CastleCops® - An Invitation To See and Test PHP-Nuke After-Patched 7.8.3.1.1

64bitguy writes "As I have done little in promoting some of the advanced coding work that I have been doing over the last several months, I wanted to announce that After-Patched for PHP-Nuke 7.8 is nearing a release date.

In a nutshell, this code takes over where Patched by NukeResources leaves off. The primary goals of After-Patched are to make Nuke fully cross-browser compatible as well as 100% HTML 4.01 Transitional and CSS Compliant. In doing so, many (hundreds) of new features have been added while the remaining issues have been fixed in the baseline PHP-Nuke code.

For the first version of After-Patched, I used PHP-Nuke Version 7.8 - Patched 3.1 as the baseline and started by completely recoding the TinyMCE editor integration methodologies as well as the existing code in all modules that utilize it.

I continued by completely recoding all baseline Nuke functions as well as every module and block to achieve this advanced level of cross-browser compatibility and W3C Compliance. In this 300+ hour process, over 25,000 coding and compliance bugs have been fixed and the version completely stabilized.

Additionally, many Nuke functions have been completely recoded to deliver new advanced features as well as support for the TinyMCE HTML editor as well as output that Nuke generates. While every module has been completely recoded, I wanted to mention that major new features and compliance can be seen in the:
AvantGo Module
BBtoNuke Module
Credits Module
Feedback Module
News Module (and backend.php)
NukeSentinel
Statistics Module
Topics Module
And countless other baseline functions, Blocks and Modules.

If you want to read about the intentions, please visit: http://64bit.us/a89-Multi_Layered_Security.html and http://64bit.us/ftopict-172.html as well as all of the articles on the homepage of http://78.64bit.us.

This leads me to why I am posting this announcement.

In an effort to thoroughly test After-Patched, I am inviting everyone to put this solution through the mill by visiting http://78.64bit.us and attempting any known or suspected security issues against the domain. I also invite everyone to look for any and all issues or problems that exist that have always bothered people. I have done my best to eliminate all of these issues and create better functionality, but I must admit that nobody is perfect and I might have missed something.

If you know of any potential security hole(s), or other baseline flaws, I invite you to test this domain for any of those potential weaknesses.

With that in mind, I have setup NukeSentinel to not ban anyone for the next week (October 6, 2005 through October 15, 2005), but rather to simply record and report each attempted attack or abuse.

If for any reason, you find any flaw, I ask that you do not deface the site, but rather simply report the weakness either via feedback or via the preferred method of posting in my dedicated forums. It is okay to point out issues and ideas too!

I have made great efforts to secure this version of PHP-Nuke as well as to convert all functions to actually do what they were intended to do, while also being redesigned to work with the TinyMCE editor.

I invite everyone to explore this test domain and to report any flaws that you might find.

Those that successfully identify any flaws, problems and/or fixes will of course be given thank you credits in the distributed code.

Thanks for you attention and your help and Happy Hunting!

Steph Benoit, Developer
After-Patched for PHP-Nuke "


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 108ppm 0.157s (0.025s) Making cybercriminals unhappy since 2002*