Today's Posts Follow Us On Twitter! TFL Members on Twitter  
Forum search: Advanced Search  
Navigation
Marketplace
  Members Login:
Lost password?
  Forum Statistics:
Forum Members: 24,256
Total Threads: 81,171
Total Posts: 566,848
There are 32 users currently browsing (tf).
 
  Our Partners:
 
  TalkFreelance     Design and Development     Graphic Design, Multimedia and Photography     Web Design Resources :

My CMS please test it out

Thread title: My CMS please test it out
Reply  
Page 1 of 3 1 2 3 >
    Thread tools Search this thread Display Modes  
07-02-2009, 01:23 PM
#1
xeraphone is offline xeraphone
xeraphone's Avatar
Status: Junior Member
Join date: May 2009
Location: Jakarta
Expertise:
Software:
 
Posts: 42
iTrader: 0 / 0%
 

xeraphone is on a distinguished road

  Old  My CMS please test it out

Hi all
I made a CMS on http://cms.rodadewa.net feel free to download and try out the CMS, basically its free to use as long as my footer link is intact. Users can create their own theme from within the admin panel. ( css based )

This is not a blog CMS, but a normal website CMS suitable for small business, company profiles, indie bands / artists or something simmilar. Not to be compared with famous CMS like drupal, joomla or mambo, but who knows if I get enough support I might really go serious on this CMS.

screen shot:





The website http://cms.rodadewa.net was made using that CMS system.
happy testing

Reply With Quote
07-02-2009, 07:19 PM
#2
Razz94 is offline Razz94
Status: Junior Member
Join date: Jun 2009
Location: Worcester - UK
Expertise: Designing
Software: Adobe CS5
 
Posts: 73
iTrader: 1 / 100%
 

Razz94 is on a distinguished road

Send a message via MSN to Razz94

  Old

Nice one mate, I might test it sometime.

Reply With Quote
07-03-2009, 09:34 AM
#3
free-designer is offline free-designer
Status: Junior Member
Join date: Jun 2009
Location:
Expertise:
Software:
 
Posts: 98
iTrader: 0 / 0%
 

free-designer is on a distinguished road

  Old

it's cool

Reply With Quote
07-03-2009, 07:50 PM
#4
xeraphone is offline xeraphone
xeraphone's Avatar
Status: Junior Member
Join date: May 2009
Location: Jakarta
Expertise:
Software:
 
Posts: 42
iTrader: 0 / 0%
 

xeraphone is on a distinguished road

  Old

Thx guys
I've been testing it with Flash XML gallery as well, it works hey r cool
I hope that this script somehow can help webdesigner in projects involving simple CMS ( again.. not to be compared with joomla, mambo etc..).

Had this problem once or a few times when client pending the project due to no contents which resulting my payment also pending.

Reply With Quote
07-03-2009, 09:33 PM
#5
Village Genius is offline Village Genius
Village Genius's Avatar
Status: Geek
Join date: Apr 2006
Location: Denver, CO
Expertise: Software
Software: Chrome, Notepad++
 
Posts: 6,892
iTrader: 18 / 100%
 

Village Genius will become famous soon enough

  Old

Your queries are not secured against mysql injection.

Reply With Quote
07-03-2009, 11:14 PM
#6
Immersion is offline Immersion
Status: Senior Member
Join date: Dec 2005
Location:
Expertise:
Software:
 
Posts: 918
iTrader: 5 / 100%
 

Immersion is on a distinguished road

  Old

I know that the first 4 letters of your username for the admin is rong. Then i got bored.

Reply With Quote
07-04-2009, 06:17 AM
#7
xeraphone is offline xeraphone
xeraphone's Avatar
Status: Junior Member
Join date: May 2009
Location: Jakarta
Expertise:
Software:
 
Posts: 42
iTrader: 0 / 0%
 

xeraphone is on a distinguished road

  Old

wow thx thx, Village Genious & Immersion, i will work that out. Will post again when i got it updated

Reply With Quote
07-04-2009, 12:29 PM
#8
xeraphone is offline xeraphone
xeraphone's Avatar
Status: Junior Member
Join date: May 2009
Location: Jakarta
Expertise:
Software:
 
Posts: 42
iTrader: 0 / 0%
 

xeraphone is on a distinguished road

  Old

Hi Immersion & Village Genious, again I thank you for pointing out the security problem. I have fixed this issue let me know if the problem still exist.

http://cms.rodadewa.net

Reply With Quote
07-04-2009, 12:34 PM
#9
Immersion is offline Immersion
Status: Senior Member
Join date: Dec 2005
Location:
Expertise:
Software:
 
Posts: 918
iTrader: 5 / 100%
 

Immersion is on a distinguished road

  Old

Your site no longer works.

Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '' at line 1

Reply With Quote
07-04-2009, 03:55 PM
#10
Village Genius is offline Village Genius
Village Genius's Avatar
Status: Geek
Join date: Apr 2006
Location: Denver, CO
Expertise: Software
Software: Chrome, Notepad++
 
Posts: 6,892
iTrader: 18 / 100%
 

Village Genius will become famous soon enough

  Old

Your integers still seem to be insecure, the page http://cms.rodadewa.net/indexsub.php...BY%20id%20DESC
will take you to your latest article because I rewired the query to do so. When you have an integer field you are putting in the database without quotes, typecast it to int.

This is because mysql_real_escape_string secures against ending the quote and executing commands, but does nothing against plain words because they are normally valid parts of strings. The two ways against there are putting quotes around the int field (the mysql manual recommends this) and typecasting the variable to int
PHP Code:
//Method One
$query "SELECT * FROM table WHERE id='$id'";

//Method Two
$forcedInt = (int)$_GET["id"];
query="SELECT * FROM table WHERE id=$forcedInt"
While secure, both these method leave room for harmless (but annoying) errors. I seggust you further validate that you are workng with a correct format opposed to letting the system catch it at the last second.

Reply With Quote
Reply  
Page 1 of 3 1 2 3 >


Thread Tools
Display Modes

  Posting Rules  
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump:
 
  Contains New Posts Forum Contains New Posts   Contains No New Posts Forum Contains No New Posts   A Closed Forum Forum is Closed