This website is using cookies
×
  • October 31, 2026

    Version 5.4.10.5

    Checkout from the cart panel. The open cart panel offered only a Show Cart link. It now ends with a Check Out Now button, shown once the cart has products and kept in step when products are added without a page reload.

    Added-to-cart pop-up. Continue Shopping and Show Cart showed as bare text in a box sized to them. They are now proper buttons, and on a small phone the pop-up fits the screen.

    Ask a question pop-up. On phones the Ask a question form was wider than its pop-up window; the fields now fit it.

    Checkout page on phones. The shipment and payment boxes ran their text against their own left edge. They now have the same inset as the rest of the page.

    Phone cart button. With products in the cart, the cart count on the phone's cart button was cut off; it now shows in full, and the button is a cart icon like the buttons beside it.

    Colour setting. One of the template's colour rules printed the colour setting followed by a fixed #4c4c4c, which made the whole value invalid, so the setting was ignored. It applies now.

    Phone tab labels. On phones the home tabs read 0, 1 and 2 (the template printed each tab's number there); they now show their titles.

    Forms. On the login page the username box was 678px wide beside a 1130px password field. Every text field in the login, registration and account forms now takes the full row.

    Second phone menu. The second phone menu button repeated the main menu; it now shows the shop's category menu (Sample Menu 2), with all its levels, on every page.

    Phone header. The phone menu script is updated to the current version: opening a phone panel no longer dims the logo and menu buttons, and tapping outside an open panel closes it.

    Phone spacing. On phones the contact page heading started 32px in (two paddings stacked); it now lines up with the text at 20px.

    Module positions. The template tested pairs of module positions (the two footer columns) with a Joomla 3 expression that Joomla 4 and later read as a single position name, so the test always failed; each position is now checked on its own.

    Print view on phones. The print view had no mobile viewport, so on a phone it showed a shrunken desktop page; it now fits the screen.

    Error page. An error caused by a missing item no longer prints the server's file paths.

    Defaults for a fresh install. The site name / logo now links to the home page and the slideshow is switched on with autoplay on desktop and phones (logoLinked, cam_turnOn, cam_autoAdvance, cam_mobileAutoAdvance default to on). Existing sites keep their saved settings.

    K2 leftovers removed. The template still carried files and styles for K2, which is not part of the Joomla 5/6 template: the K2 Content module slider layout (html/mod_k2_content), css/k2.css, css/k2.print.css, K2 selectors in the colour presets, the K2 Items colour rules and a K2 loading image (images/system/k2CalendarLoader.gif). They are removed. The K2 Item Background option is removed; the K2 Item Link option keeps working (it colours module and product-page links) and is renamed Module Link Color.

    Shared stylesheet. The template's Bootstrap compatibility stylesheet is updated to the current version used across our templates. Your own template settings are not changed.

    Removed. 24 JavaScript and CSS files nothing loads (324 KB), among them jQuery 1.8.1, Superfish, Modernizr and old Internet Explorer stylesheets; the unused Bootstrap 2 stylesheets (css/bootstrap/, css/bootstrap.css); stray archives inside the template (css/bootstrap.zip, html/com_content/featured.zip, html/com_content/category/blog_item.zip); an override folder Joomla never reads (html/com_content/__featured); 5 template options nothing read (old drop-down menu effect settings and similar); a reference to a module style the template does not have (login pop-up); stylesheet references to 15 images that do not exist, and links to stylesheets that do not exist.

    October 19, 2026

    Version 5.4.10.4

    VirtueMart address form. The address form used a 2015 copy of the template's VirtueMart layout in place of its current one. The current layout is back, with its Joomla 3 class names replaced by Joomla's current ones.

    Login fields on phones. The username and password fields were smaller than 16px on phones, so an iPhone zoomed the page in when one was tapped and did not zoom back out. Login, registration, profile and password-reset fields are now 16px on phones.

    Missing image. Some pages, the cart among them, asked for images/moduletable-h-bg.png, which the template does not include. The reference is removed.

    Template Options screen. The icons on the template's Options screen came from Font Awesome 4.6.3 on MaxCDN, which no longer serves it, so they were missing. They now load Font Awesome 6.5.2 with its version 4 name shims from cdnjs.

    October 19, 2026

    Version 5.4.10.3

    Security. The template's menu layouts printed a menu item's note and link exactly as entered, so markup typed into a menu item's Note or Link field reached the page. Both are now escaped, as Joomla's own menu layouts do.

    Colours with transparency. A colour chosen with the colour picker's opacity slider (saved as an 8-digit colour such as #rrggbbaa) was replaced with black. Colours with transparency are now used as chosen.

    October 19, 2026

    Version 5.4.10.2

    Product extras. The product module's buttons that reveal a product's extra fields did nothing and raised a script error. The small script they call had been removed by mistake and is back.

    Page language. The page had no opening <html> tag, so browsers, screen readers and search engines were not told the page's language or text direction. It now declares both from the site's language settings.

    Security. The product image zoom settings (zoom type, lens shape, lens size and cursor) are now checked before they are written into the product page's script.

    October 16, 2026

    Version 5.4.10.1

    Store owners. The cart page no longer shows an error when a store owner or vendor is logged in.

    Quickstart. Weblinks updated to 5.2.0.

    October 14, 2026

    Version 5.4.10

    Joomla 5.4.10. The Quickstart now installs Joomla 5.4.10 (Joomla 5.4.10 release notes), and the template version is now 5.4.10 to match.

    Error pages. "Page not found" and "access denied" pages now show inside the template, with its header, menus and footer, and fit a phone screen.

    Quickstart. A fresh install no longer lists stale update notices.

    October 2, 2026

    Version 5.4.9.1

    Quickstart fix. The Quickstart no longer fails to install on MySQL hosts with a "prepared statement protocol" error. Thanks to Iryna for reporting this. The template itself is unchanged apart from its version number.

    Quickstart. Removed leftover files from the quickstart's top folder.

    September 30, 2026

    Version 5.4.9

    Joomla 5.4.9. The Quickstart now installs Joomla 5.4.9, a security and bug-fix release (Joomla 5.4.9 release notes), and the template version is now 5.4.9 to match. There are no visual changes. Installing the template update does not update Joomla itself; update Joomla from System → Update → Joomla.

    September 30, 2026

    Version 5.4.8.5

    Fix. After the previous security update, print and email views, popup windows and the VirtueMart checkout step (pages served with tmpl=component) could return an error page. The template's component.php now defines the escaping helper it uses. There are no visual changes. Please update if you installed the previous version.

    September 28, 2026

    Version 5.4.8.4

    Security update. Module, menu and tab titles are now escaped wherever the template writes them into your pages (module headings, title attributes and the mega menu), so a title containing a quote or markup can no longer break out of its place in the page. There are no visual changes. Recommended for all sites.

    September 28, 2026

    Version 5.4.8.3

    Security update. Every template setting that is written into your pages is now escaped for the place it lands in (HTML, attributes, CSS and JavaScript), so a setting value can no longer break out of its context. The error page now escapes its message and title too. There are no visual changes. Recommended for all sites.

    September 10, 2026

    Version 5.4.8.2

    Fixed a problem where a large logo could fill the whole screen on phones. The stylesheet that keeps this template working with current Joomla was letting the header logo draw at its own full size on small screens instead of scaling it down to fit the space, so a logo wider than the phone screen — common, since logos are usually exported at 1500 pixels or more to stay sharp — pushed the header out and showed visitors a giant close-up of one or two letters instead of the site. Logos now scale down to fit on every screen size, and a logo already small enough to fit is displayed exactly as before. Update the template to pick this up; if you built your site from the Quick Start, a rebuilt one is on your downloads page.

    September 3, 2026

    Version 5.4.8.1

    Maintenance release.

    • Fixed: add-to-cart forms were missing their security token. Affected add-to-cart buttons in the product listings and on the product detail page. This release ships the corrected forms.

    Both the template package and the Quick Start have been rebuilt for this release. Download the latest from your member area.

    August 22, 2026

    Version 5.4.8

    First Joomla 5 native release, and the first Enfuse release from Cybersalt. Enfuse has been brought forward from the previous download (16.12.2024 5.1.2/4.2.12) to Joomla 5.4.8 + VirtueMart 4.8.0 + PHP 8 + Bootstrap 5. The page layout in index.php now uses Bootstrap 5 rows and columns; the VirtueMart overrides and module content keep their Bootstrap 2 classes and are laid out on Joomla 5’s Bootstrap 5 by a new compatibility stylesheet, so existing content keeps its layout. This release adds a rebuilt phone layout with a slide-in menu and a toolbar, a favicon tool, a bundled colour picker for all 80 colour settings, Joomla’s own on/off switches, Font Awesome 6 and twelve current social networks. Every Joomla 3 class call is gone (274 → 0), and the VirtueMart login page no longer returns a server error. jQuery still loads for the camera slideshow and the shop scripts; the Superfish/Supersubs, Backstretch, DropKick, jQuery Mobile and Internet Explorer scripts are no longer loaded. Compared with the previous download: 298 → 303 files, 10 added, 5 removed, 37 modified. The template version is now 5.4.8, matching the Joomla release it is built for.

    Added

    Bootstrap 5 compatibility layer

    • New css/bs2-bs5-bridge.css. It lays out Enfuse’s Bootstrap 2 markup on Joomla 5’s bundled Bootstrap 5: the .row-fluid / .spanN grid and offsets (also inside Bootstrap 5 .row containers), the 1,170 px container, hidden-phone / visible-phone and the other responsive helpers, tab panes, collapse, the .in → .show state of dialogs, and phone stacking of .spanN and .col-md-N columns.
    • The bridge maps Joomla’s own icon classes (icon-eye on password fields, icon-angle-left / -right / -double-left / -double-right on pagination) to Font Awesome 6 glyphs in the colour of the button they sit on, and retires the Bootstrap 2 Glyphicons sprite.
    • The bridge is the last template stylesheet before virtuemart.css in the page head, with a file-time version marker (?v=), so a change shows straight after an update.
    • New js/cs-jq-compat.js: restores three jQuery 1.x calls that Joomla 5’s jQuery 3 removed and the bundled scripts still use (.live(), used by the camera slideshow’s play/stop controls; .offset() on the window; .load(fn) as a load-event shortcut).
    • New js/cs-bs2-modal-shim.js: Bootstrap 2 wrote a dialog as .modal > .modal-header, while Bootstrap 5 needs .modal > .modal-dialog > .modal-content. The shim wraps any dialog in the old shape before Bootstrap opens it, so every dialog in the template (not only the log-in box) opens and closes under Bootstrap 5.

    Phone layout (up to 767 px)

    • New js/cs-mobile.js. A menu button in the logo row opens a slide-in drawer built from the site’s real nested menu. Sub-menus open in place with a plus control, and both phone menus indent their sub-menus the same way and show the active item in bold.
    • A phone toolbar under the logo with Section menu (the shop menu), Log in, Register, Search and Follow us (a share icon that opens the social links). Each button’s icon colour is worked out from its own background, and the chip colours come from Enfuse’s own blue.
    • Search opens a full-width panel under the header with a 44 px field at 16 px text, so tapping it does not zoom the page, and a Search button with a magnifier icon. The redundant “Search” label is hidden from sight but kept for screen readers. On desktop the search drop-down is at least 320 px wide.
    • The cart opens as a panel at a readable width, centred on the screen.
    • The header is a full-width band in Enfuse’s blue (rgb(43,110,168)) with the site name and slogan in white (contrast 5.39:1), inset from the screen edge. The slideshow sits below the header instead of under it.
    • The slideshow’s previous and next arrows are shown on touch screens as finger-sized buttons with a centred chevron (before, they only appeared on mouse hover, so there was no way to change slides on a phone or tablet), and the slide markers are dots.
    • Product tiles sit two per row at equal height with their Add to Cart buttons on one line; client logos pair up two per row.
    • The footer and the dark “More about” band run edge to edge with their text inset.
    • Section spacing is reduced for phones: the 81 px gap under the logo strip is 40 px, and the home page at 375 px wide is 3,729 px long instead of 6,432 px.
    • On the account and registration pages, the side modules no longer stack above the form.
    • VirtueMart’s registration and profile forms, which VirtueMart draws as a table, use the full screen width instead of about a third of it.
    • The “Follow us” pull-tab at the foot of the page, which only responded to mouse hover, is hidden on phones; the toolbar’s Follow us button replaces it.
    • Header bands with nothing in them (including space kept for a search box the phone header shows elsewhere) take no space, the footer’s social icons are centred, the back-to-top control is round, and the page cannot be pushed sideways at phone or tablet widths.

    Favicon tool

    • New Favicon tab (fieldset faviconsettings) with a media field (favicon) and a crop tool (favicontool, field class fields/favicontool.php). Pick one image and the template builds favicon.ico (16, 32 and 48 px), 32, 192 and 512 px PNGs and a 180 px Apple touch icon, and links them for you. With thanks to Gianluca, whose favicon question inspired this tool.
    • Two new helpers in index.php produce the set: phFaviconSet() and phIcoBytes().
    • 10 new language strings in en-GB.tpl_enfuse.ini (71 → 81), e.g. TPL_ENFUSE_FAVICON_TAB, TPL_ENFUSE_FAVICON_LABEL, TPL_ENFUSE_FAVICONTOOL_CREATE.

    Colour picker and Options screen

    • New custom field fields/colorpicker.php with the open-source Coloris picker shipped inside the template (js/coloris.min.js, css/coloris.min.css). All 80 colour settings (color1–color77, sitenamecolor, slogancolor, cam_loaderColor and cam_loaderBgColor) moved from Joomla’s basic color field to type="colorpicker" with a live swatch.
    • New fields/adminui.php: help banners run across the full width of the Options screen instead of a narrow column, and the template’s Details panel follows Joomla’s light or dark admin theme.

    Modern social network support

    • Seven new social services, each with a URL field and an on/off switch, off by default: Instagram, Threads, Bluesky, Mastodon, TikTok, Pinterest, Discord (instagram/instagramON … discord/discordON). With X, Facebook, LinkedIn, YouTube and Vimeo that makes twelve networks plus RSS.
    • New URL fields default to #TYPE-URL-HERE, and the Twitter slot is labelled X (formerly Twitter).

    Security helpers

    • Three helper functions at the top of index.php: phEsc(), phHexColor() and phCssDim(), each guarded with function_exists(). Details under Security.

    Changed

    Joomla 5 platform

    • Built for Joomla 5.4.8 and VirtueMart 4.8.0 (the previous download was labelled for Joomla 5.1.2 and VirtueMart 4.2.12).
    • The template loads Joomla 5’s Bootstrap 5 (/media/vendor/bootstrap/css/bootstrap.min.css) instead of its own Bootstrap 2 files css/bootstrap/bootstrap.min.css, bootstrap-responsive.min.css and bootstrap-extended.css.
    • Layout markup in index.php: the page rows are .row instead of .row-fluid, and the columns use Bootstrap 5 classes (header span6 → col-md-6, side columns col-md-3, main column col-md-6 / -9 / -12, module rows col-md-2 to col-md-12). The footer columns keep spanN and are laid out by the bridge.
    • css/template.css: the product-tile rule .span2.sp20 also matches .col-md-2.sp20.
    • templateDetails.xml version 16.12.2024 5.1.2/4.2.12 → 5.4.8. The Description tab shows “Template Version: 5.4.8 (2026-08-21)”, and the index.php file header carries the same version and a Cybersalt Consulting Ltd copyright line.

    J3 → J5 API migration

    • All 274 Joomla 3 static class calls removed, each moved to its namespaced Joomla 4+ form: JFactory → Factory, JText → Text, JHtml / JHTML → HTMLHelper, JRoute / JROUTE → Route, JURI → Uri, JModuleHelper → ModuleHelper, JComponentHelper → ComponentHelper, JPluginHelper → PluginHelper, JDocumentHTML → HtmlDocument, new JRegistry() → new Registry(), and the rest.
    • Template files (calls before → after):
      • index.php 13 → 0; error.php 13 → 0, including JError::raiseWarning() (removed in Joomla 4) → new \Exception(…, 404); component.php 1 → 0.
      • html/com_content/__featured/default_item.php 38 → 0, default_links.php 4, default.php 2 → 0; html/com_content/article/energize-blog.php 22 → 0.
      • html/mod_login/default.php 22 → 0; html/com_virtuemart/user/login.php 19 → 0, edit_address.php 6 → 0.
      • html/mod_virtuemart_product/single.php 19 → 0, default.php 17 → 0, new-single.php 13 → 0; html/mod_k2_content/Slider/default.php 18 → 0.
      • html/com_virtuemart/productdetails/default.php 16 → 0, plus default_images.php 4, default_reviews.php 4, default_addtocart.php 3, default_customfields.php 1 and default_showcategory.php 1 → 0.
      • html/com_virtuemart/virtuemart/default_products.php 10 → 0, default.php 1, default_categories.php 1 → 0; html/com_virtuemart/category/default.php 8 → 0, categories.php 1 → 0.
      • html/com_virtuemart/cart/default_shopperform.php 6 → 0, default_pricelist.php 5, default_coupon.php 1 → 0; html/com_virtuemart/askquestion/form.php 3 → 0.
      • html/mod_virtuemart_currencies/default.php 2; html/mod_breadcrumbs/default.php, html/mod_search/default.php, html/mod_virtuemart_cart/default.php 1 each → 0; html/mod_virtuemart_manufacturer/default.php JROUTE → Route.
    • In all, 31 of the 59 PHP overrides under html/ were modified.

    Template Options screen

    • 118 field type changes in templateDetails.xml: the 80 colour settings (color → colorpicker), and the 38 remaining legacy class="switch" checkboxes are now Joomla’s native on/off switchers (type="radio", layout="joomla.form.field.radio.switcher"), for example RSSON, H1TitleImgText, H2TitleImgText, cam_autoAdvance, cam_hover, cam_navigation, cam_mobileAutoAdvance and cam_fx_multiple_on. With the new social switches the template has 45 switchers and no legacy checkboxes (43 before).
    • Fields 199 → 207, tabs 9 → 10. Tab names are shorter: Basic, Site Name & Slogan, Drop Down Menu, Header & Footer Custom Code, Built-in Slideshow, Product Slider, Product Images, Theme.

    Fonts and icons

    • The Google Fonts WebFontConfig JavaScript loader (webfont.js from ajax.googleapis.com) is replaced by a direct stylesheet link for Open Sans Condensed with preconnect hints and display=swap (WebFontConfig 1 → 0).
    • Front end: Font Awesome 4.6.3 from the shut-down MaxCDN (font-awesome.min.css) → Font Awesome 6.5.2 from cdnjs (all.min.css + v4-shims.min.css), so existing fa fa-* class names keep working.
    • The footer social links are Font Awesome 6 brand glyphs (fab fa-*) with a screen-reader label, in place of one PNG image per network (twitter.png, facebook.png and so on).

    Login dialog

    • The account link opens the login dialog (#LoginForm) with Bootstrap 5’s data-bs-toggle="modal" and data-bs-target instead of Bootstrap 2’s data-toggle; the jQuery .toggle() that showed it is removed.
    • The Close link is now a <button> with data-bs-dismiss="modal"; its inline jQuery .hide() / .modal('hide') handler is gone. The close control in the title bar is a proper × on the right.
    • The dialog fits the screen without scrolling inside it; its fields are 44 px tall at 16 px text, so a phone does not zoom when one is tapped; and the Login button has space between it and the password field.
    • The Remember Me checkbox sits to the left of its label, and the forgotten-password, forgotten-username and register links are plain links instead of a bulleted list.

    Menus, background and selects without old jQuery plug-ins

    • Drop-down menus open on hover through nav.css and the bridge instead of the Superfish/Supersubs plug-ins. A transparent strip spans the gap between a menu item and its drop-down, so the menu stays open while the pointer moves down to it. Because of this, the Drop Down Menu tab’s animation settings (dropopacity, dropheight, dropwidth, dropspeed) and the first drop-down width (dropdownhandler1) no longer have an effect.
    • The body, header, tab-band and bottom-band background images (bodybackgroundimage, top_bg, tabs_handler_bg, bottom_handler_bg) are set with CSS (background-size: cover, centred) instead of jQuery.backstretch.
    • The currency selector is a plain HTML select instead of DropKick.

    Desktop page refinements

    • Header links: My account, Register, FAQ, Help and Support sit on one line with even 20 px gaps and one shared middle (they are two separate lists; the 52 px gap was a list indent). The account and register icons, drawn from the top-icons.png sprite, line up with their words.
    • Menu bar: the cart module no longer sets the bar’s height (now 50 px instead of 82 px), and the cart icon, its label and the search control share one centre line.
    • Section spacing: #top-modules padding 90 px → 48 px top and bottom, and the 350 px lead-in above the dark band → 90 px.
    • The slogan keeps its intended line break: the slogan text is escaped, then <br> alone is allowed back.

    Stylesheets and scripts

    • The bridge, the new helper scripts and the favicon carry a version marker (?v= file time), so changes to them show straight after an update.
    • Template-side jQuery call sites: 101 → 89 (in index.php 40 → 27).

    Template overrides

    • html/mod_login/default.php: $type = $type ?? 'login';, and html/mod_breadcrumbs/default.php: $moduleclass_sfx = $moduleclass_sfx ?? '';. Joomla 5 no longer passes these variables to the layouts. See Fixed.

    Fixed

    Pages that returned a server error

    • The shop’s login page returned a server error on Joomla 5. The VirtueMart login override (html/com_virtuemart/user/login.php) called JHtml::_('behavior.formvalidation') and JHtml::_('behavior.modal'), which Joomla removed (“500 – behavior::formvalidation not found”), and JDispatcher::getInstance(), a class that no longer exists. Any visitor, signed in or not, could hit it. It now uses behavior.formvalidator, drops the modal call, and triggers plgVmDisplayLogin through Factory::getApplication()->triggerEvent(). With thanks to Zoltán Szász, whose report led us to this fault across our VirtueMart templates.
    • A product module using the new-single layout stopped the page with the same kind of error: html/mod_virtuemart_product/new-single.php called JHTML::_('behavior.modal'). The call is removed.

    Log-in dialog and account forms

    • A drop-down arrow beside the Log in button submitted the form with an empty password and sent the visitor to an error page. It was a Bootstrap 2 data-toggle="dropdown" button with no type, so under Bootstrap 5 nothing opened and the click submitted the form. The arrow is hidden, and the three links it was meant to reveal (forgotten password, forgotten username, register) show in the dialog.
    • Where passkey sign-in is enabled, the passkey button’s icon filled the log-in area as a large black shape. Inline icons of that kind are now sized to the button they sit in.
    • “Undefined variable” warnings from the login module ($type) and the breadcrumbs module ($moduleclass_sfx) on Joomla 5.

    Readability

    • The text in the dark “More about” band was unreadable, and in places invisible. The band is painted by a photograph (bottom-bg.jpg) running from near-white sky to dark sea, so white text over the upper half had almost no contrast. A dark layer (rgba(6,33,61,.65)) now sits between the photograph and the text.
    • List bullets appeared beside every item in the product carousel, the product grid and the manufacturer list. VirtueMart 4 draws these as lists and the original stylesheet only removed markers from the list shapes it used itself; markers are now removed from any VirtueMart product list.
    • Slideshow images fill their frame instead of showing a letterbox strip along the bottom.

    Maintenance pass

    • The @font-face in css/template.css pointing at the removed media/jui/fonts/ IcoMoon font is disabled; it returned four 404s on every page and made some icons show as stray characters.
    • Joomla’s own icons no longer render as empty squares: the show/hide control on password fields (it takes the colour of its button) and the Previous, Next, First and Last buttons on article and category listings.
    • Featured-article intro text is no longer clipped to its title (.blog-featured .blog-items / .blog-item).
    • The search button sits flush with its search box (#search-position .btn margin 0).
    • With thanks to Michael Mullan, whose Expression bug report led to this maintenance pass across our templates.

    Removed

    Legacy scripts and stylesheets no longer loaded

    • Scripts: superfish.js, supersubs.js, jquery.backstretch.min.js, jquery.dropkick-1.0.0.js, jquery.mobile.customized.min.js, modernizr.js, selectivizr-min.js, html5.js (html5shiv from googlecode.com) and Google’s webfont.js. The template’s own files remain in js/ (26 → 30 files) but nothing loads them.
    • The inline jQuery.browser Internet Explorer shim and the Superfish/Supersubs, DropKick and Backstretch start-up code.
    • Stylesheets: the Bootstrap 2 files in css/bootstrap/ (they remain in the folder), the Font Awesome 4.6.3 stylesheet from MaxCDN, and the Internet Explorer files ie.css, ie6.css and ie9-10.css with their conditional comments (the files remain in css/).

    Old colour picker

    • utils/js_colourchanger/ (jscolor.js, arrow.gif, cross.gif, hs.png, hv.png), which nothing loaded.

    Retired social services

    • Five social slots removed with their switches: Google+ (gplus), MySpace, StumbleUpon, Digg and Blogger.

    Security

    • Template settings written into the page are escaped or validated at 169 places in index.php, through the new helpers:
      • phHexColor() (105) for 72 colour settings in the inline colour stylesheet (color1–color77). Anything that is not a hex colour falls back to a fixed colour.
      • phEsc() (63, including 8 on the generated favicon links) for HTML text and attributes and for values inside the inline <style> and scripts: the content, site-name and slogan font sizes, the site-name and slogan positions and colours, the drop-down column widths (dropdownhandler2–5), the non-responsive site width, the slideshow minimum height, spacing and caption positions, the theme preset name, the logo and slogan images, the body, header, tab-band and bottom-band background images, and every social link URL.
      • phCssDim() (1) for the header height (topheight).
    • The Site Name and Slogan text (H1Title / H2Title) are written through phEsc() as plain text; the slogan allows <br> only.
    • Social links that open in a new tab carry rel="noopener" (18 links).
    • The Joomla 3 code paths that gave unauthenticated visitors a server error on the shop’s login page are gone from the shipped template (see Fixed).

    Quickstart Installer

    The Quickstart (Enfuse-5.4.8-Quickstart.zip) is a complete Joomla 5.4.8 site with VirtueMart 4.8.0 and Enfuse installed as the active template, with the demo content.

    • It installs through Joomla’s standard web installer, replacing the previous Akeeba Backup archive (.jpa) and Kickstart.
    • Bundled extensions: Akeeba Backup 10.3.7, Weblinks 5.1.0, Search 4.0.0, MCP For J 2.4.0 and StageIt 5.7.3.
    • Only the templates the site uses are included: cassiopeia, enfuse and system for the site, atum and VirtueMart’s vmadmin for the administrator. VirtueMart’s demo templates horme_3, vmbasic and vmbeez3 are not included.
    • Extensions → Manage shows Enfuse as 5.4.8. The demo’s cached extension record had still reported 01.10.2022 3.10.11/4.0.6.
    • A clean starting state: article and VirtueMart product view counters start at zero, and 11 of the 16 post-installation messages are dismissed, while Joomla’s welcome message and its prompts about action logs, privacy, multi-factor authentication and automatic updates stay on.

    Package format

    • Standalone template: pkg_enfuse-5.4.8.zip, a Joomla package (pkg_enfuse.xml, new: Enfuse had never shipped as a package) that installs the enfuse template extension and registers it in the package manager. It declares method="upgrade" and <blockChildUninstall>true</blockChildUninstall>, so the template is removed through the package rather than on its own. The previous download was the bare template zip.
    • Quickstart bundle: Enfuse-5.4.8-Quickstart.zip, a complete Joomla 5.4.8 install with VirtueMart 4.8.0 and Enfuse pre-loaded as the active template.
    Joomla 6: Enfuse is a VirtueMart template and ships on Joomla 5. Joomla 6 removes the backward-compatibility layer VirtueMart still relies on, so a Joomla 6 build will follow when VirtueMart moves.
    Slide captions are not shown at phone width. The camera slideshow rewrites its captions’ positions on every transition, so a stylesheet cannot hold them in place; on a phone the slide itself is shown and the caption is hidden. Desktop captions are unchanged.
    Known limitations of this release: some of the slideshow’s settings (timings, effects, grid sizes), the five colour settings passed through hex2rgb() for translucent backgrounds, and the module titles were still written into the page without escaping. These are administrator-only settings; they were escaped in 5.4.8.3 and 5.4.8.4. The slideshow is still the original camera.js, running on jQuery through the compatibility script. VirtueMart’s Vendor module reports its version as the placeholder ${PHING.VERSION}; this comes from VirtueMart’s own packaging.
    Version numbering: from this release the first three digits of Enfuse’s version match the Joomla release it is built for (5.4.8 = Joomla 5.4.8); a later fix on the same Joomla release adds a fourth digit (5.4.8.1). The previous download carried 16.12.2024 5.1.2/4.2.12.
    December 18, 2024

    Version 17.12.2024 5.1.2/4.2.12

    • Fixed - Minor bugs
    August 8, 2024

    Version 26.07.2024 5.1.2/4.2.12

    • Update - Template updated to Joomla 5
    • Compatible with Virtuemart pre-release Version 4.2.12
    • Minor Bugs fixed
    April 10, 2023

    Version 01.04.2023 4.2.8/4.0.12

    • Fixed - Template updated to be compatible with Joomla 4.2
×

logo


TOP
Connect