AdvancedContent CMS Version 2.0

[Furious]

Looks good, I'd like to beta test when you get the first completed version out.

Keep up the good work guys!

[Sidoh]

You realize SQL has a MD5 function, don't you?

Code Select Expand


  INSERT INTO users (
    `name`,
    `password`
  ) VALUES (
    'Joesuxlol^_^',
    MD5('mmhax')
  );


[Warrior]

AdvancedContent seems to be down now so I'll implement replying tomorrow.

[Warrior]

Under implementation

Groups:
      Groups is a new concept in AdvancedContent. The way commands, pages, and even forums are handled will be based on groups which will have permissions. Flags will be able to be created and commands will be allowed either by specific group or by a general flag.
      Groups will also effect who can view what boards on the forums and who can do what basicly anywhere on the website. It will take a bunch of rewritting but after this is done, AdvancedContent will be almost completely ready for atleast a beta release.

Modules:
      Modules in AdvancedContent will be as powerful as they were before and will allow the user to load/unload his module as he wishes.

Buddy List:
     Users will be able to keep a "buddy list" of users and it will mark them as online/offline
     This will also introduce the ability for a user to remain "hidden" to the website.

Searching:
      Searching will be implemented via a "meta data" indexer which will store information on everything from news posts to user comments and will allow speedy searching with little overhead.

Pages:
      Pages will be implemented (with a WYSIWYG previewer) and will implement the Groups permissions if needed

New User things:
      Users will be able to block users from sending them private messages
      They will also be able to choose a skin they want to display, not just what the site displays (toggleable)
      Favorite Links - A stored list of useful links throught the site they like, things like forum topics, individual posts, etc..

This of course will take heavy implementation but I am confident with my current motivation I can implement it all.

[Warrior]

Added forum post replying and patched forum exploits. Thanks to shadowed for pointed them out.

[Warrior]

A VERY serious exploit has been discovered. Can't give details since the results can be...devestating to both the site and the DB

[Joe]

x86] link=topic=1826.msg35222#msg35222 date=1130193094]
A VERY serious exploit has been discovered. Can't give details since the results can be...devestating to both the site and the DB

KEK.

PS: I think AC CMS should have a product support board instead of a single thread.

[Blaze]

PS: I think AC CMS should have a product support board instead of a single thread.

Hehe.

[Warrior]

Eventually I will move to using our integrated forums once I add other features (like moderation of boards) and fix the current issues with security.

For a detailed description of the exploit you may PM me. Thanks go out to Shadowed for providing a solution which is currently being implemented.

[rabbit]

Not Found
The requested URL /forums/index.php was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache/1.3.34 Server at www.advancedcontent.net Port 80

[Quik]

Not Found
The requested URL /forums/index.php was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Apache/1.3.34 Server at www.advancedcontent.net Port 80

Blame Google?

[Warrior]

Once again, that's an incorrect link. Try going to the Development website and clicking the forum link. If this doesn't work there is something seriously wrong with your browser.

[Warrior]

Does anyone (mainly Sidoh and possibly others) have any comments on Smarty?. It's a PHP template engine which IMHO is MUCH more flexible the mine will ever be. I think it might be a good idea that while I'm upgrading AdvancedContent's security, I switch to this. Any comments?

[Quik]

Smarty has some issues and requires much more on the end user's behalf then should actually be necessary, but if you feel that having an effectively flexible template engine is more important than a diverse userbase, it's more tailored towards your needs.

I don't know much about the security, you should probably look some of that up before implementing it, since that seems to be a large concern of yours.

[Warrior]

From reading some of the documentation, it requires the user to have knowledge of the set variables they are implemented and how each page works (which I plan to document). Not every user has to develop a skin, cmon. ;)

I don't think "security" matters since it's not a matter of security in something like a template engine. It's just a presentation layer that users will see. I don't want developers to have to touch a line of PHP code if they use it.