PostNuke

Site search

Search results

Number of hits: 15

PostNuke 0.761 Released   (News)

included is a new quick upgrade script, simplifying the upgrade process. If you are still to upgrade to 0.76x, please read manual.txt
for updated instructions on using the new upgrade.php. It is vital that anyone upgrading a PostNuke install reads this manual, as this upgrade
is unusually complex.

Finally, pn_bbcode and pn_bbsmilie have been updated to include display hooks. To use this functionality, simply add the following to pnRender templates:


[code]

[/code]


or, depending on module used:


[code]


[/code]


Links
Both a changed files package between 0.760 and .761 and a full distribution is available. Should you have already upgraded to .760, use
the changed files package. Otherwise, download the full distribution.

Download 0.761 Full Distribution (ZIP)
Download 0.761 Full Distribution (TAR.GZ)
Download 0.761 Patch (ZIP)
Download 0.761 Patch (TAR.GZ)
Support Forums
Security Mailing List

Checksums
MD5
PostNuke-0.761.zip c4090097b26caa38115540e24378e9b4
PostNuke-0.761.tar.gz 4b76e09c507db0224d34fc448e7efb91
PostNuke-0.761_patch.zip fbdcc4c21813ee2ec04161b76c6a9b61
PostNuke-0.761_patch.tar.gz eeb77338a3b5698b38f23c1e11bebfa2

SHA-1
PostNuke-0.761_patch.tar.gz 8a5605399ccc9576abcbc44751312657fe40a22b
PostNuke-0.761_patch.zip 0553f6b80c638c5cef4306d886361dcb1773ab4a
PostNuke-0.761.tar.gz b69d9bfabb5c8641e4b5dd9e9ee6f5803d86c41d
PostNuke-0.761.zip 79869b9a7003ac9046788cebad23135f68eef648

Bug Fixes

#2176,
#2178,
#2182,
#2193,
#2206,
#2216,
#2219,
#2220.


Related Articles
PNSA2005-4
PNSA2005-5

Simon Birtwistle [hammerhead]
PostNuke Development Tea

Generated on September 28, 2005.

Dutch translation for 0.760 - Nederlandse vertaling beschikbaar   (News)

Generated on September 2, 2005.

SQL-injection in module Download (PN0750)   (News)

on text:

- --- 1. SQL-injection in module Download ---

Given SQL-injection not critical since exploit works only under rights of the manager (mysql)

The Problem in file "modules/Downloads/dl-viewdownload.php".

- --------
if ($show!="") {
$perpage = $show;
} else {
$show=$perpage;
}
...
$result =& $dbconn->SelectLimit($sql,$perpage,$min);
- --------
varible $perpage.

$perpage at request is not checked. If substitute in parameter $show (amount element on page), for instance, "0" or "-3" or "asdf" or anything bad, importance will not is checked

Decision:

Install the new version PostNuke 0.760 Если you do not be going to to move to version 0.760, that decision following:

in file dl-viewdownload.php, in function viewdownload(), viewsdownload() copy code:
if ($show!="") {
$perpage = $show;
} else {
$show=$perpage;

on following code

if ( (isset($show)) && is_numeric($show) && ($show >= 0) ) {
$perpage = $show;
} else {
$show = $perpage;
}

In the event of invalid parameter will is issued importance by default, taken from deskside (thanks TAndrew)

or following decision - in file dl-viewdownload.php, in function viewdownload(), viewsdownload() copy code
$result =& $dbconn->SelectLimit($sql,$perpage,$min);
change on
$result =& $dbconn->SelectLimit($sql,(int)$perpage,(int)$min);

Empty page will is issued In the event of invalid parameter

Generated on August 31, 2005.

French 0.760 Package - Pack français pour 0.760   (News)

The pnLanguages Project
and on
The pnFrance Project
----

Suivant la vague des traductions disponibles...

Pack français pour PostNuke disponible sur
Le projet pnLanguage
et sur
Le projet pnFrance

F. Chestnut !
(PostNuke-France.org 2.0 Coming soon !)

Generated on August 29, 2005.

Postnuke 0.760 Spanish Translation   (News)

* Download translation: here
* Download Postnuke 0.760 + spanish translation included: here

Install lang files also have been translated to spanish

el_cuervo

Generated on August 28, 2005.

PostNuke 0.760 released   (News)

Summary of Main Changes
Further cleaning of HTML

pn-normal custom class removed in favor of styling of block level element using CSS
pn-pagetitle class replaced by use of h1 tag
pn-title class replaced by use of h2 tag
all fake lists created using middot's replaced with proper lists

Simplication of non API compliant links
op=modload & file=index are the defaults so these are removed from all links
New printer (Xanthia) theme - enables printable view of any page
A printable view of any page is available using the printer theme. Append the url theme=Printer to the url or build a 'print me' button into your theme.
Removal of NS- prefix on all modules
All modules that contained the NS- prefix in the directory name have had this removed. This prefix is a result of our origins in php-nuke.
Baseline security analyzer
This new feature adds a check for some of the more basic configuration settings that can enhance the security of a PostNuke installation.
New features in core

Modules can now be referenced using an 'alias' via the module display name setting.
Default start function type, function name & parameters to the function can be defined. Note: API compliant modules only.
Standard database connection error moved to a 'template' in includes/templates.
Ability to turn the site off for maintainence (access to provided via permissions setting).
Smarty updated to v2.6.10.
ADODB updated to v4.6.5.

Modules
Admin_Messages, Modules, Blocks, Permissions, Groups, legal, Censor, Messages, Ephemerids, Quotes, Autolinks, AvantGo, Credits, Members_List, Ratings & Admin have been updated for full API compliance and templated output.
New modules

Sniffer; Detects browser and browser capabilities using phpSniff (by Roger Raymond).
RSS; Replaces dated feed handling with an xml based parser (magpie rss).

Bug fixes

Xanthia - many fixes since original release.
Mailer (added support for additional headers, bcc's & cc's), fixed sending to multiple addresses.
New features in modules (in addition to API compliance and templated output)
Modules module

filter by letter, state
graphical indicatator of state
detection of change of type, admin & user capability
ability to recover from missing files state


Blocks

graphical indicatator of state
ability to define each block as collaspable (credit to Mark Heldstab)
ability to define each blocks' default collapseable state (credit to Mark Heldstab)

Others

Groups - ability to add multiple users to a group in one go
legal - added template accessibility report (thanks to http://diveintoaccessibility.org)
Censor - added transfrom hook for censor module (supercedes pnVarCensor API - maintained for backwards compatability)
Admin - added ability to split modules into categories, the categories view are skinable via a single stylesheet
Credits - support for multiple module contacts via comma seperated values in pnversion.php

Generated on August 22, 2005.

PostNuke 0.760 RC5 released   (News)

Maksymilian Arciemowicz of securityreason.com and Johann-Peter Hartmann of Mayflower for their cooperation regarding some security issues.

One of the few newly introduced features is the so called "Baseline Security Analyzer", which checks your site for some basic security settings and informs the Admin within the administration how to fix them.

Further updates include Smarty, ADODB, phpMailer also. To take a closer look at all the changes, check http://cvsnotices.postnuke.com. At pndevs.com some of the latest changes and ideas are commented by the developers.

If updating from .750 or earlier, please make sure to follow the instructions in the docs folder very carefully.

Download:
Postnuke 0.760 RC

Generated on August 8, 2005.

Development Update: PostNuke .760   (News)

make it official. Yet the team did more than just bug fixing. So it would be quite reasonable althought we also want to get rid of 0.760 and continue work on 0.8.

One thing is for sure: we don't want to talk about 0.760 at the pnMeeting in mid-august anymore so it must be done by then.

Steffen Voss
vice-president, German PostNuke Foundation
pn-cms.d

Generated on August 4, 2005.

Case Study - www.eurojamlive.org   (News)

So, how does eurojamLIVE! fit in?
eurojamLIVE! has been designed to allow participants and event organisers to communicate before, during and after the event.
There will be 10,000 people at the event, so the website has the potential to receive a great deal of traffic over the coming months.
eurojamlive.org as a PostNuke website
PostNuke was chosen for the eurojamLIVE! website. We needed a solution that could be deployed quickly, with only a limited amount of
modifications. The websites for Scouting 2007 are run on an entirely volunteer basis, and PostNuke's ease of use and open source code
was ideal for this.
Constructing the website
The website initially began as a standard PostNuke install. All the extra core modules that were not needed were removed, and the
tables for each of these modules manually removed from the database. The decision was made to use pagesetter
for most of the content, including the news functionality. We needed the workflow and template functionality provided by pagesetter
but not available in the core News module. Additionally, PNphpBB2 was used for the forums, due to its extended feature set.
In the end, the site's configuration looked like this:
PostNuke Version: 0.760
Although at the time 0.760 was still in the RC stage, it was considered important to use the latest version to take advantage of
sessionless anonymous users (for a performance increase) and also recent improvements in Xanthia's full page caching, which in the end
proved important for the website.
Module List

pagesetter
photoshare
EZComments
PNphpBB2
Downloads
pnFlashGames
Weather

Blocks

dp-StaffStatus

Theme

pnfr-vx - courtesy of Chestnut, pnFrance

Custom Developments
Although nothing revolutionary was needed, a few custom developments were used.
Block Management
A fairly simple module making it easier to change the news stories appearing on the homepage. Instead of the default pagesetter block,
which requires the story ID, this module allows the user to choose the story title to show, rather than having to know the ID.
Profile integration - PNphpBB and PostNuke
Better integration between PostNuke's profiles and PNphpBB profiles were needed. As a result, all the forum profile settings were
moved to a link in the 'Your Account' section, the profile link in the forums now redirecting to user.php. One further change was
needed for everything to work as expected - the profile information had to be updated each time the user visited the forum index,
incase they had changed any part of their profile.
The First Day
Although the site was launched on the 3rd of June, it's existance was not advertised until the 5th June
at 2pm. Between this point, and 9pm, the site received 55,000 hits and served almost 1GB of traffic. This level of initial
support was not initially anticipated, and there was a slowdown for a few minutes until Xanthia's full page caching was enabled.
This had the effect of reducing server load by more than 50%, and the site consequently confortably rode through the initial spike in traffic.
The server itself already ran the Scouting 2007 network of sites, before the eurojamLIVE! launch. In an ideal world the eurojamLIVE!
website would be on its own seperate server, however this is not the case, and therefore performance in paramount. In the end,
I would say the server and the PostNuke website stood up to the demands quite well.

Visit eurojamLIVE!

Generated on June 14, 2005.

Download and Test PostNuke 0.760-RC4a   (News)

Generated on April 27, 2005.

Page 1 / 2 (1 - 10 of 15 Total)