PostNuke

My idea stems from the fact, that we are using Novell GroupWise as an internal Mail system. While there is an SMTP gateway for this product, I decided not to use it for PN, but to use the GW API Gateway instead. Writing the PHP code fo this Gateway wasn't too difficult, but including it will be (I haven't done it yet!).

So, my idea is as follow:
Provide a PN API function (let's call it pnSendMail), which is called like other API functions. This function itself should be extendalbe by "plug-ins" for different mail systems. The function can then be called like

pnSendMail ($recipient, $sender, $subject, $method, $extrainfo)

where method is the selector for the desired mail system, and the optional parameter extrainfo could be an associative array of additional information for the plug-in in question.

By an administrative function one could make one of the mail methods a defaukt one, making the "method" parameter optional.

The mail plug-in functionality could be analogous to the modules or blocks functionality; a programmer can provide own plug-ins using certain API standards.


Think about the possibilities with such a system:
On an intranet, you could provide "native" gateways to your preferred mail system. You can as well provide gateways to printers, so that a pnMailSend call with $method='print' could print out an information.
On the Internet, instead of writing block or modules that send SMS or fax, you could simply write a plug-in so that pnSendMail uses the public SMS or Fax service a.s.o.


For using the standard mail functionality offered ba PHP and senmail, just use the plug-in which passes the parameters provided to the standard mail() function.


What do you think about such a system? Any comments are welcome.

Jörg

If I missed any hacking incident for PostNuke portal. I would like to know it, drop me a message to www.blackhat.info.

PHPNuke websites mostly hacked by "hax0rs" group. Visit <a href="http://www.blackhat.info" target=_blank>www.blackhat.info and search for hax0rs ( 0 as zero).

Archive PHPNuke incident from <a href="http://defaced.alldas.org/?attacker=Tzunami" target=_blank>Alldas.Org -Defacer Tzunami year of 2001.

For PHPNuke user, upgrade your nuke to the latest release v5.5 though I'm not sure if this version address the current vulnerability of PHPNuke. PHPNuke v5.6 is coming with security update, visit www.phpnuke.org for more information.

I will complete this security analysis to give you feedback later this week.

Have a secure working environment to everyone.
TheWatcher of BlackHat.Info

It's actually a fairly non-invasive technique.

First off open up the following File:

$PostNukeRoot\modules\NS-NewUser\user.php

Then go ALL the way to the bottom of the file. At around line 270 you will find the following code:

if($dbconn->ErrorNo()<>0) {
echo $dbconn->ErrorNo(). "Create default group membership: ".$dbconn->ErrorMsg(). "
";
error_log ($dbconn->ErrorNo(). "Create default group membership: ".$dbconn->ErrorMsg(). "
");
}
}

Directly under that snippet, insert the following:

// NewUser Mail To Admin Hack
// Author: Cloudrunner of The Noble Pagan
// Website: www.noblepagan.com
$message1 = "A New User Has Registered At $sitename!\n\n They used this email: ($var[email]) to register the following NickName: $var[uname]";
$subject1 = "A New User Has Registered At $sitename!";
$to = "$adminmail";
// End Part 1 of NewUser Mail To Admin Hack

After you do this, jump down to some where around line 278 or so and you will find this snippet:

if ($system == 1) {

Directly below that insert the following:

//Part 2 of NewUser hack
pnMail($to, $subject1, $message1, "From: $from\nX-Mailer: PHP/" . phpversion());
// End Part 2

and Lastly find this code around line 281:

} else {
pnMail($var['email'], $subject, $message, "From: $from\nX-Mailer: PHP/" . phpversion());

and insert this line directly below that:

// Part 3 of NewUser Hack
pnMail($to, $subject1, $message1, "From: $from\nX-Mailer: PHP/" . phpversion());
// End Part 3

Save the file, and then upload to overwrite the file on your server.

Now whenever a new user registers, you will get a short notification email telling you someone has.

You can modify the message sent by modifying the variable: $message1 leave the following within the message quotes however: $sitename, $var[email], and $var[uname].

That's it. I hope that this helps some of you out. Feel free to email me with any questions (even though there shouldn't bee, it's fairly straightforward) at: noblepagan@noblepagan.com

May your dreams come to life.

)O( Cloudrunner )O(
The Noble Pagan
http://www.noblepagan.com

It's a bit ironic that during the same week PN members release two separate hacks for creating html pages we would see a google index released that shows googles capability of spidering an entire PN site. The googlebot picked up pages, not normally crawled, from glossaries, photo galleries, links etc.

At issue is the fact that while these pages are now indexed in google, their relevance in searches is minimized because of the lack of ability to add titles, and in the case of other search engines that use keywords, metatags for keywords for the pages produced by these different modules.

I quicky applied title hacks for my own recently index pages from the modules, however, it's a case of one title has to fit all. For example, my Nature Photography section now has 850 pages spidered but all the titles are the same because of the limitations of the hack (i.e., you can only put one title tag in the index.php file).

Over a seven month course of using PN, I have shied away from using sections, FAQs, reviews and other modules because google did not pick up on them and they did not have title and meta tags.

On the other hand, I concentrated on using the news/articles module because of the use of article.php, which provided both shorter urls (that the google bot would crawl )and title tags which provided a better opportunity for search engine optimization and placement.

I'm interested in hearing the thoughts of other PN members related to their needs and hopes regarding the upcoming (search engine friendly) reshaping of the content management portion of PN that is scheduled for the .8 release.

Can there be a standard way to add title and meta tags to the module system?

Footnote: 1

Footnote: 1

Post Nuke had a much more defined vision and was going for it. I like the small community and how informative and responsive it is.

Our PBX community seem to embrace the new features and design fairly well. Our old site was built using Netobjects you can view it here

It literally took 20 minutes to get the site installed and working!

Syndicate our news is a very cool feature.

We are on PN 7.0.3 soon to be upgrading when the modules catch up with compatibility.

Here are the Mods on our site:
(Most are working ;)

Message Board: PN_phpBB14

Buddy
Version : 0.6.8
Instant message client for your Postnuke private messages

CrackNuke Classifieds
CrackNuke Software (Jon Allen)] Version : 0.1.2
CrackNuke Classifieds Module

dogdoo.net Journals Module
[Shannon Brooks] Version : 9.9d
Allows users to have journals.

Ephemerids Admin [Francisco Burzi] Version : 1.2
A 'This day in history' type module.

EZCMS [View/run module] [Bob Brown] Version : 2.0.1
Easy Content Creator

Glossary [View/run module] [Richard Tirtadji] Version : 1.1
Its show glossary that allow user to understand some abbreviation in the websites

Guestbook [View/run module] [Richard Tirtadji] Version : 2.1
Guestbook for PostNuke

Monthly News Archives [View/run module] [Michael Meyer - The PostNuke Project] Version : 1.5a
Displays archives of the news in a monthly fashion

NukeAddOnInstall [View/run module] Version :

PostCalendar [View/run module] [The PostCalendar Team] Version : 2.55
PostNuke Calendar Module

Semantics [View/run module] [Chad Kraeft / Francisco Burzi / Richard Tirtadji] Version : 2.0
Semantics Dictionary System for PostNuke Rogue .7

Subjects [View/run module] [Jaroslaw Gilewski] Version : 1.0b2
Displays Subjects on Site

User_Points
Version : 0.22
Member Points Module

Weather
Version : 2.1
Weather information capture from MSNBC based on Meteo Live 1.0


Feel free to check us out or sindicate our news

http://www.pbxinfo.com

or

http://www.pbxinfo.com/portal/backend.php



-=Rixride=-

Footnote: 1