PostNuke

This will be merged into the install file for later releases, but in the meantime here are the steps.



First, download the file. Right now I have this on my download section on dinerminor.com.



Next, BACK-UP your PHPNuke 5.2 DB and files. This has had a very limited test.



Edit the information in the upgrade file to match your DB info.



Run the file.



Now, delete ALL PHPNuke files.



Finally, follow the instructions for upgrading PostNuke .5.3 from PHPNuke 5.1 in the README_FIRST file.



And that should do it.

From the report:





"twlc security divison


24/09/2001





Php nuke BUGGED.





Found by:


LucisFero and supergate


./twlc





Summary


This time the bug is really dangerous...it allows you to 'cp' any file on


the box... or even upload files...





Systems Affected


all the versions ARE vulnerable


except '5.0 RC1' (i wonder why a released c. is ok while the final 5.2 is


bugged)..."

The site admin could then select which module loads by default as an index page. For example a directory site could show links module and a support site the faq module... and so on.





Also some specific "index modules" could be then developed for showing different things at the home page.





Examples for indexes:


News + announce box (traditional)


Search + links + ad (search engine style)


New dicussions + dowloads + weather


or whatever you can imagine...





This would move Postnuke from news portal to more versatile cms system. What do you think?

And we encountered some idea, md5() in PostNuke, our developer team (well actually only vicky) has tried this on PostNuke 0.63 and it works great, so what does PostNuke team think about this? Will it be secure enough for common users? would this function benefit them?





After the news that PHPNUKE.ORG being defaced, i think PostNuke should move ahead with better admin encryption.





Just an idea, if you guys need help on it contact victorianesta@linuxmax.net , she's done the md5 thing on PostNuke, i'm still trying to understand it :)





God Bless America & PostNuke.. :)


PS. Eddie!!! get PostNuke a facelift!! time to get a face surgery, dont you think so?





Cya





Ewdi





LinuxDeveloper.NET


LinuxMAX.NET

(form action="modules.php" method="post")
(input type="hidden" name="name" value="Search")
(input type="hidden" name="file" value="index")
(input type="hidden" name="op" value="modload")
(input type="hidden" name="action" value="search")
(input type="hidden" name="overview" value="1")
(input type="hidden" name="active_stories" value="1")
(input type="hidden" name="bool" value="AND")
(input type="hidden" name="stories_cat" value="")
(input type="hidden" name="stories_topics" value="")
(div align="right")(font class="pn-normal")'._SEARCH.'
(input class="pn-text" NAME="q" TYPE="text"
VALUE="$q")
(/div)
(/form)



Of course, substitute the proper brackets (<,>) for the ones shown above ;)

CHANGE LOG:







added fetures on this phprofession version 1.4:



# email usr for admin fixed.



# admin menu made more effecient.



# recruiter emails in config file.



# register cv link page [ need new sql for it to work or add a joblisting with jcode=Apply and checked =0]



# cv file upload where (cmd='upload') must have a valid path to upload to in the config file you can edit this so it can upload up to 4 files at once.



# will be notified by email when file is up loaded.



# as well as the folder chmod must = '777' to do this open cute ftp or whatever you use right click and select chmod and change the number you see to 777.



# cleaned up sloppy links to work properly.



# config file has more variables to fill out makeing less editing on the other file's.



#remember to add your links.phprofession.php file to your admin/links dir.







# future addons will be a joblist page where jobs are listed only displaying a certain amount at a time at a time



# job search script where users can search for a job.



# emailing jobs to subscribed users ,about certain job listings thatare availible.







if you have changed any thing or made a usefull function to this module post it here in the downloads section.







download this version here phprofession 1.4