Tendenci Blog | Posts on Tendenci Open Source AMS and MMS for Associations and Non-Profits

2017-11-15

Tendenci 7.4.0 Release Notes

Release Summary

The team at Tendenci has been working to make improvements to our T7 software. The batch of updates noted in this release are mostly centered on: the Tendenci Nav, Reports, and Newsletters. You can look for these changes on your T7 site.

Notable changes:

New top menu (for both admin and logged in users)
Newsletters format update and clone feature
Reports format update (including invoices, memberships, ..)
Events views – Added sub menu for month view, week view, day view
Separated join approval and renewal approval for membership notices
Wysiwyg editor – Enabled the image title input field in the image dialog. Added class dropdown to the tinymce link dialog box
Updated the directories categories to make it easy manage
Added drag-drop functionality to the testimonials
Added memberships overview report
Added a link on Profile page to view past events.
More minor changes

Fixes:

(Security) Disabled GZipMiddleware to prevent BREACH attacks
(Security) Prevent fraudulent simultaneous reuse of PayPal transactions
Resolved the issue regarding manage.py hangs when caching is enabled. Re-enabled the cache for site settings.
Resolved the subprocess venv issue.
Fixed exports for directories, jobs, resumes, pages.
Fixed “Most Viewed Files” report.
More fixes

Tendenci Nav

The Tendenci Nav has been reorganized to help you find what you’re looking for. We hope you’ll take the time that review your new Tendenci Nav and get familiar with some of these changes. Here’s a screenshot of what it should look like:

*For all of these updates, some sites will display slightly different fonts and design features based on the site theme.

Tendenci Nav Screenshot T7 — Screenshot of the new Tendenci Nav in T7

Reports

Updates in the Reports module includes consolidation of all reports into their own Tendenci Nav item.

This release also includes an update to the Invoices module, making invoices faster to browse visually in a table-based format. To view invoices in the new navigation on your site, click: Reports > 5. Financial > Invoicing.

Newsletters

The Newsletters module works almost exactly the same as before. We have made a few features a little bit easier to use. For example, if you’d like to re-assign the newsletter to a different group, you can now do so even after you’ve generated the Newsletter in the first step. We’ve also made some layout improvements that take advantage of Bootstrap’s framework.

The “clone” feature has also been added to this module. With clone, you can send a test e-mail, then clone it and send it to your target audience rather than copying and pasting the contents from the first send.

Have software updates you’d like to share? Fork us on Github!

Special thanks to @PaulSD for lots of fixes and update!

2017-11-06

SSL Encrypting all Tendenci Hosted Sites

NOTE: This is a cross post. The original post is at: https://www.tendenci.com/news/ssl-encrypting-all-tendenci-hosted-sites/

To our clients. The above graph is a filtered subset of what is a *typical* day of network alerts. As the media has stated, the issue is quite real.

We greatly appreciate you and it is important to us that you remain safe. To further advance that objective in the current geopolitical environment, all hosted Tendenci sites will be encrypted going forward per our CEO.

Why? Because security. The Internet has changed and we must adapt.

Adapt? Remember when that Steve Jobs guy invented the iPhone and suddenly sites that were awesome the week before… well… they weren’t as awesome the next day? The. Next. Day. Technology is like that.

FAQs

Continue Reading: https://www.tendenci.com/news/ssl-encrypting-all-tendenci-hosted-sites/

2017-11-06

Way to go Houston Astros!

Happy for the Houston Astros — Go Houston Astros! 2017 Word Series Champs

2017-09-26

SEO isn’t just about Google – Alternative Search Engines

If you believe in the long tail theory, adding up SERP results from all of the smaller search engine results can be just as important as trying to score well in the almighty google. So where do you focus your energy? I vote both. At least submit your site to a few of the relevant ones and of course check your keyword density for SEO primary keywords.

Rather than repeat the work of others – this site lists several alternative search engines you can start with:

http://www.hongkiat.com/blog/100-alternative-search-engines-you-should-know/

Yes, many of these search engines are small and hyper-regional, but that matters to the Tendenci community given the open source translation efforts going on at Transifex for Tendenci – the Open Source AMS. We thought it might help you too!

2017-09-14

Equifax Breach via Apache Struts Framework

(This is a cross post from our CEOs personal blog. Note that Tendenci sites do NOT use Apache and the vulnerabilities in Equifax’s implementation of Apache Struts do NOT impact your Tendenci site. Still be aware that nothing is is 100% secure so stay vigilant and be prepared friends!)

As reported last Friday, the 2017 Equifax personal credit reporting agency had a data breach of 143 Million people’s identities. It started in May 2017 and is just now (August 2017) being disclosed. It is going to impact all of us. Sources:

From the second article on the Equifax breach linked above, this portion really galls me:

… not only are none of the last names tied to your Social Security number, but there’s no way to tell if you were really impacted.

It’s clear Equifax’s goal isn’t to protect the consumer or bring them vital information. It’s to get you to sign up for its revenue-generating product TrustID.

Earlier it was revealed executives had sold stock in the company before going public with the leak. We also found TrustID’s Terms of Service to be disturbing. The wording is such that anyone signing up for the product is barred from suing the company after.

The following phrase alone, if true, combined with Equifax literally trying to monetize their security errors, is what gives capitalism a bad name:

The wording is such that anyone signing up for the product is barred from suing the company after.

I have to believe the Equifax PR team is working for PharmaBro or Putin trying to make them look good in comparison.

Note: Equifax has changed the indemnification, but only under duress imho. Furthermore 30 days free credit monitoring by the company that released your data and then you will have to pay monthly still seems wrong. But to be fair, here is their update:

Questions continue to be raised about the arbitration clause and class action waiver language that was originally in the terms of use for the free credit file monitoring and identity theft protection products that we are offering called TrustedID Premier.
(Editor: well ya, duh!?)

We have removed that language from the TrustedID Premier Terms of Use and it will not apply to the free products offered in response to the cybersecurity incident or for claims related to the cybersecurity incident itself. The arbitration language will not apply to any consumer who signed up before the language was removed.
(Editor: but did you fire the person who did it in the first place?)

I get it. Nothing is secure. If the NSAs hacking tools get stolen and OPM loses all of the data on security clearance checks on our own people, then truly nothing is safe. I get it.

What I do not understand is a company as large as Equifax not being prepared for something like this. That Equifax did not announce it promptly. That Equifax executives sold stock before announcing it. That Equifax then attempted to indemnify themselves. That Equifax is using the crisis to sell a monitoring service that you have to pay for after 30 days. A service to monitor YOUR data that THEY lost control of!

This boggles the mind of a PR Professional.

The Internet was not built for e-commerce – it was built for knowledge sharing in a “walled garden”. Therefore keeping sites secure is not possible. Any security professional will tell you best practice is to white-list good guys (selective inclusion) as opposed to trying to find every attack and block it. Therefore the difficulty at a high level is primarily in identifying and blocking bad actors.

I hate to say it folks, but we are playing whack-a-mole with your identity and money. It will always be an uphill battle to maintain security on the Internet and you will never ever be 100% safe.

As reported by Black Duck (awesome people btw), the specifics of the attack on Equifax are currently easily exploitable on similar sites. This is like Hurricane Harvey – it’s not even close to over.

2017-09-092017-09-09

The Incredible Growth of Python – StackOverflow

Python, the language used to program Tendenci – The Open Source AMS, continues it’s meteoric rise in the world of developers. And where the developers go is where the rest of us go. Thus Python’s rise matters. And it benefits every Tendenci user, self hosted or hosted with our small company (same software either way).

IEEE Spectrum rates the languages by its readers as follows:

Python has continued its upward trajectory from last year and jumped two places to the No. 1 slot, though the top four—Python, C, Java, and C++—all remain very close in popularity.

StackOverflow, a go-to site for pretty much every programmer and sysadmin out there, has a new blog post up on the incredible growth of the Python Programming Language. Python is of course the programming language used in Tendenci – The Open Source AMS. From the Stack Overflow post:

June 2017 was the first month that Python was the most visited tag on Stack Overflow within high-income nations. This included being the most visited tag within the US and the UK, and in the top 2 in almost all other high income nations (next to either Java or JavaScript). This is especially impressive because in 2012, it was less visited than any of the other 5 languages, and has grown by 2.5-fold in that time.

They have numerous charts to back up the data, but these two in particular paint a telling picture.

From Stack Overflow – the current tag questions viewed:

Perhaps even more impressive is the projection on the continued growth of Python. Just WOW!

The above graphs should give you confidence in your choice of using Tendenci as your AMS as the developers are not only there, but growing. Given Tendenci is fully open source (this is different from “free trial” AMS systems which are NOT actually FOSS (Free and Open Source Software). Wikipedia describes the difference as:

(FOSS means) anyone is freely licensed to use, copy, study, and change the software in any way, and the source code is openly shared so that people are encouraged to voluntarily improve the design of the software.^[3] This is in contrast to proprietary software, where the software is under restrictive copyright and the source code is usually hidden from the users.

Many of our competitors who are NOT Open Source and not true FOSS which can sometimes confuse people. I’ll do a future post on examples of sometimes misleading representations by AMS systems that are not “actually” Free and Open Source (FOSS) as defined on Wikipedia.

The good news is with the growth of Python, it only make sense that developers will look at and many will join in to help the community improve the software as they join associations themselves.

We’ve written about why we chose Python over PHP to develop Tendenci open source several times. Correctly choosing the open source stack gives us, and everyone in the community, confidence to see the trends predicted correctly. It wasn’t rocket science – we just listened to our team, we listened to younger developers, and most importantly we listened to our clients on what the future was/is going to be.

And associations are kind of a big deal and they can’t use minimum viable products.

Why are associations unwilling to accept apps that meet only minimal requirements? Um… because they started as Guilds and go back to Medieval times. From Britannica on Guilds and Trade Associations:

Guild, also spelled gild , an association of craftsmen or merchants formed for mutual aid and protection and for the furtherance of their professional interests. Guilds flourished in Europe between the 11th and 16th centuries and formed an important part of the economic and social fabric in that era.

and Britannica goes on….

… associations are known to have existed in ancient Rome, however, where they were called collegia. These craft guilds seem to have emerged in the later years of the Roman Republic. They were sanctioned by the central government and were subject to the authority of the magistrates.

This is a huge topic of course. Just know that Tendenci is the ONLY top ranked AMS system that is truly FOSS. Unlimited admins, users, contacts – you can self host or if hosted with us we only charge for processing power. Got 1M users and contacts and 50 admins? No problem. And the growth of Python assures your continued freedom from vendor lock-in no matter what.

#peace and happy (Python) programming y’all!

2017-09-04

Hurricane Harvey Hits the Gulf Coast and Houston

Hurricane Harvey Update from Tendenci – Monday Sept 4, 2017

A large part of our small team lives in or near Houston TX where Hurricane Harvey hit us with more rain than any storm in US history.

For those near us, we all know it’s not over yet. The roads are still flooded. Power is going on and off. And we are the *lucky* ones as so many lost their homes and over 60 people lost their lives. It’s important to keep in perspective.

We have been pushing updates *as urgently needed only* on twitter and facebook regarding Hurricane Harvey. The quiet messaging is what I was taught in Crisis Communications – don’t muddy the waters.

Tendenci’s servers and our diverse multinational team maintained and all is well. I do have some minor requests from us to the Tendenci community:

The current policy of prioritizing client requests by the impact in the disaster area remains in place. Please be patient if you have a normal request that doesn’t get addressed as quickly as usual. I expect this to last another week. However don’t forget tendenci is open source and another developer can use the template interface to pretty much fix anything you need if we aren’t available immediately.
Position 1 also obviously applies to the tragedy unfolding in India, Nepal, and Pakistan as well, although I’m not sure if we have any clients impacted in those areas. I do know Tendenci has numerous open source users in Nepal and our thoughts and support are with you.
If a particular hosted client is in a difficult situation regarding this disaster please contact us.
For those of you not impacted by Hurricane Harvey – please consider a donation to the charity of your choice that you believe will benefit those suffering the most.

For more information on Hurricane Harvey in Houston please check:

Thank you all for your understanding.

Ed Schipul
CEO, Founder

Eye of the storm:

But those are just a few from my camera. Check out the full story by looking at the AP photos at:

https://www.theatlantic.com/photo/2017/08/hurricane-harvey-leaves-houston-under-water/538215/

2017-07-13

Tendenci 7.3.2 Release Notes

Improvements

Video thumbnails are now pulled directly to the page from the YouTube API for YouTube videos when Embed.ly is not available (due to the monthly cap) eliminating the need to upload these separately.
Updated versions for the dependencies django-simple-captcha (to 0.5.5) and Pillow (to 4.2.1).
Added Categories to the Admin Backend.

Fixes

Fixed the Members graph on Dashboard.
Removed the extra space from CAPTCHA image.

2017-06-052017-06-05

Comprehensive Membership Profiles for Your Amazing Members

Get comprehensive information about your members using our member Profiles. Including: Contact Info, Professional Affiliations, Invoicing, Groups, and Contributions.

Profile Images

Make a personal connection with your members by knowing who they are! Our profile images are powered by Gravatar, so members don’t have to upload their image more than once!

Contact Information

You work hard to keep your organization healthy! Get in touch quickly and easily by having fast access to member contact info.

Professional Affiliations and Personal Relationships

Personal information about your members helps give you information about what they might be looking to get out of being a member. Members can also attract business sponsorship. Get to know who works for an organization so that you can thank them for their support and involvement with the community and serve them better!

Invoicing

Keep everything in one place, from event tickets to memberships. Your members can avoid having to ask if they paid for something by accessing invoices directly from their Membership Profiles!

Groups

Committees, Study Groups, and Groups are all integrated in to the Tendenci platform to cover your organizational needs. Grouping people together means delivering more targeted content to those users. You can address groups with things like: Events, Newsletters, Articles, and more.

Contributions

Users can track their contributions on your site. If they have permissions to write articles, create events, or edit other content, they will be able to find which content they have changed by looking that their Profile’s Contribution Logs!

This is just the beginning, find out more about what Tendenci can do.

2017-05-12

The Best Tools To Get Started With SEO

At Tendenci, we pay attention to how your website performs. Our goal is to drive traffic to your site so that you are getting maximum touch with your members and prospective members.

There are tons of tools out there to help your organization make better choices for Search Engine Optimization (SEO.) In fact, there are so many that it can be really overwhelming to make a decision about which ones to use. Here are some of our favorite tools to use to boost SEO!

1. Headline Analyzer

Coschedule’s headline analyzer rates your headlines based on key metrics that draw people to click and read, including your word balance of: common, uncommon, emotional, and power words. Yes believe it or not, you might get a higher score here for being more emotional!

Try it out: https://coschedule.com/headline-analyzer

2. Keyword Density Analyzer

You probably write a ton of content for different pages of your site. It’s hard to keep track of which words you’re using most on any given block of writing, but your SEO depends on it. Check out if your pages are being read the way you want them to with Keyword Density Analyzer.

Try it out: http://tools.seobook.com/general/keyword-density/

3. Google Trends

Trying to make a decision about whether to call your Job listings a “Job Bank” or a “Job Board?” Back up your decision with powerful data by doing a comparison on Google Trends. (Tip: Job Bank is over 3x more heavily searched!)

Try it out: https://trends.google.com/trends