MiniCMS for CPG1.5?

[halnat]

28 files in the minimcms folder that contain the strings $_GET, $_POST or $_SERVER. Just a lot of work to "inspektify"...

Read http://documentation.coppermine-gallery.net/en/dev_superglobals.htm for details in case you're ready to do the job.

I have a version up and running that installs and can display existing content. It needs more work to be able to create new content... anybody else working on this?

[Αndré]

I have a version up and running that installs and can display existing content. It needs more work to be able to create new content... anybody else working on this?

Please attach that version. Thank you.

[halnat]

Here comes....

This is an early mock-up port to 1.5.2. There are a number of things that do not work. In fact, there are only two things that I have been able to do with it: I was able to install it as a plug in, and it did display the content that I created in cpg 1.4.x. Creating content is not really possible, as all space characters get filtered away. Everythingbecomesonelargeword.

It may not be as cooperative with anyone else - and please understand that I do not provide support for this version of the port. However, anyone who like to play with fire or would like to contribute to the port is welcome to a test drive 

Maybe someone could help load it up to svn - I'm not familiar with that.

The file was too large to be attached. It can be downloaded from http://www.natvik.com/bfdoc/minicms.zip

[football-pics.com]

No news on a MiniCMS?

A plugin that could show the latest 10 galleries as links (link name = album title) could also help me out

[Joachim Müller]

Respect board rules if you want answers - I already told you so:

Not a valid support request (board rules).

[Ludo]

This is an early mock-up port to 1.5.2. There are a number of things that do not work. In fact, there are only two things that I have been able to do with it: I was able to install it as a plug in, and it did display the content that I created in cpg 1.4.x. Creating content is not really possible, as all space characters get filtered away. Everythingbecomesonelargeword.

Finally I took halnat's work over, and it seems I made it out to get MiniCMS work properly on 1.5.6, by simply replacing Inspekt's getAlnum method with getRaw (disapproved, I know, but still the only way I found to make it work). There are still some minor issues, but I'm confident to fix them soon.

[football-pics.com]

great news... thanks. When will it be available?

[Αndré]

Instead using getAlNum or getRaw, we should us getMatched allowing alphanumeric characters, number and some other digits like whitespace and punctuation marks, or validate the input after using getRaw.

[Joachim Müller]

As Αndré suggested you're allowed to use getRaw if you sanitize the data afterwards really thoroughly.

[Ludo]

Instead using getAlNum or getRaw, we should us getMatched allowing alphanumeric characters, number and some other digits like whitespace and punctuation marks, or validate the input after using getRaw.

Speaking about FCKEditor output, isn't it already sanitized enough by the editor itself?

[Ludo]

great news... thanks. When will it be available?

You'd better subscribe this topic 

[Joachim Müller]

Speaking about FCKEditor output, isn't it already sanitized enough by the editor itself?

I have no idea, sorry.

[schnurzeltier]

great news... thanks. When will it be available?

Hi there, some new's about this?
Greetings
Bernd

[Joachim Müller]

No. There's absolutely no sense in replying to this thread asking for updates. As far as I can see nobody is working on this. If you want it badly, start working on it. Do as suggested per board rules in the future and post a link to your gallery.

[Ludo]

As far as I can see nobody is working on this.

Finally I took halnat's work over, and it seems I made it out to get MiniCMS work properly on 1.5.6, by simply replacing Inspekt's getAlnum method with getRaw (disapproved, I know, but still the only way I found to make it work). There are still some minor issues, but I'm confident to fix them soon.

[Αndré]

Where do we find your work, Ludo?

[Ludo]

On my pendrive, so far

[Joachim Müller]

If it is so hard to port this plugin because of the many places where you have to sanitize user inout, maybe you should circumvent the issues that using Inspekt imposes on coders in the first place. This will of course ruin the additional level of security and will make the code less well-designed, but for a port that big you might want to use the approach that extrabigmehdi used in his Joomla bridge for cpg1.5.x:

Concerning the code used in my bridge, I guess I'm not respecting the "spirit" of the  "Inspekt package" . I  got to access directly to stored superglobals with "_source" property  (especially $COOKIE) before calling Joomla .

So basically what Mehdi does is re-globalize all input that Inspekt de-globalized in the first place. Not a nice thing to do and definitely not something that should be performed lightheartedly, but given the issues that exist for this particular plugin maybe the interessted porters should take a look at that approach.

[Αndré]

I'll port MiniCMS now, as Ludo hasn't published his port.

[Αndré]

Added halnat's version to the svn repository and applied several fixes.

As far I can judge it's currently possible to add, delete and move entries.