InvoicePlane 1.4.10 released

Announcements
1

A new release of the InvoicePlane application is available: v1.4.10
You can download the latest version from the InvoicePlane website.

Update Guide | Changelog

This version includes a security patch and the fix for PDF files that contain ZUGFeRD XML.

:bangbang: Please update your setup immediately :bangbang:

This version contains the patch for a recently disclosed security vulnerability that can be used to reset the password for all users of a setup. The exploit was published on the Exploit DB on 2016-11-11 at the same time when I got the email notification.
If you find a vulnerability, please send an email to mail@invoiceplane.com before publishing an exploit!

:warning: Having problems with URLs?

To address the latest problems with URL detection and subdirectories you now have to set the URL of your InvoicePlane instance in the index.php file. Please do this either before installing or updating the application to prevent any issues.

1 Like
3

I upgraded to 1.4.10 and ran into one hiccup - There was no folder named ‘customer_files’ in /uploads so the setup would not complete. I created the folder and fixed permissions and all was well.

4

Not sure if I should make another support thread, but when I tried to upload the v1.4.10.zip file to my server using cPanel, in order to update my 1.4.9 installation, cPanel tells me that there is a virus found in the file. Anyone can confirm whether it is indeed a virus? (see image below). I did full scan of my computer with up to date Norton and it came up with nothing. The file also gets deleted when I upload it via FileZilla.

5

The download archive for InvoicePlane 1.4.10 definitely does not contain any viruses

Here are the results for a Virustotal check of the official download file for 1.4.10 with the MD5 hash b0fe41d6d1aff2a8c9aa2fd9d126f790:
https://www.virustotal.com/de/file/10175812ecbf8fc84102640217321d637bdcf65230c60642f885fdcec732bd6e/analysis/1479028269/

Also, {HEX}php.exe.globals is associated with false-positives by cPanel if you search for it on Google.

You may unzip the archive locally and upload all files separately to your webspace if cPanel doesn’t let you upload the archive.

6

Thank you for your help Kovah! I’ll keep trying:)

7

Hi,

First of all! Thank you for this great tool! I am upgrading from 1.4.8 directly to 1.4.10 …

Followed the instructions. I still see the version 1.4.8 with no available update under my system settings. Is that the case?

invoiceplane.png3200×1335 165 KB

8

Hi,

When I try to do a clean install, the installer reverses the url to the ip-address of my server.
The following screen is blank because my webserver has several domains and need the domain-name to show a page.

Coul this be fixed?

Thanks you very much!

9

Please follow the official installation guide: https://wiki.invoiceplane.com/en/1.0/getting-started/installation

10

Hello Kovah, thank you for your reply!
I forgot to add the path in de index.php-file.
Thank you!

11

After upgrading to 1.4.10 from 1.4.9, in the version control i see 1.4.8.
Is there something wrong with this ?

12

Please open a new thread for this.

13

I’m having the same problem of @ysintos , plus after upgrading my system is still vulerable!

14

I joined the forums to say the same :slight_smile: Other than that small issue the install went great! Thanks for the hard work! I am looking forward to using the program.

15

Hey

Please check Error in version control after upgrading to 1.4.10 I suggest an answer as I got the same problem as you :slight_smile:

16

@Kovah The 3rd helper as MPDF generated seem still have non-latin problem

step.png1458×492 36.5 KB

the vendor folder is separate with github project?

after I changed config.php in vendor/kovah/mpdf
from false to true
$this->autoLangToFont = true;

step1.png1476×444 42.3 KB

In fact, have one more place need to change:

$mpdf=new \mPDF(‘+aCJK’,‘A4’,‘’,‘’,32,25,27,25,16,13);
$mpdf->WriteHTML($content);
$mpdf->Output();

But I don’t know where should I put it in?

PS. The above unusual show text is Traditional Chinese, (Others Same with Simplify Chinese seems normally shown)