Monstra 1.3.0 - Release (Page 1) — Project

1 Topic by Awilum 2012-09-01 07:22:52

Awilum
Administrator
Online

From: Ukraine
Registered: 2012-04-12
Posts: 229
Reputation : [ 4 | 0 ]

Topic: Monstra 1.3.0 - Release

Monstra 1.3.0 - Release

- Improve Multi-user system. Front-end registration, authorization, password recover, profile editing added.
Usage: Displays User Panel
- Improve Default Monstra theme.
- Security: Fix Script Insertion Vulnerability.
- Blocks and Snippets plugins code fix. Issue #35, Issue #34
- XMLDB: new method updateField()
- Plugin API: path updates.
- Dir Helper: new method size()
- Filesmanager: shows directory size.
- Security Helper: update safeName() method.
- Pages Plugin: new method children() Get children pages for a specific parent page.
Usage: Return array of pages
- Update translates.
- And a lot of general engine improvements.

Download: Monstra 1.3.0

Update to 1.3.0
update:
/admin/
/monstra/
/plugins/
/index.php

Awilum's Website

Quote Post 1

2 Reply by nakome 2012-09-01 11:46:49

nakome
Monstra Student
Offline

From: La Coruña
Registered: 2012-08-04
Posts: 156
Reputation : [ 7 | 0 ]

Re: Monstra 1.3.0 - Release

Nice job

nakome's Website

Quote Post 2

3 Reply by Awilum 2012-09-02 14:03:56

Awilum
Administrator
Online

From: Ukraine
Registered: 2012-04-12
Posts: 229
Reputation : [ 4 | 0 ]

Re: Monstra 1.3.0 - Release

Monstra 1.3.1 - Important bugs fixes.
Download: Monstra 1.3.1

Update to 1.3.0 to 1.3.1:
Update: /plugins/ folder

Awilum's Website

Quote Post 3

4 Reply by RedStar 2012-09-11 00:10:04

RedStar
Monstra Newbie
Offline

Registered: 2012-06-28
Posts: 19
Reputation : [ 0 | 0 ]

Re: Monstra 1.3.0 - Release

Awilum wrote:

Monstra 1.3.1 - Important bugs fixes.
Download: Monstra 1.3.1

Greetings and thank you for this update.
I have one concern regarding the use of administrator username on page /monstra/users.
What's the point of giving away the administrator login name to the public?

Quote Post 4

5 Reply by Awilum 2012-09-11 06:35:32

Awilum
Administrator
Online

From: Ukraine
Registered: 2012-04-12
Posts: 229
Reputation : [ 4 | 0 ]

Re: Monstra 1.3.0 - Release

RedStar, You can see administrator here on this forum, too)

Awilum's Website

Quote Post 5

6 Reply by RedStar 2012-09-11 08:14:15 (edited by RedStar 2012-09-11 11:28:29)

RedStar
Monstra Newbie
Offline

Registered: 2012-06-28
Posts: 19
Reputation : [ 0 | 0 ]

Re: Monstra 1.3.0 - Release

Awilum wrote:

RedStar, You can see administrator here on this forum, too)

Maybe I did not make myself clear or maybe my concerns are unprofounded.
What I ment was that the login name is public for the administrators and all users.
Security wise it's maybe not the best option to have it published to the public, but instead use "display name"? I am maybe wrong......

And one other question (maybe I should make a new thread under a different subject?)
What if I just want to update monstra to just get the seciurity fixes and not all the new features such as "multi user" system?
How do I do that and is it possible at all?

Maybe split updates with fixes and features?

Think I need to start learn PHP

Quote Post 6

7 Reply by nakome 2012-09-11 12:18:01

nakome
Monstra Student
Offline

From: La Coruña
Registered: 2012-08-04
Posts: 156
Reputation : [ 7 | 0 ]

Re: Monstra 1.3.0 - Release

check the login is not required in the template can be put on and off, but for some people it is necessary and safety is the same I think.

It is an opinion.

nakome's Website

Quote Post 7

8 Reply by Awilum 2012-09-11 19:54:26

Awilum
Administrator
Online

From: Ukraine
Registered: 2012-04-12
Posts: 229
Reputation : [ 4 | 0 ]

Re: Monstra 1.3.0 - Release

Maybe I did not make myself clear or maybe my concerns are unprofounded.

All CMS use this practice. Everything is ok.

You can turn off Users Plugin Frontend at all if you want.
/plugins/box/users/users.plugin.php

write

    Plugin::register( __FILE__,                    
                    __('Users', 'users'),
                    __('Users manager', 'users'),  
                    '1.0.0',
                    'Awilum',                 
                    'http://monstra.org/',
                    null,
                    'box');

instead of

    Plugin::register( __FILE__,                    
                    __('Users', 'users'),
                    __('Users manager', 'users'),  
                    '1.0.0',
                    'Awilum',                 
                    'http://monstra.org/',
                    'users',
                    'box');

In next update would be ability to turn off frontend user registration.

Maybe split updates with fixes and features?

yes, I will look at this issue

Awilum's Website

Quote Post 8

9 Reply by RedStar 2012-09-25 02:50:46 (edited by RedStar 2012-09-25 05:33:21)

RedStar
Monstra Newbie
Offline

Registered: 2012-06-28
Posts: 19
Reputation : [ 0 | 0 ]

Re: Monstra 1.3.0 - Release

Awilum wrote:

    Plugin::register( __FILE__,                    
                    __('Users', 'users'),
                    __('Users manager', 'users'),  
                    '1.0.0',
                    'Awilum',                 
                    'http://monstra.org/',
                    null,
                    'box');

instead of

    Plugin::register( __FILE__,                    
                    __('Users', 'users'),
                    __('Users manager', 'users'),  
                    '1.0.0',
                    'Awilum',                 
                    'http://monstra.org/',
                    'users',
                    'box');

In next update would be ability to turn off frontend user registration.

Maybe split updates with fixes and features?

yes, I will look at this issue

I was on my way to post a new topic but you allready have answered my questions long time ago. A big thank you mastah!
Btw instead of writing "null" ok to leave blank since when writing "null" it will display "null" link in sitemap...?

Have started to learn PHP but its a steep mountain to climb in the begging but I am getting there....I think *gulp*

Quote Post 9

10 Reply by Awilum 2012-09-25 15:56:44

Awilum
Administrator
Online

From: Ukraine
Registered: 2012-04-12
Posts: 229
Reputation : [ 4 | 0 ]

Re: Monstra 1.3.0 - Release

>>Btw instead of writing "null" ok to leave blank since when writing "null" it will display "null" link in sitemap...?
No, you must write null

Correct:

    Plugin::register( __FILE__,                    
                    __('Users', 'users'),
                    __('Users manager', 'users'),  
                    '1.0.0',
                    'Awilum',                 
                    'http://monstra.org/',
                    null,
                    'box');

Wrong:

    Plugin::register( __FILE__,                    
                    __('Users', 'users'),
                    __('Users manager', 'users'),  
                    '1.0.0',
                    'Awilum',                 
                    'http://monstra.org/',
                    'null',
                    'box');

Awilum's Website

Quote Post 10

Monstra 1.3.0 - Release

Posts: 10

1 Topic by Awilum 2012-09-01 07:22:52

Topic: Monstra 1.3.0 - Release

2 Reply by nakome 2012-09-01 11:46:49

Re: Monstra 1.3.0 - Release

3 Reply by Awilum 2012-09-02 14:03:56

Re: Monstra 1.3.0 - Release

4 Reply by RedStar 2012-09-11 00:10:04

Re: Monstra 1.3.0 - Release

5 Reply by Awilum 2012-09-11 06:35:32

Re: Monstra 1.3.0 - Release

6 Reply by RedStar 2012-09-11 08:14:15 (edited by RedStar 2012-09-11 11:28:29)

Re: Monstra 1.3.0 - Release

7 Reply by nakome 2012-09-11 12:18:01

Re: Monstra 1.3.0 - Release

8 Reply by Awilum 2012-09-11 19:54:26

Re: Monstra 1.3.0 - Release

9 Reply by RedStar 2012-09-25 02:50:46 (edited by RedStar 2012-09-25 05:33:21)

Re: Monstra 1.3.0 - Release

10 Reply by Awilum 2012-09-25 15:56:44

Re: Monstra 1.3.0 - Release

Posts: 10