b2evolution b2evolution

  • Sign in
  • Sign up
  • About
  • Downloads
  • Hosting
  • Docs
  • Support
  • Sign in
  • Sign up
  • About
  • News
 
  • 1
  • ...
  • 19
  • 20
  • 21
  • ...
  • 22
  • ...
  • 23
  • 24
  • 25
  • ...
  • 26
  • ...
  • 27
  • 28
  • 29
  • ...
  • 38

Fix for XML-RPC vulnerability (again!)

Posted by fplanque on Aug 31, 2005 in Security info

Yope, that's right, they did it again! :|

The previous XML-RPC fix may not be secure enough, so...

It is highly recommended you fix you installation by downloading this NEW patch file and unzipping it into you /blogs/b2evocore/ folder. This should overwrite the two following files AGAIN:

  • _functions_xmlrpc.php
  • _functions_xmlrpcs.php

This patch has been tested on the latest 0.9.0.12 "Amsterdam" release but is believed to work on all 0.9.0.x versions.

The patch will be included in future releases.

13 feedbacks »

"Phoenix" ALPHA features (preliminary list)...

Posted by fplanque on Aug 26, 2005 in New features, New releases

By popular demand, here's a preliminary list of the new features and the changes introduced in the "phoenix" ALPHA release...

The main focus of this new version was to remove the b2 legacy code from the evoCore framework in order to move to a more stable, reliable and scalable architecture (with Objects and all the rest...). This was mostly behind the scenes work without immediate features to show off for gratification. However, the new evoCore now allows to add functionnality more quickly and more efficiently.

Anyway, there are already quite a few new features available: (This is by no way a final list!)

  • File manager (blueyed)
  • Multiple domain support (blueyed, fplanque) (TODO: (cookie/admin) Debugging!)
  • Mailing lists: Subscriptions for new posts and/or new comments (fplanque)
  • Who's online? (jeffbearer, blueyed, fplanque)
  • Email form to contact authors without revealing their email address (jeffbearer, blueyed, fplanque)
  • Paged display in antispam (fplanque)
  • Improved hit logging (bluyed, fplanque)
  • Stats enhanced with Flash charts (fplanque)
  • Added options to allow a blog stylesheet or a user stylesheet to override the skin stylesheet. (edgester) (TODO: Only the "custom" skin works with the options at the moment. Other skins must be modified.)
  • Lost password: sends a link to allow password changing instead of generating a new password right away (blueyed)
  • New setting in the blog's advanced tab for choosing the comment's policy on a per blog basis. You can now choose if you want to allow comments on a blog, if you want to be able to disable them on each post, or if you don't want any comments at all (gorgeb)
  • Post editing extensions:
    • Alternative backoffice layout(s) (fplanque) (TODO: get this out of the conf files and make it available in the UI).
    • "Deprecate now" function (fplanque)
  • Post browsing extensions:
    • Complete contextual browsing: you can combine several filters: author, month, category, etc (fplanque)
    • Browse by author (fplanque)
    • Calendar: Links to next/prev month/year are only provided if there are posts in that direction (blueyed)
    • Fixed ability to select multiple authors at once (via URL params) (fplanque)
    • Added ability to combine categories in search (fplanque)
    • New URL parameter 'dstart' allows to start browsing at specified date (same fprmat as 'm'). useful with unit = 'days'.
    • New URL parameter 'unit' allows overriding of configuration to select what to display: 'posts' or 'days' (fplanque)
    • Slightly enhanced week handling (weeks start on sunday or monday depending on user locale) (requires MySQL >= 4) (fplanque)
  • Post extensions (fplanque)
    • Extra status
    • Post type
    • Popup calendar for dates
    • Assigned to
    • Priority
    • Deadline
    • Counting number of views for each item (template tag $Item->views()) (jeffbearer, blueyed, fplanque)
  • Permissions:
    • Group based blog permissions (halton)
    • Extended group permissions (fplanque)
    • Blog permissions presets; Member, Editor, Admin (blueyed, fplanque)
  • Packaged plugins:
    • Wacko markup plugin (fplanque)
    • WikiLinks plugin (fplanque)
    • LDAP authentification plugin (blueyed) (TODO: finish)
    • "poplog" (change name) plugin (blueyed)
    • Some previously built-in features have been moved to plugins (fplanque)
  • Code:
    • Day at the start of the week moved to properties of the locales (blueyed)
    • Subpaths now include trailing slashes (that was another odd b2 legacy...) (blueyed, fplanque)
    • User profile validity checking (fplanque, blueyed)
  • Experimental:
    • Added experimental memcached support. Use at your own risk! Change $use_memcached in conf/advanced.php to activate. Requires phpca memcached client and memcached server. See Memcached Homepage for more info.
12 feedbacks »

The phoenix demo is here!

Posted by fplanque on Aug 25, 2005 in b2evolution.net

Until today, if you wanted to get a glimpse at the new "phoenix" version of b2evolution you had to check it out from the SourceForge CVS. That was hard enough to only let the most motivated users look at hit... :>

Today, we're opening it a little more: just visit the all new demo site set up by Daniel/blueyed...

Check it out at demo.b2evolution.net !

You'll be able to play with it as much as you'd like. B)

You'll also be able to test the latest release from the stable branch (0.9.x) and test it with PHP 4 as well as PHP 5.

Even better: those versions synchronise with CVS every hour. So you know you always look at the very latest code. Very cool stuff Daniel!

What you don't know though, is if someone has already played with it before and mashed up the settings... but as said, it resets every hour, so we have faith it will work for you when you go there. :)

Stay tuned for more! (Yes yes we're working on the alpha release)

PS: We'll update the links on the main site shortly.

11 feedbacks »

The new forums are ready!

Posted by fplanque on Aug 16, 2005 in b2evolution.net

After the skins site by Graham and the plugins site by Danny/personman, here comes the new and enhanced Forums site, managed by Whoo and hosted by Nicolas & Elpie from Axian (in New Zealand!).

Whoo has already added quite a few neat features like sub-forums and an RSS feed.

I also want to renew thanks to the whole moderators team: EdB, Topanga, personman, stk, Graham and blueyed.

New forums, same address: forums.b2evolution.net .

Send feedback »

plugins.b2evolution.net is ready!

Posted by fplanque on Aug 12, 2005 in b2evolution.net

It is my pleasure to announce immediate availability of the new sub site: plugins.b2evolution.net B)

That's were you'll be able to find all cool plugins and hacks to extend b2evolution's capabilities. Of course there's only a handful of these registered so far, but feel free to submit new additions at any time.

This site is maintained by Danny Ferguson with the help of Steven Cherry. Both have responded to our call for help and reacted incredibly fast. Thanks a lot guys! :D

More to come soon... ;)

4 feedbacks »

b2evolution.net: help wanted! :)

Posted by fplanque on Aug 03, 2005 in b2evolution.net

Hi all!

As you might have grasped from the forums, we're working hard on the next major version ("Phoenix") and we expect an alpha release before the end of the summer.

It is pretty difficult to find talented developpers who will dedicate a lot of time to b2evolution... all of this for free ;) Thus, what we're going to do is try to optimize the time of the developpers we already have! :D

The idea is simple: if the developpers spend less time on administering the project site, they can spend more time on the code. I think that's what we want!

Now... we need your help with the project site!

There are already quite a few dedicated helpers on the forums, the manual, the ping-list and the antispam black-list. Many many thanks to them!

Well, I'd like to push this further, not unlike what Graham is already doing with the skins site: skins.b2evolution.net . Graham is running 100% of this site. I think he's doing a great job and it takes 0% of developper resources. That's excellent!

So we're looking for people who would be willing to host and globally manage a part of the b2evolution project. This includes: the forums, the FAQ, the manual, the HowTos, a plug-in directory or even a b2evo hacking guide...

xyz.b2evolution.net, you name it! We provide you with an official domain name pointing to the IP address of your choice. The rest is almost only limited by your own creativity! ;)

A few ideas:

  • forums.b2evolution.net : we'd need someone willing to patch PhpBB with all the cool additional hacks out there, potentially increasing search capabilities, etc.
  • plugins.b2evolution.net : you could just set up a b2evo blog with multiple categories matching b2evo versions as well as functionnal categories, then post any new plugin you find out about with a link to it's author's site.
  • doc. or faq. howto. or manual.b2evolution.net : there's so much you can actually do with a Wiki ;) (I'll also provide you with the current code for the manual if you want it).
  • demo.b2evolution.net : that would be a nice thing: an automatic install of the CVS head which updates and resets itself every night. Of course you need to run this in a sandbox since there might be unfixed vulnerabilities in CVS. You'd also want to deny access to all indexing robots so this doesn't turn into a spamfest.

Of course some people may feel ready to set up one of these sites but won't have the bandwidth or the time to moderate content contributions. So if you can spend some hosting space or some time to help out moderating, please speak up also.

The b2evolution.net site will become a portal pointing to the specific subsites. Tools, technology and graphic design are up to you. However I hope we can standardize on a common look and feel at some point. (Do I need to mention that we're expecting you to keep in touch and sync with the rest of the b2evo community? ;D )

Thanks in advance for your help! B)

24 feedbacks »
  • 1
  • ...
  • 19
  • 20
  • 21
  • ...
  • 22
  • ...
  • 23
  • 24
  • 25
  • ...
  • 26
  • ...
  • 27
  • 28
  • 29
  • ...
  • 38

b2evolution News

  • Home
  • Latest comments

Search

Categories

  • All
  • New releases
    • Press releases
  • Community
  • b2evolution.net
  • Development
    • New features
    • Technology
    • Security info
    • Translations
  • The Webmaster's Blog

Archives

  • March 2022 (1)
  • September 2020 (1)
  • January 2020 (1)
  • May 2019 (1)
  • March 2019 (2)
  • September 2018 (1)
  • May 2018 (1)
  • September 2017 (1)
  • March 2017 (1)
  • September 2016 (1)
  • March 2016 (1)
  • January 2016 (1)
  • More...

XML Feeds

  • RSS 2.0: Posts, Comments
  • Atom: Posts, Comments
What is RSS?

About b2evolution

  • What is it?
  • Features
  • Getting Started
  • Screenshots
  • Online demo
  • Testimonials
  • Design philosophy
  • Free & open source
  • Terms of service

Downloads

  • Latest releases
  • Skins
  • Plugins
  • Language packs

About us

  • About us
  • Contact

Webhosting Guide

  • Web hosting blog
  • Best web hosting
  • Cheap web hosting
  • Green web hosting
  • Hosting with SSH
  • VPS hosting
  • Dedicated servers
  • Reseller hosting
  • Int'l: UK / France

Docs & Support

  • Online manual
  • Forums
  • Hire a pro !

Other

  • Adsense
  • Press room
  • Privacy policy

Stay in touch

  • GitHub
  • Twitter
  • Facebook
  • LinkedIn
  • News blog
  • RSS feed
  • Atom feed

Founded & Maintained by François Planque