PEAK XOOPS - News

PEAK server will be down 05:00-07:00 (+09:00) in 26 Nov 2004.

I'm sorry to trouble you.

XOOPS Summit will be held in Tokyo on 5 Nov 2004.

The surprising member's list is enumerated as fllows:

nobunobu (author of modules eg WordPressME)
Ryuji (author of modules eg waiting and many popular hacks)
sakaik (co-author of the book of "introduction of XOOPS" with Ryuji)
JM2 (the core member of XOOPS1)
minahito (author of many modules eg anywhere-series and exFrame)
Marijuana (author of modules eg inquiry and xoops analyzer)
kousuke (author of modules eg simpleblog and simplerss)
tadashi (member of Xoops Japan team)
ELF (member of Xoops Japan team)
chanoir (one of the most poplar developper of themes for XOOPS)
halt (co-author of the book of "Wholly PHP vol.1")
uno (author of sakura watch as Windows application)
sakimura
Nu-nrg

and me (GIJOE)

I can't guess what will happen if such skilled members discuss about XOOPS each other.

myAlbum-P has been implemented a new feature "Attachment Manager".
This is an extension from ImageManager Integration.

You can attach any type of files into almost modules which use DhtmlTextArea of XoopsForm.
The operations to upload and attach some files are very natural for all Xoopsers.


<- This is a sample attachment of PDF files.







All you have to do is:

-Install myAlbum-P. (If you are using myAlbum-P, install it with another name like myalbum0, myalbum1, myalum2)

-Enable ImageManager Integration like this:
line 28 of imagemanager.php

include './mainfile.php';
include 'modules/myalbum/imagemanager.php';  // add this line
if (!isset($HTTP_GET_VARS['target']) && !isset($HTTP_POST_VARS['target'])) {
	exit();
}

PEAK XOOPS has been updated into XOOPS 2.0.7.3

Also New autologin hack has been released.


The security patch added in 2.0.7.3 is absolutely necessary for all XOOPSers.

If you use core version of 2.0.7.1 and 2.0.7.2 with my autologin, All you have to do is overwrite include/common.php of the latest archive.
The hole is also patched automatically.

If you are using older XOOPS, upgrade your XOOPS into 2.0.7.3 at first.

If you are using older XOOPS and you can't upgrade XOOPS core with some reasons, you should try the module of Xoops Protector.
The module also patches the new vulnerablity fixed in 2.0.7.3.

A lot of security holes was found in XOOPS with not only 3rd party's modules, but also with core.

I've just released a new module named Xoops Protector.

Major vulnerablities will be patched by installing this module.
I recommend this module to all XOOPS users.

However, you have to know "Almost" is different from "All".
Overconfidence is a taboo.
In fact, Xoops Protector has non-sense against CSRF attacks.
For your security, the best way is to install only the modules made by well-skilled developpers.


BTW, Xoops Protector also has a feature of anti-DoS.
This means that developping of AntiDoS-P was finished.
If you use AntiDoS-P, replace it.

You can download it from downloads area.