management
  • Simple page publishing for a front end web site
  • Advanced content management option with articles, file attachments, and more
  • Ability to restrict access to pages based on permissions of visitor
• Global Features
  • Calendar, task lists, projects, and other organizational management
  • Customizable dashboard per staff person to manage their interface with movable widgets
  • Unique tab-based interface to increase productivity
  • Search, bookmark, and note pages in IP.Nexus without leaving your page

This is just a short list of current capabilities and because IP.Nexus is a modular application there are many more features currently in production. Through this module interface, we can release new features and capabilities at regular intervals without always having to release a completely new version of the software. You will be able to pick and choose which modules you have installed to customize the system to your needs.

We welcome you to have a look at the first IP.Nexus preview. Over the next few weeks, we will be posting more detailed preview videos on our company blog going into individual features of the system.

We welcome your feedback and first impressions. Once we have completed this preview phase we will open IP.Nexus for the first public beta download for everyone to try on their own site.

Information on pricing, final availability, and service offerings will follow the upcoming beta release series.

Everyone here at IPS is extremely excited about launching our new business product line. When launched it will introduce an entire new business services division.

Thank you for your interest!

Video Preview: http://www.invisionpower.com/nexusdemo

Please use this topic to discuss this announcement.

IP.Blog 1.3.3 Released

We are pleased to announce the release of IP.Blog 1.3.3. This version is a maintenance release that fixes all known bugs found in IP.Blog 1.3.2.

Fixed bugs:

IP.Blog shows links to secret Gallery Albums
IP.Blog Search errors
Last 10 Entries PHP/MySQL Error
Problem adding names to Private Club
ICBlog 1.3.2 and IP.Board 2.3.1 (2.3.0) Bag?
Quick Edit buttons not consistent with forum
Strange voting IP Blog
[1.3RC1] ACP Display Bug
Switching from local to remote blog - Profile Portal
“Forums” link in Blogs
username when upgrading
Search finction with errors on company forums
Link Back
Changing entry status cause IPS Driver Error
Unable to add members to private club

New features:

Added DB table/index diag for Blog tables
Added Google Blog Search to ping services

Those with current active licenses can download IP.Blog 1.3.3 in the IPS client area.

IP.Blog 1.3.3 Released

We are pleased to announce the release of IP.Blog 1.3.3. This version is a maintenance release that fixes all known bugs found in IP.Blog 1.3.2.

Fixed bugs:

IP.Blog shows links to secret Gallery Albums
IP.Blog Search errors
Last 10 Entries PHP/MySQL Error
Problem adding names to Private Club
ICBlog 1.3.2 and IP.Board 2.3.1 (2.3.0) Bag?
Quick Edit buttons not consistent with forum
Strange voting IP Blog
[1.3RC1] ACP Display Bug
Switching from local to remote blog - Profile Portal
“Forums” link in Blogs
username when upgrading
Search finction with errors on company forums
Link Back
Changing entry status cause IPS Driver Error
Unable to add members to private club

New features:

Added DB table/index diag for Blog tables
Added Google Blog Search to ping services

Those with current active licenses can download IP.Blog 1.3.3 in the IPS client area.

IP.Board Security Enhancements

We are releasing three minor security updates to address issues recently reported regarding areas of IP.Board 2.3.1. These security issues are rather low priority and require specific sets of circumstances to be utilized. Even then the impact is minimal due to other security features in the software.

Issue 1 (Reported by http://www.turkish-media.com/forum/ )

If you use a character set other than iso-8859-1 or utf-8, it is possible to submit javascript to your user profile fields. The potential damage is mitigated by the use of httpOnly cookies in IP.Board. Please note that IP.Board ships with iso-8859-1 set by default. Therefore, unless you have specifically changed the character set in the Admin CP your installation is not impacted by this issue.

Issue 2 (Reported by http://www.criticalsecurity.net/ )

A user is able to upload a non-image file if the file is given an image name in a specific format. The security implications are very low because IP.Board automatically resets the file to a .txt file and treats it as such, however this could result in broken photo or avatar images being displayed, and script files with a .txt extension saved in your uploads directory. Again the potential damage is mitigated by the use of httpOnly cookies in IP.Board thereby disallowing javascript access to cookies.

Issue 3 (Reported by http://communityseo.com/forums/ )

If you have subscription packages enabled on your site using the subscriptions manager included with IP.Board which promote a paying user to a new user group, it is possible to recraft a payment form to set the member’s ID to a different member. The issue would require that an actual valid payment is made and no unauthorized access could be gained, however a specially crafted form could result in all administrators/moderators of a site being demoted to a subscriber group, for example. The reverse, a user being promoted to admin, is not possible in this issue.

Patching Your IP.Board

The IP.Board 2.3.1 download in the client area has already been updated with the required changes. If you download IP.Board after the date of this announcement your installation will be up to date.

Changed Files
Download the zip file below which includes only the changed files for this update. Simply upload and overwrite the old files.

http://forums.invisionpower.com/index.php?act=attach&type=post&id=11869

Manual Instructions
The following file contains manual patch instructions for those who want to edit php files by hand.

http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870

IP.Board Security Enhancements

We are releasing three minor security updates to address issues recently reported regarding areas of IP.Board 2.3.1. These security issues are rather low priority and require specific sets of circumstances to be utilized. Even then the impact is minimal due to other security features in the software.

Issue 1 (Reported by http://www.turkish-media.com/forum/ )

If you use a character set other than iso-8859-1 or utf-8, it is possible to submit javascript to your user profile fields. The potential damage is mitigated by the use of httpOnly cookies in IP.Board. Please note that IP.Board ships with iso-8859-1 set by default. Therefore, unless you have specifically changed the character set in the Admin CP your installation is not impacted by this issue.

Issue 2 (Reported by http://www.criticalsecurity.net/ )

A user is able to upload a non-image file if the file is given an image name in a specific format. The security implications are very low because IP.Board automatically resets the file to a .txt file and treats it as such, however this could result in broken photo or avatar images being displayed, and script files with a .txt extension saved in your uploads directory. Again the potential damage is mitigated by the use of httpOnly cookies in IP.Board thereby disallowing javascript access to cookies.

Issue 3 (Reported by http://communityseo.com/forums/ )

If you have subscription packages enabled on your site using the subscriptions manager included with IP.Board which promote a paying user to a new user group, it is possible to recraft a payment form to set the member’s ID to a different member. The issue would require that an actual valid payment is made and no unauthorized access could be gained, however a specially crafted form could result in all administrators/moderators of a site being demoted to a subscriber group, for example. The reverse, a user being promoted to admin, is not possible in this issue.

Patching Your IP.Board

The IP.Board 2.3.1 download in the client area has already been updated with the required changes. If you download IP.Board after the date of this announcement your installation will be up to date.

Changed Files
Download the zip file below which includes only the changed files for this update. Simply upload and overwrite the old files.

http://forums.invisionpower.com/index.php?act=attach&type=post&id=11869

Manual Instructions
The following file contains manual patch instructions for those who want to edit php files by hand.

http://forums.invisionpower.com/index.php?act=attach&type=post&id=11870

If you are running vBSEO and are receiving an error while viewing the CinVin Forum Feed Listing page on your site then please apply the code change here (http://www.cinvin.com/forums/showthread.php?p=8182).

The change will be included with the next release.