PHP-Nuke: Advanced Content Management System ============================================ August 2007: Version 8.1 ======================== - Settings administration module has been 100% re-writted and totaly changed and reorganized - Added feature to let administrators choice if users can change themes or not (Administration -> Settings -> Themes) - Added feature to select the display of the referers list in abridged or unabridged modes - Graphic Security Check configuration is now in Administration -> Preferences -> General section (removed from config.php) - WYSIWYG Editor configuration is now in Administration -> Preferences -> General section (removed from config.php) - Configuration of $display_errors to show PHP error messages is now in Administration -> Preferences -> General section (removed from config.php) - Fixed a bug on Topics module that didn't show the right content after click on "more" link and news category link (Thanks to Michael Judah fom http://ComPilots.com) - Fixed a bug in user edit function when admin try to change user's avatar (Thanks to l4wy3r) - Added variables filter check in banners administration (Thanks to Omid omid@hackers.ir) - Added variables filter check in modules administration (Thanks to Omid omid@hackers.ir) - Added variables filter check in Reviews module (Thanks to Omid omid@hackers.ir) - Added variables filter check in Web Links module (Thanks to Omid omid@hackers.ir) - Added AutoThemes module (free GPL edition) from http://www.spidean.com to install and control Auto Themes - Fixed potential SQL injection in referers system - Fixed user avatar image information when administrator creates a new user - Fixed little bugs and reorganized DelQuotes() function in mainfile.php (Thanks to Aurican) - Added some extra checks in mainfile.php needed by Forums (BBtoNuke) module (Thanks to chatserv from http://nukeresources.com) - Fixed some minor security issues in mainfile.php (Thanks to chatserv from http://nukeresources.com) - Fixed lot of minor bugs in several modules (Thanks to chatserv from http://nukeresources.com) - Added BBtoNuke version 2.0.21 (Thanks to chatserv from http://nukeresources.com) - Fixed the anti-flood function to prevent the "too many page loads" error in the Forums administration and to prevent also some search engine to index the error message. September 2006: Version 8.0 =========================== - Several cosmetic changes has been made in the News administration - Added a Publish Now function for all Scheduled News listed in the main administration area - Banners list in Advertising administration module now are ordered by position and banner name - Advertising clients list is now ordered by client name in Advertising module's administration - Forums, Members List and Private Messages modules are now not so dependent from core system. Many files has been moved from /includes/ folder to /modules/Forums/includes/ - Added new BBtoNuke (phpBB Forums port) version 2.20 - Removed useless and not working search engine links from Downloads and Web Links modules search result pages - Added a new function in mainfile called info_box() which creates a nice message box with a related graphic. Values for the graphic (located in /images/system folder) are: warning, caution, tip and note - Cosmetic changes to Surveys module. Last 5 polls block now goes under the current results block - Minor cosmetic changes to Feedback module - Minor cosmetic changes to Add New Download form display in Downloads module - Minor cosmetic changes to IP Ban system list display - Several cosmetic changes in Submit News module - Added duplicate title and story text check in news submissions - Added a new DoS/Flood attack protection that prevents multiple pages views in few seconds - Cosmetic changes to Downloads module administration. - Changed the display list method of new submitted files in Downloads module administration by a single selection with the title and a separated validation page for each new file has been added - Added installation system in /install/ folder. (Based on Joomla Web Installer) - Fixed a bug in the client login function in Advertising module (Thanks to keg01) - Increased Advertising client cookie life from 1 hour to 24 hours - Minor optimizations in HTTP Referers system display - Fixed a bad use of define(INSIDE_MOD) in the mainfile.php that made useless this feature - Added a new redirection system to be used by admin to not reveal as referer the admin filename when clicking on a link September 2005: Version 7.9 =========================== - Removed ENGINE=MyISAM fromk the nuke.sql file to prevent MySQL errors in old server versions. - SQL injection vulnerability fixed in modules.php and News module (Thanks to Zhen-Xjell from http://CastleCops.com) - Cosmetic changes in the Edit Authors administrators section. Added graphical buttons and table field descriptions - Updated BBtoNuke (phpBB forums port) to version 2.0.17 (Thanks to Chatserv from http://nukeresources.com) - Added new feature to edit banned IPs in the IP Ban administration system - Fixed Administrators nicknames case bug. Admins IDs willbe converted all to lowercase. (Thanks to OuTiMe) - Fixed a duplicated points information display in Your Account module - Search module now has a minimum limit of 3 characters in the query - Removed Sections Top 10 data from the Top module - Added missing translation in Stories Archives module - Added empty fields check in Feedback and Recommend Us modules. - News associated topics checkboxes has been changed for multiselect listbox in the news administration. - Removed download and web links title passed as a variable via URL call, which gives problems rendering pages - Added a new variables check all over the system. This will increase security in a big manner. The filter will also work good with the wysiwyg editor. Also, the entire system now can use quotes and double quotes when needed. - Added quotes and double quotes in the search module query - The constant has been renamed to [--pagebreak--] in Content, Encyclopedia and Reviews modules due to compatibility issues with the new filters. - Fixed Encyclopedia search engine to be able to search text with quotes and double quotes - Fixed a bug for the quotes and double quotes in the title/subject fields in all forms of the system - Removed advanced wysiwyg editor to reduce load and avoid possible security risks with many useless options - Added a new varibale to config.php to activate or deactivate the wysiwyg editor - Added two missing translation definitions to the advertising administration in plans configuration - Fixed a bug for the advertising call method in the default theme - Fixed some bugs in the advertising administration system - Fixed the database connection error message to show the right database server type you're using. (Thanks to nightblade06) - Fixed a bug on modules.php for the Users Groups system to load the module only if the user has access. - Fixed some translation bugs in Brazilian languages files (Thanks to DarK_SouL). June 2005: Version 7.8 ====================== - Improved the banners administration system. Now you can set Ads positions, assig banners to a specific position, use Javascript and HTML code banners, use Flash (.swf) banners, now you must specify width and height of your Flash and Images advertising. To use the new ads system you should use the following code: $ads = ads(1); echo "$ads"; Change the number "1" for the position you want to use in that particular space. By default, the new advertising system uses position 0 and 1. Position 0 is called "Page Top" to include ads in the header and great for Top of the page ads like the standards 468x60. Position 1 by default is called "Left Block" and is used from the block file blocks-Advertising.php With this system you can use Google's AdSense, Fastclick, TribalFusion, DoubleClick, etc... etc... in the way you want. Text Links ads are also supported. Just know that Javascripts/HTML code and Flash banners can count the impressions but not the clicks. - IMPORTANT: Removed the file banners.php and replaced with two functions included in mainfile.php Please update your themes and/or modules that makes use of banners.php to start using the new ads system. - Removed banners configuration from preferences in the administration area. Banners value will always be 1 (active) and they will show if exists, otherwise the system will just ignore the ads functions. Banners field in the nuke_config table remains present for compatibility with old themes that uses it. - Upgraded phpBB forums port to version 0.15 (Thanks to chatserv from http://nukeresources.com) - Updated all files of Private Messages and Members List modules with the latest fixes (Thanks to chatserv from http://nukeresources.com) - Removed the javascript code check if you're in the administration area. Admins should be able to use scripts code on their sites without any restrictions. - Moved PHP error control report from mainfile.php to config.php (Default is 0 for no error display) - Removed all @ to the require and include functions to let the error control works as it should - Fixed a missing $admin_file global varibale declaration in blocks administration - All blocks in the admin panel can now be previewed (active or not) - Added a new define('NO_EDITOR') method to remove the wysiwyg editor if you don't want it on a specific area use it as: define('NO_EDITOR', 1); just before including the header.php. On this way the wysiwyg editor will not load on that page - Function makePass() has been moved from Your_Account module to mainfile.php because it's of common use - Removed the wysiwyg editor for the Forums module when you're admin. Both posting system doesn't like each other. - Added Estonian Translation (Thanks to Maku from http://www.phpnuke.ee) - News and surveys functions/data in the administration panel home are now invisible if the modules are inactive - The included robots.txt has been fixed and it's now 100% validated to work properly - Fixed parse errors for Portuguese language pack in Web Links and Journal modules - Fixed all username fields length (Thanks to chatserv from http://nukeresources.com) - Fixed a parsing error bug in Danish administration translation April 2005: Version 7.7 ======================= - Added Users Karma System. This system lets you edit the karma of any user and restrict content publication to anyone that's annoying you and your visitors. There are 4 Karma values, as follow: 0: Good Karma (Default value for all users) 1: Regular Karma (Marked with a red flag, user activity isn't restricted but you need to pay atention) 2: Bad Karma (Marked with a warning icon. All comments of this user are moderated from the admin panel, these users are notified that their comments are moderated) 3: Devil Karma (Very bad/evil user. All comments from this user are ignored, never published, without any notice) Additionaly Users marked with Bad and DEvil Karma can't post comments in Downloads nor Web Links modules. Moderation of bad Karma users comments are done using a new administration module called: Moderation. It's in your hands and discretion to use or not this system. Karma system will help to have a little more control over abusers. - Reviews module comments for anonymous users is now subject to the general preferences of the system. - IP Ban system has been modified to use * wildcard in the last digits of any IP address. Know that if you ban an IP using a wildcard as the last digit you're banning a complete Class C network (255 IP addresses). Be careful using it and do as an extreme measure. - Journal module textarea fields size increased to fit the new WYSIWYG editor layout - Comments moderation system now works at 100% in both News and Surveys modules - Comments moderation form submit button replaced with a block with information on how to moderate and a text button instead. This is for both News and Surveys modules. - Send to Friend function in the News detail pages are now only for registered users and user name and email options can't be changed. This to increase site's security and to minimize possible mailbomb attacks. - Fixed some variables validation in Downloads and Web Links modules - Fixed XSS vulnerability in banners.php - Fixed a bad SQL call variable name in banners.php - Fixed SQL injection vulnerability in Top modules - Fixed several XSS vulnerabilities in Downloads and Web Links modules - Fixed a Http Response Splitting Vulnerability in Surveys module. (Thanks to dcrab from http://digitalparadox.org) - Fixed some minor HTML issues in Topics, Feedback and Submit News modules. - Fixed an include bug in News and Surveys comments system (Thanks to anoopjohn from http://www.myindiagov.com) - Simplified the module AvantGo. File print.php has been integrated into index.php - Enhanced the backend.php output by adding field to the generated RSS feed. - Added new database support for SQLite, which is a database server included with PHP5. (Thanks goes to phpBB team) - Added new constant (MODULE_FILE) to modules.php to define a module instead to check if the module has been loaded by module.php. Old method still compatible but encouraged to use the new one. For examples see the first lines of any included module. (Thanks to Chatserv from http://www.nukeresources.com) - Added a great WYSIWYG text editor to ALL PHP-Nuke's textarea fields. Compatible with Mozilla, MSIE and FireFox. For this was used the great tinyMCE made by MoxieCode Systems AB (http://tinymce.moxiecode.com). TinyMCE is free software released under the LGPL. All credits are untouched on the files (/includes/tinymce/). You don't need to do anything if you want your module to use the editor, it automaticaly replaces all and any