coderberg/residencecms

Open Source Property Management System based on Symfony 7

residencecms's Issues

Feature request: expand search form with features

Expand the search form with an extra field / fields to select features. For example:
I want to search all properties with Air Conditioning AND Balcony

How to change the menu order of the pages

If I create a new page I would like to place it in the menu where I like. Now it seems it has some default order.

Feature request: Ability to select the currency of the price

It would be nice if the currency of a property is selectable, or if you can change the default currency system wide. Now it shows a dollar sign.

Make error red

Suggestion to make errors red to make them more obvious

A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1

A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allows a low-privilege user to create malicious property content with HTML inside it, which acts as a stored XSS payload. If this property page is visited by anyone including the administrator, then the XSS payload will be triggered.

Below is a simple step-by-step on how to reproduce the issue:

1. Login as a low privilege user (In this case we can use the default low-privilege user).

2. Create or Edit one of the user owned property (In this case we can user the default property owned by the user).

3. Fill the content form with XSS payload using the Code View feature. Before saving it make sure to go back using the usual view to see if the HTML is rendered or not.

4. After saving the new property content and clicking the 'Finish Editing', go to the page and see the XSS is triggered. In this case I use administrator account to trigger the XSS.

Feature request: Option to change the contact details per property

Sometimes a property is sold by different agents. It would be nice if you could select the agent on a per property basis.

Now it works like the one who creates the porperty is in fact the onwer. But I think it would be better if that is selectable.

Bug: Pages on dashboard shows 1 even though there are more

Even though there are more than 1 pages, the dashboard says it has only 1

Feature: multiple file upload

Hi Coderberg,

It would be very nice if it was possible to upload more images at the same time. Really a time saver.

Migrations fail

Tried to set it up locally

Migration 20181012133837 failed during Execution. Error An exception occurred while executing 'CREATE TABLE user (id INT AUTO_INCREMENT NOT NULL, full_name VARCHAR(255) NOT NULL, username VARCHAR(255) NOT NULL, phone VARCHAR(255) NOT NULL, email VARCHAR(255) NOT NULL, password VARCHAR(255) NOT NULL, roles JSON NOT NULL, UNIQUE INDEX UNIQ_8D93D649F85E0677 (username), UNIQUE INDEX UNIQ_8D93D649E7927C74 (email), PRIMARY KEY(id)) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci ENGINE = InnoDB':

SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near 'JSON NOT NULL, UNIQUE INDEX UNIQ_8D93D649F85E0677 (username), UNIQUE INDEX UNIQ_' at line 1

In AbstractMySQLDriver.php line 79:

An exception occurred while executing 'CREATE TABLE user (id INT AUTO_INCREMENT NOT NULL, full_name VARCHAR(255) NOT NULL, username VARCHAR(255) NOT NULL
, phone VARCHAR(255) NOT NULL, email VARCHAR(255) NOT NULL, password VARCHAR(255) NOT NULL, roles JSON NOT NULL, UNIQUE INDEX UNIQ_8D93D649F85E0677 (user
name), UNIQUE INDEX UNIQ_8D93D649E7927C74 (email), PRIMARY KEY(id)) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci ENGINE = InnoDB':

SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server ve
rsion for the right syntax to use near 'JSON NOT NULL, UNIQUE INDEX UNIQ_8D93D649F85E0677 (username), UNIQUE INDEX UNIQ_' at line 1

In PDOConnection.php line 90:

SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server ve
rsion for the right syntax to use near 'JSON NOT NULL, UNIQUE INDEX UNIQ_8D93D649F85E0677 (username), UNIQUE INDEX UNIQ_' at line 1

In PDOConnection.php line 88:

SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server ve
rsion for the right syntax to use near 'JSON NOT NULL, UNIQUE INDEX UNIQ_8D93D649F85E0677 (username), UNIQUE INDEX UNIQ_' at line 1

Не пускает в админку

Ничего не делал - почему то нет доступа в админ панель:(

В чем может быть проблема?

Как загрузить изображения в слайдер?

Валерий здравствуйте. Прекрасная работа! Подскажи пожалуйста что нужно сделать, чтобы изображения, которые я загрузил к объекту недвижимости появились в слайдере к объявлению. Я загрузил несколько фото к объявлению, но они не показываются в слайдере и их нет при редактировании фото объявления. В тех объявлениях, что идут с установкой системы изображения присутствуют, но после добавления новых фото то их потом тоже нет. Или это пока не реализовано? В любом случае спасибо огромное за труды и успехов в проектах. Я первый раз поставил cms на symfony... очень впечатляет.

Batch Uploading

What would be the best way to add batch uploading of listings and photos?

Documentation: What is the difference between Neighborhood and District

I do not exactly undertsnad what the difference is and why this is useful. Maybe because I am in Spain :-) ?

Cyrillic slug and paths, do not work

I found problem, with cyrillic routes, eg. path/slug.

I will try to fix this and will make pull request.

Also, I will translate ResidenceCMS to Bulgarian and will make additional pull request for this.

Ошибка версии MariaDB при установке

Здравствуйте! MariaDB 10.3.29, но при установке выдает ошибку:

In AbstractMySQLDriver.php line 98:

An exception occurred while executing 'ALTER TABLE users RENAME INDEX uniq_8d93d649f85e0677 TO
UNIQ_1483A5E9F85E0677':

SQLSTATE[42000]: Syntax error or access violation: 1064 You have an error in your SQL syntax; c
heck the manual that corresponds to your MariaDB server version for the right syntax to use nea
r 'INDEX uniq_8d93d649f85e0677 TO UNIQ_1483A5E9F85E0677' at line 1

https://snipboard.io/JRTjOG.jpg

Какую версию необходимо использовать?

installation problem

Hello I have problem in step 2

Could not find package coderberg/residence-cms with stability stable in a v
ersion installable using your PHP version, PHP extensions and Composer vers
ion.

Does anyone has solution for this?

Installation error

At the end of the migration, such errors were issued:
php bin/console doctrine:migrations:migrate

Migration 20191107180849 failed during Execution. Error An exception occurred wh           ile executing 'ALTER TABLE area CHANGE city_id city_id INT NOT NULL':

SQLSTATE[HY000]: General error: 1832 Cannot change column 'city_id': used in a f           oreign key constraint 'FK_D7943D6888823A92'

In AbstractMySQLDriver.php line 106:

  An exception occurred while executing 'ALTER TABLE area CHANGE city_id city
  _id INT NOT NULL':

  SQLSTATE[HY000]: General error: 1832 Cannot change column 'city_id': used i
  n a foreign key constraint 'FK_D7943D6888823A92'


In PDOConnection.php line 80:

  SQLSTATE[HY000]: General error: 1832 Cannot change column 'city_id': used i
  n a foreign key constraint 'FK_D7943D6888823A92'


In PDOConnection.php line 75:

  SQLSTATE[HY000]: General error: 1832 Cannot change column 'city_id': used i
  n a foreign key constraint 'FK_D7943D6888823A92'

php bin/console doctrine:fixtures:load

 Careful, database "nptz" will be purged. Do you want to continue? (yes/no) [no]:
 > yes

   > purging database

In AbstractMySQLDriver.php line 42:

  An exception occurred while executing 'DELETE FROM metro':

  SQLSTATE[42S02]: Base table or view not found: 1146 Table 'nptz.metro' doesn't exist


In PDOConnection.php line 43:

  SQLSTATE[42S02]: Base table or view not found: 1146 Table 'nptz.metro' doesn't exist


In PDOConnection.php line 41:

  SQLSTATE[42S02]: Base table or view not found: 1146 Table 'nptz.metro' doesn't exist

Isn't swift_mailer obsolete?

Since symfony/mailer is included in the package, I think this should be prefered to the swiftmailer package (which is also inlcuded).

Suggestion to rewrite the code to use symfony/mailer instead of swift_mailer

Question: what is the roadmap for this?

Hi Coderberg,

Really love this install. It has almost everything I need. Just curious what the plans are for the future?

Thanks for sharing this nice peace of work!

Translations

Hi Coderberg, in the code I can see you have anticipated on translations. If you like, I can take care of the dutch translation

Styling not loading

Please assist on the issue of styling not loading correctly after installation.

Documentation: How to upgrade

Hi Coderberg,

It would be nice to explain in the readme how to upgrade from 1.3.2 to 1.3.3. I had to do a complete new install cause I did not know how.