This release is now available at GitHub.

We strongly recommend that everyone upgrade to this version, for security and quality of life updates.

Security Enhancements

XML/XSL Module

• Added a hostname whitelist
• Only Admins can adjust the hostname whitelist.
• Prevents non-admins from using a potentially hostile URL in the XML URL/XSL URL fields
• Hostname comparison is done by converting the user provided URLs into URI, this formats and validates the URL
• Converting to a URI and comparing to a hostname prevents a "file://" URL, which could lead to leaking root level configuration
• Changed the way the files are brought in, stopping loopbacks and after DNS resolution, but this will break referencing files in a shared environment.

Setup Page

• Changed DisableSetup to true by default.
• Disabled showing connection error on setup.

Bug Fixes

• Fixed issue with bad SiteCount cache causing the site to go into a setup loop.
• Fixed issue where blog comments could not be submitted
• Fixed missing GROUP BY clause breaking viewing blog posts with PostgreSQL

Other

• Added "ClearAll" method to cache manager.

You can see the full changelog here.

This release is now available at GitHub.

We strongly recommend that everyone upgrade to this version, for security and quality of life updates.

Security Enhancements

• Skin Uploading Removed: Disabled skin uploads via both the web and UI to prevent malicious code execution in uploaded skins.
• Directory Protection: Prevented script execution within the Data directory.
• Metaweblog Disabled: Web services now disable Metaweblog by default and return a 404 error when disabled.

Bug Fixes & Stability

• Footer Placeholder Resilience: Fixed a critical bug where missing the phSiteFooter placeholder in a skin would crash the site—the placeholder is now optional.
• Configuration & Scripts: Resolved issues fetching style.config  in the StyleSheetCombiner, and corrected a method name in mojoModalScript.js .
• Database Queries: Fixed an issue causing errors with single blog queries.

You can see the full changelog here.

The latest version of mojoPortal is now available on GitHub!

We strongly recommend that everyone upgrade to this version of mojoPortal, as there were several important security fixes. 

Please note that all Commercial Add-Ons have corresponding releases and are required to support this release.

Security & Dependencies

• Security Enhancements:
  • Fixed an XSS vector in the Country List Administration page with the sort parameter.
  • Added password verification when assigning user roles (both on SecurityRoles and ManageUser pages), to prevent a content administrator from escalating their own account to admin.
  • Integrated the HtmlSanitize package/method into Core , StringExtensions , and input saving logic; added AppConfig controls to manage sanitization.
  • Sanitized incoming URLs in LinkBuilder  to prevent directory traversal.
  • Migrated from DotNetZip to DotNetZip.Original to prevent directory traversal.
• Dependency & Package Updates:
  • Database & Libraries: Updated MySQL.Data to 9.4.0 , SQLite to v3.53.2 (switched to x64), and Log4Net to 3.3.1 .
  • Framework / Packages: Removed AutoMapper and the Westwind library; added HtmlSanitize .

Search & Indexing Upgrades

• Search Infrastructure:
  • Converted Search Results and Search Controls to use Razor templating.
  • Added support for category indexing and searching (including Blog category search support).
  • Introduced an optional ItemImage property to the search index and added SKU querying on the search page.
  • Added a web.config option to disable NeatHtml in search results.
• Refactoring & Optimizations:
  • Cleaned up SearchIndex , IndexBrowser.aspx , and SearchResults.aspx .
  • Moved QueueIndexing from SiteUtils to IndexHelper .
  • Consolidated canIndex checks in HtmlContentIndexBuilderProvider .
  • Allowed specifying an alternate page for search indexers to treat as the location for SF module content.

Module Updates & Bug Fixes

• Blog:
  • Fixed broken category links, categories strings in business/edit logic, and added SQLite categories aggregate support.
  • Fixed issue where posts were not showing featured images in certain cases.
• SuperFlexi:
  • IndexItem now uses ModuleViewRoles.
  • Added FriendlyId to ModuleModel .
  • Made ModuleConfiguration.FeatureGuid public static.
  • Removed unused Edit2 page; added caching for generated classes.
• Forum & Calendar:
  • Fixed date calculation in Forum RSS feed for MySQL.
  • Removed unused PageIndex property from EventCalendar IndexBuilder.
• Core Systems & General Fixes:
  • Database/Data Access: Fixed a resource leak in GetUserLocation(Guid rowID) by properly closing the data reader; fixed issues in mp_UserRoles_SelectByUsername and SQLite GetRolesByUser scripts.
  • Routing & Multi-Tenancy: Created mojoPortal.Core.Configuration.MultiTenancy ; updated site matching logic to use siteId rather than hostname matching in mp_SiteHosts .
  • Workflow & UI: Fixed issue where deleting a user broke workflows; fixed avatar link producing duplicate class attributes.

Web, UI, & Developer Tooling

• Core Web Components:
  • Added CacheServiceContainer to handle clearing plugin caches when changing skin GUIDs.
  • Added DynamicTypeGenerator to build ad-hoc class types (with list property initialization), this is being leveraged by SuperFlexi to cache it's solutions.
  • Added UnitSeparatorExtensions and editorconfig to the project.
• Controls & Markup:
  • Module ID attributes now use a slugged version of the module title.
  • Added ability to attach custom attributes to script and style elements in .sfMarkup .
  • Updated SiteLabel to support child elements; added ControlAdapters for RadioButton , RadioButtonList , and CheckBoxList .
• Framework Bump: Updated Framework skin for mojo 3.0.0 and bumped AppCodeVersion to 3.0.0.

You can see the full changelog here.

Since 2004, mojoPortal has been committed to being accessible to all people. That's not always an easy task because there are many components of websites that just don't work well for some people with some disabilities. We also can't ensure that everyone who builds a site on mojoPortal makes the necessary effort to structure their content to make sure it is fully accessible. So, we've partnered with accessiBe, the leader in AI Solutions for Web Accessibility & ADA Compliance. With this partnership, mojoPortal will earn a little cash for each purchase made via our partner link, but that's not why we're partnering with accessiBe. We're partnering with accessiBe because it is simply the easiest and most complete accessibility platform on the market.

Hundreds of thousands of websites use accessiBe to help with ADA compliance and web accessibility, so with mojoPortal, you have a Bonafide system in place to help you make your mojoPortal site perfect for everyone!

Benefits & value for your site:

• Fully automated remediation within 48 hours
• Visible accessibility statement on site
• 24-hour automated ongoing compliance scans
• Monthly accessibility audit sent to the inbox
• Extension of market reach
• Enhancement of brand reputation

Integrating mojoPortal with accessiBe

It is super easy to integrate your mojoPortal site with accessiBe. All you need to do is copy the accessWidget that accessiBe gives you to the "Custom Content" section of Site Settings, click the Save button and you're done! Here's a screenshot of the area in Site Settings:

Site Settings Custom Content Tab

Get Started with accessiBe Today!

Integrating mojoPortal with accessiBe is a game-changer in web accessibility, simplifying and streamlining the process of becoming accessible and compliant using AI, machine learning, and computer vision.

Get started now!

We're happy to announce a new release of the mojoPortal Content Management System, version 2.9.2.

Please note that all Commercial Plugins have corresponding releases and are required to support this release.

Head over to our GitHub Releases Page to check it out.

General

• Removed unnecessary use of ForceSsl throughout the project
• Removed publish mode from Site Settings
• Some Help File cleanup
• Updated the mojoModalScript.js to allow use of any element as it's trigger
• Refactored the way roles are set up on new sites
• Setup now saves custom machine key to a file instead of to the web.config
• Cleaned up the "Social Links" SuperFlexi solution for better accessibility.

Bugfixes

• Fixed Web Forms issue where the default document would be empty, breaking the login and search modules on the home page
• Fixed issue where a blog post set to not index would break indexing for the entire blog
• Fixed issue where password salt would be saved to the password field
• Fixed issue with the RazorDropDownList where it would have to class attributes if you added CSS classes both on the control and programmatically
• Replaced use of deprecated escape and unescape with encodeURIComponent and decodeURIComponent in mojocombinedfull.js
• Fixed issue in SuperFlexi where exporting would not include any new fields if each previously saved item was not edited/updated/saved
• Fixed issue where the class building wasn't setting objects to the right type and to use the defaults with null values
• Fixed issue where mojo was doing a case sensitive match to a user's email, preventing users from getting their roles when logged in

Note: All commercial modules have been updated to support this release.

The latest official public release of the mojoPortal Content Management System, mojoPortal 2.9.1, is now available. 

Where to Get It?

Head over to our GitHub Releases Page. Please note that all Commercial Plugins have corresponding releases and are required to support this release.

What's New?

.NET Framework 4.8

We've updated mojoPortal to version 4.8 of .NET Framework for the latest security patches and performance updates.

We had considered going to version 4.8.1, but 4.8.1 only includes updates to the Windows UI and Windows Forms frameworks, and ARM64 support.

Since 4.8.1 doesn't offer mojoPortal any advantages and it would remove support for Windows Server 2019, we believe that version 4.8 is the best option for mojo.

OpenID Connect/OAuth

We've updated mojoPortal so that site owners can configure their sites with an OpenID Connect. See our documentation for setup information.

Compatible Identity Access Management providers are:

• Keycloak (i7MEDIA's current favorite)
• Microsoft Entra ID - coming soon
• Auth0 - coming soon
• Active Directory Federation Services - coming soon
• ForgeRock Identity Platform - coming soon
• etc.

This brings all the advantages of OpenID Connect to mojoPortal such as:

• Single Sign-On across multiple applications
• Two Factor Authentication
• Third Party (Social Media) logins
• and more

This update will remove the obsolete OpenID setup which relied on Janrain Engage. This service was no longer stable and extremely difficult to setup due to broken pages on the third party Janrain website. User accounts created using the old setup will be retained but users will need to request a password reset. The configuration tab under Site Setttings\3rd Party Auth is still available but is no longer used. It will be removed or repurposed in a future release.

SuperFlexi Social Links Solution

We added an option for the Nextdoor: Neighborhood Network social networking service to the Social Links solution.

Better OpenGraph Support

OpenGraph meta elements are now created for every page automatically.

Misc

• MySQL 8+ is now required for MySQL installations. If you are running an older version you can delete the contents of the 2.9.0.3 mojoportal-core upgrade script to make this version work with it. More changes will be made in future releases so you need to get your database environment upgraded ASAP.
• Added a way to configure the information for default admin account.
• Added "Restore Skins" and "Copy New Skins" buttons on the Site Settings page.
• Cleaned up the Setup page. Added context and some style. Still in need work.
• System Log download will use site name in filename.
• Contact Form: You can now select which Rich Text Editor you want to use for the Message field.
• Redirection to canonical preferred domain respects SSL settings.

Bug Fixes

• Fixed issue in the SkinConfig code that was causing the site to error at random times.
• The Avatar was not properly updating on the User Profile and Manage Users pages.
• The iFrame module had an issue where its module title wasn't using the same elements as every other module.
• Some skin file URLs were incorrect when using Folder based Multi-Tenancy.
• Ensure NeatHtml.js is loaded when using SanitizeHtml method.
• There was an issue with the browser being redirected to a secure connection from an insecure connection while using a Preferred Hostname not using it's Friendly URL.
• Turkey Standard Time was missing (thank you, otuncelli!).
• Fixed styling of LogLevel=FATAL messages (thank you, otuncelli).
• Fixed incorrect type checking in AuthHandlerHttpModule (thank you, otuncelli).
• The File Manager wasn't enforcing the .zip extension when using the Compress action.
• The File Service was unzipping files types that it should not have.
• The File Picker control in SuperFlexi would overwrite the file URL with a full path when editing an existing item.
• Sometime values wouldn't be properly converted when doing an import in SuperFlexi.
• Added validation to fields in several features.

Other Changes

• Deprecated FolderGallery feature. Users should switch to BetterImageGallery
• Removed obsolete HtmlView.aspx

Developer's Corner

• Added "textarea" option for ControlType in custom ModuleSettings
• Added RazorDropDownList control to support option groups
• Moved StringExtensions, StringHelper, and XMLHelper from mojoPortal.Web.Framework to mojoPortal.Core
• Added methods to get site specific web.config settings
• Removed ConfigHelper from mojoPortal.Web.Framework
• Added GlobalUsings to most projects
• Removed mojoPortal.Business.ImageHelper
• Consolidated Panel classes
• Removed several obsolete controls and classes
• Removed EmptyPanel usage in aspx and ascx files 
• Moved SMTP classes from mojoPortal.Net to mojoPortal.Web. Left namespaces as mojoPortal.Net.
• Removed mojoPortal.Net project.
• Added CollectionExtension class with ToDictionary and ToDelimitedString methods
• Consolidated ListExtensions and CollectionExtensions
• Added FileSystemHelper to make loading file system easier, less repeated code.
• Added RemovePunctuation to StringExtensions
• Added HashtableExtensions
• Added Union StringExtension
• Moved HtmlInclude to its own project under Solution Folder 'Plugins' as an example. May do the same with other features.
• Moved SuperFlexi to Plugins
• Added LinkBuilder string extension to help standardize and sanitize links 
• Moved RemoveMarkup and RemoveAngleBrackets from mojoProtal.Web.Framework to mojoPortal.Core.StringExtensions
• Switched to Newtonsoft.Json in StringHelper
• Replaced ContainsCaseInsensitive with Contains override method similar to .net core
• Added PageUrlService
• Added RoleStringHelper
• Refactored SiteLogo
• Replaced Ionic.Zip with DotNetZip
• Localized Email Test strings
• Made service used by QRCodeImage control configurable
• Added CustomCssClass setting to Child Page Site Map, Custom Menu, Recent Content, Sign In, and Site Search modules.
• Default Modal template is added to the body element if phSiteFooter isn't found.
• Changed modal script to use event delegation
• Added callback option to mojoModalScript.js
• Cleaned up Subkismet and SimpleMath captcha code and layout
• Changed Admin Menu to use JSON for extra menu items
• Cache Tool now clears HttpRuntime, TinyMCE caches

Skinning & Design

• New Menu Control supporting Razor/CSHTML Templating. Framework skin will use this control.
• Replaced failsafe layout.Master with framework
• Expanded skin config.json to support DisplaySettings and EditorConfigs
• Updated RSS Styling
• Help dialog now uses bootstrap CDN, it no longer uses the CSS Handler
• Removed obsolete controls, check "Upgrading Skins" documentation for more information.

We're very pleased to announce the official public release of the next version of the mojoPortal Content Management System, mojoPortal 2.9. This version is full of feature enhancements, usability improvements, and general bug fixes.

We've examined dependencies, upgraded packages, removed bloat, reorganized, and tested, tested, tested! Many highlights are outlined here and the changelog is at the bottom of the post. This is a production-ready release but, as with any system, we highly recommend users perform a full backup of their files and database before upgrading.

Where to Get It?

Head over to our GitHub Releases Page.

Version Number & Release Timeframe

You'll notice the last release was version 2.7 and this release is version 2.9. We've intentionally skipped version 2.8 because while it has been quite a while since our last public release of mojoPortal, we have indeed been working on mojoPortal. Version 2.8 has been in use for some time by many of our own customers and we have distributed it to many of our partners. The primary reason we never released 2.8 publicly is it did not support sqlite or pgsql. In fact, we contemplated dropping support for both of those database platforms but we decided to keep them because 1) we love pgsql and 2) the sqlite version of mojoPortal is more popular than the pgsql version. Admittedly, neither of those reasons are very good so there may come a time when we drop support for one or both of them.

NOTE We had to make a new release of 2.9 on June 20, 2023 because some files were missing from the original release files. There is no functional difference between these versions.

Highlights

• Google Analytics 4 Support
• hCaptcha Support. hCaptcha has feature parity with reCAPTCHA. Using one or other is as simple as selecting either one in Site Settings.
• Keyword Blacklist. Administrators can maintain a list of keywords and phrases which they want to block from being submitted on forms.
• Full Razor (cshtml) support in SuperFlexi
• Skin-based styles and templates which can be used by wysiwyg editors (ckEditor and TinyMCE)
• AirDatepicker replacement for jQuery and other datepickers by default.
• Homepage Override option (Site Settings > Advanced).  Forces selected page to be the homepage regardless of site menu structure.
• Custom Menu Feature allows menus to be created from Site Map data by choosing a starting page. Menu is built automatically. Menu Docs
• Custom SMTP Headers and SMTP testing tool. Email Docs
• Site-Wide head and foot content. Allows for adding any content to the head element or just above closing body element through Site Settings. Can be applied to all non-admin CMS pages or all admin pages. We don't like the name, suggest one in the forums.
• AjaxControlToolkit removed from base mojo, it is now only required for FormWizardPro.
• Security Advisor will now check for default admin account.
• SSL enforced for all pages when SSLIsAvailable = true
• Restart Application button in System Information
• Update Check in System Information

SuperFlexi

• Users can set the name of export files when exporting SuperFlexi data
• Items can be set with specific View and Edit roles
• Solutions using Razor can utilize built-in paging support
• Added PageSize module setting
• Can now set name of export file
• Can now use ViewRoles and EditRoles to control who can view and edit individual items.
• New Advanced File Picker for control types "imagePicker" and "linkPicker"

New SuperFlexi Solutions

• Quick Image 
• Cookie Consent

Blog

• Metadata editing is more user friendly
• No longer indexing blog posts that aren't published
• Fixed a bug where featured post could be set on unpublished posts
• HTML is no longer allowed in post subtitle.

Event Calendar (basic)

• Show Time option allows showing the time of events in the month view, uses "Short" time pattern
• Enable Map and Show Map allow showing a google map on the event detail page

Contact Form

• Keyword Blacklist support
• WYSIWYG is properly focused on label click and tab
• Removed "Use Input Address as From Address" because it will result in message being seen as SPAM.

Forum

• Prevent script from being added to forum title
• Moved post anchor in PostList to wrapping post div

Design/Skins

• CacheTool now clears the theme.skin cache when the skin version is updated
• Additional AdminDisplaySettings to site settings See Class on GitHub
• New SkinConfig feature.
• Razor for the MemberList and Admin menu pages
• CoreDisplaySettings class
  • using in login.aspx register.aspx pages
• CacheTool now clears 'theme.skin' cache
•  SkinVersionGuid is now reset during setup
• System content templates are no longer included by default.

Multi-Tenancy

• Host mappings are now cached, reducing trips to the db
• Root Site Admins can edit Site Closed message for all site

Development

• New Input types in ModuleSettings: Number, Color, Range, Password, Email
• New ToDataTable(this List<T> items) extension
• Moved custom MSSQL integer_list_tbltype type from SuperFlexi setup scripts to core setup scripts. No functional change.
• Added ShowInMenu and CssClass to SitemapJson Class
• New XMLHelper to standardize XML handling and security (GitHub)
• New Controller to fetch/update UserProfile information (GitHub)
• mojoButton now allows setting button so we can use "button" element
• Removed old scripts from ClientScript
• UIHelper.SetOrAppendCss now checks for class before adding it
• Added UIHelper.RemoveCss extension to WebControl
• Renamed CSVSplitter to SqlDataRecordList in MSSQL layer
• Added "replacement" option to RemoveLineBreaks string extension
• Added RemoveMultipleSpaces string extension
• Unified mojoMembershipProvider to one set of public virtual methods for all encoding & decoding functions
• Allow placing saltKey before or after password in mojoMembershipProvider
• Added PaymentGatewayType to PaymentGateways
• Removed obsolete FileDialog.aspx
• Updated and expanded existing but unused tagging system.
• New mojoPortal.Core project/namespace. Moving non-web functionality from mojoPortal.Web and mojoPortal.WebFramework here.
• DialogBasePage now inherits from mojoBasePage

Security

• All pages now force SSL by default when SSLIsAvailable.
• ForceSSL checks to see if SSLIsAvailable and only forces SSL if it is, making other code simpler because one no longer needs to check SSLIsAvailable before calling ForceSSL
• Fixed Issue with Azure not recognizing the SSL correctly
• Added UseHSTSHeader web.config property to allow server to manage HSTS headers
• Added HSTSHeaders web.config property and replaced hard-coded values with its value. Default is "max-age: 63072000;"
• Scripts are now stripped from uploaded XML files

Role Manager

• Added Display Name, System Name and Descriptions to Roles. System Name cannot be changed but Display Name can.
  • Updated code in Roles to use the Display Name when creating roles during setup and simplified the code for listing the roles in module settings
• Fixed issue with roles being escalated to full administrators

Core

• Default MachineKey now uses HMACSHA256/3DES. Reminder: People should really create their own MachineKey
• Changing terminology from "MultipleSites" to "Multi-Tenancy"
• Replaced jcrop with cropperjs
• Allow Google Translate on SSL pages
• Updated to sqlite3
• Removed MediaElementJS, we now only rely on html5 controls
• Keyword Blacklist support in Internal Comments system
• No longer loading contents of register page when it is redirecting elsewhere
• Added "data-loader" data attributes to script elements to aid in troubleshooting
• Automatically localized AirDatepicker
• Removed many obsolete 3rd party tools
  • websnapr, flash, qtfile, impromptu, sizzle, SiteOffice, ImageFit, ClueTip, MarkItUp, YahooMediaPlayer, FlickrGallery, Yui, greybox, dotLess, SilverLight
• Removed PasswordStrengthMeter and mojoRating
• StaticFileExtensions are configurable through StaticFileExtensions web.config property
• Standardized id="Html" on html elemnt for adding lang and dir attributes
• Made supportedDatabases check case insensitive in setup
• hCaptcha/reCAPTCHA url and other settings are now configurable.
• Fix issue with NeatHTML preventing Search Results from displaying in Firefox
• Fixed "User Folder" (My Files) in File Manager
• Added .webmanifest mime type to web.config.
• Increased default folder and file upload limits
• Removed fieldset element from several forms
• Usability improvements to ManageUsers.aspx when managing deleted users
• IndexBrowser now included under Administration/Advanced Tools
• Added search function to redirect management page
• Implement CSHTML for Newsletter Admin and AdminMenu pages

WANT MORE? A more detailed list of changes is available with this release on GitHub and through a comparison of v.2.7 to v.2.9.

We're pleased to announce the release of mojoPortal 2.7, which has a lot feature enhancements and fixes as you will see below. We're also releasing updated versions of Form Wizard, Event Calendar Pro, Site Membership Paywall, Web Invoice, and Fund Raiser.

Where to Get It?

Head over to our GitHub Releases Page.

Highlights

• Google Maps Fix
• New Image Gallery
• MySQL 8 support
• pgSQL and SQLite support for SuperFlexi
• Form Wizard form editing experience improvements

New Feature: Better Image Gallery

• Beginning of a new image gallery. Currently replaces the Image Gallery (Simple Folder Version), will replace the other Image Gallery soon.
• Uses Razor Views the same way the Blog Post List View module does.
• Default layout (view) uses BlueImpGallery
• Learn more here: Getting Started With The Better Image Gallery.

SuperFlexi

• pgSQL and SQLite support.
• Allow editing when user is in AllowedEditRoles.
• Added "SkinVersionGuid" static token.
• Added WebApi support for retrieving SuperFlexi data.
• Added [dbo] to all object references in mssql scripts.
• Added Pre/Post TokenStringWhen True/False for CheckBoxes.
• Fixed MaxItems needing high number to work properly.
• Fixed bug where not selecting solution would break site.
• Fixed bug where changing Solution would cause an error condition on first click of edit link.
• Fixed bug in MySQL data layer where Int32 dbtype was used when Guid should have been used.

Blog

• Added optional "Default Post URL Prefix" setting. Allows for automatically placing blog posts in a URL hierarchy, e.g., some.domain/my-blog/my-first-post.
• Added logic to Remove post from Search Index if "EndDate" is set to before current date.
• Added logic Remove post from Search Index if "IncludeInSearch" is set to false. Previously, this was only checked when creating a post, not when editing.
• Added logic to check for Heading control on page when UsePostTitleAsPageHeading is true. This setting would hide the blog title if the page heading was no longer on the page if the ShowPageHeading setting was set in the DB from a previous skin.
• Added logic to allow BlogPostListModule to work in ModuleWrapper.
• Changed post title and subtitle fields to not allow HTML. Someone actually thought this was a XSS issue but only people who could add HTML to the post body (thus able to add script) could set the title and subtitle fields. SMH…

Forums

• Removed old inline styling on table elements
• Standardized on "thread" vs "topic" and capitalization of other phrases/words

Survey

• Added submission limit for authenticated users.

Shared Files

• Added granular permissions for Roles on files and folders.

mojoPortal Core

• Added support for MySQL 8 and SSL connections to MySQL servers.
• Added SQLite database auto creation. If SqliteConnectionString value is "defaultdblocation", mojo will copy the seed database (/data/sqlitedb/mojo-seed.db.config) to  (/data/sqlitedb/mojo.db.config). This will prevent accidentally overwriting the existing database.
• Added page deletion confirmation dialog.
• Added .webp to the allowed image file extensions.
• Added WebUser.IsSkinManager method.
• Added new control "EmbedSVGSprite" to allow easier embedding of SVGs in code.
• Added display settings to separate settings/delete from move buttons on PageLayout buttons.
• Added override for UIHelper.AddConfirmationDialog to allow for HtmlButton in place of WebControl. Allows for attaching Confirmation Dialogs to HTML5 button elements.
• Added AlertPanel to allow for easier and standardized skinning of alert messages.
• Added SelectFolder function to FileManager.
• Added ICustomField, Options, Attributes, and DropDown to ModuleSettings. Makes adding dropdown options easier, removes need for special controls for those types of fields. ICustomField is like ISettingControl but it has ability to add additional Attributes to the control. These attributes can be used by the custom control in any way the developer wants. They are also used by the TextBox, CheckBox and DropDown field types in the ModuleSettings.
• Added API Key functionality to Google Maps.
• Added iframe embed option for Google Maps, enabled by default. Doesn’t require an API Key.
• Added SetupFooter options.
• Added CSV_Splitter to MSSQL datalayer. Will create a list of SqlDataRecord from a list of values. This new list is used to populate a TVP (Table-Valued Parameter) in a stored procedure.
• Added StringHelper.IsIn(). string extesion to easily check if string is in an array. Example:

  string color = "blue";
  string[] colors = {"blue", "green", "red"};
  if (color.IsIn(colors))
  {
      // do something
  }

• Added Set_Root_Cookie function to mojocombined.js.
• Added .woff2 to web.config.
• Added UIHelper.GetDictionaryFromString(). Converts a semicolon and pipe delimited string to a string,string dictionary.
• Added XMLHelper.GetKeyValuePairsAsStringBuilder and XMLHelper.GetKeyValuePairs.
• Added Browse Files permission to allow users to use the file manager but not make any changes or upload new files.
• Changed location of "Design Tools" to Admin Menu.
• Changed to Newer/prettier/better/fantastical markup for error page.
• Changed UIHelper.AddConfirmationDialog to allow for more than one onclick call.
• Changed the rendered order of CssClass and ExtraCssClasses on BasePanel. (extra is now second).
• Changed RolesThatCanDeleteFileInEditor to always include ContentAdmins.
• Changed FriendlyUrl Suggestions to use optional url prefix.
• Changed permissions to allow ContentAdmins to delete in File Manager.
• Changed permissions to allow ContentAdmins to see FileManager link.
• Cleaned up System Log page when logging to database.
• Cleaned up controls in built-in features, added SkinIDs to buttons, converted panels to FormGroupPanel.
• Fixed some capitalization issues in MySQL db scripts.
• Fixed "Skin Manager" CSS editing to allow editing CSS files in sub-directories of a skin.
• Fixed OpenID (janrain) issue preventing logins.
• Fixed bug where Site Search Module wasn’t using the feature filter from the module settings.
• Fixed caching issue in FileManager by disabling caching. This was causing issues with the FileSystemServiceToken which would prevent users from using the File Manager.
• Fixed reference to non-existent 404notfound.aspx file in web.config
• Fixed FileManager for folder-based multi-tenancy.
• Fixed folder url recognition in folder-based multi-tenancy. No longer need to create folder and add empty default.aspx file.
• Fixed saving of FirstName and LastName on create in ManageUsers.aspx
• Fixed buggy regex for CustomCssClass settings in several modules. Consecutive spaces in submitted input were causing the regex validation to lockup.
• Removed DetectPageNotFoundForExtensionlessUrls to fix issues with Routing (new file manager).
• Removed GreyBoxIsLoadedFromSkin in code and user/web.config.
• Removed LessUtility from DesignTools.
• Removed unused images and css from data/style.
• Removed unused icons and images from data/SiteImages.
• Removed more corner rounding controls.
• Removed FeatureIcon/ModuleIcon and PageIcon settings.
• Removed Twitter and Flicker modules that no longer work due to drastic changes in service APIs.
• Replaced several hard coded instances of image file extensions.
• Replaced long string concatenation with string interpolation (not complete, work-in-progress).
• Replaced ugly icons used on PageLayout for moving content with FontAwesome 5 SVG sprite.
• Replaced a lot of the old ugly icons used throughout project with simplified icons. Planning full replacement of these icons with something else later.
• Standardized Authentication Checks and Access Denied redirects. Had about 10 different process flows before.
• Standardized use of NonCmsBasePage across admin page.

Web Store 7.5.0.1

Web Store can be downloaded here.

• REQUIRES mojoPortal 2.7
• Added support for MySQL 8 and SSL connections to MySQL servers.
• Added proper SkinID to buttons so they will match styling of the rest of the site
• Removed the now defunct Google Checkout
• UI Improvements, including several new Display Settings

Form Wizard 2.7

Form Wizard can be purchased in the store. If you already own a license, go to My Profile under your avatar on the mojoPortal site to download the latest version.

• REQUIRES mojoPortal 2.7 (version numbers being the same is just a coincidence).
• Added support for MySQL 8 and SSL connections to MySQL servers.
• Added a lot of Display Settings.
• Added SkinIDs to submit and previous buttons.
• Added Question Alias to divs wrapping each row in rendered form. Allows for selecting specific questions by targeting data-question-alias in script.
• Changed field/question editing to use pop-up modals. Framework based skins and skins with Bootstrap 3.7 work with this automatically. For others, see this.
• Changed Slider question to use HTML Slider Input by default.
• Changed Slider Range inputs to textboxes.
• Changed FormUtils.GetAttachments to public so it can be used in SubmissionHandler.
• Changed HTML Question to use mojoEditor (will use whatever editor is default in mojo).
• Changed ugly icons used for moving question options to FontAwesome.
• Fixed Question disappearing when editing.
• Fixed submit buttons being disabled when using pages.
• Removed SliderMaxRangeLimit option.

Event Calendar Pro 3.5

Event Calendar Pro can be purchased in the store. If you already own a license, go to My Profile under your avatar on the mojoPortal site to download the latest version.

• REQUIRES mojoPortal 2.7.
• Added support for MySQL 8 and SSL connections to MySQL servers.
• Added "Use iframe Embed for Map" option for Google Maps.
• Added a lot of Display Settings to help with skinning.
• Fixed issue where customer company input was not showing on ticket purchase form when "Show Address on Free Event Registration" was disabled.
• Moved ticket options to separate tab in event editor.
• Removed Bing Map support.
• Renamed "Sales Management" to "Administration".

Web Invoice 1.8

Web Invoice can be purchased in the store. If you already own a license, go to My Profile under your avatar on the mojoPortal site to download the latest version.

• REQUIRES mojoPortal 2.7.
• Added support for MySQL 8 and SSL connections to MySQL servers.
• Added optional Invoice Fee.
• Added Email CC option.
• Added Email BCC option.

Fund Raiser 1.3

Fund Raiser can be purchased in the store. If you already own a license, go to My Profile under your avatar on the mojoPortal site to download the latest version.

• REQUIRES mojoPortal 2.7.
• Added support for MySQL 8 and SSL connections to MySQL servers.
• Added a lot of Display Settings to help with skinning.
• Removed CornerRounder Controls

Site Membership Paywall 1.1

Site Membership Paywall can be purchased in the store. If you already own a license, go to My Profile under your avatar on the mojoPortal site to download the latest version.

• REQUIRES mojoPortal 2.7.
• Added support for MySQL 8 and SSL connections to MySQL servers.

Today, we're pleased to announce the release of mojoPortal 2.6. We had planned on releasing this version much sooner but we kept adding features! In the future, we're planning on releasing about once per month. Larger features will take more time but our community shouldn't wait for smaller enhancements.

With this release, we're introducing SuperFlexi and the Blog Post List modules. We also have a lot of enhancements and new features for existing modules. Finally, we've made some improvements to Framework and we're releasing a new free skin called "Scout", which can be downloaded from the mojoSkins project.

Where to Get It?

Head over to our GitHub Releases Page.

SuperFlexi

The SuperFlexi module is intended to serve as an easy templating system that works as a go-between for front-end developers and users. Developers can easily create "Solutions" that determine, to a large extent, the module's uses; controlling both what kind of input users can store in the database and what markup is created on the page. Users can then simply select a "Solution" in the module settings, and create their content with straightforward easily-understood forms, which will then be rendered as determined by the developers defined markup.

SuperFlexi aims to give end users much easier control over their content, even when that content might normally be quite complicated (as in the case of sliders, tables, structured or gridded HTML, and many other things). Possible uses for SuperFlexi are virtually limitless and we're really excited to be adding it as a core module in mojoPortal 2.6.

With mojoPortal 2.6, we're including 8 solutions; Accordion, Banner Slider, Icon Blocks, Image Blocks, Personnel List, Quick Links, Social Media Links, and Tabs. Each of these is demonstrated on the mojoPortal Demo Site. Please note, SuperFlexi does not currently support SQLite and PGSQL. We should have support for those database platforms in a couple of weeks.

To learn more about SuperFlexi, check out the documentation. We've also created a new Forum, just for SuperFlexi.

Blog Post List Module

So, for a very long time, the official guidance for showing a list of blog posts on pages other than the page your blog is on was to use the Feed Manager to consume your blog's RSS Feed. This meant that the Feed Manager had to make an http(s) connection back to your site, consume the feed, cache the feed contents in the database, and then query the database for the cached contents. Granted, the connection and subsequent caching only happened on a set interval but it was very unnecessary. We decided to cut out the middle-man (Feed Manager) and create a module which connects directly to a chosen Blog module and displays the posts. We went a step further by creating a Razor View Engine for this new module. Yes, you read that right, Razor. You can create Razor views to control the display of this new module.

To learn more about the Blog Post List module, head over to the documentation.

Blog Updates

We spent some time on the Blog and besides the wonderful new Razor-enabled Blog Post List, we have added Post Featured Image, Blog Featured Post, and automatic Meta Content creation for Facebook, Twitter, and Schema.org.

Post Featured Image

You can now easily add a featured image to each of your blog posts. This image will be used in the meta elements added to the page for Facebook, Twitter, and other social media outlets. The image is also treated a bit special by the Blog in that it is shown at the top of posts. More on the Post Featured Image.

Featured Post

This feature allows you to set a single post in your blog as "Featured". That post will always be at the top of the post list, even when using the Blog Post List module. More on the Blog Featured Post.

Automatic Meta Content Creation

Sharing posts on social media is a lot easier now because the special meta content markup that is necessary for sites like Twitter and Facebook to show correct titles and post images is now automatically added when you create a post. You can even edit the meta content that is created by editing the post and clicking the "Page Meta Data" tab (we're gonna change that to "Post Meta Data" in the next release).

Other Blog Updates

• Added Display Settings for the Blog module to allow for easier skinning via CSS classes
• Updated to actually move the blog navigation in markup instead of changing places with CSS * floats for easier styling
• Cleaned up a lot of the default markup
• Panels with no child elements will no longer be rendered
• Added option to include comment body in comment notifications
• Added SkinID="Blog" to CommentsWidget
• Removed "Feed Links". These were links to old MSN, Yahoo and other defunct feed managers.
• Added option to allow Post Title to be used as Page Heading when the PageHeading (or PageTitle) control is used in the layout.master for the skin

ASP.NET 4.6.2

mojoPortal now requires ASP.NET 4.6.2, which was released in August of 2016. Most hosting providers already support 4.6.2 so you should be fine upgrading your site. If your host doesn't support it and you purchase a hosting plan with i7MEDIA, we'll move your site for free.

TLS 1.2

mojoPortal will now enforce using TLS 1.2 for outgoing connections. This is important for connections to payment processors like Authorize.Net, WorldPay and PayPal.

Site Settings

The Site Settings page has a lot of options for configuring your site. We're actually working on moving more stuff from the web.config to the UI so it'll be easier to configure your site. Knowing that we are going to be adding even more to Site Settings, we implemented a few changes and reorganized some things to make using the Site Settings page easier. In the future, we plan on breaking this single page up into several smaller and more task oriented pages. In this release, you'll notice the following:

• "Site Title" field moved to the General tab
• "New Site" link removed (to add another site, go to Administration > Site List)
• Skin options grouped on the General tab
• Content Editor options grouped on the General tab
• Registration options grouped on the Security > Main tab
• User Account options grouped on the Security > Main tab
• "Avatar System" option moved to User Account group under Security > Main tab
• Password options grouped on the Security > Main tab
• Security > OpenID tab renamed to "3rd Party Auth"
• OpenID options grouped on the 3rd Party Auth tab
• Windows Live options grouped on the 3rd Party Auth tab
• "Host Name Mapping" and "Folder Name Mapping" moved to a single tab called "Site Mappings".
• "SMTP Settings" tab renamed to "Mail Settings"
• "Mail Settings" tab is always visible with information on how to enable the fields there. New sites will, by default, use this area for SMTP settings. You can enable this on your site by following the instructions here.
• "Default Email From Address" and "Default Email From Alias" moved to "Mail Settings" tab
• Reordered Recaptcha Site/Secret keys to match order on Recaptcha site
• Added several contextual notes throughout the Site Settings page

Change Log

This change log isn't exhaustive because a lot of changes are already listed above. If we didn't list it above, it should be listed below.

Core

• Updated mojoPortal to ASP.NET 4.6.2 and C# 7
• Updated mojoPortal source code to use latest NuGet package management
• Added RazorBridge method to allow use of MVC Razor Templating in Web Forms controls
• Added MVC HTML Helper for internal Avatar and Gravatar use in Razor templates
• Added Link control for inside/outside markup of the link
• Added AutoEscapeStringForCsv method for exporting data in CSV format
• Updated Gravatar in Forums to link to mojo user profile by default
• Fixed File Manager/Page Picker for folder sites and sites running in a virtual directory
• Moved First Name and Last Name fields to the General tab in the User Profile.
• Added option to include comment body in notifications
• Added ExportDynamicListToCSV method to ExportHelper
• Added ImportHelper with GetDynamicListFromCSV method
• Removed calls to jQueryFileTree and removed from ClientScripts
• Removed calls to jQueryLayout
• Removed call to greybox from Contact Form
• Fixed possible XSS bug in help dialog, reported by Jarrod Farncomb of TSS (CVE-2017-1000457).
• Removed WebStore from core (will be available as a separate download from the AddOn store)
• Cleaned up user.config.sample file
• Standardized on "Login" instead of "Sign In" (both were used before now)
• Added Security Protocol information to "Security Advisor" (Administration > Security Advisor)
• Added CombinePath method to DiskFileSystem file system provider.
• Added FolderVirtualPath property to WebFile
• Added NameProperty and ContentProperty to ContentMeta. This allows for creation of meta elements with custom names <meta property="foo" value="bar" /> instead of only allowing for <meta name="foo" content="bar" />

Skinning

• Added FormGroupPanel control for settingrows to control their classes
• Updated Site Settings page to use new FormGroupPanel control
• Updated the Layout.Master.cs to expose SiteSettings (siteSettings), PageSettings (currentPage), isCmsPage and isMobileDevice to the Layout.Master for richer skinning functionality (Check out the layout.master in the Nature theme)
• Updated CSSHander to allow for "https://" and non-http-specified ("//my-domain.com/") url calls
• Updated Avatar.cs with new ExtraCssClass property
• Cleaned up markup of CommentsWidget
• Added themeable properties to CommentsWidget to help with skinning
• Added themeable display settings for Contact Form
• Cleaned up markup of the RelatedNewsletterSetting control
• Cleaned up markup of HTMLCompare feature (used by version history)
• Fixed Inline Editing in HTML Module for selecting files/images
• Fixed CSSHandler for HTTPS URL calls
• Fixed missing CKEditor Image2 Alignment Classes
• Added InsideTopMarkup to replace LiteralExtraTopContent in BasePanel
• Added InsideBottomMarkup to replace LiteralExtraBottomContent in BasePanel
• Removed the .LESS CSS Utility from the Administration area. We recommend using a tool like Prepros for LESS management.

mojoPortal has been getting some media attention lately, like this article from HostingAdvice.com. We've got some exciting new updates coming soon too, including new modules, expanded blog features, and new content creation tools. We've been working hard on things and hope to have a release ready soon.

We can truly appreciate a CMS that simplifies content entry and management for novice website owners without compromising the functionality demanded by seasoned developers. Kudos to the mojoPortal team for optimizing web development for folks across the board!

Alexandra Leslie, HostingAdvice

Thanks to the community for remaining patient as we work on these updates. mojoPortal is going to be better than ever.