CMSMS | CMS Made Simple

Sorry folks. We got word a little bit ago about a security issue, so we pushed out a quick fix to make sure that people can’t take advantage of it. Please update as soon as you can.

Thanks!

Version 1.2.5 “Free Hill” — May 12, 2008
—————–
- Fixed a security issue with the java applet functionality in the File Manager

Bookmark to:

At long last here it is. We’ve released it, the final package has had some testing, and we think that this is stable. Hopefully I’m not deleting this post in 15 minutes.

Anyways, Here is the list of what has changed in 1.2:

Version 1.2 “Barbados”
—————–
- Adds capabilities to have a wysiwyg on the front end
- Adds the ability to select ‘groups’ as additional editors
- Now the ‘admin group’ automatically has all permissions, not
just the admin user
- Add a new page where default settings for new pages can be set
- Adds a new file manager
- Enhance the use of permissions when adding or editing content
- Adds a new ‘print’ plugin capable of generating pdf filees
from one or more pages
- News 2.5.1
* Moved the default summary and detail templates into
their own tab
* Adds An extra field
- Fix issues with stylesheet name changes after hitting ‘apply’
- Fixes issues with spaces or underscores not being allowed in usernames
- Fixes pagination issues in the admin log, and anywhere that uses
the built in pagination functions.
- Turn error reporting to E_ALL and turn display_errors on
if debug mode is on.
- You can no longer delete the admin group

Notes:

• This is the New ‘Stable’ version, the 1.1 branch will no longer be maintained, unless there are circumstances that force us to do so
• We intend this to be the last version of the 1.x series unless there are critical bugs or security issues that pop up
• Some items (particularly with frontend News that didn’t appear in the beta cycle were not important enough to restart the beta process for, and therefore will be taken care of in subsequent versions of News

Many thanks to the considerable effort expended by numerous people in this beta cycle. Alot of people have put their time and effort into making this a stable release, so that we can have tiime to donate to 2.0 to make it an order of magnitude better than CMS already is (and that seems like it’ll be a hard task).

Bookmark to:

Even before we could start beta testing 1.2, a potential security vulnerability was found in 1.1.2. (Thank you johnbmcdonald for bringing this to our attention.), forcing us to release 1.1.3

This is a very slight change, only the adodb_lite files have been adjusted.

We recommend that all users upgrade their sites as soon as possible. The files (including diffs) can be found on the download page here or on the forge.

Thank you.

[edit]
The links on the download page have been removed. An error was spotted in the patch.

Bookmark to:

Yes. You’ve read correctly.

There will be a 1.2 release of CMS Made Simple before 2.0 comes out. It should be in beta within the next couple of weeks. 1.2 will attempt to address some of the major glaring features that people have asked for and will be the LAST release of the 1.x series of CMS Made Simple (except for any security flaws that come up).

Beta testing will be exteremely important in this release, as we don’t intend to have a 1.2.1, and with the exception of security fixes, we’ll avoid it at all cost. We need to focus our efforts on 2.0 from now on. We expect, and hope that the user community can once again contribute with testing of this release to make it stable, and usable.

Here are the major things that will be in 1.2:
a) Frontend Wysiwygs
Some modules (News 2.5) support text areas in the front end. Modules will now be able to provide a wysiwyg on the front end instead of just a plain text area.

b) News 2.5
Has an ‘extra’ field for additional information (maybe an image) Supports frontend article submission

c) Allow gid == 1 (the admin group) to have all permissions, not just uid == 1 (The first user)

d) Fixes to pagination issues (particularly in the admin log)

e) Defaults for new pages
There will be a new page or tab in the global settings menu that allows you to set the defaults for newly created pages (set the default metadata, cachable, show in menu, etc).

f) A security enhanced content editor
People without ‘Modify Page Structure’ permission will not be able to change the ’show in menu’, ‘page alias’, or active flags of a content item

g) Additional Editor Groups
Along with ‘user’ additional editors, you’ll be able to select groups as additional editors

h) Enhancements to debug mode to assist with debugging issues

i) An enhanced module manager that will not allow you to install modules that are not compatible with your version of CMS Made Simple…. and that will ‘optionally’ only show the latest version of a module.

j) A replacement file manager

k) More batch operations in Content >> Pages. Including the ability to export pages to pdf.

l) Batch operations in Layout >> Templates, and Layout >> Stylesheets

As well, the development team as been making an extra effort to close off some of the glaring bugs in the forge. We can’t get to them all, but hopefully many of the bigger ones can be closed for 1.2

The feature list of 1.2 is pretty much locked in at this time. We’ve had extensive discussions about the topic over the past few weeks, and this is the set of features we thought we could implement in a reasonable period of time without dramatic overhauls to the way things work, so additional feature requests are probably off of the table for this release.

As you can probably see, this will be a considerable step forward for CMS Made Simple, and its stability is paramount. I’ll keep you posted, but would like to take this time to call for volunteers for beta testing. Our testing team can only do a limited amount, and can’t possibly test all the permutations and combinations of problems that you can.

[addendum]

The beta cycle for this will be short…. 1 week per beta…. and we want to have no more than one or two betas. So please, test, test, and test…. 1.2 would be perfect for all of the sites that are ‘in development’ but won’t be rolled out for a while.

Bookmark to:

Due to a few potential security problems that were brought to our attention, we decided to release 1.0.7 even before 1.1 was ready for prime time.

We suggest you update to this version AS SOON AS POSSIBLE (again you say!, yeah we know, but it’s better to fix these problems and get the fixes out soon rather than sit on them.)

Here’s the changelog:

Version 1.0.7 "Kahoolawe" -- Jun 11 2007
-----------------
- Fixes potential security issue with processing of smarty templates
- Added a few missing permission checks to core modules

Bookmark to: