Committed to Code

Geeklog is a CMS and weblog engine powered by PHP and MySQL, PostgreSQL, or Microsoft SQL Server. It allows you within minutes to set up a fully functioning dynamic website, and has many features to get you started.

Code Analysis


Recent Highlights

Anon32

Large commit — Denim: added support for IE6-8 in earnest. (not...

More than 1000 lines of source code were added or removed in this commit.

In commit 787e560d5f21 by dengen on 2012-05-20 (2 days ago)

Avatar

Large commit — Merged with upstream

More than 1000 lines of source code were added or removed in this commit.

In commit 9ca71f58a38c by Laugh (Using name ‘Tom’) on 2012-05-08 (14 days ago)

Anon32

Large commit — Denim: moved location of stylesheets in order t...

More than 1000 lines of source code were added or removed in this commit.

In commit 46deb48d3da4 by dengen on 2012-05-08 (14 days ago)

Avatar

Large commit — Merged with upstream

More than 1000 lines of source code were added or removed in this commit.

In commit 7628958d4a9b by Laugh (Using name ‘Tom’) on 2012-05-07 (15 days ago)

Anon32

Large commit — Denim: maintenance of stylesheets

More than 1000 lines of source code were added or removed in this commit.

In commit 9b4587b438a5 by dengen on 2012-05-06 (16 days ago)

See all highlights…


News

EasyFile plugin SQL injection

An SQL injection vulnerability in the EasyFile plugin has been found and published by a user who calls himself Hellboy (the vulnerability is reported as being in Geeklog, but it really only affects the EasyFile plugin).

Given that the ... [More] EasyFile plugin hasn't been updated in years, we assume that it is no longer maintained. If you use this plugin on your site, we recommend that you uninstall the plugin and remove all the files that belong to it as soon as possible.

We have removed the EasyFile plugin from our download area. If there are any other sites out there mirroring the plugin, please remove it from those sites as well. Thank you. ... [Less]


Google Summer of Code 2012 - without Geeklog

Google has announced the mentoring organizations for the Summer of Code 2012. Geeklog applied but, unfortunately, wasn't selected as a participating organization for this year.

From the feedback we got, our application wasn't too bad, but ... [More] Google had to draw a line somewhere to accommodate 41(!) new organizations that were accepted for the first time this year. So, congrats to all the 180 organizations (out of 406 that applied) that made it into GSoC 2012. We've had a great time in our four years in GSoC and we hope you do, too. We will surely be applying again in 2013 (should Google decide to run the program again)!

If you are a student interested in getting into open source development, you should head over to the official GSoC site and apply for a project from one of the accepted organizations. It's a great opportunity that you shouldn't miss. ... [Less]


Dear Profile Spammers ...

To whoever created those step-by-step instructions on how to add your website link on each of the 50 High Page Rank Authority sites:

Thanks for listing us as a "High Rank Authority site" (whatever that's supposed to mean).Forget about ... [More] spamming us.

All profiles are under review and anything that looks remotely spammy will be banned. Stop wasting your money (for paying people in East Asia to spam us) and our time.

Sincerely,
The Geeklog Team ... [Less]


GSoC 2012 Application

It's that time of the year again: Google is running the Google Summer of Code again this year. As you may remember, we didn't make it last year, but we did apply again for 2012, so keep your fingers crossed.

Applications for organizations ... [More] close in a few hours from now and the list of selected organizations will be published on March 16.

Our list of project ideas can be found on the wiki, if you want to have a look.

Also, stay tuned for some news about the upcoming Geeklog 1.9.0 release soon ... ... [Less]


jQuery, Maps, Paypal, Classifieds and Vthemes Plugins Updates

Here are the updated 5 plugins that let you enjoy the new features and security patches.

jQuery plugin 1.3.1: Allows you to display images in a lightbox and moreMaps plugin 1.2.3: Display google maps on your website, as well as markers and ... [More] overlaysPaypal plugin 1.4.3: open your shop to sell files, subscriptions, articles.Classifieds plugin 1.2: Classifieds Publish in minutes.Vthemes plugin 1.5.3: View the different themes available for your site.As some code exploits were discovered in TimThumb script which is in all those plugins, it is ask to update as soon as possible. See Dowloads section.

If you do not want or can't upgrade any of those plugins due to your Geeklog version, please replace at least all your timthumb scripts:public_html/classifieds/timthumb.phppublic_html/jquery/timthumb.phppublic_html/maps/timthumb.phppublic_html/paypal/timthumb.phppublic_html/vthemes/timthumb.php

Here are a few enhancements in TimThumb 2.0:Includes the ability to take website screenshots if you have Xvfb and CutyCapt installed. (Instructions included how to do this)All filters and resizing can be applied to website screenshots.The cache directory is now secure and is still public for flexibility across platforms.TimThumb creates index files in your cache to prevent directory listings.Filenames are more randomized using data that a hacker doesn’t have access to, making it very hard to guess filenames in cache and access them.Cache files have a .txt extension which means the web server won’t execute them.All cached files have a fixed length record at the beginning which, if a web server tries to execute them, will be interpreted as PHP code and will cause an immediate exit.It includes file locking when files are created in cache to avoid conflicts.The entire code base has been rewritten and refactored for better code scaleabilit ... [Less]


Read all Geeklog articles…

Edit RSS feeds.