As always, we invite feedback on our software and suggestions on how it may be improved. We are also always seeking developers to help improve our project.

This Release (Subversion R129)

• Localization (#22)
• Localization: French (#24)
• Upgrade scripts for installer (#8)
• “Preview Mode” for public side (#16)
• Various bug fixes and minor enhancements from the Developer’s List

Download PacerCMS 0.7
Discuss this Release

Link: http://pacercms.googlecode.com/svn/trunk/locale/tools/LC_MESSAGES/

If you have a background in a language other than English and would like to be involved in localizing PacerCMS, please contact us.

./includes/adodb_lite/adodb-perf-module.inc.php

In order for the attacker to exploit your system register_globals would have to be enabled on your PHP installation with your Web host. Most modern hosts have this feature disabled by default, but some (including GoDaddy) leave it enabled for backwards compatibility. Further reading:

http://php.net/register_globals

Again, please take a moment to remove the specified file from your installations even if you do not have register_globals enabled. The problem has been reported to the developer of ADOdb Lite, but a patched version is not yet available.

Running an online newspaper or magazine may bring some unwelcome attention from those seeking to exploit vulnerabilities in PacerCMS. We have received a great deal more traffic as of late as a result of our previous vulnerability and a few other minor examples that would effect a very small percentage of Web hosts. With that in mind, realize that your site is always in the crosshairs of an attacker because he or she can draw a great deal of attention by defacing or disabling your Web site. If you come across a site outlining a vulnerability in the software, please let us know (through direct e-mail) so that we may act quickly.

• includes/cm-header.php
• siteadmin/article-browse.php
• siteadmin/article-edit.php
• siteadmin/article-media.php
• siteadmin/cm-includes/cm-header.php
• siteadmin/issue-browse.php
• siteadmin/issue-edit.php
• siteadmin/page-edit.php
• siteadmin/poll-edit.php
• siteadmin/profile.php
• siteadmin/section-edit.php
• siteadmin/settings.php
• siteadmin/staff-access.php
• siteadmin/staff-edit.php
• siteadmin/submitted-browse.php
• siteadmin/submitted-edit.php

This Release (Subversion R104):

• Fixes an evaluation error on many hosts
• Plugs a minor file include risk if configuration file is missing

Download PacerCMS 0.6.2

While this version does not add any significant features for the average user other than a few bug fixes, it is recommended for all users. Our friends at RawSecurity.org have outlined a few problems that would allow a malicious visitor to conceivably obtain access rights through cross-site scripting (XSS) in the content submission public module (./submit.php). Even if you are not able to process a full update right now, please do replace your existing submit.php file with the version found on our subversion repositories. While we cannot guarantee that a site running PacerCMS will be safe from people with malicious intent, we do take security issues seriously.

This Release (R101)

• Streamlined code base in Site Administrator
• Adoption of phpDoc.org code commenting
• Security release
• Various bug fixes and minor enhancements from the Developer’s List

Download PacerCMS 0.6.1

PacerCMS is an open source adaptation of a PHP/MySQL application used to power a small weekly student newspaper Web site. The package serves as a basic framework for student and non-daily community newspapers. We are currently up to our sixth release of the project, but have not yet reached a stable “1.0″ milestone.

General Requirements

Knowledge of basic Subversion functions a must in order to contribute to development. Google account (free registration) required to join project on Google Code (principle location for Subversion repositories). Understanding and appreciation for student and community journalism will aide in catering to our target user base.

Areas of Need

• Core Project — Improve core functionality of project by streamlining activity for collaborative publishing; Review and implement suggestions from the user community; Refactor code base to adhere to a best practices standard
• Extend Project — Develop a means for a plugin architecture for internal and external development; Create standard API documentation to support plugin architecture
• Installation/Upgrading — Set installation requirements for project; Optimize package to be compatible on wide server configurations and user technical skill-sets; Create and maintain a utility to facilitate easy upgrades for future versions
• Database — Review database schema and optimize performance; Improve on existing data access layer to add support for more database platforms other than MySQL
• Documentation — Create and maintain online documentation for project; Documentation pertains to installation, technical administration and user operation
• Security — Perform a security audit of the system; identify, review, classify and repair possible security problems; Maintain closed communication with other developers as to protect the installed user base

To Inquire

Please join our discussion list at [http://groups.google.com/group/pacercms-discuss] and post a brief introduction of your interest in the project and skillset. Of course, you will probably wish to download and install a version of PacerCMS. You will find that our group is cordial, and welcome any ready to contribute. Visit our Web site at [http://pacercms.sourceforge.net].

This Release (Subversion R87):

• Ability to add and delete sections (#18)
• “Share Article” public module (#9)
• Themed section pages (#11)
• Various bug fixes and minor enhancements from the Developer’s List

Download PacerCMS 0.6
Discuss this Release

Download PacerCMS 0.6 PR2

Download PacerCMS 0.6 PR1