A customer was not happy to see is review with is clear name. I noticed, there was no way to edit it. I remembered, we did it that way long, long ago, just to reduce Fakereviews by shopowners. It sounds nice, virtuemart cant be misused, but in fact it was stupid. I doubt any person has a greater trust in a review, just because the shop runs on VirtuMart. So I reconsidered. The new review system should work so, that any customer can post with the given name, and the own name is just suggested. Shopowners can change now also the name and the message in the backend, but not the voting (may come later). So it is simpler to add a note or to change the name if a customer requested that.
The seconed feature is a replacement of the "chosen dropdown js" against the "choices dropdown js". The difference is that "chosen" is outdated and that "choices" works native, without jQuery. Choices is also the "right choice" for joomla 6. But you can relax, ... in vm 4 it is just activated for the backend. You can use a hidden config to use it also in the frontend. So we came to the next topic, this feature was implemented for VirtueMart 5.

DOWNLOAD VirtueMart 4.6.8
NOW (needs Membership)

VirtueMart 5 is already running on Joomla 6. It has also some extra performance features added already.

The current idea is to remove the need of jQuery and to replace the core jQuery stuff by native javascript. It is also planned to use more static functions, which may break some extensions. Just one example, why that makes a lot sense. Images are displayed with the mediahandler. It makes not really sense to write for any image the function displayFileHandler into the RAM. So most of these functions are static now, which means they are written only one time into the RAM. So for templaters, nothing changes, these functions are of course still dynamic. But it can happen, that complexer extensions for example use the function "displayFileHandler" to display the media edit. But in anycase it is very simple to update outdated code. 

TEST VirtueMart 4.9.3
NOW

Interesting for shopadmins

• Fixed couponhandling. Moved the token check before the function setCouponCode
• added jpeg to multiple image uploads
• product model, small fix for correct search of products in a subcategory of a selected category
• added a hidden config for product slug handler. Can be set to "changed", which changes the slug if productname got changed, or "always"
• Enhanced 404 handling, parts of the router used a fallback, which was wrong
• Userfields in cart add captcha only, if it is allowed to register without product in cart
• PayPal checkout, order approved should not sent an email anylonger
• PayPal checkout configuration, removed invalid order stati in order dropdowns

Interesting for developers

• plgVmInitialise was just for the FE, added trigger plgVmInitialiseBE for the BE
• calculatorH enhanced the old rules cache. New calculator is now created without using delivery country or state. The new cache handles per vendorid, delivery country and states. All in a new static function loadAllRulesCached
• manufacturer model added triggers plgVmBeforeStoreManufacturer and plgVmAfterStoreManufacturer
• user cache works now for id 0 too
• vmtable self::$loadedX => $this->_loadedX
• Field vmorderstate added option to exclude stati
• added to vmTables the possibility to add a where (and not using the primary key)

DOWNLOAD VirtueMart 4.6.6
NOW (needs Membership)

Just Fixes

• Category model, fixed missing parents in case loaded by cache, but loaded by router without parents
• Little fiix by stAn of RuposTel for authorizenet plugin.
• Small fix in custom view to prevent error if there is no custom
• Some minors, removed setRouterVars after loadConfig in the module
• little fix for the getChildCategoryListObject to prevent str_replace with null
• catched 500: count(): Argument #1 ($value) must be of type Countable in reviews, if no review given
• cart helper, function add fixed the quantity array if it does not fit the given product id array

Optimisations

• changed currencydisplay to reuse already loaded vendor currency
• currency model, found uncached query and replaced against default getVendor function (likely cached or reused)
• shoppergroup model, the function getShoppergroup and getDefault share their result in the cache now, which spares 2 sql calls
• cart helper, $this->setCartIntoSession, removed the second param true, because actually we need it only one time at begin to prevent that a checkout is fired more than one time (spares 4-6 sql calles)

So first I added a Plugin, which sets the missing token per trigger as default html. But most people did not see it, so the team asked to add a fix directly in the core. Later I let a community user test the new option. The user asked an AI where to find that option and the AI was surprisingly perfectly updated by the committs of the svn, but then failed with the right version numbers. Freaky at meta level correct, but wrong on the facts. Just as an interesting sidenote. And it used the expression. "Auto token system". Sounds great. So lets use "the new VirtueMart auto token system" ;-)

An XSS found again by Adam Wallwork. This time I did general update of our filters, many functions got enhanced. Some filters are now always active, we do not leave it to the developers. This version is NOT working on Joomla 6, we will release a new VirtueMart 5 too match all the changes.

For Updaters

If you get the error in the cart "Invalid token". Please read this tutorial https://docs.virtuemart.net/tutorials/templating-layouts/fix-missing-token-in-checkout-virtuemart-4-6-x

What else happened?

We heavily work on a namespaced VirtueMart version, which runs without legacy plugin on Joomla 3 up to Joomla 6.

A small feature has been added for the checkboxes of “tos” and similar. It is now possible to use an article id or alias in the "default" field to load a joomla article if custom userfield and layout "tos" is selected. It is also possible to set the text to the "description" field only. Very handy for additional contract terms.

We have replaced our old TcPdf library with the official updated version 6.8.2 of TcPdf. The versioning was taken from the library. So it looks like a high jump, but the library has no new features, but is better secured and adapted for PHP8.

We have opened a new discord server which is in general free for any community member. The forum shows the invite link, if you are at least in the "Jr. Member" group, which is the first after "Beginner". You are welcome to join us there.

DOWNLOAD VirtueMart 4.4.8
NOW needs membership

DOWNLOAD VirtueMart 4.4.6
NOW with a membership

[Update] After some further investigation together with the Joomla core team, this issue can not be exploited in the latest Joomla versions. If you have Joomla 5.1.4 or later or 4.4.8 or later installed, the issue is already fixed. We did not check against joomla 3.

[Update 2] Sorry guys, a little error found. If you store a product with media, the checkbox "is image" is not preselected. The fix is ready, but this time we want to take more time for testing to prevent such stupid errors (mea culpa).

• Adjustments for Tableupdater to prevent unecessary updating of keys in mysql8
• vmUri extended whitelist, function works now also with given query
• vRequest extended function getVar to work with given source
• install.sql fixed TINYINT(4) against TINYINT(1)
• added the option to add no searchfield
• added setConvertInt also for plugin tables
• added property "isImage" for medias, works BC
• fixed currency if none is set
• fixed adding of new states in the new admin layout
• fixed problem in router
• user registration fix if not in checkout

DOWNLOAD VirtueMart 4.4.2 with the Membership
NOW

Features

• Template vmBasic, Added register and checkout button, removed registration fields from cart view.
• Bundles added option "orderableBrowse" for disabling add to car in listing
• Added option calculateVariantsOnFreshLoad, which directly calculates the price for the selected variant (with php)
• Fixed dragndrop for customs, products, categories, countries
• Added missing states list and states edit layouts to new admin template
• Hiddden config reuseorders, default is set to 0/off now

A known joomla ecommerce component announced last weeks, that they stop development. Of course some eager developers created a fork, but they will run into the same problems as the prior developers. And these problems are similar to our problems, in that it is not enough to just keep the core development paid and ongoing, we must as a community also keep our 3rd party developers and encourage new ones to join us. 

DOWNLOAD VirtueMart 4.4.0
NOW

Lets create a VirtueMart for Joomla and Wordpress