• Unfortunately, we have experienced significant hard drive damage that requires urgent maintenance and rebuilding. The forum will be a state of read only until we install our new drives and rebuild all the configurations needed. Please follow our Facebook page for updates, we will be back up shortly! (The forum could go offline at any given time due to the nature of the failed drives whilst awaiting the upgrades.) When you see an Incapsula error, you know we are in the process of migration.

zCMS [PHP, OOP, Phoenix, Secure]

Status
Not open for further replies.
Joined
Apr 30, 2007
Messages
2,339
Reaction score
1,547
Hey guys, quick release:

This is indeed the CMS I am using on my very own hotel, Zap Hotel. I believe I have secured it to the best of my ability, along with a couple custom features that you'll love, i'll list some of the features below for you:


  • Change Password
  • Set friend requests on/off
  • Redeem gold bars by the hundreds on the site rather than manually on the client
  • Fully functioning housekeeping (some may be missing due to the fact they are too custom to Zap to release)
  • Exploit secured (to the best of my knoweledge)
Those are some of the features.

Make sure to execute this on your database:

PHP:
-- zCMS SQL - Import for your CMS to work correctly 
--  Credits to Meth0d for the uberCMS base & myself for editing and securing 
--  Credits to Hejula for pointing some poop out and some images 
--  Credits to davidaap for pointing out some exploits and helping me patch them when I was a n00b 
--  Please do not remove my credits, or Meth0ds for that matter. 
--  Copyright 2011
--
SET SQL_MODE="NO_AUTO_VALUE_ON_ZERO";
SET time_zone = "+00:00";
--
-- Table structure for table `site_config`
--

CREATE TABLE IF NOT EXISTS `site_config` (
  `maintenance` enum('0','1') NOT NULL DEFAULT '0',
  `web_build` varchar(255) NOT NULL
) ENGINE=MyISAM DEFAULT CHARSET=latin1;

-- --------------------------------------------------------

--
-- Table structure for table `site_cron`
--

CREATE TABLE IF NOT EXISTS `site_cron` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `prio` int(11) NOT NULL DEFAULT '5',
  `enabled` enum('0','1') NOT NULL DEFAULT '1',
  `scriptfile` varchar(50) NOT NULL,
  `last_exec` int(11) NOT NULL,
  `exec_every` int(11) NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=3 ;

-- --------------------------------------------------------

--
-- Table structure for table `site_hotcampaigns`
--

CREATE TABLE IF NOT EXISTS `site_hotcampaigns` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `order_id` int(11) NOT NULL DEFAULT '1',
  `enabled` enum('0','1') NOT NULL DEFAULT '1',
  `image_url` text NOT NULL,
  `caption` text NOT NULL,
  `descr` text NOT NULL,
  `url` text NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=2 ;

-- --------------------------------------------------------

--
-- Table structure for table `site_minimail`
--

CREATE TABLE IF NOT EXISTS `site_minimail` (
  `id` int(10) unsigned NOT NULL AUTO_INCREMENT,
  `sender_id` int(10) unsigned NOT NULL,
  `receiver_id` int(10) unsigned NOT NULL,
  `folder` enum('inbox','sent','trash') NOT NULL DEFAULT 'inbox',
  `is_read` enum('0','1') NOT NULL DEFAULT '0',
  `subject` varchar(120) NOT NULL,
  `date` varchar(120) NOT NULL,
  `isodate` varchar(120) NOT NULL,
  `timestamp` int(11) NOT NULL,
  `body` text NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=7075 ;

-- --------------------------------------------------------

--
-- Table structure for table `site_navi`
--

CREATE TABLE IF NOT EXISTS `site_navi` (
  `id` int(10) unsigned NOT NULL AUTO_INCREMENT,
  `parent_id` int(10) unsigned NOT NULL DEFAULT '0',
  `order_id` int(11) NOT NULL,
  `caption` text NOT NULL,
  `class` text NOT NULL,
  `url` text NOT NULL,
  `visibility` enum('0','1','2','3') NOT NULL COMMENT '0 = Never, 1 = Always, 2 = Logged in only, 3 = Guests only',
  PRIMARY KEY (`id`),
  KEY `parent_id` (`parent_id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=22 ;

-- --------------------------------------------------------

--
-- Table structure for table `site_news`
--

CREATE TABLE IF NOT EXISTS `site_news` (
  `id` int(10) unsigned NOT NULL AUTO_INCREMENT,
  `seo_link` varchar(120) NOT NULL DEFAULT 'news-article',
  `title` text NOT NULL,
  `category_id` int(10) unsigned NOT NULL DEFAULT '1',
  `topstory_image` text NOT NULL,
  `body` text NOT NULL,
  `snippet` text NOT NULL,
  `datestr` varchar(50) NOT NULL,
  `timestamp` int(11) NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=35 ;

-- --------------------------------------------------------

--
-- Table structure for table `site_news_categories`
--

CREATE TABLE IF NOT EXISTS `site_news_categories` (
  `id` int(10) unsigned NOT NULL AUTO_INCREMENT,
  `caption` text NOT NULL,
  PRIMARY KEY (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=2 ;

-- --------------------------------------------------------

--
-- Table structure for table `site_news_comments`
--

CREATE TABLE IF NOT EXISTS `site_news_comments` (
  `id` int(11) NOT NULL AUTO_INCREMENT,
  `article` int(11) NOT NULL,
  `userid` int(11) NOT NULL,
  `comment` varchar(500) NOT NULL,
  `posted_on` varchar(150) NOT NULL DEFAULT '',
  PRIMARY KEY (`id`)
) ENGINE=MyISAM  DEFAULT CHARSET=latin1 AUTO_INCREMENT=1525 ;
Download:

Please don't remove my credits, or I will stop supporting this project. If you find any exploits let me know so I can patch them. Good luck :thumbup1:

Oh, check the generic tpl files if you want to get rid of my forum tab.
 
"(still lacks brains)"
Loyal Member
Joined
Sep 2, 2011
Messages
2,371
Reaction score
1,361
Nice work Jonty!

Jonteh - zCMS [PHP, OOP, Phoenix, Secure] - RaGEZONE Forums
 
Web & Interaction Design
Loyal Member
Joined
Dec 18, 2010
Messages
1,506
Reaction score
712
Lul, did you release this cause you're working on a new edit, or..? :p
Oft, I can't Msn you, my phone is being homo. :/
 
The one and only!
Loyal Member
Joined
Nov 24, 2008
Messages
2,529
Reaction score
1,435
Title: Could not execute cron job 'credits.php': could not locate script file.
Text: Could not execute cron job 'credits.php': could not locate script file.

Remove all the things from site_cron, except from webbuild.php
 
Status
Not open for further replies.
Back
Top