Autarchy of the Private Cave

Tiny bits of bioinformatics, [web-]programming etc

    Archive for the 'CMS' Category

    Posts on (mostly) Open Source Content Management Systems: how do they compare, which are good for what, and personal experience with different CMS.

    WordPress and Google Analytics external nofollow problem in comment links

    13th February 2009

    Since some WP release, the comment author’s link in comments is broken – it has ‘ external nofollow’ attached straight to the href attribute (which breaks the link).

    I assume that the problem is caused by Google Analytics, namely the “track outgoing clicks” feature (as recalled, might be inaccurate feature name). “Track outgoing links” adds some JavaScript code to all outgoing links, and that script has tick characters like this one ‘ which, incidentally, are also used for delimiting the values of comment anchor tags.

    To fix:
    Read the rest of this entry »

    Share

    Posted in CMS, how-to, PHP, Programming, Software, Web | 2 Comments »

    ExpressionEngine contact form (email module) spam vulnerability

    26th January 2009

    Yesterday I had a look at mod.email.php – the Email module of ExpressionEngine CMS.

    It appears that it is very easy to use ExpressionEngine’s contact form (which uses Email module) to send emails to arbitrary addresses – simply put, send spam using someone’s EE.

    And here’s why:

    • recipients hidden field is passed to the client; it is encrypted, but with access to the mod.email.php code, it is a matter of several minutes to write your own email-encoding function which will produce a completely valid recipients field
    • there’s also XID field, which seems to be unique for each page load

    Spamming algorithm is clear, so I won’t elaborate. (I could have missed some session variables, though – didn’t check them.)

    This information is valid as of ExpressionEngine 1.6.6, but nothing in the change-logs indicates that this mechanism was modified in the newer versions of EE.

    Update: I’ve tested, and this vulnerability does exist. The simplest prevention measure is to enable Captcha for Contact Form.

    I’ve notified the developers.

    Share

    Posted in CMS, PHP, Programming, Software, Web | 1 Comment »

    Flash video in Drupal (links)

    6th May 2008

    Some things to be aware of when enhancing Drupal site with FLV video playing/conversion features.

    Share

    Posted in CMS, Drupal, Links, Notepad, Software, Web | No Comments »

    Spam Karma 2 (SK2) is a life saver plugin

    9th April 2008

    As an update to WordPress anti-spam plugins, I highly recommend Spam Karma 2. For a time, it seems to be the ultimate protection. I turned off all the other anti-spam plugins (including Aksimet), and everything’s just perfect! SK2 gathers up to a thousand spam comments/trackbacks during a single week on this blog, and I never had a complaint from blog visitors on their inability to add a comment (though some did have to fill in captcha to post a comment with links).

    And SK2 still works under WP 2.5! (SK 2.3 was released to support WP 2.1)

    Kudos to Dave!

    It would be a pity if this excellent plugin is abandoned and stops functioning in one of the upcoming WP releases.

    Update: SpamKarma is now GPL (at google code).

    Share

    Posted in CMS, Software, Web, WP PlugIns | No Comments »

    Drupal is more than just a CMS

    6th April 2008

    This post provides several links which would be useful for the beginning Drupal developers, or developers deciding which CMS to use as the base for their next project. Also, strengths of Drupal are highlighted.

    Intensively working with Drupal during the past two weeks, I find it to be an excellent tool, and also much more than a YACMS.

    Now I think that Drupal is also a framework – providing invisible to developer caching, session handling, access control, theming, localization, and more. The minimal effort required to extend already huge Drupal functionality is to write your own module – and, if done right, your module will immediately benefit from all the bonuses Drupal provides.

    But Drupal also really shines as a CMS! You can start with a free design theme, and without any PHP knowledge have your custom portal built within a week – with your own hands, if you desire! (Note: “within a week” is true, but only if you already know what exactly you should be doing; learning time is short, but it’s not within that same week.)

    What makes Drupal so powerful? I’d say that beautiful core and numerous modules.

    What Drupal has to offer?
    Read the rest of this entry »

    Share

    Posted in CMS, Drupal, Software, Web | No Comments »

    WordPress Drupalization

    31st March 2008

    Is that only me, or WordPress is really leaning towards the Drupal ideology?

    Here’s what I mean:

    • user levels were changed to user roles – just like in Drupal
    • now, instead of categories and just recently introduced tags, the word ‘taxonomy’ is used – which is a Drupal slang
    • ‘widgets’ work just like ‘blocks’ in Drupal – even style IDs are assigned the same way, e.g. id=”widget subscribe_to_comments_widget”
    • (add here the similarity you found yourself)

    I wonder, what will be next. PHPTemplate support, as default theming engine? :)
    Or no-backwards-compatibility policy?
    Or, best for WP users, advanced Drupal-like caching and throttling techniques?

    Share

    Posted in CMS, Drupal, Software, Web | 2 Comments »

    Developing with Drupal: screencasts

    26th March 2008

    drupaldojo.com – at the moment of writing, has 42 video-lessons (screencasts) of developing with Drupal.

    Share

    Posted in CMS, Drupal, Links, Notepad, Software, Web | No Comments »