After a mandatory update that I needed to apply on my project and upgraded to PHP 8.4.8 while i trying to login to cmsB getting the errors:
Deprecated: Constant E_STRICT is deprecated in /xxxxxxx/xxxxxxx/www/cmsAdmin/lib/errorlog_functions.php on line 95
Deprecated: Constant E_STRICT is deprecated in /xxxxxxx/xxxxxxx/www/cmsAdmin/lib/errorlog_functions.php on line 95
Deprecated: Constant E_STRICT is deprecated in /xxxxxxx/xxxxxxx/www/cmsAdmin/lib/errorlog_functions.php on line 427
Deprecated: Constant E_STRICT is deprecated in /xxxxxxx/xxxxxxx/www/cmsAdmin/lib/errorlog_functions.php on line 427
Deprecated: Method mysqli::ping() is deprecated since 8.4, because the reconnect feature has been removed in PHP 8.2 and this method is now redundant in /xxxxxxx/xxxxxxx/www/cmsAdmin/lib/errorlog_functions.php on line 308
Deprecated: Constant E_STRICT is deprecated in /xxxxxxx/xxxxxxx/www/cmsAdmin/lib/errorlog_functions.php on line 427 Warning: ini_set(): Session ini settings cannot be changed after headers have already been sent

Any help would appreciate,

Karls

I there any way to download older versions of cmsBuilder. I need the 3.59 for a project ASAP.

Thank you,
Karls

After a recent PT where our web-app was tested we got some security remediation.

Deprecated Hash Function: Both the SHA-1 and MD5 methods are deprecated, and should no longer be used for hashing.

Ensure up-to-date and strong standard algorithms, protocols, and keys are in place; use proper key management. Store passwords using strong adaptive and salted hashing functions with a work factor (delay factor), such as Argon2, scrypt, bcrypt or PBKDF2.

Is there any plan to replace the hash function in the cmsb/membership?

I use cmsb v3.71 with php 8.1 and receive error 

Deprecated: strip_tags(): Passing null to parameter #1 ($string) of type string is deprecated in /home/xxxxxxx/public_html/search.php on line 118

where i have:

list($searchRows, $searchDetails) = searchMultipleTables($searchTables, $searchOptions);

Is there anything I can do to fix this?

I'm using the cmsBv3.56 (Build 2304) with Website Membership 1.13 and I need to beef up the front-end login security with one of these (now using only the standard cmsb login page):

1. Implement Rate Limiting: Limit the number of login attempts per IP address within a specific timeframe. For example, allow only 5 login attempts per minute from a single IP address.

2. Account Lockout Mechanism: Implement an account lockout mechanism that temporarily locks an account after a certain number of failed login attempts (e.g., 5 failed attempts). Ensure that users are notified when their accounts are locked and provide a secure process for unlocking.

3. CAPTCHA Implementation: Introduce CAPTCHA challenges after a specified number of failed login attempts to ensure that automated bots cannot continue brute force attempts.

4. Multi-Factor Authentication (MFA): To add an extra layer of security, require users to enable multi-factor authentication. Even if an attacker guesses the password, they still need the second factor to gain access.

Is there any working solution that I can implement and you can recommend?

Karls

Always great news when you release a new version with new features!

After I upgraded and went to the Backup & Restore, I'm getting:

Warning: disk_free_space(): open_basedir restriction in effect. File(/var/www/vhosts/lagottoromagnolo.gr) is not within the allowed path(s): (/var/www/vhosts/lagottoromagnolo.gr/public_html/:/tmp/:/usr/share/pear/)formatBytes(): Argument #1 ($bytes) must be of type string|int|float|null, bool given, called in /var/www/vhosts/lagottoromagnolo.gr/public_html/cmsAdmin/lib/menus/admin/backupAndRestore.php on line 35

Note: there is no problem with free space on the server but the open_basedir restriction in effect.

How can I bypass this (if its possible)?

Thanks,
Karls

Yes, it is fixed, after I installed the latest version of cmsb and changed the settings in membnership and cmsb to use separeted tables.

Karls

Thank you, I opened a ticket to second level support.

Karls

CentOS Linux release 7.9.2009, MariaDB v10.5.22, PHP v8.1.26

Any suggestion is appreciated,
Karls

Can I disable somehow to write logs into the _error_log table?

I imported the records with empty lineage and breadcrumb (these 2 fields was required) for the first level. I changed the order manually from cmsb and the records for the special category fields (globalOrder, siblingOrder, lineage, depth, parentNum, breadcrumb) are generated.

After that I imported the second level records again with empty lineage and breadcrumb but with parentNum and after I changed the order for one record again and everything regenerated again filling the fields as needed.

Thank you for your help on this!

To import records to category, do I need to prepare all the fields in csv, like: 

globalOrder, siblingOrder, lineage, depth, parentNum, breadcrumb  ?

In the excel I working only have the parentNum the other fields is very messy to create manually.

Is there any help  to make this easier?

Regards,
Karls

I'll give it a try.

Can I install or remove the MySQL prefix of the cmsBuilder (so I can merge later with another project).

regards,
Karls

It is possible to combine the uploader from the front-end (using from the form generator) with a crop script that can select custom region by the user?

Any help would appreciated,
Karls

I cannot find default.php within this folder (/cmsb/lib/menus/) or any folder inside the lib folder. (using v3.56)

PS: I found the required string inside the /cmsb/lib/menus/default/uploadList.php and it worked!

Thank you again!
Karls

This is perfect for me!

Karls

I want to keep the value info1 but hide it on the admin back-end.
Thank you anyway.

Karls

Is there any way to hide the image's info value in the sections where is the upload fields (admin back-end)?

Thank you,
Karls

Thank you for your reply.

Unfortunately I didn't find anything for solution yet.

The server req. is fine, the plugin is working from the back-end for every examples.

The problem is popup when I use URL as attachment.

there is not many related help on the net. I purchased a new ssl cert. (by trying to not use self-signed ssl) but no luck.

How can I get the latest wkhtmltopdf-0.12.6-1.centos7.x86_64 file? On the official website there is only rpm file.

Thanks again,
Karls