Don't Use Php Fusion!

[swirly]

I have had my site hacked TWICE while using it! Desertwar has found security holes and many other things when he went through the code! My site was just hacked a little whil ago, I am going to delete my enitre site and find another secure cms and begin to write my own code for a site...as a matter of fact, I am working on this: www.swirlys.x10hosting.com/consoleproj.html Any ways if you know of any SECURE cms's please let me know them! I know that the nuke collection has flaws so I want to know which ones you guys think are secure, yes i know about open source cms thats where i got php fusion but I dont trust going there and letting myself pick one anymore, I mean look what happened. I would like to know if e107 is secure I could not get it installed before when I tried it so please tell me what you guys think!

 

[Aroonxors]

WOW. That is really nice.

 

[XUnreal]

Nice console system, its ace!

...can you help me make one

 

[Mani5]

MAMBO and PHP NUKE AND POST NUKE are the best!

 

[Brandon]

MAMBO and PHP NUKE AND POST NUKE are the best!

Mambo is secure but Php Nuke is full of holes. Use Joomla or Subdreamer.

 

[SEÑOR]

Your suspended....

 

[Mani5]

no hes not!waht ya mean..

e107 is the best and Drupal and Mambo..

 

[Brandon]

No im not.

 

[SEÑOR]

http://www.swirlys.x10hosting.com/consoleproj.html said suspended

 

[Brandon]

Oh I thought you said mine. Lol

 

[SEÑOR]

oh no lol

 

[Rising]

PHP-Nuke is simple to make safe,
Disable Search Module
Disable Journal Module
Diable Remote avatar hosting in Forums Control Pannel [Suposed to be fixed with 2.0.18]

Do the following edits immediately:

Edit includes/nukesentinel.php file

 FIND
function st_clean_string($cleanstring) {
 
AFTER ADD
$cleanstring = str_replace($cleanstring,strtoupper($cleanstring),$cleanstring);
 
Should Now Look Like
function st_clean_string($cleanstring) {
$cleanstring = str_replace($cleanstring,strtoupper($cleanstring),$cleanstring);

 

[Brandon]

Thanks

 

[echo_unlimited]

Nice site man...

 

[Bryon]

function st_clean_string($cleanstring) {
$cleanstring = str_replace($cleanstring,strtoupper($cleanstring),  $cleanstring);

What does changing the text from mixed case to upper case have much to do with security?

 

[Brandon]

Yeah nedren