Well coded, exploit free CMS for me to start developping

Results 1 to 22 of 22
  1. #1
    Member Pedrofg is offline
    MemberRank
    Oct 2008 Join Date
    42Posts

    Well coded, exploit free CMS for me to start developping

    Hey guys,

    So, I just started learning HTML and CSS and wanted to started experimenting on a CMS that would serve as an example for me. I'm just so confuse with so many options...

    In preference, I would like a CMS that would be compatible with the most stable EMU right.

    Thank you!


  2. #2
    :joy: Jonteh is offline
    Grand MasterRank
    Apr 2007 Join Date
    New York, USALocation
    3,372Posts

    Re: Well coded, exploit free CMS for me to start developping

    You could try this: https://forum.ragezone.com/f353/rel-...eplay-1082133/

    It's decently enough coded however, there is a XSS exploit or two you'll want to fix. Info is in the thread.

  3. #3
    Gaby is offline
    Grand MasterRank
    Apr 2013 Join Date
    Viva HollandiaLocation
    1,607Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Jonteh View Post
    You could try this: https://forum.ragezone.com/f353/rel-...eplay-1082133/

    It's decently enough coded however, there is a XSS exploit or two you'll want to fix. Info is in the thread.
    I don't call this decently coded. It contains a global.php, still uses 60-70% UberCMS code (which was first released YEARS ago) and also doesn't make use of the MVC pattern.

    Most of the current Habbo CMS' make use of old code. I think µHabbo from @Xesause is a good example to develop upon. It's still in development, but I believe he released a version somewhere in his thread:

    https://forum.ragezone.com/f331/cms-auhabbo-1073339/

  4. #4
    Elite Member Xesause is offline
    Member +Rank
    Feb 2015 Join Date
    181Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Gaby View Post
    I don't call this decently coded. It contains a global.php, still uses 60-70% UberCMS code (which was first released YEARS ago) and also doesn't make use of the MVC pattern.

    Most of the current Habbo CMS' make use of old code. I think µHabbo from @Xesause is a good example to develop upon. It's still in development, but I believe he released a version somewhere in his thread:

    https://forum.ragezone.com/f331/cms-auhabbo-1073339/
    It is indeed still in development, and at the moment I'm rewriting it completely. 2.0 will be even cleaner.

    On the other hand, although it's easy to modify, I think it's a better idea to write plugins, because it's easier to maintain and distribute, and plugins only need minor changes when updating to a new version. If you need any help, send me a private message for my skype.

  5. #5
    :joy: Jonteh is offline
    Grand MasterRank
    Apr 2007 Join Date
    New York, USALocation
    3,372Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Gaby View Post
    I don't call this decently coded. It contains a global.php, still uses 60-70% UberCMS code (which was first released YEARS ago) and also doesn't make use of the MVC pattern.

    Most of the current Habbo CMS' make use of old code. I think µHabbo from @Xesause is a good example to develop upon. It's still in development, but I believe he released a version somewhere in his thread:

    https://forum.ragezone.com/f331/cms-auhabbo-1073339/
    MVC for a Habbo, PHP project is just stupid. UberCMS code? That CMS is written from scratch, thank you. All my projects are.

    He asked for a CMS so he could start messing around with CSS and HTML. I don't think MVC or OOP will make a difference here lol.

  6. #6
    Gaby is offline
    Grand MasterRank
    Apr 2013 Join Date
    Viva HollandiaLocation
    1,607Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Jonteh View Post
    MVC for a Habbo, PHP project is just stupid. UberCMS code? That CMS is written from scratch, thank you. All my projects are.

    He asked for a CMS so he could start messing around with CSS and HTML. I don't think MVC or OOP will make a difference here lol.
    Let me give you a few examples of what I see is clearly taken from UberCMS:

    Spoiler:

    Code:
    require_once "global.php";
    
    
    if(!LOGGED_IN)
    {
        $core->Redirect(WWW);
    }
    
    
    $tpl->assign('pagetitle', 'Me');
    
    
    $tpl->assign('Username', $users->GetUserVar($_SESSION["Username"], 'username'));
    $tpl->assign('Motto', $users->GetUserVar($_SESSION["Username"], 'motto'));
    $tpl->assign('Money', number_format($users->GetUserVar($_SESSION["Username"], 'credits')));
    $tpl->assign('Duckets', number_format($users->GetUserVar($_SESSION["Username"], 'activity_points')));
    $tpl->assign('Look', $users->GetUserVar($_SESSION["Username"], 'look'));
    $tpl->assign('News', $core->GetNewsFeed());
    $tpl->assign('OnlineStatus', $core->EnumToBool($users->GetUserVar($_SESSION["Username"], 'online')) ? 'habbo_online_anim' : 'offline_2');
    
    
    $tpl->draw('head');
    $tpl->draw('navi');
    $tpl->draw('me');
    $tpl->draw('footer');
    This is just plain UberCMS style. Also the users class and the core class are both UberCMS style. Actually a core class just is. Also I definitely recognize UberCMS style in the way the global.php is build.


    It's not bad, not at all, I think you did a very good job coding this CMS, but there's just better sources to learn from out there. Like the CMS I pointed out. If somebody wants to learn how to program, I think you should provide the person with the best out there, which imo is a MVC pattern (because in developing webapplications this is very important) and also build upon a framework.

  7. #7
    :joy: Jonteh is offline
    Grand MasterRank
    Apr 2007 Join Date
    New York, USALocation
    3,372Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Gaby View Post
    Let me give you a few examples of what I see is clearly taken from UberCMS:

    Spoiler:

    Code:
    require_once "global.php";
    
    
    if(!LOGGED_IN)
    {
        $core->Redirect(WWW);
    }
    
    
    $tpl->assign('pagetitle', 'Me');
    
    
    $tpl->assign('Username', $users->GetUserVar($_SESSION["Username"], 'username'));
    $tpl->assign('Motto', $users->GetUserVar($_SESSION["Username"], 'motto'));
    $tpl->assign('Money', number_format($users->GetUserVar($_SESSION["Username"], 'credits')));
    $tpl->assign('Duckets', number_format($users->GetUserVar($_SESSION["Username"], 'activity_points')));
    $tpl->assign('Look', $users->GetUserVar($_SESSION["Username"], 'look'));
    $tpl->assign('News', $core->GetNewsFeed());
    $tpl->assign('OnlineStatus', $core->EnumToBool($users->GetUserVar($_SESSION["Username"], 'online')) ? 'habbo_online_anim' : 'offline_2');
    
    
    $tpl->draw('head');
    $tpl->draw('navi');
    $tpl->draw('me');
    $tpl->draw('footer');
    This is just plain UberCMS style. Also the users class and the core class are both UberCMS style. Actually a core class just is. Also I definitely recognize UberCMS style in the way the global.php is build.


    It's not bad, not at all, I think you did a very good job coding this CMS, but there's just better sources to learn from out there. Like the CMS I pointed out. If somebody wants to learn how to program, I think you should provide the person with the best out there, which imo is a MVC pattern (because in developing webapplications this is very important) and also build upon a framework.
    I get your point, I really do. But as stated in the OP, he's learning HTML and CSS, not PHP.

  8. #8
    Gaby is offline
    Grand MasterRank
    Apr 2013 Join Date
    Viva HollandiaLocation
    1,607Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Jonteh View Post
    I get your point, I really do. But as stated in the OP, he's learning HTML and CSS, not PHP.
    Haha I get your point too. I guess we have different views on what something good is to build upon. Even if it's just HTML and CSS. ^^

  9. #9
    Elite Member Xesause is offline
    Member +Rank
    Feb 2015 Join Date
    181Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Gaby View Post
    It's not bad, not at all, I think you did a very good job coding this CMS, but there's just better sources to learn from out there. Like the CMS I pointed out. If somebody wants to learn how to program, I think you should provide the person with the best out there, which imo is a MVC pattern (because in developing webapplications this is very important) and also build upon a framework.
    I disagree here. Real MVC is not possible in PHP, and you should know that. Separation of concerns, on the other hand, is really important, though, and many CMS'es fail to implement it.

    A framework might also not be a necessity because for something as simple as a Habbo CMS, picking some components as a router and a template engine, and maybe an ORM, is good enough.

  10. #10
    Member Pedrofg is offline
    MemberRank
    Oct 2008 Join Date
    42Posts

    Re: Well coded, exploit free CMS for me to start developping

    @Xesause @Jonteh @Gaby Thank you for your answers! If my ultimate objective is to code a CMS from scratch, what more should I learn and where?

  11. #11
    Elite Member Xesause is offline
    Member +Rank
    Feb 2015 Join Date
    181Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Pedrofg View Post
    @Xesause @Jonteh @Gaby Thank you for your answers! If my ultimate objective is to code a CMS from scratch, what more should I learn and where?
    PHP, and not from online tutorials but from a good book or two, preferably a recent book.

  12. #12
    Member Pedrofg is offline
    MemberRank
    Oct 2008 Join Date
    42Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Xesause View Post
    PHP, and not from online tutorials but from a good book or two, preferably a recent book.
    Codacademy is out of question then? And only PHP? I heart you speaking of some terms i am Not familiar of like MVC OOP ir ORM...


    Enviado do meu iPhone usando o Tapatalk

  13. #13
    Elite Member Xesause is offline
    Member +Rank
    Feb 2015 Join Date
    181Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Pedrofg View Post
    Codacademy is out of question then? And only PHP? I heart you speaking of some terms i am Not familiar of like MVC OOP ir ORM...


    Enviado do meu iPhone usando o Tapatalk
    - MVC is a design pattern.
    - OOP will probably be explained in the book
    - An ORM is a systen that makes accessing databases easy, often using OOP techniques

  14. #14
    Loyalty Vaulient is offline
    Grand MasterRank
    May 2012 Join Date
    MalaysiaLocation
    1,796Posts

    Re: Well coded, exploit free CMS for me to start developping

    At this point , no matter what people recommend , it will always have someone who will say

    "that cms sucks"
    "that cms has horrible code"
    "why would you even"

    and I could go on.

    In truth , it doesn't matter what cms you use. It's matter of how knowledgeable you are. The more you understand of mysql/mysqli and php , the lesser you need to worry about exploits , as you can patch them yourself.

    My favorite cms , until today has always remained UberCMS . I even loved @Jonteh's ubercms 2.0.1 , despite how many people kept criticizing it for exploits and backdoors , but with just enough effort , you can always clean out the thrash. But that's my liking.

    If you are going to ask me , I'm going to recommend RevCMS , and I don't care what people say , but yes , it is said to be the safest out there (without all the plugins) though yes there are a few threads out there with it's known exploit fix

    https://forum.ragezone.com/f353/revcms-fix-1012326/

    But overall , yes this is my point of view , if you don't agree you don't have to work on it , also best of luck with your experimenting :)
    Last edited by Vaulient; 30-11-15 at 05:35 PM.

  15. #15
    Member Pedrofg is offline
    MemberRank
    Oct 2008 Join Date
    42Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Vaulient View Post
    At this point , no matter what people recommend , it will always have someone who will say

    "that cms sucks"
    "that cms has horrible code"
    "why would you even"

    and I could go on.

    In truth , it doesn't matter what cms you use. It's matter of how knowledgeable you are. The more you understand of mysql/mysqli and php , the lesser you need to worry about exploits , as you can patch them yourself.

    My favorite cms , until today has always remained UberCMS . I even loved @Jonteh's ubercms 2.0.1 , despite how many people kept criticizing it for exploits and backdoors , but with just enough effort , you can always clean out the thrash. But that's my liking.

    If you are going to ask me , I'm going to recommend RevCMS , and I don't care what people say , but yes , it is said to be the safest out there (without all the plugins) though yes there are a few threads out there with it's known exploit fix

    https://forum.ragezone.com/f353/revcms-fix-1012326/

    But overall , yes this is my point of view , if you don't agree you don't have to work on it , also best of luck with your experimenting :)
    Reading all your comments Im getting confused about where to start, mainly because I dont have the knowledge to understand your arguments. Maybe I should start by learning PHP without thinking about the Habbo part. Whats the best way to start? Codacademy or books?


    Enviado do meu iPhone usando o Tapatalk

  16. #16
    Loyalty Vaulient is offline
    Grand MasterRank
    May 2012 Join Date
    MalaysiaLocation
    1,796Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Pedrofg View Post
    Reading all your comments Im getting confused about where to start, mainly because I dont have the knowledge to understand your arguments. Maybe I should start by learning PHP without thinking about the Habbo part. Whats the best way to start? Codacademy or books?


    Enviado do meu iPhone usando o Tapatalk
    Definitely books before codeacademy. Learn the theory behind php before experimenting with it. Grasp the understanding before grasping the fundamentals.

    If I were you , I'd learn php through books while learning html/css on codeacademy , then once I'm able to create a webpage from scratch , I'll experiment on php either from codeacademy or localhost. Trust me , you wont be having alot of headache if you learn by books first when learning php

  17. #17
    Member Pedrofg is offline
    MemberRank
    Oct 2008 Join Date
    42Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Vaulient View Post
    Definitely books before codeacademy. Learn the theory behind php before experimenting with it. Grasp the understanding before grasping the fundamentals.

    If I were you , I'd learn php through books while learning html/css on codeacademy , then once I'm able to create a webpage from scratch , I'll experiment on php either from codeacademy or localhost. Trust me , you wont be having alot of headache if you learn by books first when learning php
    Great answer! Thank you so much! So I dont really need books for html/css right? I already have learned those two languages on codeacademy but I am afraid I forget those when I finish my PHP book...

    Is there any specially good PHP book for beginners?

    Is php all I need for building a cms?

    Thank you!!


    Enviado do meu iPhone usando o Tapatalk

  18. #18
    Elite Member Xesause is offline
    Member +Rank
    Feb 2015 Join Date
    181Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Pedrofg View Post
    Great answer! Thank you so much! So I dont really need books for html/css right? I already have learned those two languages on codeacademy but I am afraid I forget those when I finish my PHP book...

    Is there any specially good PHP book for beginners?

    Is php all I need for building a cms?

    Thank you!!


    Enviado do meu iPhone usando o Tapatalk
    You'll also need to know SQL for database queries. You won't forget HTML and CSS during your PHP study, because it will probaby also involve those languages a bit.

  19. #19
    Put Community First fallenfate is offline
    Grand MasterRank
    Oct 2014 Join Date
    Arad DomanLocation
    1,108Posts

    Re: Well coded, exploit free CMS for me to start developping

    HTML = mark-up language, so this is your page structure; elements.
    CSS = cascading style sheets; top-to-bottom page styling, read in that order.
    PHP = server-side code; triggers SQL queries to insert/update/remove database table data and structures, protects against XSS, SQL injection, etc. when learned and applied
    MySQL = server-side database code; used in PHP to query the DB via C.R.U.D (Google this, but in short create/read/update/delete) methods
    JS = client-side code; form validation (cosmetic purposes; do your PHP form validation too as that is the MOST important part)

    A good book to learn from is Larry Ullman's PHP and MySQL for Dynamic Web Sites, for sale on Amazon.

  20. #20
    Member Pedrofg is offline
    MemberRank
    Oct 2008 Join Date
    42Posts
    Quote Originally Posted by fallenfate View Post
    HTML = mark-up language, so this is your page structure; elements.
    CSS = cascading style sheets; top-to-bottom page styling, read in that order.
    PHP = server-side code; triggers SQL queries to insert/update/remove database table data and structures, protects against XSS, SQL injection, etc. when learned and applied
    MySQL = server-side database code; used in PHP to query the DB via C.R.U.D (Google this, but in short create/read/update/delete) methods
    JS = client-side code; form validation (cosmetic purposes; do your PHP form validation too as that is the MOST important part)

    A good book to learn from is Larry Ullman's PHP and MySQL for Dynamic Web Sites, for sale on Amazon.
    Awesome answer too. Im getting spoiled lol.

    Why do you Say CSS is top to bottom? I thought you could write properties on selectors in whatever order and what mattered was the order of the selectors on the html page...

    Do I need any extra coding knowledge to edit an emulator? (Add furni or fix a backdoor)

    Thank you guys


    Enviado do meu iPhone usando o Tapatalk

    Quote Originally Posted by fallenfate View Post
    HTML = mark-up language, so this is your page structure; elements.
    CSS = cascading style sheets; top-to-bottom page styling, read in that order.
    PHP = server-side code; triggers SQL queries to insert/update/remove database table data and structures, protects against XSS, SQL injection, etc. when learned and applied
    MySQL = server-side database code; used in PHP to query the DB via C.R.U.D (Google this, but in short create/read/update/delete) methods
    JS = client-side code; form validation (cosmetic purposes; do your PHP form validation too as that is the MOST important part)

    A good book to learn from is Larry Ullman's PHP and MySQL for Dynamic Web Sites, for sale on Amazon.
    Awesome answer too. Im getting spoiled lol.

    Why do you Say CSS is top to bottom? I thought you could write properties on selectors in whatever order and what mattered was the order of the selectors on the html page...

    Do I need any extra coding knowledge to edit an emulator? (Add furni or fix a backdoor)

    Thank you guys


    Enviado do meu iPhone usando o Tapatalk
    Last edited by Droppy; 01-12-15 at 08:24 PM. Reason: merging posts.

  21. #21
    Put Community First fallenfate is offline
    Grand MasterRank
    Oct 2014 Join Date
    Arad DomanLocation
    1,108Posts

    Re: Well coded, exploit free CMS for me to start developping

    Okay, CSS means Cascading Style Sheets. You know waterfalls? That's water cascading down. So imagine a stylesheet like that, it flows from the top to the bottom. How this applies is if you try styling the same thing twice, because the bottom one is the last read, it applies.

    Take this for example:

    <style type="text/css">
    p {
    color: red;
    }
    p {
    color: blue;
    }
    </style>

    The web browser reads from the top and applies the color red to the paragraphs on the page. BUT, because we set it to blue and that is the last thing read by the browser, it sets them blue.

    Similarly, the same works if you use media queries to make your site responsive. You should put them at the bottom so you can reset any other styles with what needs to apply in the media queries for those breakpoints, as they're the last to be processed then, and take effect.
    Last edited by fallenfate; 01-12-15 at 12:31 PM.

  22. #22
    Elite Member Xesause is offline
    Member +Rank
    Feb 2015 Join Date
    181Posts

    Re: Well coded, exploit free CMS for me to start developping

    Quote Originally Posted by Pedrofg View Post
    Do I need any extra coding knowledge to edit an emulator? (Add furni or fix a backdoor)
    Furni is not in the emulator, but in the database. Using HeidiSQL or Navicat (two database clients) you can edit furni information. No further knowledge needed.

    Editing the emulator itso adding commands and fixing backdoors requires knowledge of the language the emulator is written in, which nowadays often is C# or Java. I think that for a starting programmer this may be a bit too hard. C# and Java have a lot in common qua syntax, a little bit like PHP and Javascript. If you need help removing a backdoor, ask me on skype.



Advertisement