NukeEvangelist writes:  

advance user management: several modules available: support all of them plz

we ve got several advanced user-management-modules

- approve membership form Arnold - Approve membership module for PHPNuke developed on ulsoft.scarbridge.co.uk
- last visit from jasonlau.biz
- Advance user manager from Advance user manager

NukeKorea Dev. Network has been trying to add more functionalities such as "delete multiples of selected users, more graphical GUIs, remove all users at a time, more information about users, view methods, page-per views, etc."

please travel over to NukeKorea.net, get more infos and see more in depth screenshots

for the sustainable development we need your continued feedback - the more the better: plz support all the above mentioned projects

NukeEvangelist writes:  

BTW: PHPNuke are the linux-people in the cms-world: no CMS-project can compete with the nuke-project - the future of phpnuke is superbrigt ;->

on OpenSuse [OpenSuse.org]: SUSE Linux 10.1 was released :: "Get the last released version or current development build of SUSE Linux.

get your copy now from OpenSuse-Downoload-page "SUSE Linux 10.1 features an easy-to-install Linux operating system that lets you browse the Web, send e-mail, chat with friends, organize digital photos, play movies and songs, and create documents and spreadsheets. You can even use it to host a Web site or blog, create a home network, and develop your own applications..."
more infos for you

TITLE: Zen Cart SQL Injection and File Inclusion Vulnerabilities

SECUNIA ADVISORY ID: SA21484

VERIFY ADVISORY: http://secunia.com/advisories/21484/

CRITICAL: Highly critical

IMPACT: Manipulation of data, System access

WHERE: >From remote

SOFTWARE: Zen Cart 1.x -- http://secunia.com/product/3488/

DESCRIPTION: James Bercegay has reported some vulnerabilities in Zen Cart, which can be exploited by malicious people to conduct SQL injection attacks and compromise a vulnerable system.

1) Input passed to the "ipn_get_stored_session", "whos_online_session_recreate", and the "add_cart" functions is not properly sanitised before being used in an SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) Certain input is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources.

Examples:
http://[host]/index.php?autoLoadConfig[999][0][autoType]=include&autoLoadConfig[999][0][loadFile]=[remote file] * The "typefilter" parameter (only local resources)

The vulnerabilities have been reported in version 1.3.0.2. Other versions may also be affected.

SOLUTION: Edit the source code to ensure that input is properly sanitised and verified.

PROVIDED AND/OR DISCOVERED BY: James Bercegay, GulfTech Security Research

ORIGINAL ADVISORY: http://www.gulftech.org/?node=research&article_id=00109-08152006

forgotz writes:  

One tool is available to assist and virtually cover every right and protection afforded to you and visitors to your site, Legal Module 1.0. Click here for screens and here for download (registration required). When it comes to site security, you are your first best line of defense. Do not rely on the government or someone else to protect what you have worked so hard to achieve. One vital component of an overall security strategy is, the legal rights of both your site and its members.  Read More...

NukeEvangelist writes:  

PHPNuke-enthusiasts wanted and needed for the upcomming events :: well - we need some experts and enthusiats to go to the PHP-Events around the globe. Many great events are sheduled - eg. the following.

The upcoming premier PHP conference, php|works/db|works, will take place in Toronto, Canada, September 12-15, 2006.

The conference, as always, will feature excellent speakers from many aspects of PHP development, including Rasmus Lerdorf, Wez Furlong, Sara Golemon,
Sebastian Bergmann, Chris Shiflett and more! Be sure to check out the entire lineup, including special evening social events with top-notch prizes.

read more http://php.net/ :: http://hades.phparch.com/ceres/public/page/index.php/works

BTW: PHPNuke-community needs more Evangelists to spread the word - interested? Then
respond to this article

NukeEvangelist writes:  

2006 DC PHP Conference - Whasington DC 18 - 20 october - PHPNuke enthusiasts should attend


PHPNuke enthusiasts should attend at the DC PHP Conference see http://dcphpconference.com/

DC PHP Conference invites technology experts from the federal government,
local community, and the non-profit sector to participate in a premiere forum for PHP's vast number of users. Present your technical concepts, cutting edge applications, or business applications for an opportunity to showcase your ideas in the PHP community.

we need some Enthusiats to go there -

Your participation will make this conference a success. PHPNuke enthusiasts should attend at the DC PHP Conference for more infos see http://dcphpconference.com/

BTW: PHPNuke-community needs more Evangelists to spread the word - interested? Then
respond to this article