esase / dream-cms

Dream CMS - Powered by Zend Framework

dream-cms

Dream CMS - open source php content management system. Check more details at http://www.dream-cms.kg/

dream-cms's Issues

Add visual admin mode in users frontend

Now we can't use admin manage features in frontend

Improve auto members role assigment

After a role deletion the system should assign a default role by single query. Now it works incorrect (The system get each member and set default role)

Fix the trouble

Deprecated: ini_set(): Use of mbstring.internal_encoding is deprecated in /Users/esase/Sites/dream_cms_2.3.2/module/Install/Module.php on line 203

Don't show the base layout in the layout switcher

Also we need the ability to select layouts via get params

Add posibility to use languages in layouts

Set correct permisions for uploaded files

Now we can't delete any files using CLI version of php

When we upload images we get a strange error

[core:notice] [pid 1377] AH00052: child pid 5614 exit signal Segmentation fault (11)
It happens in the mime type validator class

Update vendors elements

Incorrect format in robots.txt

Check it carefully and fix

Add Csrf token utility

Add a rss widget in admin panel

Add X-Frame-Options header SAMEORIGIN

We need it for security reason. Is must be like this: header('X-Frame-Options: SAMEORIGIN');

test

Add support of the comet technology

Modules should use this technology for receiving any messages from server

Send a report after each installation

We need to track all installations of Dream CMS

We need our own RSS parser

Now the Rss widgets get info using a remote server. And if the remote server cannot work we cannot get rss info.

Add support of global search

All modules should have possibility to use the global search

Replace all php_flag engine off

Sometimes hosting companies denied using all php flags, instead of them we need to use these code lines:
<FilesMatch "\.ph(p[3-5]?|tml)$"> Deny from all </FilesMatch>

It prevents using php scripts inside the resources dir. Also we have to disable php and phtml extensions for using in file manager.

Thanks to Gjoko Krstic [email protected] for this security report!

Replace the "gzopen" with "gzopen64" in " Layout\View\Helper\LayoutHeadResource"

You need to check if "gzopen" is absent you should use the "gzopen64". e.g

$functionName = function_exists('gzopen') ? 'gzopen' : 'gzopen64';
$gzip = $functionName($filePath. $this->gzFileExtension, $this->gzCompressionLevel);

We need to realize the delete content service

It should delete any content partialy via a cron job

Add priority for email notifications

Messages with the high priority should be sent immediately

Update all vendors libraries

Realize a rate widget

We need it for rate pages content

Add a license info for each file

Add usefull description in pages tree

People don't understand how to work with the pages tree.

I can't use js in tinyMce

The tinyMCE automatically stripped out all js

Add a change log

We need to write there all changes between current and prev. versions.

All forms must contain the CSRF token

We need it for security reason

Edit page link doesnt appear on the front-end when count of languages less or equal 1